A worker who bears a disproportionate workload, receives contradictory instructions from two managers, or has no autonomy to organise their tasks is exposed to psychosocial risks. According to Spain's National Institute of Safety and Health at Work (INSST), these factors are among the leading causes of absenteeism and sick leave in the country. Yet many companies still treat psychosocial assessment as a minor formality or confuse it with an employee engagement survey. They are not the same thing, and the difference can be costly: penalties for non-compliance with the Law on the Prevention of Occupational Risks range from €2,451 for a serious infringement to up to €983,736 for a very serious infringement where demonstrable harm to a worker's health can be shown.
What are psychosocial risks and why do they matter?
Psychosocial risks are working conditions that can affect a worker's physical, mental and social health. The European framework groups them into six broad factors based on the Copenhagen Psychosocial Questionnaire (COPSOQ) model and the FPSICO methodology of the INSST:
- Psychological demands: quantitative workload, work pace, emotional demands.
- Control over work: autonomy, development opportunities, use of skills.
- Social support and quality of leadership: relationships with colleagues and managers, sense of community.
- Rewards: job insecurity, recognition, esteem.
- Double presence: interference between work and family demands.
- Employment conditions: type of contract, working hours, real work-life balance.
When these factors combine into adverse patterns and persist over time, they produce chronic stress, burnout syndrome, anxiety and depression. The cost to the organisation translates into turnover, absenteeism, errors and, in the most serious cases, labour disputes or accidents caused by cognitive fatigue.
Legal basis: when is the assessment mandatory?
The obligation to assess psychosocial risks does not arise from a voluntary technical standard: it is embedded in Law 31/1995 on the Prevention of Occupational Risks (LPRL) and in Royal Decree 39/1997, which approves the Regulation on Prevention Services. Both pieces of legislation require employers to identify and assess all risks, including psychosocial ones, regardless of the size of the company or the sector of activity.
Spanish case law has also consolidated this obligation. The Supreme Court and the Superior Courts of Justice have repeatedly ruled that omitting a psychosocial assessment, or carrying one out deficiently, constitutes a serious infringement under Article 12 of the Law on Infringements and Sanctions in the Social Order (LISOS, Royal Legislative Decree 5/2000).
In practice, the Labour and Social Security Inspectorate requires this assessment when:
- Indicators of harm are detected: sick leave due to stress, repeated conflicts, high turnover.
- Workers or their representatives formally request it.
- An occupational accident occurs that medical services link to psychosocial factors.
- Planned preventive actions are carried out ex officio.
There is no workforce threshold that exempts a company from this obligation. A sole-trader business with a single employee must also assess that worker's psychosocial risks.
ISO 45003:2021 — the international standard for managing psychological health
In 2021, the International Organization for Standardization published ISO 45003:2021 "Occupational health and safety management — Psychological health and safety at work — Guidelines for the management of psychosocial risks". This standard complements ISO 45001:2018 (occupational health and safety management system) and provides a systematic framework for identifying, evaluating and controlling psychosocial hazards within a cycle of continuous improvement.
ISO 45003 is not independently certifiable: it is integrated into the ISO 45001 system and adds specific requirements for the psychosocial dimension. Companies already certified to ISO 45001 can extend their scope by incorporating the controls from ISO 45003. Those that have not yet implemented a formal occupational health and safety system can use ISO 45003 as a practical guide for structuring their psychosocial assessment with documentary rigour and traceability.
If your company is considering taking that step, at Summum Calidad we accompany the full implementation process: from the initial diagnosis to the certification audit with an accredited body (AENOR, Bureau Veritas, SGS or others). You can consult our service for psychosocial risk management with ISO 45003 to see the exact scope of our support.
