What does statutory compliance mean for your managed building?
Statutory compliance means your premises meet the legal duties that apply to the building, its systems and the people using it. In FM, that means turning those duties into assigned checks, competent work, records, follow-up and clear reporting, so you can prove the building is being managed properly.
Most people ask about statutory compliance when something has prompted the question: an insurer wants evidence, a tenant asks for records, a board asks who owns the risk, or an inspection exposes gaps. At that point, a pile of certificates gives only part of the answer.
Generic certificate lists also mislead. Commercial premises vary by use, equipment, occupancy, shared areas and risk profile, so the right question is how your duties are identified and managed for your building.
Good facilities management compliance gives you a working system. You know which duties apply, who owns each one, who carries out the work, what evidence exists and what happens when a defect needs action.
Facilities manager fire door compliance inspection – Illustrative Image
What Do We Cover In This Article?
Statutory compliance turns duties into managed FM tasks
An audit request lands on your desk and someone asks for proof that fire, water hygiene or electrical compliance is up to date. The useful answer starts long before the certificate is found. It starts with a mapped duty, a planned check and a record that links the inspection to the asset or area it covers.
Statutory compliance in facilities management covers the legal obligations that apply to premises, building systems, equipment and people using the site. Government Property Function Facilities Management Standard 001 describes FM as the function that brings people, place and process together in the built environment, with FM commonly grouped into hard services and soft services. Hard services are the clearest home for statutory building compliance because they cover the physical systems of the building. Soft services still need standards, supervision and records, especially where they affect safety or access.
The standard names asbestos, fire risk, fixed wiring, gas installations and water hygiene as high-risk compliance areas that need regular review and validation. Those headings are a useful starting point, and each building still needs its own duty list. Your premises may have duties shaped by shared occupation, installed equipment, public access or the terms of a lease.
The table below compares statutory compliance, wider regulatory compliance and good practice in FM.
| Category | What it means in FM |
|---|---|
| Statutory compliance | Legal duties that apply to your premises, systems, assets and people using the building. |
| Regulatory compliance | Rules and requirements set by regulators or sector bodies that affect how services are run and evidenced. |
| Good practice | Sensible controls that support safe, consistent management where the law gives broad duties. |
A practical FM statutory compliance system turns those categories into work: duty mapping, planned inspections, competent delivery, evidence capture, remedial tracking and review. If your current arrangement starts and ends with certificates, it is too thin to give reliable control.
Facilities compliance maintenance action tracking – Illustrative Image
Responsibility follows control of the premises
Commercial building compliance responsibility starts with control. Ownership, occupation, lease terms and management arrangements all matter, but the key test is who controls the relevant area, system or activity.
Legal accountability usually follows control of the premises, not the name on the facilities management contract. That sentence matters because outsourced delivery can make responsibility look cleaner than it really is. A contractor may carry out checks and maintain records, but the dutyholder still needs visibility over what has been done.
Shared areas need named responsibility
Shared premises create the most confusion. One business may control its own demised space, while a landlord, freeholder or managing agent controls entrances, plant areas, stairwells or other common parts.
For fire safety in non-domestic premises, the responsible person can be an employer, owner, landlord, occupier or someone else with control of the premises. In shared premises, more than one responsible person can exist, and fire safety plans need co-ordination between those parties.
Asbestos duties can also depend on control and the lease. HSE guidance says the asbestos duty in multi-occupied buildings can sit with the owner, be shared, or be allocated by tenancy agreement. The legal obligation to comply with the duty to manage asbestos cannot simply be passed to a managing agent.
Outsourced delivery needs retained oversight
A facilities management provider can make landlord tenant compliance duties far easier to manage. The provider can schedule inspections, co-ordinate specialists, gather reports and chase remedial works. Your side still needs a clear view of what the provider is managing and where a decision needs approval.
Good contracts make this visible. They show which party owns the duty, which party carries out the task and how exceptions are reported. Without that split, responsibility becomes blurred at exactly the moment you need a clear answer.
