Every facilities manager in the UK operates within a framework of legal duties. These duties are not optional, flexible, or open to interpretation. They are set by the government and enforced by regulatory bodies with the power to fine, prosecute, and shut down non compliant operations.
This framework is called statutory compliance. It covers everything from electrical testing and water hygiene to fire safety, asbestos management, and lifting equipment inspections. Miss one deadline or lose one certificate, and you are exposed to enforcement action, insurance complications, and risk to the people in your buildings.
This guide explains what statutory compliance means in facilities management, how it differs from regulatory compliance, which UK laws apply, what evidence you must keep, and how smart FM teams are using technology to stay on top of it all in 2026.
Struggling to keep track of every statutory deadline across your estate? Codedevza AI builds intelligent FM and ESG compliance systems that centralise your statutory inspection records, automate deadline alerts, and keep every site audit ready across the UK, Europe, and the Middle East.
What Is Statutory Compliance in Facilities Management?
Statutory compliance in facilities management means meeting all the legal requirements set by the UK government to protect the safety, health, and welfare of everyone who uses, works in, or visits a building. These requirements are set in law. They are not guidelines or recommendations. They are obligations, and the duty to meet them sits squarely with the person or organisation in control of the premises.
The term statutory comes from statute law passed by Parliament. Statutory compliance is therefore different from best practice or voluntary standards. If you fail to comply with a statutory requirement, you face legal consequences. These can include unlimited fines from the Health and Safety Executive (HSE), prohibition notices, building closures, and in the most serious cases, criminal prosecution.
For facilities managers, statutory compliance covers three interconnected layers:
- Policy compliance ensuring your organisation’s policies and procedures align with all relevant UK legislation
- Process compliance following the correct inspection frequencies, maintenance methods, and documentation procedures required by law
- Evidence compliance keeping accurate, up to date records that prove your compliance to regulators, insurers, and auditors on demand
All three layers must work together. A strong policy with poor process delivery is a compliance failure. Excellent maintenance with no documentation to prove it is equally exposed. Statutory compliance only holds up when all three are in place.
Statutory Compliance vs Regulatory Compliance What Is the Difference?
These two terms are often used interchangeably, but they are not the same thing. Understanding the difference helps facilities managers prioritise correctly.
Statutory compliance refers to laws passed directly by Parliament. These apply to everyone equally. The Health and Safety at Work Act 1974, the Regulatory Reform (Fire Safety) Order 2005, and the Control of Asbestos Regulations 2012 are all examples of statutory law. They are enforced by bodies such as the HSE and Fire and Rescue Authorities. Non compliance is a criminal matter.
Regulatory compliance refers to rules set by appointed regulatory bodies rather than Parliament itself. These can vary by industry, sector, or building type. While they must always operate within the boundaries of statutory law, they can add further requirements specific to certain environments such as healthcare, education, or food production.
For facilities managers, statutory compliance is always the floor. It is the non negotiable baseline. Regulatory compliance builds on top of that baseline depending on the type of building or business you manage.
The Key Statutory Compliance Areas in UK Facilities Managemente
UK statutory compliance for facilities management covers a wide range of systems, assets, and processes. The following are the core areas that every facilities manager must address.
1. Health and Safety at Work Act 1974
This is the foundation of all UK workplace law. It places a duty of care on employers and premises controllers to protect employees, contractors, and visitors from harm. For facilities managers, this means embedding safety into every aspect of building management from contractor onboarding to maintenance schedules. The HSE enforces this act actively, with uncapped fines and regular prosecutions. Every other statutory compliance duty in FM sits within or alongside this core legislation.
2. Management of Health and Safety at Work Regulations 1999
These regulations require facilities managers to carry out formal risk assessments, appoint competent persons to oversee health and safety, and implement appropriate control measures. For organisations with five or more employees, significant findings must be recorded in writing. Risk assessments must be reviewed whenever conditions change and kept as live, working documents not static files stored away and forgotten.
