Is a Fire Risk Assessment a Legal Requirement for My Business?
- EMFS Group
- Mar 31
- 6 min read
Every year, thousands of UK businesses are investigated, fined or prosecuted for fire safety failures. In most cases, the root cause is the same: no fire risk assessment, or one that has been left to go out of date. Yet many business owners still aren't sure whether they actually need one, who is responsible for arranging it, or what the consequences are for getting it wrong.
If you've been asking yourself whether a fire risk assessment is a legal requirement for your business, this article gives you a straight answer. You can also answer 10 quick questions to find out where you stand using our free Fire Risk Assessment Health Check.
Or read on for everything you need to understand your obligations, protect your staff and stay on the right side of the law.
Under UK law, most businesses are legally required to have a current fire risk assessment in place. Failure to comply can result in unlimited fines, prosecution and imprisonment.
What is a Fire Risk Assessment?
A fire risk assessment is a structured evaluation of your premises, your working practices and the people who use your building. Its purpose is to identify fire hazards, assess the likelihood of a fire starting and spreading, and determine what measures are needed to keep everyone safe.
The assessment looks at everything from ignition sources and combustible materials to evacuation routes, fire detection systems, staff training and emergency procedures. At the end of the process, a written report is produced that documents the findings and sets out a clear action plan.
A proper fire risk assessment is not a tick-box exercise. It is a detailed, professional analysis carried out by someone with the knowledge and experience to identify risks that a business owner without specialist training might easily overlook.
Is a Fire Risk Assessment a Legal Requirement?
Yes. The Regulatory Reform (Fire Safety) Order 2005 (commonly known as the RRO 2005) is the primary legislation governing fire safety in non-domestic premises across England and Wales. Under this legislation, a fire risk assessment is a legal requirement for virtually all workplaces and commercial premises.
Specifically, the RRO 2005 applies if any of the following describe your situation:
You employ one or more members of staff in any capacity, full-time or part-time.
Members of the public visit your premises, including customers, clients, patients or visitors.
You occupy a commercial, industrial or public building, including offices, warehouses, factories, restaurants, hotels and arenas.
You are the landlord or responsible person for a building, including shared or leasehold premises.
You operate events or manage large public gatherings, regardless of venue size or frequency.
If any of these apply to your business, you are required by law to carry out and keep up to date a suitable and sufficient fire risk assessment. This is not optional, and ignorance of the legislation is not accepted as a defence. If you already know you need one, you can book a professional fire risk assessment directly through EMFS.
The RRO 2005 applies to all non-domestic premises in England and Wales. Scotland operates under the Fire (Scotland) Act 2005, which carries equivalent requirements.
Who Is Responsible for the Fire Risk Assessment?
The RRO 2005 places the duty of compliance on the Responsible Person. This is typically the employer, the building owner, or the person who has control of the premises. In practice, this often means the business owner, the managing director or a senior manager with authority over the premises.
The Responsible Person must ensure that a fire risk assessment is carried out, that it is reviewed regularly and that the actions identified within it are implemented. They must also ensure that a named Responsible Person is documented and accessible to fire safety inspectors on request.
While smaller businesses with fewer than five employees are not legally required to record their assessment in writing, doing so is strongly recommended. And any business with five or more employees must have a written record.
What Happens if You Don't Have One?
The consequences of non-compliance are severe. Fire and Rescue Authorities have the power to inspect any non-domestic premises at any time. If they find that no adequate fire risk assessment is in place, they can issue enforcement notices, prohibition notices (which can force you to close immediately), and refer the case for prosecution.
The penalties under the RRO 2005 are significant:
Unlimited fines with no upper limit on financial penalties.
Up to two years' imprisonment for the Responsible Person.
Immediate prohibition notices that can shut down your business without warning.
Personal liability for directors and senior managers, not just the business entity.
The financial impact of a fire itself is equally stark. According to the Fire Protection Association, the average loss from a major business fire in the UK is £657,074. One in four businesses never reopen after a serious fire. Beyond the direct costs, the reputational damage and disruption to staff can be devastating and long-lasting.
