Do I Legally Need A Fire Risk Assessment?

If you manage a building, run a business, or look after the common parts of a residential block, you will have asked yourself the same question.

Do I legally need a fire risk assessment?

The short answer is yes for almost every non domestic setting in the UK, and for the common areas of most residential buildings. The longer answer matters because the law expects a suitable and sufficient approach that fits your premises, and the quality of that work influences both safety and liability.

This article explains precisely who needs a fire risk assessment, where the duties come from, and how to meet them without turning your operation upside down. You will see what a competent assessment looks like, where organisations stumble, and how to set a steady plan for compliance. The goal is to help you make sound decisions with confidence and to give you practical steps you can apply this month.

Who The Law Applies To Across The UK

In England and Wales, the key duty sits under the Regulatory Reform Fire Safety Order 2005 (RRFSO). The Fire Safety Act 2021 (FSA) confirmed that the structure and external walls of multi occupied residential buildings are within scope. The Fire Safety England Regulations 2022 (FSER) added specific duties for high rise residential buildings and strengthened duties to check firefighting equipment and fire doors.

In Scotland, duties arise from the Fire Scotland Act 2005 and associated guidance for non domestic premises. In Northern Ireland, the relevant legislation is the Fire And Rescue Services Order 2006 (NIFRSO) and related regulations. Across all parts of the UK the core principle is consistent. If people who are not part of your household use or live in the building, there will almost always be a legal duty to complete a fire risk assessment.

Premises in scope include workplaces and offices, shops, restaurants, pubs, hotels, schools, colleges, universities, healthcare and care homes, factories, warehouses, construction site facilities, places of assembly, faith buildings, community centres, and voluntary sector premises. Residential buildings with shared areas, such as blocks of flats with lobbies, stairwells, and plant rooms, are firmly in scope for those common parts. Short term lets and serviced apartments typically sit within scope for the host or operator.

The legal duty sits with the responsible person or duty holder. In practice this will be the employer in a workplace, the owner or person in control of premises not being work, or the freeholder, head lessee, or managing agent for the common parts of flats and maisonettes. In shared premises such as multi let offices and retail parks, each party is responsible for the areas they control, and there should be cooperation and coordination to ensure the overall fire safety arrangements work together.

Where You Do Not Need A Fire Risk Assessment

Private single domestic dwellings are not covered by the workplace fire safety regime. If you live in a detached house that no one else uses for work or as a business, you are not legally required to complete a fire risk assessment for your private home. This does not remove the need for working smoke alarms and good practice, but it means enforcement notices and audits from the fire authority will not apply to a purely private household.

Grey areas appear when parts of a home are used for work. If you employ staff in your home, host paying guests, run a salon where clients visit, or store work materials that change the risk, you move into the scope of the law. Garden outbuildings used as a workspace, garages with significant storage of flammables for a business, and micro warehouses on domestic land can bring you into scope. The sensible approach is to ask whether people outside your household are present or affected, and whether work activities change the risk. If the answer is yes, you will likely need a fire risk assessment for those areas.

For residential buildings that are split into flats, the common parts such as stairs, corridors, plant rooms, bin stores, and service risers are in scope. Houses that are let to several unrelated people under separate agreements are often classed as a House In Multiple Occupation (HMO). The housing standards regime applies in those cases and there may be licensing conditions. Where the building has shared areas, a formal fire risk assessment is expected and should link with other statutory duties such as the Housing Health And Safety Rating System (HHSRS).

What A Fire Risk Assessment Is And What Suitable And Sufficient Means

At its heart, a fire risk assessment is a structured look at how a fire could start, how it could spread, who could be harmed, and what controls are needed to prevent fire and to protect life. It documents the significant findings and sets out an action plan to reduce risk to a tolerable level. It should fit the building’s layout, the activities that take place, and the people who use or live in the space.

The law requires a suitable and sufficient approach. That means the work should be proportionate to the risks and the complexity of the building. A small ground floor office with straightforward use may need a concise fire risk assessment that focuses on ignition sources, compartmentation, means of escape, and basic maintenance. A large distribution centre with high bay racking, complex smoke ventilation, and shift working needs a more detailed fire risk assessment that tests management arrangements, maintenance records, and technical systems in depth.

