Every building has a story. People work in it, visit it, and depend on it every single day. The job of a facilities manager is to make sure that building stays safe for all of them. That responsibility is not optional. It is backed by UK law, enforced by regulators, and felt by every person who walks through the door.
Health and safety compliance in facilities management covers a wide range of legal duties. These duties include risk assessments, fire safety, electrical testing, water hygiene, contractor management, and much more. When any one of these slips, the consequences can be serious for people, for organisations, and for the managers responsible.
This guide explains what health and safety compliance means in facilities management, which UK laws apply, what evidence you need to keep, and how modern AI tools are helping FM teams stay ahead in 2026.
Is your estate truly compliant or just hoping for the best? Codedevza AI builds intelligent FM and ESG systems that automate compliance tracking, risk evidence, and audit reporting across your full property portfolio.
Why Health and Safety Compliance Matters in FM
Facilities managers sit at the centre of building safety. They are responsible for the physical environment, the systems that run it, and the people who operate within it. A faulty fire alarm, an unchecked water system, or an overdue electrical inspection can cause injuries, trigger enforcement notices, or shut down operations entirely.
Health and safety compliance is not just about avoiding fines. It is about creating environments where people can work without fear of harm. According to the Health and Safety Executive (HSE), enforcement action is taken seriously and fines are uncapped for serious breaches. Directors and managers can also face personal criminal liability in the most severe cases.
The stakes have increased significantly since the Grenfell Tower tragedy. Regulators now expect proof of action, not just paperwork. Evidence of what you have done matters as much as the policy you have written.
The Core UK Laws Every FM Professional Must Know
UK health and safety law for facilities management is built on a foundation of key legislation. Each one applies directly to how you manage your buildings, your people, and your contractors.
Health and Safety at Work Act 1974
This is the starting point for all FM compliance. It places a duty of care on employers and those who control premises to protect everyone on site employees, contractors, and visitors alike. For facilities managers, this means every process, from cleaning schedules to contractor briefings, must have safety embedded within it. The HSE enforces this act with uncapped fines and regular prosecutions across the UK.
Management of Health and Safety at Work Regulations 1999
These regulations turn general duties into specific legal requirements. Facilities managers must carry out formal risk assessments, put control measures in place, and appoint competent persons to oversee health and safety. Written records are essential. Risk assessments should be treated as live documents, reviewed whenever conditions change, not filed away and forgotten.
Regulatory Reform (Fire Safety) Order 2005
Fire safety is one of the most visible areas of FM compliance. This law makes every building operator a Responsible Person. As the Responsible Person, you must commission a Fire Risk Assessment (FRA), act on its findings, maintain detection and alarm systems, keep escape routes clear, and run regular fire drills. Since the Grenfell fire, regulators have zero tolerance for paper compliance evidence of actions taken is just as important as the FRA itself.
Workplace (Health, Safety and Welfare) Regulations 1992
These regulations govern the physical working environment. Ventilation, lighting, welfare facilities, and safe pedestrian routes all fall under their scope. They are among the most frequently breached regulations in FM, often through simple oversight. Broken welfare facilities, blocked fire exits, and poor air quality are all enforcement triggers. Regular workplace inspections and documented corrective actions are the key defence.
COSHH Control of Substances Hazardous to Health 2002
Facilities teams regularly work with cleaning chemicals, maintenance substances, and other hazardous materials. COSHH requires that these substances are identified, their risks assessed, and appropriate controls put in place. Exposure monitoring, staff training, and accurate safety data sheets must all be maintained and kept as evidence.
PUWER and LOLER
The Provision and Use of Work Equipment Regulations 1998 (PUWER) and the Lifting Operations and Lifting Equipment Regulations 1998 (LOLER) apply to all equipment used in FM operations. Lifts, hoists, cranes, and access platforms all require statutory inspection. A central certificate register and clear records of defect close-outs are essential. Many facilities managers make the mistake of assuming their equipment supplier tracks compliance the liability sits with the dutyholder.
RIDDOR Reporting of Injuries, Diseases and Dangerous Occurrences
RIDDOR requires facilities managers to report certain workplace accidents, dangerous occurrences, and occupational diseases to the HSE. From April 2026, day one rights to statutory sick pay mean that minor illness and injury reporting may increase. FM teams must have clear, upto date incident reporting procedures and ensure staff know how and when to report.
