A developer completes a higher-risk building to a high standard and applies for the completion certificate. The incoming accountable person, reviewing what has been handed over, will not sign the acknowledgement of receipt. The application stalls, not because anything is structurally wrong with the building, but because the person who has to run it day to day does not believe the information they have been given is sufficient to do that safely. Under the regulations, they are entitled to make that call, and it is enough on its own to stop the building being lawfully occupied.
That is the mechanism most commentary on Gateway 3 skips past. It gets treated as a building inspection with a new name. It is closer to an information audit, and the party receiving the handover has real leverage inside it.
Who actually applies, and who actually hands over
Gateway 3, in law, is the completion certificate application under Part 5 of the Building (Higher-Risk Buildings Procedures) (England) Regulations 2023, SI 2023/909. Two roles are very commonly conflated, and getting them right matters because the consequences attach to different people. The application itself is made and signed by the client, under regulation 40(1). The principal contractor and principal designer do not apply; they sign compliance declarations confirming they fulfilled their own duties, under regulation 40(2)(f). And the duty to hand over the golden thread information at completion, under regulation 38(1), also sits with the client, not the principal contractor. A brief that describes the principal contractor as handing golden thread information to the accountable person is describing a contractual arrangement a client might impose on its contractor, not a legal duty the Building Regulations impose directly.
The handover duty carries a specific, easily missed technical requirement. Regulation 38(2) requires the information to be provided in a way that retains its original filing structure, including any index or key logically associated with it, and in a format that lets the receiving party read, keep and update it. Handing over a flat PDF export or a read only data room link does not obviously satisfy a duty that expressly requires the recipient be able to update the material afterwards.
The veto that makes this an information gate, not a building gate
Regulation 38(3) requires the relevant person, meaning the incoming accountable person and, where different, the responsible person under fire safety law, to give the client a notice acknowledging receipt that confirms two things: that they can actually access the information, and that it is sufficient to let them understand, operate and maintain the building and its fire safety systems. Regulation 40(1)(f) then requires the completion certificate application itself to include a statement signed by both the client and the relevant person confirming that handover happened and was received. Regulation 44(1)(c) requires the regulator to be satisfied that the golden thread information “is complete and has been provided” before it can approve the application at all.
Read together, those three provisions give the incoming accountable person a genuine commercial lever. If they will not sign, the application is not valid, the eight week determination clock under regulation 41 never starts, and occupying the building without a completion certificate is an offence under the Act. A developer with a perfect building and an accountable person who is not satisfied with the information they have received is, on the face of the regulations, stuck.
Two offences, two different people, easy to mix up
Section 76 of the Building Safety Act 2022 makes it an offence, carrying up to two years’ imprisonment on indictment, for a residential unit to be occupied before a completion certificate has been issued. The offence falls on the relevant accountable person, not the client and not the developer, which matters where the freehold has already been sold on. Section 77 creates a separate offence for occupying a higher-risk building that has not been registered, this time on the principal accountable person specifically, and this one carries a further daily fine for every day the default continues after conviction. Registration itself, under section 78, is not a duty the principal accountable person is directly compelled to perform; the compulsion is entirely indirect, through the section 77 offence for occupying while unregistered.
What the golden thread has to contain once people are living there
The occupation phase content list sits in Schedule 1 to the Higher-Risk Buildings (Keeping and Provision of Information etc.) (England) Regulations 2024, split between information and documents. Two items are worth flagging specifically because they surprise people. The plans required under paragraph 27 must show the building both as currently constructed and as it was first constructed, which for older stock is a genuine archaeology exercise rather than a filing task. And paragraph 24 expressly contemplates keeping a document that records a structural assessment was not needed, which is a reminder that the absence of a risk, properly evidenced, is itself prescribed golden thread content.
Retention is not a single number, whatever a summary elsewhere might suggest. A handful of specific items, mandatory occurrence reports, complaint summaries, maintenance and repair records among them, carry an express seven year window from the day they were created or received. Contravention notices carry a five year window. Almost everything else in the Schedule has no stated end date at all and is held for as long as the building remains an occupied higher-risk building and the duty subsists. None of these windows is a licence to delete; other retention obligations, from limitation periods to data protection law, run independently and often longer.
Format follows the same performance based pattern as the construction phase. Regulation 7 of the Higher-Risk Buildings (Management of Safety Risks etc) (England) Regulations 2023 requires information to be electronic, transferable without corruption, accurate, intelligible, accessible, secure and changed only through a procedure that records who changed it and when. No software or standard is named. The regulator’s own guidance adds that information should be kept digitally and in plain English, which is a sensible practice but is guidance, not law, and should not be presented as a legal requirement.
The evidence that this is not a theoretical problem
The Building Safety Regulator’s own transparency data, published in August 2026, records that no new build project that has passed through Gateway 2 has yet reached Gateway 3 at all. Of 319 Gateway 3 applications received, 235 were internal refurbishments rather than new build. Over the preceding twelve weeks, 29 Gateway 3 applications were determined, at a 72 percent approval rate and a median determination time of 16 weeks, double the eight week statutory limit. Separately, the regulator announced in July 2026 that 66 percent of building assessment certificate applications, the equivalent occupation phase check on an existing building, had been refused so far that year. A two thirds refusal rate on the certificate that exists to test whether a building can evidence its own safety is the clearest available sign that keeping the golden thread properly, from day one, is not an administrative nicety. It is the difference between a certificate that gets granted and one that does not.
Where to check this yourself
Every figure and quote above traces to the source below, and each is free to read directly.
- “How do I apply for a completion certificate?” The Building Safety Regulator publishes the application guidance itself at gov.uk.
- “How do I register a higher-risk building?” The registration process, including the current fee, is set out in full at gov.uk.
- “What does the Building Safety Act mean for contractors handing over a building?” CIOB maintains a dedicated advice and guidance hub for members at ciob.org.
- “What does the Building Safety Act mean for architects at handover?” RIBA’s initial guide covers the principal designer role through to completion, at architecture.com.
The fire and emergency file referenced throughout the handover process draws on Approved Document B and on British Standards including BS 9999, published by BSI and summarised without purchase at BSI’s product page.