Commercial Fire Risk Assessment UK: The Complete 2026 Guide for Responsible Persons

A commercial fire risk assessment is the cornerstone of fire safety compliance for any non-domestic premises in the UK. Without a current, written assessment, you are operating outside the law - and exposing occupants, employees, and your organisation to serious risk. This guide walks you through every dimension of the legal requirement, the process, and the practical steps you need to take in 2026.

What a Commercial Fire Risk Assessment Is - and Is Not

The Legal Definition vs Common Misconceptions

A commercial fire risk assessment (FRA) is a systematic evaluation of premises to identify fire hazards, assess the risk to life, and determine the adequacy of existing fire safety measures. Under the Regulatory Reform (Fire Safety) Order 2005 it is a statutory obligation, not an optional best practice. Many responsible persons mistakenly equate an FRA with a fire safety certificate - a document abolished in 2006. Others confuse it with an insurance survey. Neither is correct. Your FRA does not certify your building as safe; it is a living document that records hazards, evaluates risk levels, and drives a prioritised action plan.

FRA vs Fire Strategy vs Compartmentation Survey

A fire strategy is a design-stage document produced by fire engineers for new builds or major refurbishments. A compartmentation survey assesses the physical integrity of fire-resisting walls, floors, and service penetrations. Your FRA draws on - but does not replace - either of these documents. Where a compartmentation survey reveals deficiencies, those findings feed directly into your FRA action plan and must be addressed within a defined timeframe.

The Law Behind the Duty

Regulatory Reform (Fire Safety) Order 2005

The Regulatory Reform (Fire Safety) Order 2005 (RRFSO) applies to virtually every non-domestic premises in England and Wales. It places a statutory duty on the responsible person to carry out a suitable and sufficient fire risk assessment, implement and maintain appropriate fire safety arrangements, and keep a written record where the premises employ five or more people. Scotland and Northern Ireland operate equivalent legislation under the Fire (Scotland) Act 2005 and the Fire and Rescue Services (Northern Ireland) Order 2006 respectively.

Fire Safety Act 2021 and FSER 2022 Expansions

The Fire Safety Act 2021 clarified that the RRFSO applies to the structure, external walls (including cladding and balconies), and flat entrance doors of multi-occupied residential buildings. The Fire Safety (England) Regulations 2022 added further obligations for high-rise residential blocks, including monthly checks of evacuation alert systems, quarterly checks of fire doors in common areas, and an annual check of all flat entrance doors. Responsible persons for mixed-use buildings must understand how these obligations interact.

The Building Safety Act 2022 Interplay

For buildings over 18 metres (approximately seven storeys) in England, the Building Safety Act 2022 introduced the role of Principal Accountable Person and a mandatory Building Safety Case. Responsible persons in scope must maintain a digital Golden Thread of building information and be able to demonstrate ongoing compliance to residents and regulators. The FRA forms a critical component of the Building Safety Case and must be kept proportionately up to date.

Who Is the 'Responsible Person' for Your Premises

Employers, Owners, Occupiers and Managing Agents

The responsible person (RP) under the RRFSO is the employer (for a workplace), the owner, or the person who has control of the premises. In multi-tenanted buildings, both the landlord and each occupying employer may hold RP duties for different parts of the building. Managing agents appointed by landlords can act on behalf of the RP and carry out practical compliance tasks, but they cannot transfer the underlying legal liability. The RP remains accountable for ensuring obligations are met.

Cooperation Where Multiple RPs Share a Building

Where a building has multiple responsible persons - as is common in office blocks, retail developments, and mixed-use schemes - each must cooperate and coordinate with the others. In practice, this means sharing FRAs, aligning evacuation procedures, and ensuring fire safety measures in common areas are clearly allocated and actively maintained. A documented cooperation agreement reduces the risk of gaps in coverage.

Delegating the Practical Work to a Competent Assessor

You may delegate the practical assessment to a competent third party, but you retain legal accountability. 'Competent' in this context means the assessor has sufficient training, experience, and knowledge to identify hazards and evaluate risk in your type of premises. The RRFSO does not mandate specific qualifications, but third-party accreditation schemes provide an objective benchmark that insurers and enforcement authorities recognise.

