HSA Case Study: Delivering digital transformation in a regulated environment

Intro

Codec worked with the Health and Safety Authority (HSA) to replace legacy systems with a Microsoft
Dynamics 365‑based platform for inspection, case management, and compliance operations. The
programme modernised core workflows in a highly regulated public sector environment, reduced
manual administration, and set a foundation for further automation and mobile capabilities.

Quick answer

Codec delivered a Microsoft Dynamics 365‑based digital transformation for the Health and Safety
Authority (HSA), replacing legacy systems with a unified platform for inspection, case management, and
compliance. The programme modernised workflows in a regulated public sector environment, reduced
manual administration, and is expected to improve process efficiency by around 30%, giving inspectors
back over a day each week.

What was the HSA digital transformation programme?

The Health and Safety Authority (HSA) is Ireland’s national regulator for workplace health and safety. Its
inspectors and operational teams manage a high volume of inspections, investigations, and compliance
cases under statutory duties and strict governance requirements.

Codec partnered with the HSA to design and deliver a Microsoft Dynamics 365‑based platform to
modernise these core operations. The solution, referred to internally as Córas, unified inspection, case
management, and document management into a single, configurable system.

This was not a simple technology upgrade. It was a digital transformation in a regulated environment,
where every workflow has implications for compliance, auditability, and public trust. The goal was to
move from fragmented, manual processes to a structured, governed platform that could scale and
evolve as regulatory demands changed.

Why did the HSA need a new system?

The HSA was operating with a 10‑year‑old legacy platform that no longer matched the scale or
complexity of its responsibilities. Key drivers for change included:

Outdated technology: Inspectors relied on older tools and manual processes, with significant
follow‑up administration handled through email and other channels.
Fragmented workflows: Information was spread across systems and inboxes, making it harder
to get a single view of a case or inspection.
Regulated environment pressures: As a statutory regulator, the HSA must maintain clear audit
trails, consistent processes, and robust reporting to meet legal and oversight requirements.
Productivity constraints: Manual steps and duplicated effort reduced the time inspectors could
spend on core safety work.

As one HSA stakeholder put it:

“Our inspectors previously used older technology and manual processes, which involved
follow-up administration tasks and communication through email and other channels. This
approach sometimes led to delays in capturing and sharing information, affecting response
times and productivity. We recognised the need to transform this approach into a digital,
seamless workflow.”

In practice, the challenge was less about “new technology” and more about redesigning operational
processes so they could be supported by a modern, configurable platform.

What makes digital transformation in a regulated environment
different?

Public sector and regulated organisations face constraints that most commercial transformations do not.
The HSA programme illustrates several of these:

Statutory duties and compliance: Workflows must align with legal requirements, inspection
mandates, and reporting obligations. Changes to process or system can have direct regulatory
implications.
Auditability and traceability: Every decision, action, and data change must be traceable for
internal audit, external oversight, and potential legal scrutiny.
Risk‑averse change: In a safety‑critical environment, transformation must be carefully phased
and tested to avoid disrupting core operations.
Stakeholder complexity: Inspectors, legal teams, operations managers, IT, and senior leadership
all have different priorities and risk tolerances.

This is why digital transformation in regulated environments often focuses as much on governance,
process design, and change management as on technology. The platform must enable compliance, not
complicate it.

For Codec, this is familiar territory. Public sector digital transformation programmes routinely involve
balancing automation with practicality, ensuring that new capabilities do not undermine existing
controls or create new risks.

How was the HSA solution designed and implemented?

Unified platform over fragmented tools

A central design principle was to consolidate multiple legacy tools and manual processes into a single,
intuitive platform. The HSA’s Córas system brought together:

Inspection management: Structured workflows for planning, executing, and recording
inspections.
Case management: End‑to‑end handling of compliance cases, from intake through
investigation, decision, and closure.
Document management: Centralised storage and linkage of case‑related documents, reducing
reliance on email and shared drives.
Reporting and analytics: Configurable reports to support operational management, regulatory
reporting, and oversight.

