29 April 2026
CDM 2015 Compliance in the Post-Building Safety Act Era
Following the implementation of the Building Safety Act 2022, a legislative response to the Grenfell Tower tragedy, the Construction (Design and Management) Regulations 2015 have assumed renewed prominence in the regulatory framework.
This convergence of legislative instruments has created an enforcement environment where non-compliance carries severe consequences.
Construction companies must recognise that CDM 2015 adherence is no longer merely a statutory obligation but a fundamental business imperative.
Here we examine the intersection of these regulatory frameworks, analyses current enforcement trends, and provides practical guidance for achieving robust compliance in this heightened scrutiny environment.
The Regulatory Framework: Understanding the Intersection
CDM 2015 Fundamentals: The Construction (Design and Management) Regulations 2015 establish a comprehensive framework for managing health and safety throughout a project’s lifecycle. These regulations impose specific duties on clients, designers, principal designers, principal contractors, and contractors, requiring systematic planning, management, and coordination of construction activities.
The fundamental principle underpinning CDM 2015 is that health and safety considerations must be integrated from project conception through to completion and subsequent maintenance.
Building Safety Act 2022 Overview: The Building Safety Act 2022 introduced transformative changes to building safety regulation, establishing the Building Safety Regulator within the Health and Safety Executive and implementing a Gateway regime for higher-risk buildings. Whilst primarily focused on buildings exceeding 18 metres or seven storeys containing residential units, the Act’s influence extends throughout the construction sector, elevating expectations for safety management across all project types.
The Convergence Point: The Building Safety Act has amplified CDM 2015’s importance by creating an integrated regulatory ecosystem where compliance with both frameworks is essential. The Gateway regime’s rigorous documentation requirements align closely with CDM 2015’s emphasis on planning and information management. Regulatory authorities now expect seamless integration of safety management systems, with CDM 2015 forming the foundational framework upon which Building Safety Act compliance is constructed.
Current Enforcement Climate
HSE’s Intensified Focus: The Health and Safety Executive has demonstrably increased enforcement activity relating to CDM 2015 breaches. Recent prosecution statistics reveal a marked upward trend in formal enforcement actions, with financial penalties reaching unprecedented levels. Notable cases have resulted in fines exceeding £1 million, accompanied by significant reputational damage. The HSE’s approach has shifted from advisory to punitive, reflecting governmental determination to prevent future tragedies.
Building Safety Regulator’s Role: The Building Safety Regulator possesses enhanced powers including comprehensive inspection capabilities and authority to issue stop notices and compliance orders. Significantly, the Regulator coordinates closely with HSE on CDM matters, creating a unified enforcement approach. This coordination ensures that deficiencies in CDM compliance are identified during Gateway submissions and addressed before project progression.
Industry-Wide Implications: Construction sites now experience increased inspection frequency and intensity, with regulatory authorities scrutinising documentation standards and record-keeping practices. The enforcement approach extends beyond principal contractors to encompass entire supply chains, establishing accountability throughout the project delivery network. Companies previously considered low-risk now find themselves subject to unannounced inspections and comprehensive audits.
Critical Compliance Areas Requiring Attention
Duty Holder Appointments and Competence: Proper identification and formal appointment of CDM duty holders constitutes a fundamental compliance requirement. Organisations must implement rigorous competence assessment processes, ensuring appointed individuals possess requisite knowledge, experience, and organisational capability. Documentation of appointments, including evidence of competence assessments, must be comprehensive and readily accessible for regulatory inspection.
Pre-Construction Information and Planning: The preparation of comprehensive pre-construction information has assumed critical importance, particularly for projects subject to Gateway requirements. Construction phase plans must demonstrate thorough risk assessment, detailed method statements, and robust management arrangements. Regulatory authorities expect these documents to be living instruments, regularly reviewed and updated throughout project delivery.
Health and Safety File Management: Health and safety files must be accurate, comprehensive, and accessible, containing information necessary for future construction, maintenance, and demolition activities. Digital information management requirements, particularly for higher-risk buildings, necessitate structured approaches to data capture and storage. Handover procedures must ensure clients receive complete documentation enabling ongoing building safety management.
Design Risk Management: Designers face explicit obligations to eliminate foreseeable risks during design development and provide information about residual risks. Documentation of design decisions, including risk assessments and consideration of alternative approaches, is essential. Regulatory authorities increasingly scrutinise whether designers have adequately discharged their duties, with enforcement action targeting design organisations demonstrating systematic failures.
Principal Designer and Principal Contractor Coordination: Effective coordination between principal designers and principal contractors is fundamental to CDM compliance. Clear delineation of responsibilities, supported by documented communication protocols, ensures information flows efficiently throughout project delivery. Regular monitoring and review mechanisms must be established, with senior management oversight ensuring coordination arrangements function effectively.
Practical Compliance Strategies
Organisational Preparedness: Construction companies should conduct comprehensive internal compliance audits, identifying gaps between current practices and regulatory expectations. Staff training programmes must ensure personnel understand their CDM obligations, with competence development initiatives addressing identified deficiencies. Appointing dedicated compliance officers with appropriate authority and resources demonstrates organisational commitment to regulatory adherence.
Documentation and Record-Keeping: Implementing robust document management systems creates audit trails satisfying regulatory inspection requirements. Standardised templates ensure consistency across projects whilst reducing administrative burden. Digital systems should facilitate version control, access management, and retrieval, enabling rapid response to regulatory requests.
Supply Chain Management: Due diligence on contractors and designers must extend beyond financial and technical capability to encompass health and safety competence. Contractual clauses should explicitly require CDM compliance, with performance monitoring mechanisms ensuring obligations are discharged. Developing collaborative safety cultures throughout supply chains creates shared responsibility for regulatory adherence.
Technology and Digital Solutions: Common Data Environments facilitate information management, ensuring stakeholders access current documentation. Digital compliance tracking tools provide real-time visibility of regulatory obligations and completion status. Building Information Modelling integration enables safety information to be embedded within design models, improving coordination and information transfer.
Consequences of Non-Compliance
Legal and Financial Risks: CDM 2015 breaches constitute criminal offences, with prosecution potential for organisations and individuals. Courts impose unlimited fines for serious breaches, with sentencing guidelines considering factors including culpability, harm potential, and organisational turnover. Director disqualification represents an additional sanction for the most egregious failures, preventing individuals from holding management positions.
Business Impact: Reputational damage from prosecution extends beyond immediate financial penalties, affecting client confidence and market perception. Public sector procurement processes increasingly exclude organisations with poor health and safety records, whilst private clients conduct enhanced due diligence. Insurance implications include premium increases and potential coverage restrictions, affecting project viability and profitability.
Operational Disruption: Enforcement actions cause significant project delays, with stop notices and prohibition orders halting activities until deficiencies are remediated.
Resource diversion to address regulatory concerns impacts other projects and business operations. The cumulative effect of operational disruption often exceeds direct financial penalties, threatening business continuity.
BSG Comment
The post-Building Safety Act regulatory environment demands that construction companies treat CDM 2015 compliance as a strategic priority rather than administrative obligation.
Enforcement authorities have demonstrated their determination to hold the industry accountable, with consequences for non-compliance extending far beyond financial penalties. Organisations must conduct immediate compliance reviews, implementing enhancements addressing identified deficiencies.
The regulatory trajectory indicates continued evolution and intensification of enforcement activity. Forward-thinking companies will recognise that robust compliance constitutes both competitive advantage and professional responsibility, positioning themselves for success in an increasingly regulated sector.
Andy Harper, Head of Technical and CDM Support | T : 0300 304 9070 | E: andrewh@bsgltd.co.uk