The HSE has scheduled 8,000 asbestos “duty to manage” inspections for 2025-26. Their own projections put the enforcement rate at 40 to 60 per cent, meaning thousands of the sites they visit will result in formal enforcement action. Most of those duty holders almost certainly had a survey done. What they didn’t have was a compliant asbestos management plan.

That gap is the most common compliance failure in the market, and it’s the one nobody warns you about. A survey produces a register, a record of what asbestos-containing materials (ACMs) exist and where. But Regulation 4 of the Control of Asbestos Regulations 2012 (CAR 2012) doesn’t ask for a register. It asks for a plan. The next section is where most duty holders find out those are two different things.

An asbestos management plan is a legal requirement, not a best-practice nicety. An outdated, incomplete, or inaccessible plan is still a criminal breach even if your survey is current. This post gives you the complete checklist, so you can audit your own plan tomorrow morning and know exactly where you stand.

Your Asbestos Register Is Not Your Management Plan

This is the single biggest misconception in the market, and most published articles blur it. An asbestos register and an asbestos management plan are not the same document, and getting that wrong is the root cause of most compliance failures.

An asbestos register is a record. It answers one question: what ACMs exist in this building, and where are they? It is generated from a management survey and captures the type, location, and condition of each material. It is a snapshot in time.

An asbestos management plan is a living compliance document. It contains the register as one component, but it also sets out what will be done about those materials, who is responsible for doing it, how contractors will be informed before they start work, and when the plan will be reviewed. The register is an input. The plan is the obligation.

The distinction matters because Regulation 4 names the plan, not the register, as the obligation. A management survey gives you a neat bound register, and plenty of commercial landlords, NHS Trusts, and employers file it, tick the box, and stop. That is step one of a longer duty. The register tells you what you have; the law asks what you are going to do about it, in writing, with names against it.

Who Is a Duty Holder Under Regulation 4?

Before you audit your plan, confirm that the duty actually falls on you. Regulation 4 of CAR 2012 defines a duty holder in two ways, and between them they catch almost every non-domestic building in the country.

First, anyone with a contract or tenancy that imposes maintenance or repair obligations for non-domestic premises. Second, where no such contract or tenancy exists, anyone who has control over any part of the premises. If you maintain it or you control access to it, the duty is yours.

In practice that means commercial landlords and building owners, employers operating from their own premises, NHS Trusts running hospitals and clinics, local authorities responsible for council offices and leisure centres, school governors and academy trusts, and facilities management companies operating under contract. The duty applies to all non-domestic premises built before 2000, and it reaches the communal areas of blocks of flats and HMOs too. The hallways, stairwells, and plant rooms are covered, even though the individual domestic units are not.

One point catches people out. The duty cannot be fully delegated. A landlord who appoints a facilities manager remains the duty holder unless the contract explicitly transfers that obligation. Outsourcing the building’s upkeep does not outsource the legal responsibility for managing its asbestos.

The 7 Elements a Compliant Asbestos Management Plan Must Contain

Here is the checklist. A compliant plan, built around CAR 2012 Regulation 4(9) and HSE guidance, contains seven distinct elements. The HSE publishes a free asbestos management plan template if you want a structured starting point, but the document is only as good as the substance you put into it. Not every element carries the same inspection risk. Three of them carry the most weight: the register (element 1), the responsibility matrix (element 4), and the review log (element 7). An inspector can check those three in minutes, because each is either present and named or it is not. A vague plan tends to fail on them first, so audit those hardest.

1. Asbestos register with site plan. The location of every known ACM, the type of material (AIB, asbestos cement, lagging, textured coating, and so on), a condition assessment expressed as a material score and a priority score, and a site plan showing where each item sits. Areas you suspect but have not yet inspected must be recorded too, flagged as presumed until proven otherwise.

2. Risk assessment. A priority rating for each ACM based on its condition, how accessible it is, how likely it is to be disturbed, and how heavily the area is occupied. This is the element that tells you which materials need action first rather than treating everything as equal.

3. Priority action plan. A ranked list of actions for the higher-risk materials. The action can be encapsulation, enclosure, repair, removal, or a documented decision to monitor and manage in place. What it cannot be is blank. Each decision must be reasoned and recorded, because an inspector will ask why you chose it.

4. Responsibility matrix. A named duty holder, a named responsible person (which can be the same individual or a delegated deputy), and a named deputy for continuity when people are on leave or leave the organisation. Every element of the plan must have an owner whose name appears on the page. “The maintenance team” is not a name.

5. Training and communication plan. A record of who has received asbestos awareness training, who is scheduled to be trained and when, a signed training log, and a description of how the plan is communicated to staff, contractors, and cleaning staff. This is not an optional extra. It is a Regulation 4 requirement in its own right.