The Five-Step FRA Process, Step by Step

From Hazard Identification to Review

The government-endorsed five-step framework provides the structure for any compliant FRA. Step 1: Identify fire hazards - sources of ignition (electrical equipment, hot work, arson risk), sources of fuel (combustible materials, waste, furnishings), and sources of oxygen (natural ventilation, air conditioning, oxygen storage). Step 2: Identify people at risk - employees, visitors, contractors, and any individuals with particular vulnerability such as mobility impairment, visual or hearing impairment, or unfamiliarity with the building.

Step 3: Evaluate, remove, reduce, and protect from risk - assess the likelihood of fire and the potential consequence if it occurs, then implement controls to mitigate. Step 4: Record findings, prepare an emergency plan, instruct and inform, and train staff - document everything in a written report and ensure staff understand their roles. Step 5: Review and update - revisit the assessment regularly and after any significant change. Each step demands documented evidence; a verbal walk-around is not sufficient.

Sector-Specific Considerations

Education - Schools, Academies and MATs

Schools and academies face unique challenges: high occupant densities, younger occupants who may be less fire-aware, complex building layouts from decades of extensions, and term-time pressure on maintenance windows. FRAs for educational premises must account for out-of-hours lettings and after-school activities, which significantly alter the occupancy risk profile. Multi-Academy Trusts (MATs) benefit from a portfolio approach with standardised assessment templates and centralised action tracking.

Healthcare and Care Home Estates

Care homes and NHS estate present the most complex life safety risk profile of any sector. Many occupants cannot self-evacuate, requiring progressive horizontal evacuation strategies and stringent compartmentation standards. FRAs must reflect current resident dependency levels and be reviewed immediately following any change to resident profile, building layout, or staffing arrangements. Compartmentation integrity is non-negotiable in this sector.

Retail, Leisure and Multi-Site Facilities Management

Retail and leisure venues present high visitor throughput, complex escape route geometries, and significant fuel load from stock and display materials. For facilities managers overseeing multiple sites, a portfolio-level approach - standardised FRA templates, centralised action tracking in a CAFM system, and a review schedule linked to lease events - ensures consistency and prevents individual sites falling out of compliance between formal review cycles.

How Often to Review Your FRA - and the Triggers You Should Not Ignore

Annual Review as the Baseline

There is no fixed statutory review period in the RRFSO - the requirement is simply that the FRA remains 'suitable and sufficient'. However, guidance from the National Fire Chiefs Council (NFCC) and CFOA treats annual review as the minimum baseline for most commercial premises. Higher-risk environments - warehouses with significant flammable storage, licensed premises, or buildings undergoing active construction - should review more frequently, typically every six months.

Change-of-Use and Refurbishment Triggers

Any material change to your premises should trigger an immediate review. This includes office refurbishment works (which routinely breach compartmentation), changes of occupancy type, installation of new plant or equipment, or significant alterations to storage or process. Failing to review following a fit-out is one of the most common enforcement failures encountered during fire authority inspections and is difficult to defend when prosecution follows.

Occupant and Headcount Triggers

A significant increase in the number of people occupying the building - whether from business growth, subletting additional floors, or a change in working patterns - alters your escape route calculation and your risk profile. If your FRA was based on 50 regular occupants and you now consistently have 150, the assessment is no longer suitable and sufficient and must be updated before the higher occupancy continues.

What a Competent Assessor Looks Like

Third-Party Schemes: BAFE SP205 and IFE

The two principal third-party certification schemes for FRA providers in the UK are BAFE SP205 and the Institute of Fire Engineers (IFE) Register of Fire Risk Assessors. BAFE SP205 certification requires both the organisation and its individual assessors to be audited against a defined competency standard, with regular surveillance. Insurers, local authority building control, and social housing providers increasingly stipulate BAFE SP205 as a minimum procurement requirement.

Portfolio Experience Checklist

Beyond certification, look for an assessor with demonstrable experience in your specific sector and building type. Request examples of completed assessments for comparable premises, confirm the assessor carries professional indemnity insurance to an appropriate level, and verify they have current knowledge of the Fire Safety Act 2021, FSER 2022, and any sector-specific guidance relevant to your building. CPD records are a reasonable request at tender stage.

Questions to Ask at Tender

At tender stage, ask these questions: Who will physically carry out the assessment - the named individual or a junior? What are that person's qualifications and recent CPD? How do you handle findings that require specialist input, such as compartmentation surveys or electrical testing? What format does the report take, and how are action items prioritised? What is the process for follow-up queries after the report is delivered?

