The Review Obligation

12 March 2026

There is a kind of false confidence that settles in once a building has been assessed. A fire risk assessment is commissioned, a competent-looking document arrives in the compliance folder, a review date is noted somewhere in the management system, and the matter is considered closed. The building continues to be let, altered, refurbished and reoccupied, and the document continues to describe whatever it described on the day it was written, which in some cases was quite a long time ago. This is a fair description of how most fire risk assessments are managed in the UK, and it is one of the larger sources of compliance risk that responsible persons and managing agents carry without quite realising they are carrying it.

The point that tends to get lost is that a fire risk assessment is a living document rather than a certificate. It records the state of a building at a particular point in time, and it becomes progressively less reliable as the building, its occupants, its uses and the law around it drift away from that point. The obligation to keep it up to date is a legal one, the interval is not a matter of personal preference, and the consequences of letting it lapse are, in the worst cases, indistinguishable from the consequences of never having commissioned an assessment in the first place.

The short answer

The Regulatory Reform (Fire Safety) Order 2005 does not set a fixed review interval, and any article that tells you it does is oversimplifying. What the Order does require, in Article 9, is that the responsible person keeps the assessment under review, makes such changes as are needed in light of that review, and repeats the exercise whenever there is reason to suspect that the assessment is no longer valid or whenever there has been a significant change in the matters to which it relates.

Industry convention, reflected in the government sector-specific fire safety guides and in the common practice of competent assessors, is that assessments for higher-risk premises should be formally reviewed at least annually, while assessments for lower-risk premises can reasonably be reviewed at intervals of up to five years. A competent assessor should set a review date in the assessment itself, calibrated to the specific risk profile of the building, and that date is the starting point rather than the whole of the duty. The trigger-based obligation to review when things change sits alongside the calendar review, and in an actively managed building it will often fire first.

What the law actually requires

Article 9 of the Regulatory Reform (Fire Safety) Order 2005 sets two conditions under which a review is required, and it is worth stating them plainly because they are often misquoted. The first is that the assessment must be kept under review and revised where circumstances suggest it is no longer valid. The second is that a review must be carried out where there has been a significant change in the matters to which the assessment relates, including changes in the use of the premises or in the persons present on them. The phrase the Order uses, "regularly", is deliberately undefined, and the interpretation that applies to a given premises depends on how risk-bearing and how changeable that premises is.

The Building Safety Act 2022 overlays a further regime for higher-risk residential buildings, those of 18 metres or more or seven or more storeys containing at least two residential units, where the Building Safety Regulator has powers to inspect and to require remediation and where the building's safety case must be kept current on a continuing basis. For managing agents with buildings in that category, the calendar-review model is not adequate on its own, because the duty operates continuously rather than annually. The Fire Safety (England) Regulations 2022 sit alongside these duties and add specific obligations around information sharing, signage and inspections in multi-occupied residential buildings, all of which interact with the fire risk assessment and each of which is a potential trigger for a review.

The working test is a practical one. If a fire risk assessor who had never seen your building before were to walk through it today, would the assessment on your shelf describe what they would find? If the answer is no, or even probably not, then the assessment is due a review, regardless of the date stamped on the cover.

Triggers for an immediate review

Article 9 does not enumerate specific triggers, but competent practice, backed by sector guidance and by how enforcing authorities interpret the duty, points towards a recognisable set of events that should prompt a review as soon as is reasonably practicable, whatever the calendar says. A workable list for managing agents and responsible persons looks like this.

• Any material alteration to the building's structure, layout or fabric, including partitioning works, alterations to escape routes and changes to fire compartmentation.
• Changes to the use of the premises, or of any part of them, including changes of tenant in commercial or mixed-use buildings.
• Changes in the number, type or vulnerability of the occupants, including increases in occupancy, the introduction of residents or users with mobility or cognitive impairments, or new arrangements for night-time or lone occupancy.
• Installation, removal, significant modification or failure of fire safety systems, including alarms, emergency lighting, detection, suppression, smoke control and fire doors.
• Any fire or fire-related incident in the building, however minor it may have appeared at the time, including small contained fires, alarms caused by smoke from equipment failures, and near-miss incidents that did not escalate.
• Identification of a significant deficiency during any fire safety inspection, whether by your own assessor, a fire door inspector, an insurance surveyor or a tenant.
• Receipt of an enforcement, alterations, prohibition or deficiency notice from the fire and rescue authority, or correspondence indicating that enforcement action is being considered.
• Changes to relevant legislation or official guidance affecting the premises, including updates to sector-specific guides, new regulations made under the Fire Safety Order, or Building Safety Regulator requirements for higher-risk buildings.
• Significant change in the building's maintenance or management arrangements, including changes of managing agent, changes of principal contractor or changes in the responsible person themselves.

The common theme running through all of these triggers is that something has happened which makes it reasonable to suspect the assessment no longer describes the building. When that is the case, the Article 9 obligation to review and revise engages immediately, and the calendar date becomes irrelevant.

