The Complete Guide to Asbestos Compliance for Landlords & Businesses
Under Regulation 4 of the Control of Asbestos Regulations 2012, the person responsible for maintaining non-domestic premises has a legal duty to manage any asbestos in them. That means finding out whether asbestos is present, recording it in an asbestos register, assessing its condition, making a written management plan, and reviewing it regularly to keep people safe.
The law: Control of Asbestos Regulations 2012
If you own, lease or manage a commercial building, or you look after the shared parts of a block of flats, the law that governs your asbestos responsibilities is the Control of Asbestos Regulations 2012, usually shortened to CAR 2012. It is enforced by the Health and Safety Executive (HSE), and it pulls together in one place the rules on finding, managing and working with asbestos in Great Britain. For most duty-holders, the part that matters day to day is a single regulation.
That is Regulation 4, which creates the duty to manage asbestosin non-domestic premises. It does not ask you to rip asbestos out. It asks you to know where it is, understand its condition, and manage it so that nobody is exposed to fibres. Asbestos was only fully banned in the UK in 1999, with blue and brown asbestos prohibited back in 1985, so any building put up or refurbished before the year 2000 may contain asbestos-containing materials. That single fact is why the duty exists, and why it catches so much of Britain's commercial and rented building stock.
This guide walks you through what the duty requires, who has to carry it, how the domestic and non-domestic line is drawn, and the practical steps that add up to compliance. It is written for duty-holders rather than lawyers, so it keeps the jargon to a minimum. If a term is unfamiliar, our asbestos glossary defines each one in plain English.
What the duty to manage (Regulation 4) requires
The duty to manage is a set of practical obligations, not a vague expectation to "be careful". Under Regulation 4 of CAR 2012, if you are responsible for maintaining or repairing non-domestic premises, you must take reasonable steps to do each of the following.
- Find out whether asbestos is present, and if so its amount, location and condition.
- Presume that materials contain asbestos unless you have strong evidence that they do not.
- Keep an up-to-date record of the location and condition of the asbestos, commonly called an asbestos register.
- Assess the risk from the material you have identified or presumed.
- Prepare a written management plan, put it into action, and review it.
- Provide the information on where the asbestos is, and its condition, to anyone liable to disturb it, such as maintenance staff and contractors.
Presumption is the default. If you have not established that a material is asbestos-free, the law expects you to treat it as though it contains asbestos. You do not get to assume a material is safe because it looks modern or ordinary. Only a survey or a laboratory test can settle the question either way.
Notice the shape of it. The duty runs from knowing, to recording, to assessing, to planning, to telling people, and then back round to reviewing. It is a cycle you keep turning for as long as you hold the premises, not a form you fill in once. The sections below take each stage in turn, but first it helps to be clear about who is actually on the hook.
Who is the duty-holder?
The duty-holder is whoever has responsibility for the maintenance and repair of the premises. In practice, that responsibility is usually set out in a tenancy agreement or a lease, so the first place to look is the contract that governs the building. Whoever it makes responsible for maintaining the fabric of the property generally carries the duty to manage the asbestos in it.
Where there is no tenancy or lease that spells out repairing responsibility, the duty falls to whoever has control of the premises in practice. And it is not always a single party. Responsibility can be shared, for example between a landlord who looks after the structure and common areas and a tenant who maintains their own demised unit. In that situation each party carries the duty for the parts they control, and the sensible approach is to cooperate so that nothing falls through the gap between you.
If you are unsure where the line sits in your own arrangement, do not let it drift. An unmanaged building is a risk to everyone who works in or visits it, and to the contractors who may cut or drill into it later. A specialist asbestos management consultancy can help you read the responsibility correctly and set up a compliant system from the start.
Does it apply to landlords? Domestic vs non-domestic
This is the point that trips people up most often, so it is worth stating precisely. The Regulation 4 duty to manage applies to non-domestic premises. That means workplaces and commercial buildings of every kind: offices, shops, factories, warehouses, schools, surgeries, pubs, hotels and the rest. It also applies to the common parts of residential buildings, such as the shared stairwells, corridors, entrance halls, plant and boiler rooms, and roof spaces of a block of flats.
What the Regulation 4 duty does not reach is the inside of an individual private home. If you let a single house or flat, you are not under the duty to manage for the interior of that dwelling in the way a commercial landlord is for an office. That is the distinction to hold on to: the communal areas of a block are covered, the private interior of a let home is not.
