Roofing accounts for a disproportionate share of the UK's fatal and serious construction injuries every year. The HSE consistently identifies falls from height as the single biggest cause of construction fatalities — and roofing, by its nature, puts workers at height on every single job. This is not a sector where compliance is optional bureaucracy. It is the framework that keeps your workers alive and your business protected.
But compliance also has a commercial dimension that is underappreciated by many contractors. NFRC membership, written RAMS, verifiable insurance cover, and demonstrable HSE compliance are increasingly required by commercial clients, local authorities, and insurance-savvy homeowners before a contract is awarded. The contractors who treat compliance as a sales asset — not just a legal obligation — win better jobs at better margins.
This guide covers every compliance obligation relevant to UK roofing contractors in 2026. It is not legal advice — for specific situations always consult a qualified health and safety professional or solicitor — but it is a comprehensive operational reference for the legislation, standards, and documentation every roofing business needs.
The Core Legislation: What Applies to Roofing Contractors
Multiple pieces of legislation govern roofing work in the UK. These are not optional — ignorance of the law is not a defence in an HSE prosecution. Here is what you need to understand about each.
The WAH Regulations apply to any work where a person could fall and injure themselves — which means every roof job without exception. The regulations require that all work at height is properly planned, appropriately supervised, and carried out by competent persons using suitable equipment.
The hierarchy of control under WAH Regs is: (1) avoid working at height if reasonably practicable; (2) use existing safe places of work; (3) use collective protection (scaffolding, edge protection, safety nets) before individual protection (harnesses); (4) where individual protection is used, ensure it is appropriate and workers are trained in its use.
What this means in practice: For significant roof work on a two-storey or higher property, a harness alone does not satisfy the collective protection requirement unless scaffolding is genuinely impracticable. The HSE expects contractors to use scaffolding or erected edge protection as the primary means of fall prevention, not harnesses as a substitute for proper access equipment.
CDM 2015 replaced earlier CDM regulations and significantly expanded their scope. They now apply to all construction projects — including domestic work — not just large commercial sites. The regulations define clear duties for clients (including domestic homeowners in some cases), principal designers, principal contractors, and contractors.
For most domestic roofing jobs involving a single contractor, the contractor takes on both the principal contractor and contractor roles. Key obligations include: pre-construction planning for health and safety, maintaining a construction phase plan, and ensuring all workers have suitable skills, training, and experience for the work being carried out.
Notifiable projects: A project becomes notifiable to the HSE when it will last more than 30 working days with more than 20 workers simultaneously, or will exceed 500 person-days total. Most domestic roofing jobs are not notifiable, but larger commercial or multi-property projects may be. Notification is done via the HSE's F10 form.
The HSWA places a general duty on all employers to ensure, so far as is reasonably practicable, the health, safety, and welfare of their employees and anyone else affected by their work — including homeowners, neighbours, and members of the public passing near the job site.
Self-employed contractors also have duties under the HSWA to protect themselves and others. The "reasonably practicable" standard means balancing the risk against the cost and inconvenience of controlling it — but for known, controllable hazards like falls from height, the bar for what is "reasonably practicable" is high.
PUWER requires that all work equipment — including ladders, scaffold towers, power tools, and lifting equipment — is suitable for its intended use, maintained in good working order, and used only by people who have received adequate training and instruction. Equipment must be inspected at appropriate intervals and records kept.
For roofing contractors specifically: Ladders must be in good condition, correctly footed and tied, and only used for access or brief work — not as a working platform for extended roof work. Scaffold towers must be erected by trained operatives, inspected before use, and not overloaded. Any powered tool must be appropriate for the task and regularly checked.
COSHH requires employers to assess and control exposure to hazardous substances. For roofers, the most relevant substances are: lead (used in flashing — a known toxic metal requiring specific handling precautions); bitumen and hot melt compounds (fumes are a respiratory hazard); solvent-based adhesives and primers; and fibreglass (GRP dust during cutting is a skin and respiratory irritant).
Asbestos: Asbestos-containing materials (ACMs) may be present in roofs built before 2000 — particularly in corrugated cement sheets, insulation boards, and older flat roof materials. Before any stripping work on a pre-2000 roof, an asbestos survey should be conducted or the materials assumed to contain asbestos and managed accordingly under the Control of Asbestos Regulations 2012.
