ESOS penalties and enforcement

The ESOS penalty framework

ESOS penalties are civil sanctions imposed under the Regulatory Enforcement and Sanctions Act 2008. The Energy Savings Opportunity Scheme Regulations 2014 (SI 2014/1643), as amended by the ESOS Amendment Regulations 2023 (SI 2023/1182), set out the specific compliance obligations; the RES Act 2008 provides the enforcement powers.

The framework distinguishes between different types of non-compliance, with different maximum penalties applying to each.

The Environment Agency's enforcement and sanctions policy (Annex 2, Section D) sets out how the EA applies penalties in practice, including the factors it considers when determining penalty levels.

ESOS is enforced separately in each nation of the UK.

The Environment Agency is the ESOS enforcement authority in England.

The Scottish Environment Protection Agency (SEPA) enforces in Scotland, Natural Resources Wales (NRW) in Wales, and the Northern Ireland Environment Agency (NIEA) in Northern Ireland.

Each applies a similar penalty framework aligned to the SI 2014/1643 regulations.

Notification failure penalties

Failure to notify the Environment Agency of compliance by the Phase 4 deadline of 5 December 2027 is a standalone ESOS offence.

The maximum fixed penalty for notification failure is £45,000, rising to £50,000 for persistent or aggravated non-compliance.

A notification failure arises where the organisation has actually completed its energy audit but has failed to submit the compliance notification through the MESOS (Manage your ESOS) digital system.

This is distinct from failing to undertake the audit at all — though both constitute ESOS non-compliance.

The Environment Agency conducts active compliance monitoring by cross-checking its register of qualifying organisations against notifications received.

Audit failure penalties

Failure to undertake the required ESOS energy audit attracts the highest ESOS penalty — a maximum of £90,000 under the Regulatory Enforcement and Sanctions Act 2008.

This applies where the organisation has not conducted an energy audit covering at least 95% of total UK energy consumption in accordance with SI 2014/1643.

An audit failure also encompasses situations where an audit was conducted but does not meet the minimum content requirements — for example, where the lead assessor was not appropriately accredited, where the coverage threshold was not achieved, or where mandatory content elements (such as the action plan or Phase 3 progress reporting) were absent.

The Environment Agency may reject a non-compliant audit and treat the organisation as having failed to undertake the required audit.

Audit failure penalties can be combined with notification failure penalties where both apply.

An organisation that neither conducted a compliant audit nor submitted a valid compliance notification could face penalties approaching the combined maximum of both penalty types.

Daily penalties for ongoing breach

In addition to fixed penalties, the Environment Agency can impose daily penalties of £500 per day for continuing non-compliance.

Daily penalties accrue from the date of the fixed penalty decision and continue until the non-compliance is remedied.

For an organisation that receives a fixed penalty for notification failure and then takes six months to achieve compliance, daily penalties could add approximately £90,000 (180 days × £500) to the initial fixed penalty under the RES Act 2008 civil sanctions framework.

This makes the economic case for prompt compliance remediation compelling, even after a fixed penalty has been imposed.

Daily penalties are not automatic — the Environment Agency applies them based on its assessment of the organisation's response to enforcement action.

Prompt engagement and good faith efforts to achieve compliance can limit the accumulation of daily penalties.

However, the EA does impose daily penalties in cases where organisations fail to respond to enforcement notices or demonstrate no genuine intention to comply under SI 2014/1643.

Publication — naming on GOV.UK and the public register

The Environment Agency publishes details of ESOS enforcement on its public register, accessible through data.gov.uk.

ESOS civil penalty data is recorded within the EA's wider climate change enforcement dataset.

Published information typically includes the organisation's name, nature of the breach, and penalty imposed.

For many organisations — particularly those that value their sustainability reputation or are subject to investor ESG due diligence — publication on the public register represents a more significant consequence than the financial penalty itself.

