Something unwanted happens on the construction site (byggeplass). Maybe someone trips and nearly falls. Maybe you spot that the safety gear is missing. Maybe it's just a matter of time. You make a mental note — but nothing gets written down, and by next week it's forgotten.

This is exactly what deviation reporting is meant to stop. And it's exactly what a low barrier from your phone solves.

In short

  • A deviation (avvik) is any breach of a requirement — a legal requirement, internal routines or procedures. Near-misses (nestenulykker) count as deviations and must be logged.
  • The duty to report deviations and put them right follows from the Internal Control Regulations (internkontrollforskriften) § 5 no. 7 and the Working Environment Act (arbeidsmiljøloven) § 3-1.
  • The Working Environment Act § 5-2 requires personal injuries and workplace accidents to be reported to the Norwegian Labour Inspection Authority (Arbeidstilsynet) and NAV.
  • The lower the barrier to reporting, the more near-misses get caught — and the fewer accidents happen.

What is a deviation, and what is an RUH?

A deviation is any breach of a set requirement — whether the requirement comes from the law, from the SHA plan, from the company's own routines or from industry norms. It can be anything from missing safety gear to an unsecured opening, from wrong chemical handling to a procedure nobody followed.

An RUH — Rapport om uønsket hendelse (incident report) — is the form or log entry you create when something unwanted happens or almost happens. An RUH isn't only for accidents: near-misses and dangerous conditions are at least as important to capture, because they warn that an accident is on its way.

In construction, "RUH" and "deviation report" are often used to mean the same thing. Some companies distinguish between quality deviations (which are about errors in the work) and HSE deviations (which are about risk to life and health). HSE deviations are followed up by the person responsible for HSE; quality deviations by the project management.

What does the law say?

The duty to handle deviations rests on three sections.

The Working Environment Act (arbeidsmiljøloven) § 3-1 requires the employer to carry out systematic HSE (health, safety and environment) (HMS) work, including mapping hazards, assessing risk and putting measures in place (Lovdata, 2005). Deviation handling is a natural part of this: you can't improve what you don't discover.

The Internal Control Regulations (internkontrollforskriften) § 5 no. 7 are more specific: the business must have routines to uncover, correct and prevent breaches of the HSE requirements (Lovdata, 1996). Clearing up afterwards isn't enough — you're obliged to have a system that catches the deviations.

The Working Environment Act § 5-2 differs from the first two: this is about the duty to notify the authorities. Personal injuries that lead to absence, and workplace accidents that could have caused harm, must be reported to the Norwegian Labour Inspection Authority (Arbeidstilsynet) and to NAV (Lovdata, 2005). This isn't an internal deviation report — it's notification to the supervisory authorities, and the deadline is short.

In short: internal deviations are handled through the company's own HSE system (the Internal Control Regulations); serious accidents and injuries are reported additionally to Arbeidstilsynet/NAV (§ 5-2).

What has to be reported?

A practical rule of thumb: report everything that deviates from the plan — not just what went wrong, but everything that could have gone wrong.

CategoryExampleReport it?
Workplace accident with injuryFall from a ladder with a fractureYes — internally and to Arbeidstilsynet/NAV
Near-missLadder slips, but nobody fallsYes — internally
Dangerous conditionUnsecured opening in the floorYes — internally
Deviation from procedureSafety gear not usedYes — internally
Quality deviationWrong measurement, wrong productDepends on the company's routines

Near-misses are the most important ones to catch — they're free information about what could become an accident next time.

Why do deviations go under-reported?

Research from STAMI (the National Institute of Occupational Health) has documented large gaps between logged and actual incidents. A well-known example concerns electrical accidents among electricians: while around 50 accidents a year were reported to the authorities in the 1990s, calculations estimated that the real number was closer to 3,000 a year (STAMI researcher Lars Ole Goffeng, as reported by forskning.no). That's not an exception — it's a pattern.

The explanation is rarely reluctance. It's the barrier. Finding the paper form, filling it in by hand, handing it in at the office and waiting for someone to log it — that doesn't happen out on a busy construction site. The near-miss is forgotten by lunch.

