Compliance failure in facilities management is not just a paperwork problem. It costs money, damages reputations, and in the worst cases, costs lives.
The UK has seen serious consequences when FM teams fall short of their legal duties. Fines run into millions. Prosecutions have resulted in prison sentences. Buildings have been shut down. Insurers have refused to pay out. And in some cases, people have been seriously harmed.
This blog looks at what actually happens when FM compliance fails, using real UK examples and enforcement patterns. It also sets out what good FM compliance looks like in practice.
Codedevza AI builds compliance platforms that keep FM teams audit ready and ahead of enforcement risk across every site, every obligation.
The Real Consequences of FM Compliance Failure
When FM compliance fails, the consequences fall into five main categories.
1. Financial Penalties
The Health and Safety Executive (HSE) issues uncapped fines for breaches of health and safety law. Fines of hundreds of thousands of pounds are common. For serious failings involving injury or death, fines run into millions. The ICO issued a £14 million fine in 2025 for a data breach. Fire and Rescue Authorities can issue unlimited fines for fire safety breaches under the Building Safety Act 2022. None of these are hypothetical. They happen regularly across the UK.
2. Criminal Prosecution
Facilities managers, building owners, and company directors can face personal criminal liability for serious compliance failings. The Health and Safety at Work Act 1974, the Regulatory Reform (Fire Safety) Order 2005, and the Building Safety Act 2022 all carry provisions for criminal prosecution. Custodial sentences are possible. Section 156 of the Building Safety Act increased the maximum prison sentence for fire safety breaches to 24 months.
3. Building Closure and Enforcement Notices
Regulators can issue prohibition notices that immediately stop all activity in a building. This means staff cannot work, operations cannot run, and revenue stops. Improvement notices require specific actions within a set timeframe. Failure to comply with either can result in prosecution. For multi site FM operations, a prohibition notice on even one building can have significant financial and operational consequences.
4. Insurance Invalidation
Most commercial insurance policies contain conditions that require active compliance with all relevant legislation. If an insurer can show that a compliance duty was not met a missed EICR, an outdated fire risk assessment, an unrecorded asbestos inspection they can refuse to pay out on a claim. This leaves organisations facing the full cost of incidents without cover. It is a consequence that many FM teams do not consider until it is too late.
5. Reputational Damage and Loss of Contracts
Compliance failures become public record. HSE enforcement actions are published on the HSE website. Fire service prohibition notices are publicly documented. Corporate clients conducting due diligence will find these records. Public sector clients require compliance evidence as part of tender requirements under the Procurement Act 2023. A compliance failure can end a client relationship and close the door on future business.
Codedevza AIcentralises your FM inspection records, contractor documentation, and compliance evidence so you can prove compliance on demand.
Common FM Compliance Failure Points in the UK
Most FM compliance failures are not dramatic or deliberate. They happen because of gaps in process, unclear responsibility, poor record keeping, or a lack of oversight. These are the most common failure patterns seen across the UK.
Missed Statutory Inspections
Electrical Installation Condition Reports, Legionella risk assessments, LOLER lifting equipment inspections, and fire alarm servicing all have legally required timescales. When these lapse often due to poor scheduling rather than deliberate neglect the organisation is immediately non compliant. Regulators treat lapsed inspections as evidence of an unsafe management system, not just an administrative oversight.
Poor Contractor Oversight
One of the most cited causes of FM enforcement action is contractor related failure. If a contractor drills into asbestos containing materials without being informed of the asbestos register, the liability sits with the dutyholder. If a gas engineer is not Gas Safe registered, any subsequent incident falls on the FM team. The Control of Asbestos Regulations 2012, the Gas Safety Regulations 1998, and the Management of Health and Safety at Work Regulations 1999 all make clear that the duty to verify contractor competence rests with the organisation appointing them.
Inadequate or Outdated Documentation
A recent industry survey found that 85 per cent of FM organisations do not have a fully accurate asset register. Eight per cent have no asset register at all. Compliance confidence across the sector dropped from 63 per cent in 2025 to 54 per cent in 2026. Regulators do not accept verbal assurances. During an inspection or investigation, if the documentation does not exist or cannot be found, the compliance is treated as absent. Missing records lose cases.
