BSA Client Duties: Managing Site Compliance & Commercial Risk

By

Nicholas Dunbar

Reviewed by 

Zoe Mullan

Last Updated Jul 23, 2026

By

Nicholas Dunbar

Reviewed By

Zoe Mullan

The Building Safety Act 2022 fundamentally rewired the hierarchy of accountability in UK construction. For developers, asset managers, and commercial clients, ignorance is no longer a legal defence.

The legislation mandates strict, non-delegable duties that dictate how a project is procured, designed, constructed and used. Fumbling these obligations does more than invite regulatory scrutiny; it directly threatens your commercial margins, delays Practical Completion, and exposes you to severe legal liability under Gateway 3. To manage these statutory duties without bottlenecking the Main Contractor, you need rigid information governance, enforced from the procurement stage onwards.

Take Ownership of Building Safety Duties

The law is unequivocal. Commercial clients cannot just outsource building safety and walk away. You retain overarching responsibility for the project, meaning you must actively verify that the teams you hire have the skills, knowledge, experience, and behaviours (SKEB) required to deliver compliant work.

Consequently, keeping a live, written record of this verification process is a strict necessity. A passing glance at a company portfolio is insufficient for modern compliance. You need an auditable trail documenting past performance on similar site projects, professional qualifications, and safety records. If the regulator investigates a failure, your competence checks will be the first documents requested.

To protect your commercial position and limit your liability, formally appoint your Principal Designer in writing at the outset of the project, and your Principal Contractor in writing before the construction phase begins. Failing to carry out these written appointments means you automatically inherit these roles and their sweeping legal liabilities by default.

Once you have secured these appointments, scrutinise the project programme. Push back against aggressive timelines that force the Main Contractor to cut corners. A realistic programme ensures safety standards are not compromised for the sake of speed, preventing the costly rework that derails handover schedules.

Learn about the future of the built environment - Read Procore's Future State of Construction report

Learn how contractors, subcontractors, and project teams can take advantage of new opportunities to boost efficiency and profitability over the next decade. Download the report to get your roadmap to the future state of construction.

Download now

Implement the Digital Golden Thread

The Golden Thread is a strict legal requirement, demanding a continuous, electronic record of building information that runs from the initial design phase through construction and on through the building's occupied life. Relying on scattered emails, disconnected spreadsheets, and physical paper trails guarantees compliance failure. Instead, meeting the Golden Thread mandate requires a digital environment – commonly built around ISO 19650 information management standards, though these are encouraged practice rather than a legal mandate – enforcing strict metadata tagging for every drawing, Request for Information (RFI), and site inspection.

Consider, for instance, the friction of a traditional Gateway 3 transition. Missing fire-stopping records or incomplete material specifications will delay BSR sign-off, and that delay typically pushes back Practical Completion in turn, triggering liquidated and ascertained damages (LADs) under JCT contracts or compensation events under NEC. Instead, enforcing a Common Data Environment (CDE) linked to contract workflows ensures that missing records automatically flag as compliance failures long before Gateway 3 approval is due.

In practice, a compliant digital strategy means building consistent data structure into everyday project mobilisation:

• Contractual Data Sharing

  Provide designers and contractors with accurate site data and existing surveys strictly through the governed CDE as soon as the project begins.

• Mandated Contribution Tracking

  Establish a governed storage system that forces all duty holders to tag contributions with correct metadata in real time, eliminating unstructured uploads.

• Structured Asset Handover

  Facilitate a verified, structured information transfer to the Principal Accountable Person when the project reaches completion.

Monitor Site Compliance & Coordination

Delegating daily operations to your Principal Contractor doesn’t absolve you of your oversight duties. It’s vital to maintain an active, informed presence to ensure all duty holders are cooperating and constructing the asset according to the approved plans.

This requires regular, data-driven engagement with site operations. Relying on lagging indicators or month-old reports leaves you commercially exposed to structural errors that are expensive to rectify once buried behind plasterboard. Monitoring compliance effectively therefore requires a systematic approach to site administration, ensuring you track precise metrics without micromanaging the supply chain:

• Regulatory Alignment Checks

  Review site diary entries and progress reports regularly to confirm work aligns strictly with the building regulations compliance statement.

• Safety Event Tracking

  Confirm the Principal Contractor maintains a mandatory occurrence reporting system active on site for all workers.

• Statutory Site Provisions

  Verify that the Principal Contractor supplies suitable welfare facilities for everyone on site, meeting baseline health and safety requirements.

Higher-Risk Building Requirements

Projects classified as higher-risk buildings (HRBs) – broadly, those at least 18 metres tall or with at least 7 storeys, and containing at least two residential units (or a hospital or care home) – trigger an intense regulatory framework. The Building Safety Regulator (BSR) now enforces strict, hard-stop processes at Gateway 2 (prior to construction) and Gateway 3 (prior to occupation). You can’t begin work or occupy the building, without explicit regulatory consent. This raises the commercial stakes for the whole project. 

As a result, every design alteration carries immense risk. You must direct the building control approval process through the BSR, meaning any deviation from the approved plans requires rigorous justification and a formal change control log to prevent ad-hoc changes on site. For example, if a Main Contractor swaps a specified fire door for a cheaper alternative without proper documentation, they jeopardise the entire project timeline.

A structured data record allows you to track these variations, assess their impact, and submit the necessary evidence to the regulator. Ultimately, before anyone can move in, you must submit a signed completion declaration confirming the work meets all regulatory requirements. Signing it without a complete, accurate, and time-stamped digital audit trail is a risk no senior director should take.

Treating the Golden Thread as a strict contractual prerequisite, rather than an administrative afterthought, insulates the client from inherited legal liability and protects the Gateway 3 handover from regulatory hard-stops.

Written by

Nicholas Dunbar

Content Manager | Procore

74 articles

Nick Dunbar oversees the creation and management of UK and Ireland educational content at Procore. Previously, he worked as a sustainability writer at the Building Research Establishment and served as a sustainability consultant within the built environment sector. Nick holds degrees in industrial sustainability and environmental sciences and lives in Camden, London.

View profile

Reviewed by

Zoe Mullan

27 articles

Zoe Mullan is an experienced content writer and editor with a background in marketing and communications in the e-learning sector. Zoe holds an MA in English Literature and History from the University of Glasgow and a PGDip in Journalism from the University of Strathclyde and lives in Northern Ireland.

View profile