New Look was fined £400,000, the maximum available at the time, for fire safety failings at one of its stores. Compliance is not just a legal issue, it is a commercial one.
The cost of a professional fire risk assessment is a fraction of the potential consequences. If your business has been operating without one, or your existing assessment is overdue for review, the right time to act is now.
How Often Does a Fire Risk Assessment Need to Be Reviewed?
A fire risk assessment is not a one-time exercise. The RRO 2005 requires that assessments are kept under regular review and updated whenever there is reason to believe it is no longer valid or no longer reflects current conditions.
In practice, you should review your assessment:
Annually, as a minimum, regardless of whether anything appears to have changed.
After any significant changes to the building, including refurbishment, extensions or alterations to the layout.
When new equipment is introduced that creates additional ignition sources, fuel loads or fire risk.
After a change in occupancy or staffing, including a significant increase or decrease in the number of people on site.
Following any fire or near-miss incident, however minor it may seem.
After a fire safety inspection that identified areas for improvement or required remedial action.
An out-of-date assessment carries the same legal and practical risks as having no assessment at all. If your building, your team or your operations have changed since your last review, your current document may no longer be compliant. EMFS also offers fire safety training to ensure your team is prepared between formal assessments.
Can You Carry Out Your Own Fire Risk Assessment?
Technically, the law does not require you to use an external specialist, but it does require that whoever carries out the assessment is competent to do so. This means having sufficient training, knowledge and experience to properly identify hazards, assess risks and recommend appropriate control measures.
For small, straightforward premises with few occupants and limited hazards, a competent internal person may be able to carry out a basic assessment. However, for most commercial premises, particularly those with complex layouts, high footfall, specialist equipment or significant fire loads, a professional assessment by a qualified and experienced assessor is not only advisable, it is the only way to ensure you are genuinely protected.
A self-completed assessment or downloaded template is rarely sufficient. Fire safety inspectors are trained to identify assessments that do not meet the required standard, and a poor-quality assessment provides no legal protection if things go wrong.
Using a qualified professional protects you legally, ensures your report is defensible under inspection and gives you actionable, expert guidance rather than a generic checklist.
If you're genuinely unsure whether your business is at risk or whether your existing measures are adequate, take our free Fire Risk Assessment Health Check. Answer 10 questions and get an immediate picture of where you stand. No obligation, no cold call. Just a clear starting point before you decide on your next step.
What Does an EMFS Fire Risk Assessment Include?
EMFS Group provides comprehensive, fully compliant fire risk assessments carried out by current and ex-serving firefighters with real operational experience. Not desk-based consultants, but professionals who have worked on the front line of fire safety and understand fire risk from direct operational knowledge.
Every EMFS fire risk assessment includes:
A full site visit and physical inspection of your premises.
Identification of all fire hazards, including ignition sources, fuel sources and oxygen sources.
Assessment of existing fire safety measures, including detection, suppression, signage, exits and evacuation planning.
A detailed digital compliance report documenting all findings and actions required.
A prioritised action plan so you know exactly what to address and in what order.
Guidance on your legal obligations under the RRO 2005 and associated legislation.
We are ISO 9001, ISO 45001 and ISO 14001 accredited, registered with the Care Quality Commission and trusted to deliver fire safety at some of the UK's most demanding venues, including The O2 Arena, Royal Ascot, Wembley Stadium, Silverstone Circuit and Formula 1. Beyond assessments, we offer a full range of fire solutions, including wireless alarm systems, fire wardens, waking watch and event fire cover.
How Do I Get a Fire Risk Assessment for My Business?
The process with EMFS is straightforward. Contact us with details of your premises, type of building, approximate size, number of staff and any specific concerns. We will arrange an appointment at a time that suits your operations.
Following the site visit, you will receive a full written report with a clear action plan. Our nationwide coverage means we can reach businesses across the UK quickly, and our fast turnaround ensures you are not left waiting when compliance deadlines are pressing.
Find Out If Your Business Is Compliant
Comments