Scaffold and Access Equipment Requirements
Access to height is the single highest-risk element of roofing work, and the area most scrutinised by the HSE. Getting this right is non-negotiable — both legally and commercially, since more homeowners and commercial clients are now asking to see your scaffold risk assessment before work starts.
The access system you use must be appropriate for the work being carried out — not simply the cheapest option. The WAH Regulations hierarchy requires collective protection first, individual protection second. Here is the decision framework:
- Scaffold towers (PASMA): Suitable for repointing, small repairs, and inspection on two-storey properties. Must be erected and dismantled by a PASMA-trained operative. Height limitation applies — follow manufacturer's guidelines for the specific tower.
- Tube and fitting or system scaffold: Required for full retiles, extensive repairs, and any work on three-storey or higher properties. Must be designed, erected, inspected, and dismantled by a CISRS (Card Scheme) scaffolder. A scaffold inspection by a competent person every 7 days and after adverse weather is a legal requirement.
- Roof ladders / crawl boards: Acceptable as a working surface on a pitched roof once safe scaffold access to roof level exists. Not a substitute for edge protection. Must be purpose-made, in good condition, and properly secured to the ridge.
- MEWP (Mobile Elevated Work Platforms): Cherry pickers and scissor lifts are appropriate for some access situations — particularly where scaffold erection is impractical (tight access, urban sites). Operators must hold a relevant IPAF licence.
All scaffold erected on your jobs should be built by a card-holding CISRS scaffolder. If you subcontract scaffold erection, ask to see the CISRS card before work starts. You as the principal contractor retain health and safety responsibility for the scaffold even if a subcontractor erected it.
Any exposed roof edge where a worker could fall more than 2 metres requires edge protection. This means a guardrail at a minimum height of 950mm above the working surface, a mid-rail, and a toe board to prevent materials rolling off the edge. These must be in place before work begins — not erected once workers are already on the roof.
- Guardrails must be capable of withstanding a 74kg lateral load at the top rail — the equivalent of a person falling against them
- Gaps in edge protection (e.g. around a scaffold access ladder) must be kept to the minimum necessary and guarded as far as practicable
- On fragile roofs (older felt, fibre cement, corrugated materials), additional precautions apply — crawl boards and netting are required even if edge protection exists, as a fall through the roof surface is a separate hazard from a fall off the edge
- Debris netting below the scaffold is good practice on any job near a public footway, driveway, or neighbouring property
Scaffold on a public footway or road requires a licence from the local authority (a scaffold licence or Section 169 licence under the Highways Act). Without this, the scaffold is technically unlawful regardless of its safety. Councils enforce this — and fines for non-licensed footway scaffolding are common in urban areas.
Under the WAH Regulations, scaffolding must be inspected by a competent person at these intervals:
- Before it is used for the first time after erection or significant alteration
- After any event likely to have affected its stability — high winds, storm, impact damage
- At regular intervals not exceeding 7 days
The inspection must be recorded in writing. The record must include the date, the location, a description of what was inspected, any defects found, the name and position of the inspector, and the signature of the inspector. These records must be kept available on site until the work is complete, and for three months thereafter.
The "competent person" does not need to be a scaffolder — it can be a trained supervisor or the site manager — but they must have sufficient knowledge, training, and experience to identify unsafe conditions and understand what action to take.
The HSE provides a free scaffold inspection checklist template (Form HSE47 equivalent) on its website. Using a standard checklist ensures nothing is missed and provides clear evidence of your compliance process if an incident or inspection occurs.
Risk Assessment and Method Statements (RAMS)
A Risk Assessment identifies the hazards on a specific job and the control measures in place to manage them. A Method Statement describes step-by-step how the work will be carried out safely. Together they form the RAMS document that is increasingly required before a commercial client will allow you on site.
What a roofing RAMS should cover
| Section | What to include |
|---|---|
| Project details | Job address, client name, principal contractor, start date, estimated duration, number of workers |
| Scope of work | Specific tasks — strip, felt replacement, tile laying, ridge work, flashing. Reference to any subcontracted elements. |
| Hazard identification | Falls from height (roof edge, through fragile surface, from scaffold), manual handling (tile weight), struck by falling object, weather (wind, ice, rain), asbestos (if pre-2000), lead handling, electrical cables near roof |
| Control measures | Scaffold specification and inspection frequency, edge protection details, PPE requirements, exclusion zones below work area, permit to work for fragile roof, asbestos survey reference |
| Emergency procedures | First aider details, nearest A&E, emergency contact numbers, procedure if a worker falls |
| Competency confirmation | Confirmation that all operatives hold relevant cards (CSCS, PASMA, IPAF, CISRS as applicable), names, and card numbers |
| Sign-off | Signed and dated by the contractor, and by each operative confirming they have read and understood the document |
Insurance Requirements for UK Roofing Contractors
Insurance is not just legal protection — it is a commercial prerequisite for winning better jobs. Most commercial clients, local authorities, and managing agents will not engage a contractor without verified insurance cover at specified minimums.
