Skip to content

Evidence request lists

EU Seveso III Directive (Directive 2012/18/EU)

Evidence request list. 17 controls, 17 carrying auditor artefact guidance. Generated from the compliance knowledge graph on 11 September 2026. Published by The Art of Service.

Seveso III: Emergency Plans, Major-Accident Notification and Land Use Planning

SEV-Art.12_13
Land-use planning + information to the public (Seveso III Articles 12 and 13)

Article 12 requires Member States to ensure that the objectives of preventing major accidents + limiting their consequences are taken into account in their land-use policies + procedures. The land-use policies + procedures must address: (a) the siting of new establishments; (b) modifications of establishments covered by Article 10; (c) new developments such as transport links + locations frequented by the public + residential areas in the vicinity of establishments where the siting or developments may be the source of, or increase the risk or consequences of, major accidents. Article 12(2) Member States must ensure that all competent authorities + planning authorities responsible for decisions in this area set up appropriate consultation procedures + that those competent authorities take account of the relevant information / analysis from operators. Article 13 imposes a permanent INFORMA

Artefacts an auditor will ask for
  • Article 12 land-use planning input + consultation records
  • Annex V Part 1 / Part 2 public-information page (online + permanent)
  • Article 13(3) major-accident-scenario public information for upper-tier establishments
Where this commonly fails
  • Annex V public information missing or behind login / paywall
  • Public information not updated within reasonable time after Article 10 modifications
  • Land-use planning decisions taken without Article 12(2) competent-authority consultation
SEV-Art.16
Information to be provided by the operator following a major accident (Seveso III Article 16)

Article 16 imposes a 4-step post-accident obligation on the operator: (a) inform the competent authority as soon as it has all the relevant information of: (i) the circumstances of the accident + (ii) the dangerous substances involved + (iii) the data available for assessing the effects of the accident on human health + the environment + on property + (iv) the emergency measures taken; (b) inform the competent authority of the steps envisaged to: (i) mitigate the medium-term + long-term effects of the accident + (ii) prevent any recurrence of such an accident; (c) update the information provided if further investigation reveals additional facts which alter that information or the conclusions drawn; (d) the competent authority is then required to communicate with the Commission (Article 18) so the Commission can decide whether to maintain Seveso eMARS public records. The post-accident obl

Artefacts an auditor will ask for
  • Article 16 notification template + immediate-notification process
  • Mitigation + recurrence-prevention plan post-accident
  • Article 16(c) update procedure + investigation-trail discipline
  • Commission eMARS reporting evidence (via competent authority)
Where this commonly fails
  • Delayed notification beyond 'as soon as it has all relevant information' threshold
  • Mitigation plan never updated despite further investigative findings
  • No documented learning + recurrence-prevention plan

Seveso III: Inspections, Information Systems and Enforcement

SEV-Art.17_18
Competent authority + prohibition of use (Seveso III Articles 17 and 18)

Article 17 designation of competent authority: Member States must designate one or more competent authorities + arrange for coordination among them. The competent authority's tasks include performing the duties in Articles 6 (notification examination), 8 (safety-report examination + acceptance / conditions / refusal), 9 (domino-effect designation), 18 (prohibition of use), 19 (inspections), 21 (information to Commission), 22 (access to information + confidentiality). Article 18 PROHIBITION of use: where the measures taken by the operator for the prevention + mitigation of major accidents are seriously deficient, the competent authority must prohibit the use OR bringing into use of any establishment + installation + storage facility OR any part thereof. The competent authority must prohibit such use where the operator has not submitted the notification + reports + other information requir

Artefacts an auditor will ask for
  • Records of competent authority engagement (acceptance + conditions + decisions)
  • Article 18 prohibition risk register + management response
  • Periodic communication with the competent authority on safety performance
Where this commonly fails
  • Operator slow to provide required information triggering Article 18(1)(b) prohibition
  • Article 18(1)(a) serious-deficiency findings unaddressed
  • Multiple authorities not coordinated under Article 17(2)
SEV-Art.20
Inspections (Seveso III Article 20)

Article 20 imposes the INSPECTION regime. Member States must ensure that the competent authorities organise a system of inspections. The inspections must be: (a) suitable for the kind of establishment concerned; (b) not dependent on receipt of the safety report or any other report submitted; (c) sufficient for a planned + systematic examination of the technical + organisational + managerial systems employed at the establishment - in particular that (i) the operator can demonstrate that they have taken appropriate measures + (ii) the operator can demonstrate that they have provided to the competent authority sufficient information + (iii) information about hazards is made available to the public. The competent authority must draw up an inspection plan covering all establishments at national + regional + local level + reviewed regularly + where appropriate updated. Article 20(4) the period

