Last updated: 6 September 2026

Asbestos register requirements: what UK dutyholders must record, review and prove

An asbestos register is a written record, required under Regulation 4 of the Control of Asbestos Regulations 2012 (CAR 2012), that lists the location, type, condition and risk of every known or presumed asbestos-containing material (ACM) in a non-domestic building. There's no fixed legal template, but the HSE requires the dutyholder to keep a written register, risk assessment and management plan current and accessible to anyone who might disturb the building's fabric.

Key Takeaways

• Regulation 4 of the Control of Asbestos Regulations 2012 (CAR 2012) places a legal duty on the dutyholder of non-domestic premises to maintain an asbestos register — there's no prescribed format, but the content is mandatory.
• Around 5,000 people die each year in Great Britain from asbestos-related disease, including mesothelioma, lung cancer and asbestosis, according to UKATA (2026).
• Mesothelioma deaths fell to 2,146 in 2026, down 109 on 2023 and below the 2011–2020 average of 2,508 a year, according to HSE data reported by Weightmans (2026).
• A construction contractor was fined £5,360 plus £5,117 in costs for breaching Regulation 4(6) of CAR 2012 after failing to complete a full asbestos survey before starting work, according to an HSE press release (2026).
• The HSE opened a formal consultation in November 2026 on amending CAR 2012, including proposals to tighten survey quality standards and clarify the four-stage clearance process, according to the HSE Blog (2026).

What is an asbestos register?

An asbestos register is a written record, kept by the dutyholder of a non-domestic building, that lists the location, type, condition and extent of every known or presumed ACM on the premises. The Control of Asbestos Regulations 2012 requires this register under Regulation 4 — "the duty to manage" — alongside a risk assessment and a written management plan, together forming the core evidence base that the HSE's duty-to-manage guidance sets out.

The register is not a survey report in itself. It is a live, referenced summary that draws on survey findings and is updated whenever the building changes. The HSE states explicitly that the register must be reviewed "without delay" following any significant change to the premises, rather than only on a fixed annual cycle.

For facilities managers running multiple sites, the register is often the single document most likely to be requested during an HSE inspection, an insurance audit, or before a contractor starts refurbishment work.

Why the register exists as a distinct legal document

The asbestos register exists because asbestos exposure has a latency of decades: symptoms of mesothelioma and asbestosis can take 20 to 50 years to appear after exposure. A written record lets every future contractor, cleaner or engineer check the register before they drill, cut or disturb a wall, ceiling tile or pipe lagging, without relying on institutional memory that is lost when staff change.

The Health and Safety at Work etc. Act 1974 provides the overarching duty of care; CAR 2012 is the specific regulation that translates that duty into asbestos management obligations, including the register.

Who is the dutyholder responsible for the asbestos register?

The dutyholder is the person or organisation with clear legal responsibility for maintaining, updating and acting on the asbestos register — normally whoever controls the maintenance and repair of a non-domestic premises under a tenancy, lease or ownership arrangement. HSE's dutyholder check tool is the starting point when responsibility is unclear, particularly in multi-let buildings.

In a single-let commercial building, the dutyholder is usually the freeholder or long leaseholder responsible for repairs. In a multi-tenanted office block or shopping centre, responsibility often splits: the landlord holds the duty for common parts, shafts, risers and the structure, while each tenant may hold a duty for demised areas they are contracted to maintain. Management agreements should state explicitly who holds which duty — ambiguity here is one of the most common compliance failures HSE inspectors find.

Dutyholder responsibilities in shared and leased buildings

Where a building has multiple occupiers, good practice is a single master register held by the landlord or managing agent, with each tenant's contractor able to view the relevant extract before any works start. FM providers managing portfolios on behalf of estates teams frequently end up as the de facto register custodian, even where legal liability sits with the client — which makes accurate record-keeping and access control a practical, not just legal, priority.

Schools, colleges and other public buildings have their own specific guidance: the GOV.UK guidance on managing asbestos in schools and colleges sets out how governing bodies and local authorities should assign and evidence the dutyholder role.

What must an asbestos register contain?

An asbestos register must contain, at minimum, the location of every known or presumed ACM, the type of asbestos where identified (chrysotile, amosite or crocidolite), the material's condition, and an assessment of the risk it poses if disturbed. HSE's guidance on making a register and assessing the risk sets out this content, though it deliberately avoids mandating a single template so registers can scale to the size of the building.