This is where digital deviation reporting makes a real difference.

How to report a deviation from your phone — step by step

A good deviation system is no more work than sending a text message. Here's how it works in practice:

1. Open the app where the job is. Not at the office, not afterwards. Deviations are reported there and then — that's the whole point.

2. Choose the type of deviation. HSE deviation, near-miss, dangerous condition or quality deviation. Two taps.

3. Describe the incident briefly. What happened (or nearly happened)? Where? What was the cause? Add a photo if relevant — the camera is already in your pocket.

4. Send. The report lands with the person responsible for HSE, who acknowledges it, assigns an owner and a deadline, and closes the deviation once the measure is done.

5. Statistics over time. The person responsible for HSE sees patterns: the same type of deviation on the same type of job, the same places, the same times. This is where prevention actually happens.

The whole process takes under two minutes. It's the barrier that decides whether it happens or not.

What do you do after the deviation is reported?

Logging a deviation is the start, not the end. The system has to close the loop:

  • Temporary measure: secure the spot, stop the dangerous work, alert those affected.
  • Root-cause analysis: what was behind the incident? Missing training, equipment, time pressure, a communication breakdown?
  • Corrective measure: change the routine, update the SHA plan, run a mini safety walk.
  • Documentation: note what was done and who was responsible. A deviation that lacks documented follow-up is a deviation in its own right.

Build up a deviation log over time and you'll see the patterns nobody spots in the moment: the type of job that always produces HSE deviations, the time of day when most near-misses happen, the operation where the routine is never followed. That's valuable information you can't buy — it has to be reported up.

For a walkthrough of what a complete HSE system should contain (including deviation routines as one of eight requirements), see What is HSE, and why does it matter so much in the construction industry?. And for the distinction between the company's HSE plan and the SHA plan's deviation routines on the specific project, see HSE plan vs SHA plan: what's the difference?.

In ABAX Field Operations the technician sends an RUH with a photo and location in under two minutes — and the person responsible for HSE at the office sees it in real time, sets a deadline and closes the deviation digitally. No paper, no backlog, no forgotten near-misses. Start for free or book a short demo.

Frequently asked questions

Is it a legal requirement to report near-misses internally?

Yes. The Internal Control Regulations (internkontrollforskriften) § 5 no. 7 require the business to have routines to uncover, correct and prevent deviations — and near-misses are deviations. Clearing up after incidents isn't enough; you're obliged to catch them.

When do I have to report to Arbeidstilsynet and NAV?

The Working Environment Act (arbeidsmiljøloven) § 5-2 requires personal injuries that lead to absence, and workplace accidents that could have caused harm, to be reported to the Norwegian Labour Inspection Authority (Arbeidstilsynet) and NAV. This is in addition to the internal deviation report — and the deadline is short.

Can employees report deviations anonymously?

That's up to the company to decide. Many choose to allow anonymous reporting to lower the barrier further, especially for dangerous conditions where the employee is unsure whether the situation is serious enough. The most important thing is that the system actually gets used.

What happens if we don't have a deviation system?

On inspection, Arbeidstilsynet can require deviation routines to be documented. If they're missing entirely, that's a deviation in itself — and it's one of the most common findings in HSE inspections in construction.

Do I need a dedicated system, or is email enough?

Email doesn't give you traceability, statistics or the closing of deviations. The Internal Control Regulations require deviation handling to be systematic — email rarely satisfies that in practice. A simple digital system, whether it's a dedicated app or part of an HSE tool, is needed to meet the requirement.

Summary

Deviation reporting isn't paperwork — it's systematic learning. The duty rests on the Internal Control Regulations (internkontrollforskriften) § 5 no. 7 and the Working Environment Act (arbeidsmiljøloven) § 3-1, and serious accidents must additionally be reported to the Norwegian Labour Inspection Authority (Arbeidstilsynet) and NAV under § 5-2. What decides whether the system works is the barrier: is it easier to report the deviation now, from your phone, than to forget it until tomorrow? Make the reporting simple enough and you'll see patterns you didn't know you had — and prevent accidents you otherwise didn't know were coming.

Sources