Artefacts an auditor will ask for
  • Internal inspection-readiness file (Article 20 alignment)
  • Inspection findings + corrective-action plan + closure evidence
  • Records of inspection frequency (1-year upper-tier / 3-year lower-tier or risk-assessed alternative)
Where this commonly fails
  • Inspection findings open beyond reasonable response timeline
  • Operator not retaining all inspection reports for 5+ years
  • Risk-assessed inspection-frequency variation not documented to justify deviation from the 1-year / 3-year baseline
SEV-Art.21
Information system + Commission reporting (Seveso III Article 21) - the Seveso Plants Information Retrieval System (SPIRS / eSPIRS)

Article 21 obliges Member States to provide the Commission with information on establishments covered by this Directive + at least: name + trade name + full address; activity or activities of the establishment. The information is held in the Seveso Plants Information Retrieval System (SPIRS) maintained by the Joint Research Centre + made accessible via the eSPIRS public portal (https://minerva.jrc.ec.europa.eu/). Article 21(3) for major accidents that meet the criteria in Annex VI Part 1, Member States must inform the Commission within 1 year + provide a final report; the major-accident reports are made available via the eMARS (Major Accident Reporting System) eMARS public portal. The Joint Research Centre + the Major Accident Hazards Bureau (MAHB) at the JRC Ispra coordinate the eMARS + eSPIRS systems + provide lessons-learned to operators + competent authorities.

Artefacts an auditor will ask for
  • Operator data provided to the competent authority for SPIRS submission
  • eMARS post-major-accident report trail
  • Lessons-learned integration into the MAPP / SMS
Where this commonly fails
  • SPIRS-related data not kept up to date
  • eMARS report missing or delayed
  • Lessons-learned bulletins from eMARS not internalised

Seveso III: Operator Obligations - MAPP and SMS

SEV-Art.6
Notification of establishment (Seveso III Article 6)

Article 6 imposes the FIRST core obligation on all establishments (both lower-tier + upper-tier). The operator must send a notification to the competent authority containing: (a) the name + trade name of the operator + the full address of the establishment; (b) the registered place of business with the full address; (c) the name + position of the person in charge of the establishment, if different from (a); (d) information sufficient to identify the dangerous substances + category of substances involved + likely to be present (with their qualifying quantities); (e) the quantity + physical form of the dangerous substance(s) concerned; (f) the activity or proposed activity of the installation / storage; (g) the immediate environment + factors likely to cause a major accident or to aggravate the consequences (including details of adjacent establishments + sites + areas of public interest et

Artefacts an auditor will ask for
  • Article 6 notification + each update submitted to the competent authority
  • Internal change-management process triggering Article 6(3) update on inventory + activity changes
  • Stakeholder-mapping documentation for the Article 6(1)(g) immediate-environment data
Where this commonly fails
  • Notification missing key Article 6(1) elements (typical gaps: 6(1)(g) adjacent-establishment + public-interest data)
  • Article 6(3) not updated after substance-inventory change
  • Notification sent after start of operation instead of before
SEV-Art.7
Major-Accident Prevention Policy (MAPP) (Seveso III Article 7)

Article 7 requires the operator to draw up a written document setting out its Major-Accident Prevention Policy (MAPP). The MAPP must be designed to ensure a high level of protection of human health + the environment, must be proportionate to the major-accident hazards, and must include the operator's overall aims + principles of action. The MAPP is mandatory for both lower-tier + upper-tier establishments. The MAPP is operationalised through a Safety Management System (SMS) which must address the elements listed in Annex III: organisation + personnel + identification + evaluation of major hazards + operational control + management of change + planning for emergencies + monitoring of performance + audit + review. For upper-tier establishments, the SMS forms part of the Article 8 safety report. For lower-tier establishments, the SMS exists as a standalone document that the competent author

Artefacts an auditor will ask for
  • MAPP document with the elements specified in Article 7 + Annex II
  • Safety Management System (SMS) documentation addressing all Annex III elements
  • Evidence of 5-year MAPP review + interim updates after major changes
  • Independent assurance of the SMS implementation
Where this commonly fails
  • MAPP overdue for 5-year review
  • SMS Annex III elements partially addressed (typical gaps: management of change + audit + performance monitoring)
  • MAPP not proportionate to the actual major-accident hazards
SEV-Natech
Natural-hazard-triggered technological accidents (Natech) - emerging hazard within the SEVESO framework