| Insurance type | Legal requirement? | Recommended minimum | Notes |
|---|---|---|---|
| Employers' Liability | Legally required | £5 million | Required if you employ anyone — including most subcontractors. Certificate must be displayed at the workplace. |
| Public Liability | Not mandatory by law | £2 million minimum £5 million for commercial |
Required by NFRC, most commercial clients, and all local authority contracts. Covers third-party injury and property damage. |
| Tools & Equipment | Not mandatory | To replacement value | Covers theft and accidental damage to tools and equipment on site and in transit. |
| Professional Indemnity | Not mandatory | £1 million | Required if you provide design advice, specifications, or surveys. Covers claims arising from professional negligence. |
| Contract Works | Not mandatory | Contract value | Covers damage to the works themselves during construction — e.g. a storm stripping tiles you have just laid. Often required by commercial clients. |
* Always confirm with your insurer that your policy covers the specific activities you carry out — flat roofing, lead work, and GRP installation all carry different risk profiles and some policies exclude specific activities. Disclose all activities fully at inception.
Competency Cards: CSCS, PASMA, and IPAF
Competency card schemes exist to verify that individual operatives have the training and knowledge to carry out specific tasks safely. They are increasingly required on commercial sites and are a strong trust signal with professional clients.
The CSCS card is the construction industry's primary competency card — a requirement on most commercial construction sites and an increasingly common ask from professional homeowner clients and commercial managing agents. There are different card types based on qualification level:
- Green Labourer card: For general site operatives with a Construction Skills Health, Safety and Environment Test
- Blue Skilled Worker card: For trained tradespeople with an NVQ Level 2 or equivalent in their trade
- Gold Skilled Worker card: NVQ Level 3 or equivalent — the target for experienced roofers
- Black Manager card: For site managers and supervisors
All CSCS cards require passing the CITB Health, Safety and Environment (HS&E) test, which covers construction safety regulations, site hazards, and emergency procedures. The test is available at Pearson VUE test centres nationwide.
NVQs in roofing are available at Levels 2 and 3 through providers including CITB-approved training centres. They are assessed in the workplace and typically take 12–18 months. Completion unlocks the Blue or Gold CSCS card and is a prerequisite for NFRC full membership at the operative level.
The PASMA card certifies that the holder has completed the PASMA Mobile Access Towers training course and is competent to erect, dismantle, alter, and inspect mobile scaffold towers. The course covers: tower types, stability and loading requirements, inspection procedures, and common errors that lead to collapse.
Any roofer who erects and uses scaffold towers as part of their access system should hold a current PASMA card. The course takes one day and is widely available. The card is valid for five years before renewal training is required.
- PASMA training is available at centres nationwide — find providers on the PASMA website
- The card costs approximately £30 and is issued upon successful course completion
- PASMA also offers an outdoor towers module for towers used in exposed outdoor conditions — relevant for most roofing applications
The maximum working height of a PASMA tower without additional engineering assessment depends on the tower's base dimensions and whether it is a 3T (through-the-trap) or advance guard rail design. Do not exceed the manufacturer's specified height limits — overheight towers are one of the most common causes of scaffold tower collapse on roofing sites.
The IPAF PAL (Powered Access Licence) card is required for operators of mobile elevating work platforms (MEWPs) — including cherry pickers (boom lifts) and scissor lifts. The licence is category-specific: different cards cover different MEWP types, so ensure the card held matches the equipment being used.
- Category 1a: Scissor lifts (vertical travel only)
- Category 3a: Static vertical boom lifts
- Category 3b: Mobile boom lifts (cherry pickers) — the most common for roofing access
Training takes one to two days per category. The PAL card is valid for five years. IPAF recommends a Refresher course at renewal. The card is recognised internationally and required on all major commercial sites where MEWPs are used.