A robust register typically includes:

• Location references tied to floor plans or room numbering, not vague descriptions
• Material description — for example, sprayed coating, pipe lagging, textured coating, asbestos cement panel
• Presumed or confirmed status, based on sampling by a UKAS-accredited laboratory or visual assessment by a competent surveyor
• Condition rating — good, fair, poor or damaged
• Risk assessment score, following the algorithm in HSE's guidance document HSG264
• Date of last inspection and the name of the person or firm who carried it out
• Action taken or planned — encapsulation, removal, monitoring, or "manage in place"
• Photographs of the material and its location, where available

Asbestos register vs asbestos management plan: what's the difference?

The register and the management plan are two related but distinct documents, and confusing them is a common compliance gap.

The register answers "what and where"; the management plan answers "what we're going to do about it and by when". Both documents should reference each other, and both should be accessible to contractors before any intrusive work begins.

How often must an asbestos register be reviewed and updated?

The Control of Asbestos Regulations 2012 requires an asbestos register to be reviewed at least annually as routine good practice, and immediately whenever there is a significant change to the building — such as refurbishment, demolition of a partition wall, water damage, or discovery of previously unrecorded material. The HSE states plainly that dutyholders must review an asbestos assessment "without delay" if there has been a significant change in the premises, rather than waiting for a scheduled review point.

In practice, most competent FM operators build a rolling review into their planned preventative maintenance (PPM) calendar, so the register gets checked:

1. Before any planned refurbishment or M&E works — a re-inspection or refresher survey where the scope touches areas with known or presumed ACMs
2. After any incident involving damage to fabric that might contain ACMs — a leak, impact damage, or fire
3. At contract handover, when a new FM provider or landlord takes on responsibility for the building
4. On a fixed annual cycle as a minimum baseline, even where nothing has visibly changed

The HSE's November 2026 consultation on amending CAR 2012 proposes tightening survey quality standards and clarifying the four-stage clearance process used after asbestos removal work, according to the HSE Blog (2026), which suggests review and documentation standards are likely to become more prescriptive rather than less.

What happens if a business doesn't maintain a compliant asbestos register?

The HSE can prosecute a dutyholder that fails to maintain a compliant asbestos register under health and safety criminal law, resulting in unlimited fines and, in the most serious cases, imprisonment. HSE inspectors can issue improvement or prohibition notices on the spot, halting works until a satisfactory survey and register are produced.

The consequences fall into three categories:

Regulatory enforcement. A construction company was fined £5,360 plus £5,117 in costs after breaching Regulation 4(6) of CAR 2012 by failing to complete a full asbestos survey before starting construction work, according to an HSE press release (2026). Costs like this scale sharply for larger organisations or repeat breaches, and the HSE routinely publishes prosecution outcomes, which carries reputational as well as financial cost.

Health outcomes for the workforce. The scale of the underlying risk is why enforcement is taken seriously: an estimated 1.3 million tradespeople in the UK are at risk of asbestos exposure, potentially disturbing it more than 100 times a year, and around 20 tradespeople a week die from past exposure, according to Asbestos Awareness Course, citing HSE data (2026). There were 503 deaths in 2026 mentioning asbestosis on the death certificate, excluding deaths that also mention mesothelioma, according to UKATA (2026). UKATA also reports that mesothelioma deaths in 2026 broke down as 1,771 male deaths (down from 1,833 in 2023) and 375 female deaths (down from 422 in 2023).

Contractual and insurance exposure. Many principal contractors and insurers now require sight of a current register before starting work or renewing cover. A missing or outdated register can delay projects, trigger insurance exclusions, or void a permit-to-work system entirely.

In-house register management vs outsourced compliance support

Businesses generally choose between managing the asbestos register in-house — usually via a spreadsheet or a facilities manager's own filing system — or outsourcing register maintenance and survey commissioning to a specialist asbestos consultancy or an integrated FM compliance platform, such as the systems compared in this property maintenance software buyer's guide.

In-house management works where a single competent person owns the file, updates are disciplined, and the building portfolio is small. It tends to break down across multiple sites, when staff turnover loses institutional knowledge, or when the register lives in a format nobody else can find during an inspection.

Outsourced or platform-based management suits organisations with several properties, high staff turnover in the FM team, or a need to prove compliance to a client, insurer or regulator on demand. The trade-off is cost against assurance: a well-run in-house system is cheaper day to day, but the audit trail is only as good as the discipline behind it.