While not a named Seveso III article, NATECH (Natural-Hazard-Triggered Technological Accidents) is an emerging category of major-accident hazard formally recognised in the JRC + EEA + UNECE technical guidance for Seveso III implementation. Natech encompasses major-accident scenarios where a natural hazard (earthquake + flood + storm + lightning + wildfire + cold-wave + heat-wave + landslide) acts as the initiating event for the release of dangerous substances. Climate-change projections + JRC studies (e.g. JRC Technical Reports 2017 + 2022) demonstrate increased Natech risk. Annex II Section 2 + Annex III Section 1 of Seveso III implicitly require Natech consideration as part of the safety-report scenario analysis ('possible major-accident scenarios') + the SMS major-hazard identification. Best practice: Natech assessment integrates seismic + flood + extreme-weather hazards into the esta

Artefacts an auditor will ask for
  • Natech hazard register + initiating-event analysis covering seismic + flood + windstorm + lightning + extreme-heat
  • Joint hazard-analysis with the establishment's HAZID / HAZOP / LOPA studies
  • Internal-emergency-plan provisions covering Natech scenarios
  • Climate-projection update process triggering safety-report review
Where this commonly fails
  • Safety report covering only process-initiated scenarios without Natech
  • Climate-driven hazard projections not reviewed in the 5-year cycle
  • Internal emergency plan with no flood / wildfire / earthquake protocols where the establishment is exposed

Seveso III: Public Information, Consultation and Access to Justice

SEV-Art.14_15
Public consultation + access to justice (Seveso III Articles 14 and 15) - Aarhus alignment

Article 14 imposes PUBLIC CONSULTATION obligations in respect of: (a) planning for specific individual projects: new establishments + modifications + significant external emergency plans (consultation on the external emergency plan); (b) drawing-up of general external emergency plans; (c) developments around existing establishments where the siting or development may increase the risk or consequences of a major accident. Article 14(2) the public consultation must be done in a manner that ensures the public concerned + the public are given early + effective opportunities to express an opinion. The Article 14 framework operationalises the Aarhus Convention's public-participation pillar in the Seveso context. Article 15 access to justice: the public concerned with sufficient interest OR maintaining the impairment of a right has access to a review procedure to challenge the substantive + pro

Artefacts an auditor will ask for
  • Public-consultation evidence per Article 14(1)(a)/(b)/(c)
  • Article 15 review procedure + administrative / judicial avenues mapped
  • NGO + community-group standing protocol
Where this commonly fails
  • Public consultation skipped or notice given too late
  • Access-to-justice procedure not aligned with Aarhus standards
SEV-Art.22_23
Access to information + access to justice + confidentiality (Seveso III Articles 22 and 23)

Article 22 implements the public's right to request + obtain from the competent authority the information referred to in Article 14(2)(b) + (c) AND the safety report + the inventory of dangerous substances referred to in Article 14(2)(d) on demand, subject to the exceptions in Article 22(3): (a) confidentiality of the proceedings of the public authorities + international relations + national defence + public security; (b) confidentiality of personal data + files concerning a natural person who has not consented to disclosure (GDPR alignment); (c) commercial + industrial confidentiality including intellectual property; (d) confidentiality of the data + files of a third party where the third party has not consented to disclosure; (e) public security. Article 22(2) decisions to refuse access to information must be challengeable per Article 23 (re-stating the access-to-justice obligation). A

Artefacts an auditor will ask for
  • Information-request log + response-time tracking
  • Article 22(3) refusal decisions reasoned + reviewable
  • Internal cross-reference between Seveso confidentiality + GDPR Article 86 access regime + Directive 2003/4/EC
Where this commonly fails
  • Article 22 information requests refused on broad commercial-confidentiality grounds without specific reasoning
  • No documented process for balancing Article 22(3)(b) personal data + Article 14 information-to-public obligation

Seveso III: Reporting, Transposition and Final Provisions

SEV-Art.28
Penalties (Seveso III Article 28)

Article 28 requires Member States to lay down the rules on penalties applicable to infringements of the national provisions adopted pursuant to this Directive + take all measures necessary to ensure that they are implemented. The penalties provided for must be EFFECTIVE + PROPORTIONATE + DISSUASIVE. Member States must notify the Commission of those provisions by 31 May 2015 + notify it without delay of any subsequent amendment affecting them. National penalty regimes vary considerably: from administrative fines (e.g. up to EUR 5-10 million in some Member States) to criminal sanctions for the most serious infringements including imprisonment for responsible managers + corporate criminal liability for the operator. The Article 28 penalty regime runs in parallel with: (a) civil liability under the PLD (Directive (EU) 2024/2853) for damage from defective products containing dangerous substan