3. Fire Safety Regulatory Reform (Fire Safety) Order 2005
The Fire Safety Order requires every non domestic premises to have a suitable and sufficient Fire Risk Assessment in place, maintained by a designated Responsible Person. This includes keeping fire detection and suppression systems operational, maintaining clear escape routes, running regular fire drills, and recording all actions taken. Since the Building Safety Act 2022 strengthened enforcement, fines for fire safety breaches are now unlimited and custodial sentences of up to 24 months are possible for serious failings.
4. Electrical Safety Electricity at Work Regulations 1989
All electrical installations in commercial premises must be tested and inspected through an Electrical Installation Condition Report (EICR). For most commercial buildings, this is required every five years. However, receiving the report is not enough. Facilities managers must ensure that every remedial action identified is completed within defined timeframes and that evidence of completion is retained. Regulators and insurers increasingly demand proof of remedial action, not just the EICR itself.
5. Water Hygiene L8 ACOP and the Control of Legionella Bacteria
Water systems in buildings must be actively managed to prevent the growth and spread of Legionella bacteria. This requires a written Legionella risk assessment, a documented water management plan covering all hot and cold water systems, and regular monitoring records. All records must be kept and reviewed whenever the building, its systems, or its occupancy patterns change. Failure to manage Legionella risks carries serious legal consequences, particularly where occupant illness or death results.
6. Asbestos Control of Asbestos Regulations 2012
Any building constructed before the year 2000 may contain asbestos containing materials (ACMs). Under the Control of Asbestos Regulations 2012, duty holders must commission asbestos surveys, maintain a written asbestos register, arrange periodic re inspections, and ensure that any work near ACMs is carried out only by licensed contractors. An asbestos register must be kept on site, shared with anyone who may disturb ACMs, and updated regularly. Asbestos mismanagement is one of the most prosecuted FM compliance failures in the UK.
7. Lifting Equipment PUWER 1998 and LOLER 1998
The Provision and Use of Work Equipment Regulations (PUWER) and the Lifting Operations and Lifting Equipment Regulations (LOLER) require all work equipment and lifting devices to be safe, suitable, and regularly inspected. Lifts, hoists, cranes, and access platforms all demand statutory inspection by a competent person. A central certificate register for all lifting equipment certificates is essential. Many facilities managers incorrectly assume that their equipment suppliers track compliance the legal liability always rests with the dutyholder.
8. Gas Safety Gas Safety (Installation and Use) Regulations 1998
All gas systems in premises must be maintained by Gas Safe registered engineers. While annual gas safety checks are a legal requirement only for residential premises, planned maintenance of gas systems in commercial buildings is strongly advised and expected by insurers. All maintenance records, engineer certificates, and safety inspection reports must be retained and kept current.
9. Air Conditioning Energy Performance of Buildings Regulations 2007
All air conditioning systems with an output of more than 12kW must be inspected by an accredited assessor. The maximum interval between inspections is five years. More powerful or heavily used systems may require more frequent checks. Air conditioning inspection reports and certificates must be kept as compliance evidence and made available on request.
10. Accessibility Equality Act 2010
Facilities managers must ensure that buildings are accessible and usable for people with disabilities. Access audits must be carried out, and reasonable adjustments made where barriers to access are identified. This duty applies on an ongoing basis, not just at the point of construction or fit out. Accessibility assessments must be documented and acted upon as part of the standard compliance programme.
Ten compliance areas. Hundreds of deadlines. One platform. Codedevza AI PropTech compliance platforms unify statutory inspection records, maintenance schedules, and ESG reporting into a single audit ready system giving FM teams real time visibility across every site and every obligation.
The Role of Planned Preventative Maintenance in Statutory Compliance
Statutory compliance and planned maintenance are inseparable. Most compliance obligations in FM are time based. An EICR must be carried out every five years. A Legionella risk assessment must be reviewed whenever conditions change. Fire alarm systems must be tested weekly and serviced regularly. None of these obligations look after themselves.