Recognised methodologies help to structure the work so that nothing important is missed. A competent assessor will use a method similar to PAS 79 as a framework. That does not mean a tick box approach. It means a clear process that starts with gathering information, moves through a targeted site inspection, and ends with a reasoned set of findings and actions. The finished fire risk assessment should be readable, evidence based, and practical for the people who need to implement it.

When You Must Carry One Out Or Review It

You must complete a fire risk assessment when a new building becomes occupied, when you take control of premises, or when there is a significant change in how the building is used. A change of layout, introduction of new processes, storage changes, new tenants, or alterations that affect fire safety will all trigger the need to review and update the assessment. If there has been a fire, even a small one, you must reassess to check that the causes are understood and that the controls are adequate.

There is no fixed annual cycle in law for every building, but annual reviews are seen as a sensible minimum for most premises. Higher risk settings such as care homes, sleeping accommodation, entertainment venues, and complex sites often move to six monthly checks. If you operate a simple low risk office with stable staffing and little change, you may take a light touch review each year, update the action plan, and carry out a fuller reassessment every two to three years. The point is that a fire risk assessment is a living document that should reflect the building as it is today.

Significant findings must be recorded and acted upon. That means prioritising actions, assigning owners, and agreeing timescales. Interim measures may be needed while longer works are planned. For example, if a set of fire doors is found to be damaged and not closing fully, you might increase patrols and limit occupancy until repairs are complete. A sensible schedule gives confidence to residents, staff, visitors, and the enforcing authority that the fire risk assessment is not just a paper exercise.

Do You Need To Record It And Share It

In England and Wales, the law says you must record the significant findings if you employ five or more people. The thresholds have tightened over time, and the expectation now is that a written fire risk assessment will be kept for almost every non domestic setting regardless of employee numbers. In multi residential buildings the duty to record is clear. Anyone in scope for the common parts will need a formal document that can be shared and understood by those who have to act on it.

Sharing matters. Staff need to know the key controls and emergency arrangements. Contractors need to understand hot work controls, permit arrangements, and how to avoid blocking escape routes. Residents need information about the building strategy, what to do in an emergency, and how to report concerns such as damaged doors. The Fire Safety England Regulations require checks and information flows for high rise residential buildings, including monthly checks of firefighting lifts and regular checks of flat entrance doors and common area doors. Your fire risk assessment should reflect and support these duties.

For higher risk and high rise residential buildings, the Building Safety Act 2022 introduced the concept of a golden thread of information. The fire risk assessment forms part of that thread. It should link to design information, the record of fire safety systems, maintenance history, and resident engagement. If you manage a higher risk building, align your fire risk assessment with your safety case so that there is one coherent story about how fire risk is controlled in the building.

Who Can Complete It And What Competence Looks Like

The responsible person can complete their own fire risk assessment if they are competent to do so. Competence means you have adequate training, knowledge, and experience to understand the hazards, the building, and how fire protection measures work. It also means you can inspect with a critical eye, weigh evidence, and write a clear action plan. For a small and simple shop or office that may be realistic, especially if you follow good guidance and invest time in learning.

As buildings become more complex, the need for a specialist grows. If you have fire engineered features, pressurised stairs, smoke control systems, a mix of uses, sleeping risk, or vulnerable occupants, you should commission a competent fire risk assessor. Ask about relevant experience, training, professional registration, and insurance. Look for membership or listing with recognised bodies in the fire safety field, and check example reports before you engage. The outcome you want is a usable fire risk assessment that holds up under scrutiny and that leads to practical improvements.

Clarify the scope before work begins. A competent provider will gather existing information such as drawings, previous assessments, fire alarm and emergency lighting certificates, fire door surveys, and records of drills and maintenance. They will spend time on site, sample appropriately, take photographs to evidence findings, and meet responsible staff. The final fire risk assessment should set out the level of inspection, the assumptions made, any limitations, and a prioritised action plan with clear timescales.

Common Mistakes And How To Avoid Them

Several patterns recur in enforcement cases and insurance claims. They are avoidable with a little care.