This consolidation addressed a core pain point: information scattered across systems and inboxes. By
unifying these elements, the HSA gained a clearer, more consistent view of its operational workload.

Phased, value‑based delivery

Like many public sector programmes, the HSA transformation was delivered in phases, prioritising core
operational outcomes first. This allowed the HSA to:

Validate new workflows with inspectors and case handlers before scaling
Manage delivery trade‑offs without jeopardising critical regulatory functions
Build confidence across the organisation as each phase delivered visible improvements

This approach reflects how Codec typically delivers public sector digital transformation: structured,
iterative, and focused on tangible operational gains rather than theoretical “big bang” benefits.

Governance, stakeholders, and change management

Delivering in a regulated environment required strong governance and stakeholder engagement:

Clear decision rights: Steering, design authority, and risk reviews ensured changes were
traceable and aligned to regulatory requirements.
Inspector‑centred design: Workflows were shaped around how inspectors actually work in the
field, not just how the system “should” work in theory.
Change enablement: Training, communications, and support were built into the programme to
help teams adopt new ways of working.

Technology was an enabler, but the real transformation was in how work was organised, recorded, and
managed on a day‑to‑day basis.

What outcomes did the HSA transformation deliver?

The HSA programme delivered several concrete outcomes that illustrate the value of digital
transformation in a regulated public sector environment:

Unified operational platform: Córas brought inspection, case management, and document
management into a single system, replacing fragmented legacy tools.
Streamlined end‑to‑end processes: As the HSA noted, the solution allowed them to
“streamline our end-to-end case management and document storage.”
Foundation for further automation: With core processes stabilised, the HSA is planning
additional automation, mobile capabilities, and customer portals.
Productivity gains: The HSA is aiming to “improve efficiency in our processes by 30%, giving
inspectors back over a full day each week, time they can spend ensuring better safety, health
and welfare standards for Irish workers.”

Beyond these metrics, the transformation also strengthened the HSA’s ability to:

Maintain clearer audit trails and consistent processes
Respond more quickly to emerging risks and inspection priorities
Support continuous improvement as regulatory requirements evolve

This is a practical example of how Codec public sector programmes deliver not just a system, but a more
capable, adaptable operating model.

What this case illustrates about digital transformation in
regulated environments?

The HSA programme reinforces several principles that apply across government and regulated
organisations:

Regulated does not mean rigid: A well‑designed platform can support compliance while
enabling more efficient, flexible ways of working.
Process before technology: The biggest gains came from redesigning workflows, not just
automating existing steps.
Phased delivery reduces risk: Delivering in stages allowed the HSA to manage change safely and
demonstrate value early.
Governance as an enabler: Strong governance and stakeholder engagement were central to
delivering a system that could be trusted and sustained.

For other public sector bodies, the lesson is similar to the SEAI case: clarify outcomes, structure delivery,
and choose technology that supports long‑term operational resilience, not just initial go‑live.

FAQ

What is digital transformation in a regulated environment?

Codec approaches public sector digital transformation by combining Microsoft‑based platforms (such as
Dynamics 365 and Azure) with structured delivery, strong governance, and a focus on operational
outcomes. Programmes are typically delivered in phases, prioritising core workflows and measurable
productivity gains before expanding to additional capabilities.

How does Codec approach public sector digital transformation?

What technologies were used in the HSA transformation?

The HSA transformation was built on Microsoft Dynamics 365 for inspection, case management, and
document management, configured into a unified platform known internally as Córas. The solution was
designed to support further automation, mobile capabilities, and customer portals as the programme
evolves.

What outcomes did the HSA digital transformation deliver?

Key outcomes include a unified operational platform for inspection and case management, streamlined
end‑to‑end processes, and a foundation for further automation. The HSA is aiming to improve process
efficiency by around 30%, giving inspectors back over a day each week to focus on core safety, health,
and welfare work.