Evidence makes compliance auditable
What proof would stand up if someone asked today? A live audit trail shows whether compliance is being managed, not whether someone once collected a certificate.
The evidence trail should connect the building, the duty, the inspection, the finding and the follow-up. A certificate has value when it sits inside that chain. On its own, it tells you less about whether defects were closed, whether a contractor was competent, or whether the next check is already planned.
A well-managed facilities management audit trail should give you:
- Asset register: A clear record of the systems, equipment and areas that carry compliance duties.
- Inspection schedule: Planned checks linked to the duty, the building risk profile and the competent person doing the work.
- Certificates and reports: Current documents where they are relevant, held with the asset or duty they relate to.
- Remedial log: Defects, actions, owners and sign-off recorded in a way that shows progress.
- Contractor approvals: Evidence that specialist suppliers have the right competence, insurance and scope for the work.
- Management reporting: A regular view of completed checks, overdue items, exceptions and decisions.
Facilities Management Standard 001 sets a useful benchmark here because it talks about an estate compliance plan, clear responsibilities, delegated roles, inspection frequencies, supply chain validation, quality management and an agreed approach to remedial works. That is a better model than treating compliance records as static paperwork.
Water hygiene shows why this matters. HSE ACOP L8 covers risk assessment, control schemes, monitoring, records and appointing a manager responsible for others. The practical point is simple: occasional activity without named responsibility and records leaves gaps that are hard to defend.
Double Check Security Group uses this structured view in its FM work, where compliance reporting sits alongside operational oversight. That approach matters because the useful question for you is whether your provider can show the chain from duty to action, with exceptions visible before they become a board-level problem.
Statutory compliance facilities maintenance records – Illustrative Image
Good governance keeps statutory compliance current
A building rarely stays the same for long. A tenant changes how space is used, public access increases, an area becomes shared, or a new service contractor joins the site. Each change can affect the compliance duties attached to the premises, so governance has to keep the compliance plan alive.
Current Martyn’s Law preparation gives a clear example for public-facing premises and events. SIA guidance says premises are likely to be in scope where they include a building or part of a building, are mainly used for a Schedule 1 purpose, it is reasonable to expect 200 or more people to be present at the same time from time to time, and the premises are within the Act’s scope. The same guidance sets standard tier premises at 200 to 799 people at the busiest times, with enhanced tier premises at 800 or more people.
Those thresholds matter for some premises, but the wider lesson applies across FM compliance management. A change in law, building use or risk profile needs to feed back into the same compliance plan, reporting route and supplier governance. Treating every new duty as a separate project creates gaps between safety, security and building management.
For an operator such as Double Check Security Group, the practical value sits in joining those disciplines together. Security, cleaning and facilities services all affect how a site works day to day, so the governance needs to show who is responsible, what has changed and what evidence proves the response.
Ask for responsibility, evidence, remedials and change control, and your building looks different. You can see which risks are being managed and which gaps need attention.
Statutory compliance building corridor fire safety – Illustrative Image
Common questions about statutory compliance in facilities management
Is statutory compliance the same as a service specification?
No. A service specification describes what a provider has agreed to do, while statutory compliance deals with legal duties that apply to the premises or activity. A good specification should reflect those duties clearly.
Can one compliance register cover several properties?
Yes, if it is structured properly. Each property still needs its own duties, assets, records, actions and responsible people shown clearly, so one register does not blur site-level accountability.
Who checks that specialist contractors are competent?
The party managing the work should validate contractor competence before using them and keep evidence of that check. Your FM reporting should make that visible without you having to chase each supplier separately.
Does Martyn’s Law affect every commercial premises?
No. Current SIA guidance focuses on certain public premises and events where the Act’s conditions are met. Staff-only premises and small private sites need separate assessment against the scope, not assumptions.
Which law sets the fire safety responsible person role?
The Regulatory Reform (Fire Safety) Order 2005, often called the Fire Safety Order, is the law behind fire safety duties in business and other non-domestic premises. The responsible person role and fire risk assessment arrangements for commercial buildings sit under this Order.