How FRAs Drive Electrical and Passive Fire Works

Fire Door Remediation Priorities

A thorough FRA will identify defective fire doors, missing or damaged intumescent seals, compromised door closers, and gaps in the fire door estate. These findings must be prioritised in your action plan and addressed by a competent contractor. For a structured approach to your fire door estate, see our fire door inspection services.

Fire Stopping and Compartmentation Inputs

Penetrations made for electrical cables, pipework, and mechanical services must be reinstated with tested and certified fire stopping systems. FRA findings that reference compromised compartmentation should be referred for a dedicated survey and subsequent remediation works. Learn more about our approach to fire stopping and fire compartmentation.

Emergency Lighting and Alarm Implications

Your FRA must address escape route lighting adequacy and the sufficiency of your fire detection and alarm system. Where deficiencies are identified, these become mandatory action items. Our passive fire protection services encompass the full range of remediation works that FRA findings typically generate.

Common Findings We See on UK Commercial Sites

Compromised Compartmentation After Fit-Outs

The single most frequent high-risk finding on commercial premises is compartmentation breached during office refurbishments or M&E service installations. Cable runs, pipe sleeves, and partition modifications routinely leave penetrations unsealed, creating fire and smoke spread pathways that invalidate the building's original fire strategy.

These defects are often invisible without a targeted compartmentation survey, which is why FRA findings in this area should always prompt further investigation.

Out-of-Date Inspection Evidence

Many buildings carry FRAs that are five or more years old with no evidence of interim review. In some cases, significant structural or occupancy changes have occurred since the last assessment with no corresponding update to the FRA or action plan. This is an enforcement target for fire authority inspectors and is difficult to defend - particularly where the FRA predates legislative changes introduced by the Fire Safety Act 2021.

Escape Route Management Failures

Propped fire doors, obstructed escape routes, and restricted or padlocked final exit doors remain depressingly common across commercial and retail premises. These failures are often the result of operational pressures - deliveries, storage overflow, or security concerns - rather than deliberate non-compliance. However, they represent an immediate and foreseeable risk to life and are treated as priority-one action items in any compliant FRA.

Documenting and Storing Your FRA

What a Good Report Contains

A compliant FRA report should include: the premises address and a brief description of the building; the date of assessment and the assessor's details and accreditation; a hazard inventory with specific locations noted; a people-at-risk analysis including any vulnerable groups; a risk rating for each identified hazard; an evaluation of existing fire safety measures against the required standard; and a numbered action plan with priority ratings, responsible persons named, and target completion dates.

Retention Periods for Insurers and Auditors

The RRFSO requires written records for premises employing five or more people, but best practice - and the expectation of most commercial insurers - is to retain completed FRAs for the duration of your occupation of the premises, plus a minimum of six years beyond. Superseded assessments should be retained alongside current ones to demonstrate the evolution of your compliance position. Digital storage with version control is strongly recommended over paper-based filing.

Using Digital Platforms to Prove Compliance

Cloud-based compliance platforms allow you to store your FRA alongside inspection certificates, maintenance records, and action-plan evidence. Time-stamped updates demonstrate that the assessment has been actively maintained rather than simply filed after initial completion. This audit trail is invaluable during an enforcement visit, a lease renewal negotiation, or an insurance claim where premises liability is in question.

Penalties for Getting It Wrong

Enforcement Notices and Prohibition Notices

The fire and rescue authority can issue an enforcement notice requiring specific improvements within a defined timeframe - typically 28 days, though shorter for urgent matters. Where the risk to life is assessed as serious and imminent, a prohibition notice can be issued without prior warning, restricting or closing the premises immediately. There is no right of continued operation while appealing a prohibition notice, making prevention far preferable to remedy.

Unlimited Fines and Imprisonment

Prosecution under the RRFSO can result in unlimited fines in the Crown Court. For the most serious failures - particularly those involving falsification of records or persistent non-compliance following enforcement - sentences of up to two years' imprisonment are available. Crucially, individual directors, managers, and even employees can be prosecuted personally where a failure is attributable to their consent, connivance, or neglect.

UK Case Examples

Post-Grenfell enforcement has become significantly more rigorous. Prosecutions have resulted in six-figure fines for care home operators whose FRAs were found to be inadequate, and custodial sentences for landlords who failed to remedy clearly identified defects. The trajectory in England and Wales is towards higher penalties, more frequent inspections of higher-risk premises, and greater personal accountability for named individuals within organisations.