Planned Preventative Maintenance (PPM) is the system that makes statutory compliance happen in practice. A well designed PPM programme maps every statutory obligation to a scheduled task, assigns it to the right person or contractor, and tracks completion with evidence. It replaces reactive firefighting with proactive control.
SFG20 is the UK’s definitive standard for planned maintenance in FM. It maps every statutory legislative requirement to specific tasks, methods, and frequencies. Facilities managers who align their PPM programmes with SFG20 ensure their maintenance regimes are compliant by design. When laws or standards change, SFG20 schedules update automatically so the compliance programme evolves alongside the legislation.
The key benefits of a strong PPM approach to statutory compliance are:
- Every statutory inspection and test is scheduled in advance nothing falls through the gaps
- Contractors and engineers work from a consistent, standard aligned task list
- Completion evidence is captured at the point of delivery, not chased weeks later
- Audit readiness is a constant state, not a last minute scramble
- Asset life is extended and reactive maintenance costs are reduced
What Evidence Must Facilities Managers Keep for Statutory Compliance?
Evidence is the most important output of a statutory compliance programme. Without it, your compliance has no legal standing. Regulators, insurers, and clients do not take facilities managers at their word. They look at documents, certificates, logs, and records.
For each area of statutory compliance, facilities managers should hold and maintain the following evidence as a minimum:
- Health and safety written policy, risk assessments, accident logs, training certificates, competence records
- Fire safety Fire Risk Assessment with action completion records, fire alarm service certificates, fire drill logs, fire marshal training records
- Electrical EICR certificates and evidence that all remedial actions have been completed
- Water hygiene Legionella risk assessment, water management plan, temperature monitoring logs, cleaning and disinfection records
- Asbestos asbestos survey reports, asbestos register, re inspection records, contractor notification records
- Lifting equipment LOLER inspection certificates, defect close out records, operator training certificates
- Gas maintenance records, engineer Gas Safe registration certificates, safety inspection reports
- Air conditioning TM44 inspection reports from accredited assessors, renewal tracking records
- Accessibility access audit reports, records of adjustments made and outstanding actions
All evidence must be centralised, current, and available on demand. A compliance programme that generates great records but stores them across email inboxes, shared drives, and filing cabinets is still a liability. The test is simple: if an inspector arrived at your building today, how quickly could you produce everything they asked for?
How Technology Is Transforming Statutory Compliance in FM
Managing statutory compliance across a single building is demanding. Managing it across a portfolio of ten, fifty, or hundreds of buildings is a different challenge entirely. This is where technology has become not just useful but essential.
Modern AI powered FM compliance platforms are changing the way statutory compliance is managed. The best systems bring all compliance obligations, inspection records, certificates, and remedial actions together in one unified digital environment. They replace scattered spreadsheets and email chains with real time visibility across the entire estate.
Key capabilities that leading FM compliance technology now delivers include:
- Automated statutory inspection scheduling tied to asset data and legislative deadlines
- Real time alerts when certificates are approaching expiry or statutory deadlines are at risk
- Digital audit trails with time stamped records, completion photographs, and sign off workflows
- Unified compliance dashboards showing the status of every statutory area across every site
- Instant evidence packages that can be exported and shared with the HSE, Fire and Rescue Authorities, or insurers on demand
- SFG20 integration that keeps maintenance schedules aligned with current legislation automatically
- Contractor management tools that track accreditation status, induction records, and permit to work documentation
For multi site FM operations, the shift from manual compliance management to a digital, AI powered system is not a luxury. It is the only reliable way to maintain consistent statutory compliance at scale, reduce enforcement risk, and demonstrate to clients and regulators that your estate is genuinely under control.
Ready to move from compliance chaos to complete control? Codedevza AI designs PropTech and ESG systems that unify your statutory compliance data, automate evidence capture, and deliver real time audit readiness for FM teams managing estates of any size across the UK, Europe, and the Middle East.
FAQ’s
What is statutory compliance in facilities management?