Risk Assessment: The Foundation of FM Health and Safety
Risk assessment sits at the heart of every FM health and safety programme. It is not a one-time exercise. It is an ongoing process that must be reviewed regularly and updated whenever something changes, a new contractor arrives, a system is modified, or a near miss occurs.
A strong risk assessment process in FM covers:
- Identifying all significant hazards across the estate from electrical systems to pedestrian routes
- Evaluating the likelihood and severity of harm for each hazard
- Putting proportionate control measures in place to reduce risk
- Recording findings clearly with named responsible persons and review dates
- Consulting with employees and contractors who may be affected
- Reviewing assessments after incidents, audits, or any significant change
Risk assessments that sit in a folder and never change are a liability. Regulators and insurers now expect to see live, working documents that reflect the actual state of your buildings and operations.
Turn your compliance data into real time confidence Codedevza AI’s intelligent FM platforms connect your risk assessments, inspection records, and ESG reporting into one unified, audit-ready system — so your team always knows where you stand.
Contractor Management and Health and Safety
Facilities managers rarely work alone. Contractors carry out electrical work, gas servicing, cleaning, security, and maintenance on a daily basis across managed estates. Every one of those contractors brings health and safety responsibilities with them and the facilities manager shares accountability for how that work is done.
Effective contractor health and safety management in FM requires:
- Pre-qualification checks verifying accreditations such as Gas Safe, NICEIC, CHAS, or SafeContractor before any work begins
- Site inductions briefing contractors on site-specific hazards, emergency procedures, and safe systems of work
- Permitt o work systems controlling high-risk activities such as hot work, confined space entry, or work at height
- Ongoing monitoring checking that contractors are following safe methods during the work, not just at the start
- Post work review confirming that the work has been completed safely and that any documentation or certificates have been received
In 2026, regulatory scrutiny of contractor management across FM estates has intensified. The HSE expects facilities managers to demonstrate active oversight, not passive trust. If a contractor causes harm on your site, your compliance evidence will determine the outcome.
Building a Strong Health and Safety Culture in FM
Compliance is a legal floor, not a ceiling. The best FM teams go beyond meeting minimum requirements and build a genuine safety culture across their estates. A strong safety culture means that every person on site from the facilities manager to the cleaning operative understands that safety is part of their job, not a separate task.
Key elements of a healthy FM safety culture include:
- Leadership commitment safety must be visibly championed by senior management, not just the health and safety officer
- Open reporting staff and contractors should feel confident reporting hazards and near-misses without fear of blame
- Regular training practical, engaging training that reflects real on-site risks, reviewed and updated annually
- Incident investigation every accident and near miss is investigated to find root causes, not just to fill in a form
- Mental health integration from 2026, the Employment Rights Act 2025 strengthens duties around workplace wellbeing, and FM teams must include mental health in their risk assessment frameworks
Regulators, insurers, and corporate clients increasingly assess safety culture as part of due diligence. Organisations that invest in culture and can evidence it carry less risk and attract better partnerships.
How AI Is Improving Health and Safety Compliance in FM
Artificial intelligence is changing the way facilities managers approach health and safety compliance. The shift is away from paper based checklists and scattered certificate folders, and towards connected digital systems that capture, track, and verify compliance in real time.
AI-powered FM health and safety tools now deliver:
- Automated inspection scheduling tied to legislative deadlines and asset risk profiles
- Real-time alerts when compliance tasks are approaching, overdue, or at risk of lapsing
- Digital audit trails with time stamped records, photos, sign offs, and version control
- Predictive maintenance signals that flag asset risks before failures or incidents occur
- Contractor compliance dashboards that track accreditations, induction records, and permit status across all sites
- Instant audit ready evidence packages that can be shared with the HSE, insurers, or clients on demand
The HSE’s shift to a risk based regulatory model in 2026 means that low risk organisations may face lighter administrative duties, but remain under scrutiny for serious incidents. For FM teams managing complex or multi site estates, AI-powered systems provide the visibility and evidence depth that manual processes simply cannot match.
What Evidence Should FM Teams Keep?