• Copying a template without site specificity. A fire risk assessment should describe your building, your people, and your systems. If it reads as if it could apply to any site, it will not guide meaningful action and may not withstand enforcement scrutiny.
• Missing vulnerable people and management factors. Night working, lone working, visitors with mobility impairments, and contractors often fall through the cracks. The fire risk assessment should show how these needs are addressed.
• Ignoring external risks. Waste storage against walls, unprotected gas meters, and shared service yards can defeat good internal controls. Look beyond your internal layout.
• Weak action plans. Actions without priorities, owners, or timescales rarely get done. A good fire risk assessment translates findings into a clear plan and checks that progress is being tracked.
• Poor evidence and maintenance trails. If you cannot show maintenance of alarms, emergency lighting, fire doors, and extinguishers, your fire risk assessment will not carry weight. Keep certificates and test logs up to date.

Good documentation does not put out a fire, but good documentation proves you knew the risks, set controls, and kept them working. That is the difference between a near miss and a prosecution.

Sector By Sector Guidance

Offices and Co Working

Most offices are straightforward, yet the details still matter. An office fire risk assessment should check electrical safety, hot work by contractors, storage in plant rooms, protected stair integrity, and the management of evacuation for visitors and anyone with additional needs. For co working spaces, pay attention to how responsibilities are split between the building operator and the member companies. Each may need a local assessment that dovetails into a building wide fire risk assessment so that escape routes and alarm arrangements are consistent.

Retail and Hospitality

Shops, cafes, pubs, and restaurants bring changing stock, seasonal displays, and back of house risks such as kitchens. A retail fire risk assessment should track housekeeping standards, means of escape past displays, and staff training for busy periods. In hospitality the kitchen is the engine room. Look closely at ductwork cleanliness, in line suppression if fitted, gas interlocks, and night closing checks. Staff turnover can be high, so training and simple instructions carry more weight than complex paperwork.

Industrial, Warehousing, and Logistics

The scale of storage, battery charging, vehicle movements, and hot work make these settings more challenging. A warehouse fire risk assessment should test pallet racking layouts against sprinkler design assumptions, separation of flammables, and the maintenance of smoke control or high level vents. Consider the location of smoking shelters, the control of waste storage, and the supervision of contractors during repairs and fit out. Shift working means the emergency plan must work at two in the morning as well as at midday.

Schools And Universities

Educational settings mix public access with complex buildings and varied activities. A school fire risk assessment needs clear zoning for alarms, careful control of plant rooms and switch rooms, and supervision of work by contractors during term time. In universities labs and workshops add complexity. Coordinate local assessments for specialist departments with the building wide fire risk assessment so that one set of controls supports the whole campus.

Healthcare And Care Homes

Hospitals, clinics, and care homes involve people who may not be able to evacuate unaided. A care home fire risk assessment must consider progressive horizontal evacuation, staff numbers by shift, fire door integrity, and compartmentation. In clinics and hospitals, equipment loads, oxygen stores, and procedures that generate heat all need targeted controls. Regular drills tailored to real staffing levels are essential. Paper plans that assume ideal staffing will not stand up in practice.

Construction, Fit Out, And Refurbishment Sites

Temporary site accommodation, changing layouts, and hot work create fluid risks. A site fire risk assessment should be reviewed frequently as the project phases change. Look at the placement of temporary alarms, access for the fire and rescue service, storage of gas cylinders and flammables, and the protection of escape routes through the works. Coordination between the principal contractor and client duties is vital so that site arrangements and occupied areas do not conflict.

Purpose Built Blocks Of Flats And Mixed Use

For residential blocks the duty usually covers the common parts. A building with shops at ground level and flats above will need a clear strategy for fire separation, signage, and evacuation. A residential fire risk assessment for the common areas should consider the building strategy, fire door condition, compartmentation, smoke control, and information for residents. Where stay put is the strategy, management of doors, risers, and service penetrations becomes even more important. The Fire Safety Act and Fire Safety England Regulations set out additional checks and information that the responsible person must deliver.