Institutional investors, sustainability-focused customers, and supply chain partners routinely check public environmental compliance registers as part of ESG screening processes.

Environment Agency enforcement approach

The Environment Agency applies a proportionate and graduated enforcement approach, prioritising compliance support over immediate penalties for organisations demonstrating genuine efforts to comply. GOV.UK guidance

confirms that the EA's enforcement and sanctions policy (published in full as Annex 2, Section D of the ESOS guidance) sets out how the EA determines penalty levels.

Factors the EA considers in setting penalty levels include:

• Nature and extent of the non-compliance — failure to notify vs failure to audit vs incomplete audit
• Organisation size — penalty levels are calibrated to be proportionate to the organisation's scale
• Compliance history — first-time non-compliance is treated differently from repeat breaches
• Cooperation with the EA — organisations that engage proactively with the EA receive more favourable treatment
• Self-reporting — organisations that identify and report their own non-compliance before EA contact are treated more favourably
• Good faith efforts — evidence that the organisation was genuinely attempting to comply, even if unsuccessful, is considered

The EA has stated that it prioritises compliance support over penalties where organisations demonstrate good faith.

However, this approach requires active engagement — organisations that do not respond to EA communications or demonstrate no intention to comply are treated as deliberate non-compliers and face the higher end of the penalty scale.

Enforcement notices

Before imposing financial penalties, the Environment Agency typically issues enforcement notices requiring organisations to take specific remediation steps within defined timeframes.

An enforcement notice may require an organisation to undertake an energy audit by a specified date, submit a compliance notification, or produce documentation demonstrating compliance efforts.

Failure to comply with an enforcement notice itself constitutes an additional offence and triggers further penalty exposure.

Organisations that receive enforcement notices should treat them as urgent and seek professional advice on the fastest route to compliance — which may include commissioning an emergency ESOS audit with available accredited lead assessors.

The EA has the authority to conduct its own audits of organisations and request compliance evidence.

Where the EA conducts its own investigation of an organisation's ESOS status, this typically indicates a more serious enforcement posture than where the EA is simply monitoring notification compliance.

Phase 3 enforcement in practice

The Phase 3 compliance deadline was extended from 5 December 2023 to 5 June 2024.

Despite this extension, a significant number of organisations failed to comply on time.

The Environment Agency confirmed that it began serving enforcement notices for alleged Phase 3 non-compliance shortly after the extended deadline expired in June 2024.

The highest single penalty recorded for a previous ESOS phase was £67,500 — demonstrating that the EA will impose significant penalties for serious or persistent non-compliance.

The EA's ESOS civil penalty data (published on data.gov.uk) provides a public record of enforcement activity that organisations can review to understand the EA's enforcement posture.

Phase 3 enforcement experience indicates the EA is willing to act against large, well-resourced organisations.

ESOS compliance monitoring is systematic — the EA cross-checks its register of qualifying organisations against notifications received under SI 2014/1643, making non-compliance difficult to overlook.

Mitigating factors and what to do if you are at risk

Organisations that recognise they may miss the Phase 4 deadline of 5 December 2027 should take immediate action:

• Contact the Environment Agency proactively before the deadline — early engagement consistently results in more favourable outcomes
• Commission an ESOS-accredited lead assessor as soon as possible — capacity constraints in the lead assessor market become significant as the deadline approaches
• Document all compliance efforts made to date — evidence of good faith attempts to comply is a mitigating factor the EA considers
• If an ISO 50001 certification route is feasible within the timeframe, pursue it — full ISO 50001 coverage eliminates the audit requirement
• Seek legal advice if an enforcement notice has been received — understanding the timescales and rights of appeal is important

Late ESOS compliance — completing audits and notifications after the deadline — does not eliminate penalty exposure but can significantly limit the final penalty level, particularly if the organisation engages proactively with the EA.

Do not ignore the situation: the cost of late compliance is almost always lower than the cost of persistent non-compliance.

Penalty summary table

Frequently asked questions