Most MEWP hire companies will not release equipment without sight of a current PAL card for the operator. If you hire a cherry picker and your operative does not hold the correct IPAF category, you cannot legally use it — and you remain liable for any incident that occurs.
NFRC Membership: What It Requires and Why It Matters
The National Federation of Roofing Contractors is the UK's largest roofing trade body. Membership is voluntary but commercially significant — and the compliance requirements for membership mean that NFRC membership itself functions as a proxy competency signal that homeowners and commercial clients increasingly use to filter contractors.
| Requirement | NFRC standard | Why it matters |
|---|---|---|
| Public Liability Insurance | Minimum £2 million | Verified at application and annually on renewal |
| Employers' Liability Insurance | Minimum £5 million (if applicable) | Confirms legal compliance for employers |
| Work quality assessment | Site inspection by NFRC assessor for Approved member status | Third-party verification of workmanship standard |
| Health & safety competency | Evidence of H&S management system or equivalent | Confirms awareness of legal obligations |
| Trade references | Required at application | Verifies trading history and reputation |
| Consumer guarantee | NFRC-backed workmanship guarantee on qualifying work | Strongest consumer protection available in the roofing sector |
The Compliance Checklist: What Every Roofing Contractor Should Have in Place
Use this checklist to audit your current compliance position. Every item here is either a legal requirement or a commercial prerequisite for winning better jobs.
Legal requirements — non-negotiable
- Employers' Liability Insurance (minimum £5 million) — certificate displayed at workplace
- Written risk assessments for all significant roofing activities
- Method statements available for all jobs involving work at height
- Scaffold inspection records maintained and available on site
- All operatives hold current CSCS cards appropriate to their role
- PASMA cards held by all operatives who erect scaffold towers
- COSHH assessments in place for lead work, bitumen, adhesives, and fibreglass
- Asbestos survey obtained or materials treated as ACMs on all pre-2000 roofs
- First aid provision on site (minimum a stocked first aid kit; trained first aider for larger sites)
- Scaffold licence obtained from local authority for any scaffold on a public highway
Best practice — commercially significant
- Public Liability Insurance minimum £2 million — certificate available on request
- NFRC membership (or equivalent trade body) applied for or in place
- IPAF PAL cards held by any operative using MEWPs
- NVQ Level 2 or 3 in roofing completed or in progress for all trade operatives
- Subcontractor insurance certificates obtained before any subcontractor starts work
- Construction Phase Plan documented for all CDM-applicable projects
- Toolbox talks delivered and recorded regularly covering relevant hazards
- Incident and near-miss reporting system in place
- Contract Works insurance obtained for all significant contracts
- Company health and safety policy statement written and communicated to all workers
How Compliance Wins Better Jobs
The practical commercial impact of being fully compliant is significant and underappreciated by many smaller contractors. Consider the purchasing decisions of the clients who commission the highest-value roofing work:
✗ What unverified contractors miss out on
- Local authority and housing association contracts (require NFRC + verified insurance)
- Commercial property and FM company approved lists (require PLI certificates and RAMS)
- Insurance-funded repair work (require specific coverage and documentation)
- Premium residential clients who ask to see insurance before booking
- Referrals from architects and surveyors (who only refer verified contractors)
- New build and developer work (requires CSCS cards for all operatives)
✓ What fully compliant contractors can access
- Council and housing association frameworks — often multi-year, guaranteed volumes
- FM company approved supplier lists — recurring commercial work at stable margins
- Insurance repair networks — high-value emergency work with assured payment
- Architect and surveyor referral networks — premium residential clients
- NFRC consumer guarantee jobs — homeowners who specifically seek NFRC members
- Developer frameworks — new build and planned maintenance programmes
"The contractors who say health and safety is just paperwork are usually the ones quoting the same Checkatrade jobs year after year. The ones who treat compliance as a commercial asset are the ones winning local authority contracts, FM agreements, and premium residential referrals."
For the complete picture of how to build a roofing business that wins higher-value leads through digital visibility — alongside the compliance foundation covered in this guide — see our guide on NFRC accreditation and marketing for UK roofing contractors. For how to generate leads from commercial clients specifically, see how to win commercial roofing contracts in the UK.
Build the Business That Compliance Opens the Door To
Once your compliance is in order, the next step is making sure commercial clients and homeowners can find you. We help UK roofing contractors build the Google Maps and local SEO presence that generates consistent, direct enquiries. Free audit within 24 hours.
Get Your Free Visibility Audit →