Statutory compliance in facilities management means meeting all legal requirements set by the UK government to protect the safety, health, and welfare of everyone in or around a building. These requirements are set in law by Parliament and enforced by regulatory bodies such as the HSE and Fire and Rescue Authorities. Non compliance can result in unlimited fines, enforcement notices, building closures, and criminal prosecution.
What is the difference between statutory and regulatory compliance in FM?
Statutory compliance refers to laws passed by Parliament that apply equally to all organisations, such as the Health and Safety at Work Act 1974. Regulatory compliance refers to rules set by appointed regulatory bodies, which can vary by industry or sector. Statutory compliance is always the legal floor. Regulatory compliance builds additional requirements on top of that floor depending on the type of building or business involved.
Who is responsible for statutory compliance in a building?
The person or organisation in control of the premises carries the primary legal duty for statutory compliance. In practice, this is often the building owner, employer, landlord, or facilities manager. For managed estates, this responsibility is frequently shared between multiple duty holders who must work together and coordinate their compliance programmes. Appointing a contractor to carry out compliance tasks does not transfer the legal liability away from the dutyholder.
How often do statutory inspections need to take place in FM?
Inspection frequencies vary by area. EICRs are required every five years for most commercial premises. Legionella risk assessments must be reviewed whenever conditions change. Fire alarm systems require weekly tests and regular servicing. Air conditioning systems over 12kW must be inspected every five years. Lifting equipment requires periodic statutory inspection. Each area has its own legally defined or industry standard frequency that facilities managers must track.
What is SFG20 and how does it support statutory compliance?
SFG20 is the UK’s definitive standard for planned maintenance in facilities management. It maps every statutory legislative requirement to specific tasks, methods, and inspection frequencies. Adopting SFG20 ensures that a building’s maintenance regime is aligned with current legislation by design. When laws change, SFG20 schedules update automatically, keeping compliance programmes current without manual intervention.
What records must a facilities manager keep for statutory compliance?
Facilities managers must keep up to date records for all statutory compliance areas. This includes risk assessments, Fire Risk Assessments with action completion evidence, EICR certificates and remedial records, Legionella risk assessments and monitoring logs, asbestos registers, LOLER inspection certificates, gas maintenance records, air conditioning inspection reports, and training certificates for all relevant staff and contractors. All records must be centralised and available on demand.
What happens if a facilities manager fails statutory compliance?
Failure to meet statutory compliance obligations can result in uncapped fines from the HSE or Fire and Rescue Authorities, enforcement and prohibition notices, building closures, criminal prosecution of responsible persons, and invalidation of building insurance policies. Beyond legal consequences, compliance failures can harm occupants, damage organisational reputation, and result in the loss of contracts and client relationships.
Is Planned Preventative Maintenance (PPM) a statutory requirement?
PPM itself is not always a statutory requirement, but the inspections and maintenance tasks it delivers frequently are. Most statutory compliance obligations in FM are time based and depend on regular, scheduled maintenance activity. A robust PPM programme is the practical mechanism through which statutory compliance is maintained consistently. Without it, statutory deadlines are easily missed and compliance gaps emerge.
Can AI and digital tools help with statutory compliance in FM?
Yes. AI powered FM compliance platforms automate statutory inspection scheduling, track certificate expiry and renewal deadlines, generate real time compliance dashboards, and produce instant audit ready evidence packages. For multi site FM operations, digital compliance systems provide the consistent oversight and evidence capture that manual processes cannot reliably deliver at scale.
Does statutory compliance apply to all types of buildings?
Yes, statutory compliance applies to all non domestic premises in the UK. The specific obligations that apply will vary depending on the building type, age, size, occupancy, and the systems installed within it. Buildings constructed before 2000 carry additional duties around asbestos management. Higher risk buildings over 18 metres have additional obligations under the Building Safety Act 2022. Facilities managers should carry out a full compliance review of every building they manage to understand the specific statutory duties that apply.