6. Monitoring and re-inspection schedule. How often each ACM will be visually re-inspected, the trigger conditions that bring a re-inspection forward (building works, flood or fire damage), and who carries the inspections out. Materials in good condition still need a documented schedule, not just a note that they looked fine once.

7. Review and update log. The date of the last annual review, what changed, and the signature and date of the responsible person. Without a review log, the plan cannot demonstrate that it is a live document, and an inspector reads an empty log as a plan that was written once and abandoned.

Review Requirements: When Your Plan Must Be Updated

A plan that was compliant in 2019 may put you in breach today. Buildings change, materials degrade, and tenants come and go. The review requirement exists to catch a plan that has quietly fallen out of step with the building it covers.

The minimum legal standard is an annual review, at least every 12 months, whether or not anything has changed. That is the floor, not the ceiling. An earlier review is required whenever the condition of an ACM changes, after any disturbance or incident affecting asbestos, when new survey work is completed, and when the premises change significantly through refurbishment, a change of use, or new tenants moving in.

HSE guidance is explicit that the plan should be a live document, not something to commission once and shelve. An HSE inspector will turn straight to the review log. No entries after the first means an enforcement notice.

The review does not require a fresh survey every year. It requires a documented check of the existing plan against the current condition of your ACMs and any changes to the building, signed and dated. The work is modest. Skipping it is what costs people.

The Information-Sharing Duty Regulation 4 Requires

Even a current, complete plan can leave you in breach if it sits in a locked cabinet your contractors have never seen. Regulation 4(8) and 4(9) impose an explicit duty to share the plan with anyone liable to disturb ACMs, specifically contractors, maintenance staff, and cleaning staff, before they begin work.

The key word is “before.” This obligation is proactive, not reactive. Having a plan filed somewhere on the premises does not satisfy it. The relevant parts of the plan must be put in front of every contractor and maintenance team as a condition of accessing the site, not handed over only when someone thinks to ask, and not produced halfway through the job briefing.

Plenty of duty holders who have built a genuinely complete plan still breach this single obligation, because they treat the document as an internal compliance record rather than what the law intends it to be: a communication tool that reaches the people holding the drills.

Enforcement in 2025-26: What the Penalties Look Like and Why Inspections Are Up

The stakes are criminal, not administrative. A breach of Regulation 4 can bring a fine of up to £20,000 and a prison sentence of up to six months in the magistrates’ court. A serious breach taken to the Crown Court carries an unlimited fine and up to two years in prison. The asbestos management plan legal requirement is backed by criminal sanction, and HSE improvement or prohibition notices can halt your operations immediately while you put it right.

What makes 2025-26 a particularly poor year to be exposed is the sheer volume of inspections heading for duty holders. The HSE’s Business Plan sets out 8,000 broad health priority inspections covering asbestos “duty to manage,” alongside 700 inspections targeted specifically at asbestos management in public sector buildings and 800 inspections of contractor licence compliance. The expected enforcement rate from this programme is 40 to 60 per cent.

Public sector duty holders (NHS Trusts, schools, and councils) are the immediate priority given those 700 targeted visits, but the 8,000-inspection programme reaches commercial premises too. A public consultation on modernising asbestos guidance closed on 9 January 2026, which signals regulatory tightening ahead rather than any loosening. If your plan has gaps, this is the year they are most likely to be found.

When Management Is No Longer Enough

Managing asbestos in place is the right call for stable, undisturbed materials in good condition. HSE guidance is clear that removal is not always necessary, and ripping out sound ACMs usually creates more risk than it removes. But sometimes the plan itself concludes that management has run its course.

Three situations point to removal. The ACMs are in poor condition and deteriorating beyond what repair or encapsulation can hold. Refurbishment or demolition work will disturb them, which first requires a refurbishment and demolition survey rather than the lighter management survey. Or the risk scoring in your plan identifies removal as the appropriate action. When that happens, the licensing rules become the thing that matters.

Removal of licensable asbestos (asbestos insulation board, lagging, and sprayed coatings) can only be carried out by a contractor holding an HSE standard asbestos removal licence. Minor, short-duration work may fall under the lighter maintenance licence category, but the higher-risk materials sit firmly with standard licence holders. Using an unlicensed contractor for licensable work is itself a criminal offence, and part of the responsibility falls on the duty holder who commissioned it.

This is the moment the directory exists for. When your plan flags removal, you need a contractor whose licence you can verify, not a name from a Google search. Our listings are drawn directly from the HSE’s CONIAC register and organised by region and county, including London contractors and every other part of the UK.

Audit your plan against the seven elements above. Check that your review log has an entry from the last twelve months. Confirm your contractors are given the relevant parts of the plan before they set foot on site. If that audit flags ACMs that need removing, search Asbestos Register UK to find an HSE-licensed contractor verified against the official register.