Regulation 38: the fire safety information handover, explained

Regulation 38 of the Building Regulations 2010 requires that "fire safety information" be handed over once building work is finished, or once the building is first occupied if that happens sooner. It is a short, functional duty rather than a technical design standard, and it is easy to underestimate precisely because it reads as an administrative afterthought sitting at the end of a construction project. In practice, it is the mechanism that determines whether the person left running a building afterwards actually has the information needed to do so safely.

A completion certificate from building control is not the same thing as a Regulation 38 handover, and receiving one is not evidence that the other happened. The two are separate duties assessed against separate criteria, and it is entirely possible for a building to have a valid completion certificate and still be missing the fire safety information Regulation 38 requires.

Who this applies to

Regulation 38 is triggered by building work that erects or extends a "relevant building" — broadly, a building to which the Regulatory Reform (Fire Safety) Order 2005 (RRFSO) applies or will apply — or by work carried out in connection with a relevant change of use, in either case where the fire safety requirements of Part B of Schedule 1 to the Building Regulations are engaged. That scope is considerably wider than higher-risk buildings alone: it covers a large proportion of non-domestic buildings and the common parts of blocks of flats, whenever building work of the relevant kind is being done.

Two parties sit on either side of the duty. The person carrying out the work must deliver the fire safety information. The "responsible person" — the term used in Article 3 of the RRFSO, typically an employer, the person in control of the premises, or an owner or managing agent acting in that capacity — must receive it and, since amendments strengthened this part of the regime, actively confirm that what has been provided is sufficient to operate and maintain the building safely. A responsible person taking delivery of a building has a role in this handover, not just a right to expect it.

What must be handed over, and when

The Regulations define "fire safety information" as information relating to the design and construction of the building or extension, and to the services, fittings and equipment provided in or in connection with it, that will assist the responsible person to operate and maintain the building with reasonable safety. In practice this typically means as-built information relevant to fire safety, details of the fire protection measures and life-safety systems installed, and the operating and maintenance information needed to keep those systems working as designed — not a generic health and safety file assembled for other purposes.

Timing follows the building's own programme rather than a fixed date: the information must be delivered by the completion date of the work, or by the date of first occupation if that comes earlier — the situation that applies where a building or part of it is occupied before construction work is fully finished. Since amendments took effect on 1 October 2023, the person carrying out the work must also notify the relevant building control body once the information has been provided, within a set number of days depending on the certification route being used, adding a documented checkpoint to what had previously been an obligation with no external visibility.

A duty that keeps being reinforced

Regulation 38 has not stood still. Government fire safety changes made to Approved Document B, effective from 2 March 2025, were accompanied by a further strengthening of Regulation 38 itself, on top of the 2023 amendments already described. The direction of travel across these changes has been consistent: sharpening the responsible person's obligation to actively confirm — not merely receive — information sufficient to operate and maintain the building and its fire safety systems, and giving the wider regulatory system better visibility of whether the handover happened at all. A responsible person or their advisers should check the currently in-force wording of Regulation 38 for the precise detail relevant to a given project, rather than assume a description of the regime written before the most recent amendment still holds exactly.

Where this connects to the golden thread and higher-risk buildings

For a higher-risk building under the Building Safety Act 2022, the Regulation 38 information delivered at completion is the substantive material that feeds into the golden thread handed over at Gateway 3, and which the principal accountable person must then keep current for as long as the building is occupied — that connection, and what the golden thread needs to contain more broadly, is covered in our companion article. Regulation 38 itself, though, is not limited to higher-risk buildings: it applies to the much wider set of buildings described above, most of which will never go near the Building Safety Act's gateway regime at all. Treating Regulation 38 as "a higher-risk building thing" understates a duty that in practice touches most commercial and residential construction work.

Common misconceptions

The most common misconception is assuming that a completion certificate, or the absence of any comment from building control, means the fire safety information handover happened properly. It does not — the two are separate duties, and Regulation 38 compliance is frequently poor precisely because nobody outside the immediate parties was checking it before the 2023 notification changes began to add some visibility.

A second misconception is treating Regulation 38 as a new-build, higher-risk-building duty. It is neither: it applies to a wide range of building work, including extensions and works connected with a change of use, on any building within RRFSO's scope — which covers most non-domestic premises and the common parts of residential blocks regardless of height.

A third is assuming that simply receiving a folder of documents discharges the responsible person's side of the duty. Under the current, strengthened version of Regulation 38, the responsible person is expected to actively confirm that what has been provided is actually sufficient to operate and maintain the building safely — a folder that has not been reviewed against that standard has not really been "received" in the sense the Regulation intends.

Practical next steps

Anyone taking on responsibility for a building — as a new responsible person, managing agent, or freeholder — should treat the Regulation 38 pack as the first thing to ask for and the first thing to test, rather than an assumption. The test is a practical one: does the information actually let you operate and maintain the fire safety measures in the building, including as-built drawings, a fire protection schedule, and the operating and maintenance information for the fire alarm, smoke control, and other life-safety systems installed? Where the answer is no, or where no Regulation 38 pack can be located at all — common in older buildings that changed hands before the current visibility measures existed — the gap needs to be treated as a live piece of unmanaged risk, not a historic paperwork issue.

Apex's Regulation 38 review service assesses what fire safety information a building actually holds against what it should hold, identifies what is missing or unusable, and advises on what needs to be obtained, reconstructed, or commissioned to close the gap. Because Apex does not sell installation or remediation work, the review is built around what the building genuinely needs to be run safely, not around generating further contracted work.