Artefacts an auditor will ask for
  • National penalty transposition file
  • Internal regulatory-risk register noting Article 28 + Environmental Crime Directive + PLD parallel exposure
  • Compliance program tuned to the most-serious-infringement criminal threshold
Where this commonly fails
  • Compliance program ignoring criminal-liability tail under Environmental Crime Directive 2024/1203
  • Penalty exposure mapped only against administrative fines without considering criminal liability
SEV-Art.29_30_31
Repeal of Seveso II + transposition + entry into force (Seveso III Articles 29-31)

Article 29 amends Directive 96/82/EC (Seveso II) with effect from 14 February 2014. Article 30 repeals 96/82/EC with effect from 1 June 2015 + references to Seveso II are construed as references to Seveso III. Article 31 transposition: Member States must adopt + publish, by 31 May 2015, the laws + regulations + administrative provisions necessary to comply with this Directive + apply those measures from 1 June 2015. Article 32 entry into force on the twentieth day following publication in the OJEU (13 August 2012). Annex VII provides the correspondence table between Seveso II + Seveso III. Future evolution: the Commission has published a 'Major Industrial Hazards in Europe' communication (2024) + a Seveso IV proposal is expected in 2026-2027 considering: (a) battery + lithium-ion / hydrogen storage + carbon capture facilities; (b) climate-change-induced hazards (Natech - natural-hazard-t

Artefacts an auditor will ask for
  • National transposition map
  • Tracking of Seveso IV legislative pipeline
  • Internal gap analysis on emerging hazards (battery + hydrogen + Natech + cyber-physical)
Where this commonly fails
  • Compliance program treating Seveso III as static (failing to track Commission guidance + JRC reports + Seveso IV evolution)
  • No assessment of Natech / climate-driven hazards
  • No coordination between Seveso compliance + NIS2 / CRA cyber-physical industrial-control-system obligations

Seveso III: Safety Report, Domino Effects and Modifications

SEV-Art.10_11
Modifications of an establishment + emergency plans (Seveso III Articles 10 and 11) - the modification-trigger + internal / external emergency planning

Article 10 governs MODIFICATIONS to an establishment, installation or storage facility, or to the nature + physical form OR quantities of dangerous substances which could have significant repercussions for major-accident hazards or could result in a lower-tier establishment becoming an upper-tier establishment, or vice versa. The operator must, before the change, review + where necessary revise the notification, MAPP + SMS, safety report (where required), and emergency plans. Article 11 imposes the EMERGENCY PLANNING obligations on UPPER-TIER establishments: (1) internal emergency plan drawn up by the operator + (2) information supplied by the operator to enable competent authorities + emergency services to draw up the external emergency plan. The plans must be reviewed + where necessary updated + tested AT LEAST EVERY THREE YEARS. Article 11(2) sets the public-consultation obligation fo

Artefacts an auditor will ask for
  • Article 10 change-management procedure requiring pre-change review of notification + MAPP + SMS + safety report + emergency plans
  • Internal emergency plan covering the Annex IV Part 1 elements
  • Information supplied to public authority for external emergency plan
  • Triennial review + emergency exercise evidence
Where this commonly fails
  • Modification implemented without the Article 10 pre-change review
  • Emergency plan not tested every 3 years
  • Emergency-plan exercise scenarios limited to a single hazard type rather than covering the safety-report scenarios
SEV-Art.8
Safety report (Seveso III Article 8) - upper-tier establishments

Article 8 imposes the safety-report requirement on UPPER-TIER establishments only. The safety report must demonstrate that: (a) a MAPP + SMS for implementing it have been put in effect in accordance with Article 7 + Annex III; (b) major-accident hazards + possible major-accident scenarios have been identified + the necessary measures taken to prevent such accidents + to limit their consequences for human health + the environment; (c) adequate safety + reliability have been incorporated into the design + construction + operation + maintenance of any installation + storage facility + equipment + infrastructure connected with its operation linked to major-accident hazards inside the establishment; (d) internal emergency plans have been drawn up + information has been supplied to enable an external emergency plan to be drawn up; (e) sufficient information has been provided to the competent a