Evidence is the currency of FM compliance. When an inspector visits, an insurer queries a claim, or a client asks for assurance, your documentation is your defence. Facilities managers should maintain the following as a minimum:
- Written health and safety policy, signed and dated by senior leadership
- Generic and site specific risk assessments with named responsible persons
- Fire Risk Assessments and records of all actions completed
- Electrical Installation Condition Reports (EICRs) and remedial action records
- Legionella risk assessments and water management monitoring logs
- Asbestos registers and re inspection records for all pre 2000 buildings
- PUWER and LOLER inspection certificates with defect close out records
- RIDDOR incident reports and internal accident investigation records
- Contractor pre qualification records, induction logs, and permit to work documentation
- Training records and competency certificates for all staff and key contractors
These records should be centralised, version controlled, and accessible. Scattered email attachments and shared drives without clear structure are a compliance risk in themselves.
Your compliance evidence should be one click away not buried in email threads Codedevza AI designs PropTech and ESG systems that centralise your FM compliance data, automate evidence capture, and keep every site audit-ready across the UK, Europe, and the Middle East.
FAQ’s
What does health and safety compliance mean in facilities management?
Health and safety compliance in facilities management means meeting all UK legal requirements to protect employees, contractors, visitors, and building occupants. It covers risk assessments, fire safety, electrical and water hygiene, asbestos management, contractor oversight, and incident reporting, among other duties.
Which UK law is most important for FM health and safety?
The Health and Safety at Work Act 1974 is the foundation of all FM health and safety law in the UK. It places a duty of care on anyone who controls premises to protect all people on site. All other regulations build on or complement this core legislation.
What is a risk assessment and who is responsible for it in FM?
A risk assessment is a formal process of identifying hazards, evaluating the risks they pose, and putting controls in place to reduce them. In facilities management, the employer or person in control of the premises is legally responsible for ensuring risk assessments are carried out, recorded, and kept up to date.
How often should FM risk assessments be reviewed?
Risk assessments should be reviewed regularly and updated whenever there is a significant change such as a new contractor, a system modification, a near-miss, or an incident. There is no fixed legal interval, but quarterly compliance reviews are considered good practice for most FM operations.
What is RIDDOR and does it apply to facilities managers?
RIDDOR stands for Reporting of Injuries, Diseases and Dangerous Occurrences Regulations. It requires facilities managers to report certain workplace accidents, occupational diseases, and dangerous events to the HSE. It applies to all workplaces and is the facilities manager’s responsibility to ensure it is followed across their estate.
What accreditations should FM contractors hold?
Key contractor accreditations for FM health and safety in the UK include Gas Safe registration for gas work, NICEIC for electrical work, CHAS or SafeContractor for general health and safety assurance, and REFCOM for air conditioning. ISO 45001 demonstrates a systematic approach to health and safety management.
What changed in UK health and safety law in 2026?
Several changes took effect in 2026. The Employment Rights Act 2025 strengthened duties around harassment prevention and workplace wellbeing from October 2026. Day-one rights to statutory sick pay from April 2026 are increasing minor illness reporting. Updated fire safety guidance under Approved Document B also introduced new requirements for commercial buildings from September 2026.
What is a permit to work system in FM?
A permit-to-work (PTW) system is a formal control process used to manage high-risk activities on FM sites. It requires that hazardous tasks such as hot work, electrical isolation, confined space entry, or work at height are formally authorised, documented, and signed off before and after the work takes place. PTW systems reduce the risk of accidents during complex or dangerous maintenance tasks.
How can AI tools help facilities managers with health and safety compliance?
AI-powered FM tools automate inspection scheduling, deadline alerts, and audit trail management across entire estates. They provide real-time compliance dashboards, predictive maintenance signals, and instant evidence packages. AI also helps with contractor tracking, risk assessment management, and ESG reporting, giving FM teams full visibility across all sites.
What happens if a facilities manager fails to comply with health and safety law?
Non-compliance can result in uncapped HSE fines, enforcement and improvement notices, prohibition of building use, criminal prosecution of responsible persons, and invalidity of insurance cover. Beyond legal consequences, compliance failures can cause serious harm to people, damage organisational reputation, and result in the loss of client contracts.