Recognised methodologies for psychosocial assessment
The Labour Inspectorate does not require a specific methodology, but it does require it to be valid, reliable and recognised. The tools most widely used in Spain and endorsed by the INSST are:
| Methodology | Origin | Recommended scope | Free distribution |
|---|---|---|---|
| FPSICO 4.1 | INSST (Spain) | Companies of any sector and size | Yes (INSST) |
| COPSOQ III (ISTAS 21) | Copenhagen / ISTAS | Companies with union representation; long version (>25 workers) | Yes (ISTAS) |
| PREVENLAB-PSICOSOCIAL | University of Valencia | Broad organisational diagnosis | No (licence required) |
| INSL (Navarra) | Navarra Institute of Occupational Health | SMEs, fast application | Yes (INSL) |
| ERI (Effort-Reward Imbalance) | Siegrist | Sectors with high emotional demand (healthcare, education, customer service) | Yes (academic) |
The choice depends on workforce size, sector and whether there is workers' legal representation (RLT). In companies with more than 25 workers, RLT participation in selecting the method and interpreting the results is not merely advisable: case law considers it an integral part of the preventive process.
The phases of a sound psychosocial assessment
A psychosocial assessment that can withstand a potential Labour Inspectorate inquiry must follow these phases in a documented manner:
1. Preliminary analysis and scope definition
Before launching any questionnaire, the company must analyse objective indicators: absenteeism rates by position, turnover, accidents, internal complaints, and sick-leave records related to mental health conditions. This analysis guides which positions or units require closer attention and justifies the choice of methodology.
2. Design and administration of the instrument
The questionnaire must guarantee the anonymity and confidentiality of responses. Participation must be voluntary, and the company must inform workers of the purpose, scope and data handling (including GDPR obligations). Response rates below 60% compromise the statistical validity of the results.
3. Statistical analysis and diagnosis
Data are processed using the software for the chosen methodology, generating exposure profiles by unit of analysis (job, department, shift). The result is not a single global score: it is a risk map showing which factors are in the red, amber or green zone for which groups of workers.
4. Results feedback and action planning
Results must be communicated to management, the prevention service and workers' representatives. A prioritised corrective action plan with deadlines and responsible parties is then drawn up. This plan forms part of the Prevention Plan and must be integrated into the planning of preventive activity.
5. Monitoring and review
The assessment is not a document to be filed away: it must be reviewed whenever working conditions change (new organisation, mass teleworking, redundancy, shift changes) or when monitoring indicators signal deterioration. ISO 45003 recommends periodic reviews with an annual or biennial cycle depending on the level of risk identified.
Common mistakes that turn the assessment into a paper exercise
Having accompanied the implementation of preventive systems in companies across various sectors since 2007, at Summum Calidad we identify these recurring failures:
- Applying the questionnaire without a prior analysis: the survey is launched without reviewing objective indicators, leading to results that do not reflect the actual risk.
- Failing to guarantee real anonymity: in small workforces, the demographic data in the questionnaire (age, seniority, department) can identify the respondent; workers know this and bias their answers towards the safe zone.
- Confusing psychosocial assessment with an employee satisfaction survey: satisfaction surveys measure opinion; psychosocial instruments measure exposure to risk factors. They are different tools with different purposes.
- Not involving workers' legal representatives: skipping this step invalidates the process in the event of a legal challenge.
- Not translating results into concrete measures: the assessment is filed away as formal compliance but generates no improvement. This is exactly what the Labour Inspectorate looks for during a visit.
- Not updating the assessment after significant organisational changes: the introduction of teleworking, shift reorganisation, or a restructuring process all require the existing assessment to be reviewed.
The psychosocial dimension in teleworking and hybrid environments
The expansion of teleworking has added a layer of complexity to psychosocial risk management. Royal Decree 28/2020 on remote working requires employers to assess the risks of the worker's home workstation, including the psychosocial dimension. The most frequent risks in remote or hybrid environments are:
- Isolation and loss of team social support.
- Difficulty disconnecting (a right regulated in Article 88 of Organic Law 3/2018, LOPDGDD).
- Hyperconnectivity and informal extension of working hours.
- Intensified home-work interference.
- Lower visibility of performance and greater insecurity about performance evaluation.
