If you manage a commercial building, the roof is one of the highest-risk assets you control and one of the most heavily regulated. Commercial roofing regulations UK cover everything from safe access and structural loading to fire performance, thermal efficiency, drainage, and contractor competence. Get any of them wrong and the liability usually lands on you, not the contractor you hired.
This guide brings together the nine regulations and standards that matter most to facilities managers. Each section explains what the rule requires, the obligation it puts on you, and where the real liability sits. Use it as your starting point, then follow the links to the detailed guides for the full picture on each topic.
1. Work at Height Regulations 2005 (WAHR)
Every time someone goes onto your roof to inspect it, service equipment, or carry out maintenance, that is work at height under WAHR 2005. The person who controls that access is the duty-holder. If you organise roof access, that is you, not just the contractor doing the job.
WAHR sets a three-rung hierarchy you must work through in order. First, eliminate the risk where you can. Second, use collective protection such as permanent edge guardrails. Only as a last resort do you rely on personal PPE like harnesses. A generic risk assessment does not satisfy this. Every roof task needs a site-specific assessment covering that roof, that access route, and that job.
The liability point is blunt. HSE guidance OC 200/31 places the duty on “any person who controls work at height”. Outsourcing the physical work does not transfer that duty away from you.
Read the full guide: Work at Height Regulations 2005: What Facilities Managers Need to Know
2. Commercial Roof Structural Load Requirements
Approved Document A requires that a commercial roof safely transfers all its loads, dead, imposed, and environmental, down to the foundations. The moment you add new equipment to a roof, you add dead load and trigger a structural assessment obligation.
Before you install solar PV, HVAC units, a green roof, water tanks, or telecoms masts, you must commission a chartered structural engineer (MIStructE or MICE) to confirm the roof can take it. The most common failure is cumulative loading. Equipment gets added over the years, each item signed off in isolation, and no one ever reviews the combined weight. That is how roofs become silently overloaded.
Because you control the premises, you carry Occupiers’ Liability Act 1957 responsibility, and your client duty under CDM 2015 does not transfer to the installer. Note that the widely quoted “135 kg” concentrated load comes from a withdrawn standard (BS 6399-3:1988). The current Eurocode (BS EN 1991-1-1) sets 1.5 kN, around 153 kg.
3. Approved Document B: Commercial Roof Fire Safety
Approved Document B, through requirements B3 and B4, governs how your roof covering performs in a fire. The top classification is BROOF(t4) under EN 13501-5, mandatory since 2019. Stock built before then may still carry a BS 476-3 rating, which is not directly equivalent.
The Regulatory Reform (Fire Safety) Order 2005 makes the responsible person, usually the FM or employer, personally liable for maintaining a fire risk assessment that covers the roof covering. BROOF(t4) is a system-level certification, not a single-product one. Replace one component during a repair without reassessing the system and you can void the classification without realising it.
The liability sits with you permanently. “The contractor handled it” is not a defence under the RRO. Enforcement risk stays with the responsible person, and it does not expire when the job finishes.
Read the full guide: Commercial Roof Fire Safety Regulations: What Facilities Managers Need to Know
4. BS 13700:2021: Rooftop Guardrails and Skylight Protection
BS 13700:2021 is the standard for permanently installed rooftop safety systems, covering edge guardrails, skylight covers, and walkways. It requires an annual inspection plus an additional inspection after any severe weather event.
If you inherit a counterweighted or older guardrail system, do not assume it complies just because it was installed by a previous owner. You must verify it meets the current standard. You also need the System Technical File, holding the design, structural calculations, and wind load data. That file has to be retained for the life of the building and handed over on sale.
Inspections produce one of four graded outcomes: Pass, Pass with Advisory, Conditional Fail (which means immediate access restriction), and Fail (system beyond repair). PUWER 1998 Regulation 6 treats skylight covers as work equipment, and the WAHR collective protection hierarchy makes permanent guardrails the required first choice over harnesses.
Read the full guide: BS 13700:2021 Rooftop Guardrails: A Facilities Manager’s Compliance Guide
5. Approved Document L: Thermal Performance
Approved Document L2, the non-domestic energy efficiency standard, applies to commercial re-roofing work. Even a partial re-cover can trigger a requirement to upgrade insulation across the whole roof to 0.18 W/m²K. In practice you should design to 0.13 to 0.15 W/m²K, giving yourself headroom rather than sitting on the backstop.
The bright-line test is simple. If the work affects more than 50% of the roof, the entire roof must meet the standard, not just the area you touched. Section 36 enforcement is served on the building owner, now carries a 10-year window under the Building Safety Act 2022, and brings civil penalties.
The Golden Thread obligation under the BSA 2022 requires six categories of compliance documents to be retained digitally for 30 years. For qualifying projects, NFRC CPS self-certification can handle the compliance sign-off without a separate building control application.
Read the full guide: Approved Document L Commercial Roofing: What the 2021 Standard Requires
6. BS 6229:2018: Flat Roof Inspection Standard
BS 6229:2018 sets the design, installation, and maintenance requirements for warm flat roofs on commercial buildings. The maintenance section is the part that lands on you. It mandates two formal inspections a year, one in autumn before winter and one in spring after it.
