In 1995 INSALUD began to develop performance measures in the field of risk management, and following transfer of powers to the regions, these led to the development of operational units in individual healthcare centres. These units, which consist of a group of health professionals, including managers, aim to identify, evaluate, analyse and deal with health risks, to enhance patient safety. Their organisational structure can vary in accordance with the needs, resources and philosophy of each individual organisation. This paper presents the experience of the risk management units developed in four Spanish regions: Madrid, the Basque Country, Galicia and INGESA (Ceuta and Melilla). It also includes reflections on assessment of their impact and on their future role in improving safety in healthcare services.