Classic methodologies such as FPSICO or COPSOQ III have incorporated specific items for remote work in their most recent versions. If your company has more than 20% of its workforce regularly teleworking, it is advisable to include a specific module for that population in the assessment.
ISO 45003 and its relationship with mental health: beyond stress
ISO 45003 introduces a broader concept than «occupational stress»: psychological health and safety at work. This approach encompasses both harm prevention (classic psychosocial risk) and the promotion of employee well-being. The practical difference matters: a company that only manages risk may have workers who are not ill but are also not engaged or performing to their full potential.
The pillars of psychological health according to the standard are: meaningful work, quality working relationships, safe working environments from a behavioural perspective (free from harassment and violence), and leadership that supports mental health. For companies that have implemented ISO 45001 and wish to extend their management system in this direction, our ISO 45003 implementation service offers a structured path without duplicating existing documentation.
Penalties and corporate liability
LISOS classifies infringements in occupational risk prevention into three levels. Those related to the omission or deficiency in psychosocial risk assessment may be classified as serious (Article 12.1.b LISOS) or very serious (Article 13 LISOS) when there is a causal link with harm to health. The applicable penalty ranges under Article 40.2 of LISOS (as amended by Law 23/2015) are:
| Grade | Minimum | Medium | Maximum |
|---|---|---|---|
| Serious infringement | €2,451 | €9,830 | €49,180 |
| Very serious infringement | €49,181 | €196,745 | €983,736 |
In addition to the administrative penalty, the company may face a benefit surcharge (between 30% and 50% of Social Security benefits for the contingency) if the worker suffers temporary or permanent incapacity arising from an unassessed psychosocial risk. In the most serious cases, liability may extend to criminal proceedings for an offence against workers' safety (Article 316 of the Penal Code).
How much does a psychosocial assessment cost?
The cost of an outsourced psychosocial assessment in Spain ranges, according to market rates, between €800 and €4,500 for SMEs of up to 100 workers, depending on the number of positions to be assessed, the methodology chosen, the organisational complexity and the level of support during the action-planning phase. Companies with an in-house prevention service can carry out the assessment using their own technicians if they hold the required specialist training; those that contract an external prevention service (SPA) usually have it included, although the quality and level of detail vary considerably. Comparing quotes and requiring that the final report includes the action plan is essential to ensure that the investment delivers real preventive value.
Frequently asked questions
Are companies with fewer than 10 workers also obliged?
Yes. Law 31/1995 on the Prevention of Occupational Risks sets no workforce threshold for the obligation to assess psychosocial risks. A micro-enterprise with two employees must assess their psychosocial working conditions. The difference compared with larger companies lies in the depth and the instrument: for very small workforces, a simplified method such as the INSL (Navarra) tool or a documented qualitative assessment may be sufficient, provided it is reflected in the prevention plan.
What is the difference between a psychosocial assessment and an employee engagement survey?
They are instruments with different objectives. The psychosocial assessment has a preventive-legal character: it measures workers' exposure to health risk factors and generates documented obligations to act. The engagement survey measures perceptions of satisfaction, commitment and organisational values, and has a strategic or human resources purpose. They can coexist and complement each other, but an engagement survey does not substitute a psychosocial assessment for legal purposes.
How often must the assessment be repeated?
The law does not set a maximum period, but the assessment must be reviewed whenever the working conditions that prompted it change (shift changes, introduction of teleworking, organisational restructuring, changes in pace or workload) or when monitoring indicators — absenteeism, conflicts, turnover — signal deterioration. As a best-practice reference, ISO 45003 recommends periodic reviews with an annual or biennial cycle depending on the level of risk identified in the previous assessment.
What role do workers' representatives play in this process?
A central one. Article 33 of the LPRL requires the employer to consult and allow the participation of workers' legal representatives in the selection of the methodology, in the interpretation of results and in the planning of measures. Courts have annulled psychosocial assessments carried out without this participation. If no formal representation exists (prevention delegates or health and safety committee), consultation must be made directly with workers through procedures that guarantee representativeness.