ESOS reporting — yes, ESOS regulations are mandatory

The short answer — yes, ESOS reporting is mandatory

ESOS is mandatory for qualifying UK organisations.

The Energy Savings Opportunity Scheme Regulations 20141 (SI 2014/1643) impose statutory obligations on organisations meeting the qualification thresholds at the relevant qualification date.

The regulations were substantially amended by SI 2023/11824 (Energy Savings Opportunity Scheme (Amendment) Regulations 2023), which strengthened audit requirements, introduced action plans and progress updates, and applies to Phase 3 (mid-cycle) and Phase 4 (in full).

"Mandatory" means civil sanctions enforcement7, not criminal prosecution.

The Environment Agency6 (and equivalent regulators in the devolved nations and offshore) applies the Regulatory Enforcement and Sanctions Act 20088 framework, with statutory maximum penalties of £45,000 for failure to notify and £90,000 for failure to undertake an energy audit, plus publication of non-compliance on a public register7.

ESOS regulations legal basis — SI 2014/1643 + SI 2023/1182

ESOS was created by the Energy Savings Opportunity Scheme Regulations 20141 (SI 2014/1643), made under the European Communities Act 1972 to implement Article 8 of the EU Energy Efficiency Directive 2012/27/EU5.

The original regulations established the four-yearly mandatory energy audit framework that continues today.

After Brexit, the regulations remained in force as retained EU law and continue to operate as a domestic UK scheme1.

The Energy Act 20239 provides the Secretary of State with broad powers to make ESOS regulations covering methodology, the responsibilities of energy audit authorities, carbon footprint measurement, and implementation.

The most significant amendment to date is the Energy Savings Opportunity Scheme (Amendment) Regulations 20234 (SI 2023/1182), made in November 2023 under powers in the Energy Act 20239.

The amending instrument inserted approximately 28 modifications to the original 2014 regulations and introduced substantive new structural requirements including the ESOS Action Plan and Progress Update framework (Part 6A).

Phase 3 participants comply with the Phase 3-relevant amendments; Phase 4 participants comply with the full SI 2023/11824 changes.

Phase 4 dates

Phase 4 mechanics26:

• Qualification date — 31 December 2026; UK group status on this single day determines Phase 4 scope
• Compliance deadline — 5 December 2027; notification, energy audit completion, Action Plan submission
• Audit reference period — 12 consecutive months within the 24 months ending on compliance deadline (earliest 1 January 2026; latest 4 December 2027)
• Notification mechanism — MESOS (Manage your Energy Savings Opportunity Scheme) digital system
• Subsequent Phase 5 — 2027-2031 cycle

The single-date qualification test means structural changes around 31 December 2026 are determinative.

Acquisitions completed before this date count toward group thresholds; divestments before this date are excluded.

Structural changes after 31 December 2026 do not affect Phase 4 scope, even where they would otherwise change qualification status3.

Who must comply

Regulation 2(1) of SI 2014/16432 (as amended by SI 2023/11824) defines a "large undertaking" as a body corporate, partnership, or unincorporated association carrying on a trade or business that meets either:

• 250 or more employees in the UK on the qualification date, OR
• Annual turnover in excess of £44 million AND annual balance sheet total in excess of £38 million (both financial thresholds together)

Both financial thresholds must be met together — meeting only one is insufficient for the financial route.

The employee test (250+) qualifies independently.

For comprehensive coverage of qualification mechanics including the corporate group rule, "responsible undertaking" designation, and treatment of structural changes around the qualification date, see ESOS Phase 4 Thresholds.

Sterling thresholds — the euro figures are history

An important point of precision: the ESOS financial thresholds are now denominated in STERLING.

The Energy Savings Opportunity Scheme (Amendment) Regulations 20234 (SI 2023/1182) re-denominated the original euro thresholds into pounds — £44 million turnover and £38 million balance sheet total.

The original €50 million / €43 million figures were an inheritance from the EU Energy Efficiency Directive 2012/27/EU5 that introduced ESOS into UK law, and required exchange-rate conversion at the qualification date.

That conversion step no longer exists: since SI 2023/11824, the £44m / £38m figures in DESNZ guidance6 ARE the legally binding thresholds.

Any commentary still quoting euro thresholds for ESOS is out of date.

Group aggregation

SI 2014/1643 Regulation 63 establishes the corporate group aggregation rule: if any single UK group entity meets the qualification thresholds at 31 December 2026, the entire UK group becomes subject to ESOS Phase 4 — including individually sub-threshold entities.

Only UK-incorporated entities count for ESOS group aggregation; overseas entities are excluded.