Enforcement, Audits, And Penalties

Fire and rescue authorities carry out audits. They will ask to see your fire risk assessment, inspect the premises, and check whether actions are being tracked to completion. If they find material breaches, they can issue an alterations notice, an enforcement notice to require improvements, or a prohibition notice that restricts or stops the use of all or part of the building until serious risks are addressed.

Prosecutions are reserved for serious or persistent breaches, especially where people have been put at risk of death or serious injury. Fines can be significant and are based on the size of the organisation and the gravity of the breach. Senior managers can face personal liability in the most serious cases. Even where there is no prosecution, the reputational impact of a public notice and the operational disruption from a prohibition notice can be severe. The simplest way to avoid this is to keep a current, evidence based fire risk assessment and to implement its action plan promptly.

Insurers also look closely at your arrangements. A well prepared fire risk assessment that is kept up to date, paired with maintenance and training records, speeds claims handling and helps to protect business continuity. A thin or outdated document that does not match the reality on site can lead to complications at the worst possible time.

A Practical 30 Day Plan To Get Compliant

Week One: Define Roles, Gather Information, Arrange Access

Confirm who is the responsible person for each area. If you share the building, document how duties are split and who leads on life safety systems. Gather floor plans, previous assessments, maintenance certificates for alarms, emergency lighting, extinguishers, and any smoke control or sprinkler system records. Identify any known issues with fire doors or compartmentation. Agree dates for site access to all areas including roof spaces, basements, plant rooms, and service risers. Decide whether you will complete the fire risk assessment yourself or commission a competent assessor.

Week Two: Assess, Fix Quick Wins, Brief Staff

Carry out the site inspection. Photograph evidence to support findings. In parallel, fix simple issues immediately. Remove combustible storage from escape routes, free up final exits, reinstate missing or incorrect signage, and check that fire doors close onto their frames. Confirm that weekly alarm tests and monthly emergency lighting checks are up to date. If you see concerning issues such as breaches in fire stopping, damaged risers, or non functional smoke control, put interim controls in place and escalate. Begin drafting the fire risk assessment and start the action schedule.

Week Three: Plan Remedial Works, Set Priorities, Instruct Contractors

Agree priorities that reflect risk. High risk actions that protect life safety, such as restoring protected stair integrity or repairing faulty alarms, should have short timescales and clear ownership. Medium term actions might include additional training or improved management checks. Longer term actions often relate to capital works. Make sure you consult competent contractors and obtain clear scope and method statements. The fire risk assessment should be finalised with these actions captured and agreed.

Week Four: Close Out High Priority Actions, Update Records, Set The Review Calendar

Complete high priority actions and record evidence of completion, such as certificates, photographs, and sign off sheets. Brief staff and residents on any changes to procedures. Update the fire risk assessment to mark actions as closed or in progress, and make the document available to those who need it. Set dates for regular reviews, define triggers for early review, and align your assessment with maintenance calendars and drills.

Clear Answers and Confident Next Steps

So, do you legally need a fire risk assessment. If you operate a business, control non domestic premises, or manage the common parts of a residential building, the answer is yes. The exact form of the document should match the risk, but the duty is clear. A good assessment is not just a legal requirement. It is the most direct way to prevent fires, protect life, and give confidence to residents, staff, and visitors.

Make a calm start. Confirm who is responsible, gather information, decide whether to complete the task in house or to bring in a specialist, and set an action plan that you can explain to anyone who asks. Keep the document live by reviewing it when things change and by closing out actions as they are completed. If you want to check your understanding against plain English guidance, you can review the Home Office fire safety guidance, which sets out duties and practical steps for different types of premises.

When enforcement officers visit, they look for a current fire risk assessment and for evidence that you take it seriously. When residents or employees raise concerns, they want to see that their building is safe and that issues are handled promptly. When an incident occurs, your assessment and action record tell the story of how you managed risk. Done well, this one document will support safety, compliance, and trust every day.

Ready to move from questions to action?

If you want an experienced consultant to complete a clear, proportionate fire risk assessment and guide you through the remedial steps, we can help. Speak to our team about your building and timelines today. We will align the scope to your risks, agree a practical plan, and deliver a usable report that stands up to scrutiny.

Get a quote for your fire risk assessment today here