Regulation 7 of the COSHH Regulations sets out what an employer must do once a potential risk to health has been identified. They must ensure the exposure of workers is either prevented or adequately controlled by working through a hierarchy of measures.