"Not under Regulation 4" is not "no responsibility". Domestic landlords still have wider duties to keep their properties safe, and anyone managing a block of flats or a house in multiple occupation must manage the asbestos in the shared areas. Older common parts should be surveyed and managed just like any other non-domestic space.
So a landlord with a portfolio of pre-2000 flats sits on both sides of the line at once. The insides of the individual flats fall outside Regulation 4, while the communal areas of each block fall squarely within it. The safe habit is to treat any shared, pre-2000 space as premises that need a survey, a register and a plan, and to manage it accordingly.
The compliance steps, one by one
Complying with the duty to manage comes down to a repeatable process. Work through the six steps below, keep the paperwork current, and you have the core of a defensible system. The table gives you the shape at a glance, and each step is explained underneath.
| Step | What you do | The output |
|---|---|---|
| 1. Find | Commission a management survey (or presume) | Survey report |
| 2. Record | Log location, type and condition | Asbestos register |
| 3. Assess | Judge the risk from each material | Risk assessment |
| 4. Plan | Write and act on a management plan | Management plan |
| 5. Inform | Tell anyone who might disturb it | Contractor briefings |
| 6. Review | Re-inspect and keep records current | Updated register + plan |
Step 1: find the asbestos (management survey)
You cannot manage what you have not found, and you cannot confirm asbestos by eye. The usual way to meet the "find out" part of the duty is a management survey, in which a competent surveyor inspects the premises, samples suspect materials where needed, and reports on what is present, where it is and what condition it is in. The methodology sits in HSE guidance document HSG264. You can either survey to establish the facts, or presume that materials contain asbestos, but presuming everything is usually more restrictive and more expensive to work around, so most duty-holders survey. Our guide to the types of asbestos survey explains the difference between a management survey and the more intrusive refurbishment and demolition survey.
Step 2: record it (asbestos register)
The survey findings go into an asbestos register, the living record of where asbestos-containing materials are, or are presumed to be, across the building, together with their type, location and condition. The register is the reference document everyone else relies on, so it has to be accurate and it has to be kept current. When a material is repaired, removed or found to have deteriorated, the register is updated to match. A register that no longer reflects the building is worse than useless, because people trust it.
Step 3: assess the risk
Next you assess the risk each material presents. This is not about which type of asbestos it is so much as how likely it is to release fibres, which turns on its condition and on how much the material is disturbed by normal use of the building. Sound, sealed material in a quiet plant room is a very different proposition from damaged insulation next to a busy corridor. The assessment is what lets you decide, material by material, whether to leave it in place and monitor it, protect it, or have it removed. For the wider context on why exposure matters, our guide on whether asbestos is dangerous explains the health risk in plain terms.
Step 4: write and implement a management plan
The asbestos management plan is the written document that says how you will manage the asbestos you have found or presumed. It records what is present and its condition, who is responsible, how the material will be monitored, and what happens if it is damaged or needs work. Crucially, the plan has to be acted on and kept current, not written once and filed. HSE guidance document HSG227 is the comprehensive guide to managing asbestos in premises, and it is the natural companion to building a plan you can stand behind.
Step 5: inform anyone who might disturb it
A register and plan only protect people if the right people see them. The duty requires you to give the information on where the asbestos is, and its condition, to anyone liable to disturb it. In practice that means your maintenance team and every contractor before they start work, from the electrician chasing a wall to the roofer on the cement sheets. Where employees may work on or near asbestos, employers have duties under CAR 2012 to provide suitable information, instruction and training, so that nobody cuts into a material without knowing what is behind it.
Step 6: review and re-inspect
Buildings change and materials age, so the register and plan need to be reviewed regularly and whenever something happens that could affect the asbestos, such as damage, refurbishment or a change of use. Periodic re-inspection checks that materials are still in the condition the register claims, and feeds any change back into the records. This is the step that turns a one-off survey into ongoing compliance, and it is the point where a management consultancy often takes the routine off your hands.
Before building work: the refurbishment survey
A management survey and a well-kept register cover the day-to-day life of a building, but they are not designed for the moment you start knocking it about. The instant you plan refurbishment, demolition or any work that will break into the fabric of the premises, you need a refurbishment and demolition survey of the areas affected. It is more intrusive by design, because its whole purpose is to find the asbestos hidden inside walls, floors, ducts and structure before the work disturbs it.