Artefacts an auditor will ask for
  • Safety report covering all Article 8(1) elements + Annex II structure
  • 5-year review evidence + interim updates after major accidents or major changes
  • Internal + external emergency planning information supplied per Article 8(1)(d)
  • Competent-authority decision-evidence trail (acceptance / conditions / refusal)
Where this commonly fails
  • Safety report overdue for 5-year review
  • Post-accident update not performed despite material learning
  • Element (e) information for siting decisions partially provided
SEV-Art.9
Domino effects (Seveso III Article 9)

Article 9 obliges competent authorities to identify, on the basis of the information received from operators under Articles 6 + 8 + by any other means, all establishments OR groups of establishments where the likelihood + the possibility OR consequences of a major accident may be increased because of the geographical position + the proximity of such establishments + their inventories of dangerous substances ('domino-effect' establishments). Where the competent authority has identified such establishments + groups, the operators of those establishments must: (a) exchange suitable information to enable each operator to take account of the nature + extent of the overall hazard of a major accident in their MAPP + SMS + safety report + internal emergency plan; (b) cooperate in informing the public + neighbouring sites that fall outside the scope of the Directive + in supplying information to

Artefacts an auditor will ask for
  • Competent authority's Article 9(1) determination + the operator's domino-effect risk assessment
  • Documented inter-operator information-exchange agreements
  • Joint internal-emergency-plan provisions covering cascading scenarios
  • Public information for neighbours outside scope (Article 9(2)(b))
Where this commonly fails
  • Operator unaware of Article 9(1) domino-effect designation
  • No formal inter-operator information-exchange protocol
  • Joint emergency-planning gaps with adjacent establishments

Seveso III: Scope, Definitions and Substance Classification

SEV-Art.1_2_3
Subject matter, scope, definitions (Seveso III Articles 1-3)

Article 1 establishes the Directive's objective: the prevention of major accidents involving dangerous substances + the limitation of their consequences for human health + the environment, with a view to ensuring a high level of protection throughout the Union in a consistent + effective manner. Article 2 sets the scope: applies to establishments where dangerous substances listed in Annex I are present in qualifying quantities. Article 2(2) excludes: (a) military establishments + (b) hazards caused by ionising radiation + (c) transport of dangerous substances + intermediate temporary storage by road + rail + inland navigable waterways + sea + air outside the establishment + (d) transport of dangerous substances in pipelines outside the establishment + (e) exploitation of minerals (with specific exception for chemical + thermal processing operations + associated storage with dangerous sub

Artefacts an auditor will ask for
  • Internal scope memo identifying which sites are 'establishments' under Article 3 + which substances trigger Annex I qualifying quantities
  • Tier classification (lower-tier vs upper-tier) determined per Annex I Part 1 (named substances) + Part 2 (categories of dangerous substances) using the SUMMATION RULE for each hazard category
  • Excluded-activity carve-out documentation for sites that fall within Article 2(2)
Where this commonly fails
  • Site treated as out-of-scope without applying the summation rule across hazard categories
  • Tier classification not reassessed when substance inventories change
  • Article 2(2) exclusion claimed without specific evidence (e.g. mineral extraction without the chemical / thermal processing carve-out analysis)
SEV-Art.4_5
Evaluation of dangerous substances + general obligations of the operator (Seveso III Articles 4-5)

Article 4 'Evaluation of hazards from a specific dangerous substance': Member States must, where it has been demonstrated based on the criteria in Annex VI Part 3 that an individual substance cannot create a major-accident hazard - particularly because of its physical form + properties + classification + concentration - request a Commission decision excluding it from Annex I (Article 4). This is the mechanism by which substances may be removed from the qualifying-quantity list. Article 5 sets the general obligations of the operator: the operator is required to take all measures necessary to prevent major accidents + to limit their consequences for human health + the environment. Article 5(2) the operator must demonstrate to the competent authority at any time that all the necessary measures specified in this Directive have been taken (the burden of proof rests on the operator). Article 5

Artefacts an auditor will ask for
  • Documented top-level safety-prevention strategy demonstrating the Article 5(1) obligation
  • Internal evidence file demonstrating Article 5(2) compliance + capable of inspection access
  • Contractor + supplier safety integration evidence (Article 5(3))
Where this commonly fails
  • No top-level safety-prevention strategy traceable to Article 5(1) general obligation
  • Contractor / supplier safety responsibilities not explicitly accepted in service-level agreements
  • Evidence file lacking documented major-accident prevention measures
Assembled from the framework's own control set. Every line traces to a control in the graph, so this pack is regenerated rather than written, and stays current as the graph does.

Assembled from the framework’s own control set, so this list is regenerated rather than written and stays current as the graph does.