Article 9 RRO 2005: Your Legal Duty to Record and Review the Fire Risk Assessment

The Regulatory Reform (Fire Safety) Order 2005 (RRO 2005) replaced dozens of older fire-safety laws with a single, risk-based duty. At the heart of that duty sits Article 9 — the legal requirement to carry out a fire risk assessment and to keep it current. If you are the responsible person for a non-domestic premises in England or Wales, Article 9 is the clause you are most likely to be judged against during an inspection. This guide explains exactly what it says, when a written record is mandatory, how often you must review it, and what a defensible assessment looks like.

What Article 9 of the RRO 2005 actually says

Article 9(1) requires the responsible person to make a suitable and sufficient assessment of the risks to which relevant persons are exposed from fire on the premises. The purpose is to identify the general fire precautions the responsible person needs to take to comply with the Order.

Two words carry the most weight: suitable and sufficient.

• Suitable means the assessment must correctly identify the specific fire hazards present in your premises and the people who could be harmed.
• Sufficient means it must enable you to prioritise and take the right preventive and protective measures, without gathering unnecessary detail.

An assessment that is a generic template copied from an unrelated building is neither suitable nor sufficient. Inspectors and enforcing authorities expect a document that is recognisably about *your* premises.

When a written fire risk assessment is required

Article 9(5) requires the significant findings of the assessment, and any groups of persons identified as being especially at risk, to be recorded. This written duty applies whenever:

• You employ five or more employees (whether full-time, part-time, or agency).
• The premises are licensable under other legislation, such as a premises licence under the Licensing Act 2003.
• The premises are subject to enforcing authority inspection under the Order (for example, because they are higher-risk).
• An alteration notice has been served under Article 29 requiring you to provide information.

If none of these apply, you are not strictly required to write it down — but doing so is strongly advised. A written record is the only practical evidence that you have met your Article 9 duty, and it is the first document a fire and rescue service enforcing officer will ask to see. For most businesses, a written, dated assessment is the safe default.

What a "suitable and sufficient" assessment covers

A competent fire risk assessment follows a structured methodology. The recognised British Standard approach is set out in PAS 79-1, which organises the work into clear stages:

• Gather information about the premises, its use, occupancy, and any previous assessments.
• Identify hazards — sources of ignition, fuel, and oxygen across all areas.
• Identify people at risk, including employees, visitors, contractors, and anyone who needs assistance to evacuate.
• Evaluate and prioritise risk, deciding whether hazards are eliminated, reduced, or adequately controlled.
• Record significant findings and prepare an action plan with named owners and dates.
• Set a review date and keep the document under management control.

This mirrors the familiar five-step approach promoted by the Health and Safety Executive and is the structure most enforcing officers recognise.

How often must the fire risk assessment be reviewed?

Article 9(3) requires the responsible person to keep the assessment up to date. There is no single statutory timeframe, but the assessment must be reviewed regularly and without delay after any significant change. You should review it:

• At least once every twelve months as a baseline for most premises.
• Immediately after a significant change to the premises, the process, the numbers or types of people present, or the fire precautions.
• After a fire, near-miss, or enforcement action, to learn the lesson and close the gap.
• When new legislation or guidance materially changes your duties.

A common mistake is treating the assessment as a one-off purchase. The RRO 2005 is goal-setting, not checklist-based: the document must reflect the building as it is today, not as it was when you moved in.

What the written record must contain

A defensible Article 9 record should set out, at minimum:

• The identified hazards and the people at risk.
• The existing fire precautions and whether they are adequate.
• The significant findings, including any groups especially at risk.
• The action plan: what needs to happen, who owns it, and by when.
• The review date and the name and competence of the assessor.

Enforcing officers are not looking for perfection. They are looking for a living document that shows you understand your risks and are managing them sensibly.

Consequences of getting Article 9 wrong

Failing to carry out or maintain a suitable and sufficient assessment is an offence under Article 32 of the RRO 2005. Depending on the enforcing authority and the seriousness, this can lead to:

• An improvement notice requiring you to put things right within a set period.
• A prohibition notice restricting or stopping use of the premises until risks are controlled.
• Unlimited fines in the magistrates' or Crown Court.
• Imprisonment of up to two years for the most serious offences.
• Corporate manslaughter exposure where failures cause loss of life.

For responsible persons, the reputational and operational cost of an enforcement notice is often higher than the cost of a proper assessment.

How HawkSwift helps you meet Article 9

Meeting your Article 9 duty does not need to be confusing or expensive. At HawkSwift Ltd, our NEBOSH-qualified assessors produce court-defensible, PAS 79 / RRO 2005-aligned fire risk assessments written specifically for your premises — not a recycled template. Every report gives you the recorded significant findings, a prioritised action plan you can hand straight to an inspector, and a clear review date.

Assessments start from just £199 + VAT with a 48-hour turnaround, so staying compliant is practical for businesses of every size. Book your fire risk assessment today, or talk to the team if you are unsure whether your current document meets the Article 9 standard.

*This article is general guidance based on the RRO 2005 and is not formal legal advice. For a premises-specific assessment, book a HawkSwift visit.*