Why outdated assessments are worse than no assessment at all

A fire risk assessment that has been allowed to go out of date does more than fail to protect the responsible person legally. It actively misleads them, and it misleads everyone in the building who is relying on it. A managing agent working from a three-year-old assessment, written before the ground-floor retail unit changed from a bookshop to a late-night restaurant, before a refurbishment removed the fire-resisting lining from a stairwell wall, and before a new resident with mobility impairments moved onto the second floor, is not in a position of safety. They are in a position of uninformed risk, and the document on the shelf is the reason they believe otherwise.

Fire authorities conducting inspections encounter this pattern frequently, which is why it features so prominently in enforcement outcomes. Responsible persons are often genuinely surprised to receive enforcement notices or prohibition notices, because they had an assessment and assumed that meant they were compliant. What the inspection had uncovered was a drift between the building described in the document and the building as it was actually being used, a drift that a timely review would have picked up before the fire service did.

From an enforcement perspective, the position of a responsible person with an out-of-date assessment is sometimes worse than the position of one with no assessment at all. Where there is nothing on file, the failure is stark but simple. Where there is an assessment, plus grounds on which a reasonable responsible person would have commissioned a review, and no review was carried out, the regulator can point to that omission as evidence that the duty was understood and ignored rather than overlooked.

What a review actually means

A review is the process of checking whether the existing assessment still holds, updating it where it does not, and recording what has changed. In some circumstances, particularly where a building has undergone substantial alteration or where the original assessment was of questionable quality to begin with, what the building needs is not a review but a fresh assessment, and an honest assessor will say so rather than attempt to patch an inadequate document.

A proper review involves the assessor visiting the building, comparing current conditions against the findings of the previous assessment, checking the status of any actions that were outstanding, and updating the document to reflect what they find. Desk-based reviews, where the assessor never sets foot on site, can be defensible where the changes are genuinely trivial and the assessor can be confident of this without an inspection, but they are rarely a safe default. An offer of a remote review, or a review priced at a level that plainly does not cover a site visit, is usually a signal that what is being sold is paperwork rather than protection.

The reviewed document should carry a new date, a new review schedule calibrated to current conditions, and an updated set of actions. Actions that were recommended in the previous assessment and have not been completed should be flagged, with their priority reconsidered in light of whatever has changed since. A review that emerges with an identical action list to its predecessor, making no comment on whether previous recommendations were implemented, is not a reliable document and should not be relied upon.

Building reviews into the management cycle

The most reliable way to meet the review duty across a portfolio is to integrate it into standard property management rather than treating it as a separate compliance track that depends on someone remembering. Every fire risk assessment should carry a clearly stated review date, that date should be held in the management system as a hard deadline rather than an aspiration, and automatic reminders at ninety days and thirty days before the deadline should be standard.

The harder piece, and the one that catches most portfolios out, is capturing the event-based triggers. Refurbishments, changes of tenant, modifications to fire safety systems and incidents of any kind need to feed back into the fire risk assessment process automatically, not through individual recollection. Where fire safety documentation sits on a parallel track to the rest of property management, the two fall out of alignment almost immediately, and the gap between what the assessment says and what the building actually does is where the compliance risk accumulates.

For portfolios of any scale, there is a practical argument for consolidating assessment work with a single competent provider who knows the buildings, uses a consistent methodology, and can be held to a coherent standard across the stock. Fragmenting the work across multiple assessors produces a set of documents that may each be competent in isolation but are difficult to compare, difficult to audit, and difficult to defend as a coherent compliance framework if an enforcing authority takes an interest.

The cost of letting it slide

Compliance work that is not immediately pressing tends to be deferred, and fire risk assessment reviews fit that pattern more than most, because the document is already in place and the deadline always feels further away than it is. The cost of a timely, competent review is modest against the cost of the alternatives. An enforcement notice requiring immediate works is expensive and disruptive. A prosecution following an incident is worse. A civil claim from an occupant injured in a fire is worse again. The worst outcome of all is the one the whole regime exists to prevent, which is a fire in a building whose safety arrangements had quietly diverged from the document that was supposed to describe them, and where that divergence is identified by the fire service rather than by the people responsible for the building.

Responsible persons and managing agents who take the duty seriously do not wait to be compelled to review. They build review into the cycle, they act on event-based triggers when they occur, and they treat the assessment as a working document that describes a real building, which is what it is and what Article 9 requires it to be.

Fire Risk Assessment Reviews in Chester, the North West and North Wales

If your current fire risk assessment is approaching or past its review date, or if your building has changed meaningfully since it was last assessed, we can carry out a timely, thorough review and leave you with a document that describes the building as it actually is. We work with managing agents, responsible persons and owners across the North West and North Wales, from Bangor to Bolton and everywhere in between. If you would like to discuss your arrangements, please get in touch.

Book a Review Get in Touch

This article is provided for general information only and does not constitute legal, regulatory or professional advice. Fire risk assessment review obligations depend on the specific risks, uses and circumstances of each premises, and the intervals and triggers referenced here reflect general industry practice and guidance current at the time of publication. A competent fire risk assessor should be consulted to determine the appropriate review frequency and scope for your premises, and references to legislation and guidance should be verified against current editions before being acted upon.