Your asbestos register compliance checklist

• Confirm who holds the dutyholder role for each building you manage, using HSE's duty-check guidance
• Commission a management or refurbishment survey from a UKAS-accredited surveyor for any building built or refurbished before 2000
• Record every known and presumed ACM location, material type, condition and risk score in the register
• Cross-reference the register with a written asbestos management plan setting out actions and review dates
• Review the register at least annually, and immediately after any refurbishment, leak, impact damage or incident
• Make the register accessible to every contractor before permit-to-work is issued for any intrusive job
• Track survey dates, review dates and remedial actions on a single compliance runway alongside other statutory building checks
• Monitor the HSE's November 2026 consultation on CAR 2012 amendments for upcoming changes to survey standards

FAQ

What is an asbestos register and why is it required?

An asbestos register is a written record of every known or presumed asbestos-containing material in a non-domestic building, required under Regulation 4 of the Control of Asbestos Regulations 2012. It exists because asbestos disease has a latency of decades, so a permanent record lets future contractors know where hazards are before they disturb the building fabric.

Who is legally responsible for maintaining an asbestos register?

The dutyholder — usually the person or organisation with control over the maintenance and repair of the premises, such as the freeholder, long leaseholder or managing agent — is legally responsible for the register. The HSE provides a dutyholder check tool for buildings with unclear or shared responsibility, such as multi-let commercial premises.

What must an asbestos register contain?

An asbestos register must record the location, material type, condition and risk assessment of every known or presumed asbestos-containing material, plus the date and source of the last inspection. The HSE deliberately does not prescribe a fixed template, but its guidance on making a register and assessing the risk sets out the required minimum content.

How often must an asbestos register be updated?

An asbestos register should be reviewed at least once a year, and immediately whenever there is a significant change to the building, such as refurbishment, demolition work, water damage or an incident. HSE guidance states the review must happen "without delay" following any significant change, rather than waiting for a scheduled date.

Is an asbestos register a legal requirement for all commercial buildings?

An asbestos register is a legal requirement for non-domestic premises where the building was constructed or had its services installed before the year 2000, when asbestos use was still legal in the UK. Domestic private dwellings are generally excluded from the duty to manage, although common parts of residential blocks — such as stairwells, plant rooms and shared corridors — are usually within scope.

What happens if a business doesn't have an asbestos register?

A business without a compliant asbestos register risks HSE enforcement action, including improvement notices, prohibition notices, unlimited fines and prosecution under the Control of Asbestos Regulations 2012. One contractor was fined £5,360 plus £5,117 in costs for breaching Regulation 4(6) by failing to survey before construction work, according to an HSE press release (2026).

Can an asbestos register be kept electronically?

Yes, an asbestos register can be kept electronically, and HSE guidance does not require a paper-only format, provided the record is accessible to anyone who needs it before carrying out work on the building. Electronic registers held within a wider FM compliance system have the practical advantage of being searchable, linkable to survey documents and photographs, and viewable on-site by contractors via a mobile device, similar to how mobile security patrol apps put checkpoint and incident data in front of officers on-site.

Managing the asbestos register alongside every other statutory compliance deadline

Facilities teams rarely manage asbestos in isolation — it sits on the same compliance runway as fire risk assessments, legionella checks, gas safety certificates, lift inspections and, increasingly, Martyn's Law premises assessments. The problem most FM providers describe isn't understanding what an asbestos register needs to contain; it's keeping that register, its review dates and its supporting survey documents from getting lost across dozens of sites, contractors and spreadsheet versions.

Pulse Operations was built inside a working London security and FM business — Aether Agency Ltd's own operation, Priority First — before being opened up to other operators, and its compliance runway brings statutory building compliance, including asbestos register review dates, survey documents and remedial actions, onto the same expiries timeline as SIA licensing, BS 7858 vetting, DBS checks and Martyn's Law assessments, so nothing quietly falls due unnoticed. Because the platform is UK-built and UK-hosted with tenant isolation enforced in the data layer, a managing agent or FM provider running a multi-site portfolio — the kind of setup covered in this guide to integrated security and FM software — can hold every building's register in one place rather than in whichever inbox last received the survey PDF.

For an estates team overseeing a shopping centre, a construction site security operation, or a portfolio of leased offices, that means a single dashboard showing which buildings have a current register, which surveys are overdue for review, and which contractors still need permit-to-work sign-off before they touch a wall. Pricing is published openly, per operative, with unlimited sites and free admin, control-room and client-portal seats on every plan — full detail is at pulse-operations.co.uk/pricing. If you're weighing up whether your current spreadsheet-based approach will survive the next HSE inspection or insurance audit, take a look at Pulse's compliance runway or get in touch for a quote to see how statutory building compliance sits alongside the rest of your FM obligations in one system.

Related Reading

• Key Holding Register Template UK Guide (2026)
• Guardhouse Alternative 2026: Best UK Options Compared
• SmartTask Alternative 2026: Best Options Compared