Next Steps for Responsible Persons

30-, 60- and 90-Day Action Plan

If you do not currently hold a written, current FRA, your immediate priority - within the next 30 days - is to commission one from a suitably accredited assessor. Within 60 days, use the findings to build a prioritised action plan with named owners and target completion dates for each item. Within 90 days, begin addressing all high and medium risk items, establish a review schedule, and ensure your FRA is accessible to the enforcing authority on request.

When to Call in a Specialist

Some FRA findings require specialist follow-up beyond the scope of a generalist assessor. Compartmentation breaches require a dedicated survey; aged or non-compliant electrical installations require testing; a large estate of fire doors requires systematic assessment by a certified inspector. Our fire risk assessment service integrates with our full range of passive fire protection and electrical compliance capabilities, providing a single point of accountability for your compliance programme.

Frequently Asked Questions

Do I need a fire risk assessment if my building is empty?

Yes. The RRFSO applies to any non-domestic premises to which you have legal control - including empty buildings. The risk profile changes when a building is unoccupied (reduced risk to life, but potentially increased arson risk), and your FRA should reflect that. Fire authorities have prosecuted for inadequate FRAs on vacant commercial premises.

Can I carry out my own fire risk assessment?

Yes, if you are a competent person with sufficient knowledge and experience of fire safety for your premises type. However, for anything other than a small, straightforward, low-risk premises, self-assessment is difficult to justify and may not satisfy insurers or enforcement authorities. Third-party accredited assessors provide the independence and expertise that most commercial premises require.

How long does a commercial fire risk assessment take?

The duration varies significantly with building size, complexity, and occupancy type. A simple single-floor office might be assessed in two to three hours. A large multi-tenanted building or care home could require a full day or more. The physical inspection is only part of the process - document review, report writing, and action plan preparation add further time.

What is the difference between a fire risk assessment and a fire safety audit?

A fire risk assessment is the proactive, RRFSO-mandated evaluation carried out by or on behalf of the responsible person. A fire safety audit is typically carried out by the fire and rescue authority - it is a reactive enforcement tool, though fire authorities also carry out proactive audits on higher-risk premises. A robust, current FRA is your primary defence during an audit.

Does a fire risk assessment expire?

There is no statutory expiry date, but an FRA must remain 'suitable and sufficient' to satisfy the RRFSO. In practice, annual review is the baseline expectation, and specific changes to the premises, occupancy, or legislation can make an assessment immediately out of date regardless of when it was completed.

Are there different types of fire risk assessments?

Yes. The DCLG guidance and PAS 79:2020 describe different assessment types (Type 1 to Type 6) primarily relevant to multi-occupied residential buildings, varying in whether the common areas only or individual flats are inspected, and whether inspection is non-destructive or involves opening up elements. For most commercial premises, a standard Type 1 equivalent assessment (common areas, non-destructive) is the starting point.

What happens if I fail my fire risk assessment?

There is no pass or fail - the FRA produces findings and an action plan. The responsible person is expected to address those findings within a reasonable timeframe proportionate to risk. 'High' priority items must be addressed urgently; 'medium' and 'low' items within agreed timeframes. Failure to act on findings - especially high-risk ones - is what triggers enforcement action.

What should I do if my building has been refurbished since the last assessment?

Commission an updated FRA immediately. Refurbishment works - particularly those involving alterations to partitions, ceilings, service penetrations, or means of escape — frequently invalidate the assumptions underpinning the previous assessment. If compartmentation has been disturbed, a dedicated compartmentation survey should accompany the FRA update.

Do I need a fire risk assessment for leased premises?

Yes. Both the tenant (as employer) and the landlord (for common areas and structure) typically hold RP duties in a leased commercial premises. Your lease terms may define who is responsible for commissioning and funding FRA work in different parts of the building, but this contractual allocation does not remove your statutory obligation under the RRFSO.

How does the Building Safety Act 2022 affect my fire risk assessment obligations?

For buildings over 18 metres in England, the Building Safety Act 2022 introduces the Principal Accountable Person, mandatory Building Safety Cases, and a requirement to maintain a Golden Thread of building information. FRAs form a core component of the Building Safety Case and must be kept current and accessible. Lower-rise buildings are not directly in scope of the Building Safety Act but remain fully subject to the RRFSO and Fire Safety Act 2021.