Fire Safety Failures
Fire safety is the most heavily enforced area of FM compliance in the UK. Common failures include fire risk assessments that have not been reviewed since the building changed, fire doors that fail inspection (industry research suggests up to 75 per cent of inspected fire doors fail on at least one critical point), blocked escape routes, and fire alarm systems that have been masked rather than fixed. Since the Grenfell Tower tragedy, Fire and Rescue Authorities have significantly increased enforcement activity across all building types.
Asbestos Management Failures
Buildings constructed before 2000 must have an asbestos register and a management plan. Both must be reviewed regularly and shared with anyone working near potential ACMs. Where contractors are not informed of asbestos risks and disturbing materials, the prosecuting authority will focus on the dutyholder who failed to communicate the risk. This is one of the most regularly prosecuted areas of FM compliance in England and Wales.
What Good FM Compliance Looks Like
Good FM compliance in 2026 is not defined by how quickly problems get fixed. It is defined by how well they are prevented.
The FM teams that avoid enforcement action share the same characteristics. They have clear ownership of every compliance duty. They use planned maintenance schedules aligned with statutory requirements. They keep centralised, current records for every inspection, certificate, and remedial action. They carry out regular internal audits. They treat documentation as evidence, not administration.
When a regulator visits, they should find nothing unexpected. Every certificate should be current. Every action should be recorded. Every contractor should be verified. The gap between what is documented and what is actually happening on site should be zero.
That standard is achievable. But it requires systems, not just intention.
Codedevza AI designs PropTech and ESG platforms that make compliance visible, verifiable, and audit ready for FM teams managing estates of any size.
FAQ’s
What are the most common consequences of FM compliance failure in the UK?
The main consequences are financial fines, criminal prosecution of responsible persons, enforcement or prohibition notices, insurance invalidation, and reputational damage. In serious cases involving injury or death, the consequences include uncapped fines and custodial sentences.
Can a facilities manager be personally prosecuted for compliance failures?
Yes. The Health and Safety at Work Act 1974, the Regulatory Reform (Fire Safety) Order 2005, and the Building Safety Act 2022 all allow for the personal criminal prosecution of responsible persons. This includes facilities managers named as the Responsible Person for a building.
What happens if an insurer finds that statutory compliance was not maintained?
Insurers can refuse to pay out on claims if they can demonstrate that a compliance duty was not met. This includes missed EICRs, outdated fire risk assessments, and unrecorded statutory inspections. The organisation is then left to bear the full cost of any incident without insurance cover.
What are the most commonly enforced areas of FM compliance?
Fire safety, asbestos management, electrical safety, and Legionella control are among the most frequently enforced areas. Contractor related failures particularly where duty holders did not verify accreditations or inform contractors of site specific risks are also a common trigger for enforcement action.
Why do many FM compliance failures come down to documentation?
Regulators cannot assess what they cannot see. If an inspection was carried out but not recorded, it did not happen in the eyes of the law. If a contractor’s Gas Safe registration was not verified and retained, there is no evidence of due diligence. Documentation is not optional, it is the proof of compliance.
What does a prohibition notice mean for an FM operation?
A prohibition notice issued by the HSE or a Fire and Rescue Authority requires all activity in the affected premises to stop immediately. The building cannot be used until the notice is lifted. For any organisation running commercial operations, this means lost revenue, operational disruption, and significant reputational damage.
How can FM teams reduce the risk of enforcement action?
The most effective approach is a proactive one. This means maintaining accurate asset registers, using planned maintenance schedules aligned with statutory requirements, keeping centralised and current compliance records, verifying all contractor accreditations, and carrying out regular internal compliance audits.
How has enforcement changed since the Building Safety Act 2022?
The Building Safety Act 2022 significantly increased penalties for fire safety and building safety breaches, raised the maximum custodial sentence for fire safety offences, and established the Building Safety Regulator with expanded enforcement powers. Enforcement activity across all building types has increased since the Act came into force.
What role does contractor management play in FM compliance failures?
Contractor related failures are one of the most common causes of enforcement action in FM. The duty to verify contractor competence, inform them of site specific risks, and supervise their work rests with the appointing organisation. Liability for contractor related incidents typically falls on the dutyholder, not the contractor.
What is the standard of FM compliance that regulators expect in 2026?
Regulators expect FM teams to demonstrate active, evidence led compliance management not just the existence of policies. This means current certificates, up to date risk assessments, accurate asset registers, contractor verification records, and documented remedial actions. Verbal assurances and outdated documentation are not accepted.
