The golden thread is a criminal-liability record set, not a filing exercise
Three years after Grenfell, the Building Safety Act 2022 (BSA) reframed how the UK manages risk in tall residential buildings. The headline obligation is the golden thread of information: a structured, searchable, digital record of every safety-relevant document attached to a higher-risk building (HRB). Section 78 of the BSA defines the duty. Section 79 makes failure to keep or hand over the golden thread a criminal offence. The Higher-Risk Buildings (Keeping and Provision of Information etc.) (England) Regulations 2024 (SI 2024/41) added the operational detail: format, retention, transfer mechanics, and resident-facing publication rules.
By May 2026 the Building Safety Regulator (BSR) sits inside the Health and Safety Executive and has issued enforcement notices through a full year of building assessment certificate (BAC) audits. The regulator has stopped asking whether the golden thread exists. It is asking how complete it is, who controls it, and how fast it can be produced.
Who is in scope and how big is the population
An HRB is a building of at least 18 metres in height or with at least 7 storeys, containing 2 or more residential units. The BSR registered approximately 12,500 such buildings in England by 2024. Every HRB has a Principal Accountable Person (PAP). Where multiple parts of a building belong to different freeholders or management companies, each is an Accountable Person (AP), and one of them is designated PAP. That PAP carries the legal duty to assemble and keep the golden thread.
This catches a wider set of organisations than people assume. Housing associations, build-to-rent landlords, mixed-use developers, NHS estates with residential accommodation, university residences, and some hotel-conversion blocks all fall inside the regime. Each PAP must register the building and prepare a safety case report that the BSR can audit on demand.
The 6 categories of golden thread content under SI 2024/41
SI 2024/41 sets out exactly what the golden thread must contain. The categories overlap with FM and building handover documentation, but the BSA layers stricter retention and integrity requirements on top:
- The building safety case report, including the structured assessment of fire and structural hazards
- The fire and emergency file: evacuation strategy, compartmentation drawings, sprinkler and detection system records
- Records of relevant works carried out (refurbishments, cladding remediation, riser modifications, lift replacements)
- Maintenance and inspection logs for safety-critical systems
- The mandatory occurrence reporting log: every event where a safety risk has been identified or has materialised
- The resident engagement strategy and a record of complaints received, with outcomes
Each item must be stored in a format that can be searched, version-controlled, and transferred to a new AP without data loss. Paper filing cabinets do not meet this standard. Neither do shared inboxes or generic cloud drives without retention controls.
The handover trap that triggers criminal liability
Section 79 BSA is the provision that keeps directors awake. When a building changes hands, when a management company is replaced, or when a PAP role transfers between group entities, the outgoing PAP must hand over the full golden thread to the incoming PAP. Failure to provide the information, or providing it in a state that prevents the successor from discharging their duties, is a criminal offence. On indictment it carries up to 2 years imprisonment and an unlimited fine. On summary conviction the cap is 12 months and a fine.
This bites hardest on portfolio transactions. A housing association acquiring 30 HRBs from another association inherits the golden thread obligation from day one. If the seller cannot evidence a clean, complete, intact handover, the buyer becomes the defendant in any subsequent BSR action, and the seller faces the section 79 charge.
What the BSR actually checks in 2026
The BSR has now completed its first full cycle of building assessment certificate audits. The pattern from compliance notices issued through 2025 shows three repeat failure modes:
- Missing as-built drawings or post-refurbishment record drawings, especially for cladding remediation works completed under separate contracts
- Gaps in the mandatory occurrence reporting log, often because contractors raised concerns to a site WhatsApp group rather than the formal channel
- Resident engagement strategies that exist on paper but cannot evidence a single complaint cycle from receipt to resolution
The remediation timeline the BSR grants is short. Most notices give 28 days to produce evidence and a further 60 days to remediate the underlying control gap. Buildings that cannot demonstrate compliance face escalation to formal prosecution and, in the worst cases, a special measures order that places the building under regulator-appointed management.
What good looks like for a PAP record set
A defensible golden thread satisfies four operational tests. First, every document is hash-stamped and timestamped at ingest, so the regulator can verify nothing has been altered after the safety case was signed off. Second, the structure mirrors the SI 2024/41 categories, not the internal filing habits of the property manager who happened to set it up. Third, access is role-based and logged: who viewed the fire strategy, who exported the maintenance log, who edited the resident strategy. Fourth, a complete export can be produced for handover within 24 hours, including a manifest the successor can use to verify completeness.
The PAPs that build this discipline now are also the ones who survive the next round of BSR audits without remediation costs that quietly run into six figures per building. The ones who treat the golden thread as a filing problem rather than a controlled record set are the ones who end up on the section 79 charge sheet.