Your obligation is to carry out both inspections, document what you find, and act on the defects. Ponding water that persists more than 48 hours after rainfall is a defined red flag that requires investigation, not something to leave until next time. The minimum parapet upstand is 150 mm above finished roof level.
The evidence point matters more than most FMs expect. If a flat roof fails through water ingress or a membrane breach and you have no BS 6229 inspection records, you have no proof of reasonable maintenance. Without that evidence, liability defaults to the building owner or occupier.
Read the full guide: BS 6229:2018 Flat Roof Standard: A Facilities Manager’s Compliance Guide
7. BS EN 12056-3: Roof Drainage
BS EN 12056-3 governs how roof drainage is designed and how it must perform. Parapet gutters must be designed to Category 2, a 90-year return period rainfall, not Category 1. The catchment calculation also has to include wall runoff. Up to 50% of an adjacent wall area, up to 10 m high, drains onto the roof, and this is commonly missed.
On buildings with internal gutters, you need to verify the drainage design meets BS 8490:2025, which now makes secondary siphonic drainage mandatory for those configurations. Where an overflow discharges is a legal and safety decision, not an aesthetic one.
The financial exposure is significant. RICS Modus 2024 data shows insurance warranties exclude around 85% of claims involving ponding. Blocked or undersized drainage is the single most common cause of flat roof failure, and your inspection and maintenance record is the primary evidence in any insurance dispute.
Read the full guide: BS EN 12056-3 Roof Drainage: What Facilities Managers Need to Know
8. Future Buildings Standard 2027
The Future Buildings Standard comes into force on 24 March 2027 for most non-domestic buildings. It tightens the flat roof U-value backstop to 0.15 W/m²K, requires mandatory solar PV on new non-domestic buildings (roughly 40% of roof area at 0.22 kWp/m²), and cuts the air permeability limit from 8 to 5 m³/(h·m²).
If you are managing a new-build project where design or planning decisions are being made now, design to FBS standards rather than current Part L. The mandatory solar PV requirement does not stop at the panels. It creates a cascading structural assessment obligation (14 to 34 kg/m² of dead load) and a WAHR and BS 13700 safe access obligation for maintaining the array.
Watch the transitional rule. Buildings on sites receiving planning permission after March 2027 must comply, and the rule is applied per-building, not per-site.
Read the full guide: Future Buildings Standard 2027: What It Means for Commercial Roofing
9. How to Vet a Commercial Roofing Contractor
Under CDM 2015, when you act for the building owner you are the client, and the client’s duty to appoint competent designers and contractors is non-delegable. Vetting a roofing contractor is not best-practice due diligence. It is a legal obligation.
Verify NFRC membership, SSIP accreditation (Constructionline, CHAS, or Acclaim), and commercial insurance levels (Public Liability of at least £5m, Employers’ Liability of £10m). Check CSCS card status through Smart Check, and confirm the contractor’s position on subcontracting. You want BFSC bonded arrangements, not labour-only LOSC. Always request a site-specific RAMS: method statement, risk assessment, COSHH, working at height plan, and emergency plan.
The liability is unforgiving. Appointing a contractor does not transfer your CDM client duty. If a subcontractor causes a fatality and you failed to vet the principal contractor’s subcontracting arrangements, that liability is yours.
Read the full guide: How to Vet a Commercial Roofing Contractor: A Facilities Manager’s Guide
Speak to our team
Managing all nine of these obligations across a portfolio is a full-time job, and the liability for getting them wrong sits with you. NSS Group handles commercial roof compliance, inspection, and maintenance for facilities managers across the UK, keeping your records audit-ready and your access safe. Talk to NSS about a compliance review of your roofs.
FAQ
Which commercial roofing regulations apply to all buildings, regardless of age?
Work at Height Regulations 2005, the Regulatory Reform (Fire Safety) Order 2005, and PUWER 1998 apply to every commercial building you manage, whatever its age. Maintenance standards such as BS 6229 apply in practice too. Building Regulations like Approved Documents L and B generally bite when you carry out work, but the safety duties above are always live.
What is the difference between a responsible person and a duty holder in commercial roofing?
The responsible person is a fire safety term from the RRO, usually the employer or FM, who is personally accountable for the fire risk assessment. A duty-holder is broader and appears across WAHR and CDM, meaning anyone who controls the work or premises. You can be both at once on the same roof, and neither role transfers to a contractor.
Do these regulations apply to leasehold commercial buildings?
Yes, though the split of responsibility depends on your lease. The lease and the repairing schedule determine whether the landlord or tenant controls the roof and its maintenance. Whoever holds control of access and the premises carries the WAHR and Occupiers’ Liability duties. Check your lease carefully, because assumptions about who is responsible are a frequent source of disputes.
Where do I start if I have just taken on FM responsibility for a commercial building?
Start with a documented condition survey and gather the existing records: the System Technical File for any guardrails, structural sign-offs for rooftop equipment, and past inspection reports. Confirm who the responsible person is under the RRO, then build a rolling inspection programme aligned to BS 6229 and BS 13700. If records are missing, commission fresh assessments rather than assuming compliance.