Skipping this is one of the most common and most serious compliance failures, because it is exactly the point at which fibres get released. Getting a refurbishment and demolition survey done first means your contractors know what they are dealing with and can plan safe removal where it is needed. Higher-risk removal is licensable work and must be carried out by an HSE-licensed contractor, not a general builder. If your project involves confirmed asbestos, arranging licensed asbestos removal through a competent provider is part of doing the job lawfully.
What happens if you don't comply
The Control of Asbestos Regulations 2012 are enforced by the HSE, and the powers behind them are real. An inspector who finds a duty-holder failing to manage asbestos can serve an improvement notice requiring you to put things right, or a prohibition notice stopping a dangerous activity outright. Where the failure is serious, the HSE can prosecute, and the courts can impose substantial fines. In the most serious cases, individuals can face imprisonment.
Beyond CAR 2012, employers carry wider duties under the Health and Safety at Work etc. Act 1974 to protect employees and others from risks to their health, and asbestos exposure sits squarely within that. The point is not to frighten you with the penalties, which vary case by case, but to be clear that the duty to manage is a legal requirement with teeth. The far more important consequence, though, is the human one: failing to manage asbestos puts your staff, your contractors and the public at risk of inhaling fibres that can cause fatal disease decades later. That is what the paperwork is really for.
Strong vs weak management: a worked example
To make the difference concrete, here are two duty-holders responding to the same situation: an old boiler room in the common parts of a 1970s block, with lagged pipework nobody has looked at in years. One response meets the duty. The other only looks like it does.
“The block predates 2000 and the boiler room is a common part, so I commissioned a management survey. The lagging is now in the register as presumed asbestos, its condition is assessed, and my written plan says it stays sealed and monitored, with the room flagged so no contractor touches it without seeing the register first. I review it yearly.”
“There was a survey years ago and the report is in a drawer somewhere, so we are covered.” A stale report nobody maintains is not a register, nobody has been told what it says, and no plan governs the lagging. If a contractor disturbs it next week, the duty was never actually met.
The lesson is that compliance is a living system, not a document. A survey that is not turned into a maintained register, an acted-on plan and a briefing for the people who might disturb the material leaves you exposed, however thick the original report was.
Common compliance mistakes
Most compliance failures are not deliberate. They come from a handful of honest misunderstandings about what the duty actually asks for. These are the ones that come up again and again.
Assuming a building is too new, or too small, to matter
Any premises built or refurbished before the year 2000 may contain asbestos, and the duty to manage does not have a lower size limit. A small shop, a modest office or the communal hallway of a two-flat conversion can all fall within Regulation 4. Age and use, not size, decide whether you need to act.
Confusing the domestic and non-domestic line
Landlords sometimes believe the duty either covers everything they own or none of it. The reality is more precise: the interiors of individual private lets sit outside Regulation 4, while the common parts of blocks and HMOs sit inside it. Get this line wrong in either direction and you either waste effort or leave a real risk unmanaged.
Treating the survey as the finish line
Commissioning a survey is the start of compliance, not the end of it. Without a maintained register, a written plan that is actually followed, and a way of informing contractors, a survey report is just paper. The duty is an ongoing cycle of recording, assessing, informing and reviewing.
Not telling the people who might disturb it
A register locked in a manager's office protects no one. The information has to reach the maintenance staff and contractors who could cut, drill or break into a material, before they start work. Employees who may work near asbestos also need the information, instruction and training CAR 2012 requires.
Skipping the refurbishment survey before building work
A management survey and register cover normal occupation, not intrusive work. Before any refurbishment or demolition you need a refurbishment and demolition survey of the affected area, and any licensable removal must go to an HSE-licensed contractor. Missing this step is where some of the most dangerous exposures happen.
If any of this feels like more than you want to run in-house, that is normal, and it is what specialists are for. You can get a free quote to have your premises surveyed and a compliant register and management plan set up for you, so the duty is met and documented from the start.
Primary Sources & Further Reading
- HSE: Duty to manage asbestos in non-domestic premises
- HSE: Managing and working with asbestos (Control of Asbestos Regulations 2012)
- The Control of Asbestos Regulations 2012
- HSE: Asbestos surveys guidance (HSG264)
- HSE: Managing asbestos in buildings (HSG227)
- Health and Safety at Work etc. Act 1974
Photograph via Wikimedia Commons: David Iliff (CC BY-SA 3.0).