The group must designate a "responsible undertaking" with overall responsibility for ESOS compliance3.

Typically the UK parent or holding company.

The responsible undertaking bears full legal responsibility for compliance; penalties for non-compliance fall on the responsible undertaking.

Energy audits must cover the entire UK group, including individually sub-threshold subsidiaries.

What mandatory ESOS reporting means — civil sanctions

ESOS uses civil sanctions under the Regulatory Enforcement and Sanctions Act 20088 framework.

This is different from criminal prosecution in three important ways:

• No Crown Court — civil sanctions are imposed administratively by the Environment Agency and devolved equivalents, not by judicial process
• Statutory maximums — penalties are capped (£45,000 / £90,000) under the regulations, unlike open-ended criminal fines
• Civil standard of proof — the EA applies the balance of probabilities standard, not the criminal beyond reasonable doubt standard
• No criminal record — civil sanctions do not produce criminal records for the organisation or its directors

The civil sanctions structure was a deliberate policy choice when ESOS was introduced1 — a proportionate enforcement mechanism for a mandatory energy assessment scheme.

The £45,000 and £90,000 statutory maximums are intended to be material enough to incentivise compliance without imposing the operational burden of criminal prosecution.

Four-step penalty assessment

The Environment Agency assesses each penalty using a published four-step process7:

• Step 1 — Determine the statutory maximum penalty available for the breach (£45,000 or £90,000 typically)
• Step 2 — Set the initial penalty amount based on the nature of the breach (e.g. failure to notify vs failure to undertake audit)
• Step 3 — Work out the starting point and range using factors for organisation size and culpability (recklessness, negligence, deliberate breach)
• Step 4 — Adjust for aggravating circumstances (history of non-compliance, lack of cooperation) and mitigating circumstances (prompt remediation, cooperation, first-time entrant status)

A worked illustrative example from Annex 27: a large organisation with negligent culpability that failed to undertake an energy audit might face an initial penalty range of £12,600 to £67,500 within the £90,000 statutory cap, before adjustment for aggravating or mitigating factors.

The structured assessment is intended to produce proportionate outcomes — first-time entrants and organisations demonstrating good-faith effort typically face lower penalties than persistent or deliberate non-compliers.

Publication of non-compliance

Beyond the financial penalty, the Environment Agency publishes details of organisations subject to enforcement action7.

Publication includes the organisation name, the nature of the breach, the penalty amount, and the corrective action taken.

Practical consequences of publication:

• Public register — visible to anyone searching the Environment Agency's ESOS enforcement record
• Sustainability disclosures — increasingly required to include details of regulatory non-compliance affecting environmental matters
• Customer due diligence — large customers (particularly in public sector and regulated sectors) ask about ESOS compliance status
• Investor ESG screens — institutional investors and ESG ratings agencies factor ESOS compliance into governance and environmental scores
• Procurement — public sector tendering increasingly includes ESOS compliance questions in pre-qualification questionnaires

The reputational dimension is typically the most material consequence beyond the financial penalty.

Organisations subject to publication face downstream consequences across multiple stakeholder relationships that may persist for several years.

Enforcement bodies — five UK regulators

Enforcement powers are split between five UK regulators67:

• Environment Agency (EA) — England, and UK scheme administrator
• Scottish Environment Protection Agency (SEPA) — Scotland
• Natural Resources Wales (NRW) — Wales
• Northern Ireland Environment Agency (NIEA) — Northern Ireland
• Offshore Petroleum Regulator for Environment and Decommissioning (OPRED) — participants undertaking oil and gas activities wholly or mainly offshore

The Environment Agency6 is the lead administrator for the UK as a whole.

Each devolved regulator applies an equivalent civil sanctions framework.

For groups with operations across UK jurisdictions, the relevant regulator is typically determined by the location of the responsible undertaking, though enforcement can be coordinated across jurisdictions where appropriate.

Enforcement activity to date

The Environment Agency has been actively enforcing ESOS, particularly in Phase 3.

Cumulative enforcement activity across Phases 1-3 (to April 2025)7:

• 2,751 compliance notices issued
• 2,133 enforcement notices issued
• 83 civil penalties imposed
• £1,217,440 total penalty value

The Phase 3 enforcement experience demonstrates that the Environment Agency exercises its statutory powers — including against well-known organisations.

Audit committees should treat ESOS compliance as a reputational risk alongside the direct financial penalty exposure.

The DESNZ Post-Implementation Review of the ESOS Regulations12 commissioned in 2025 is partly informed by Phase 3 enforcement experience.

Phase 3 changes from SI 2023/1182

SI 2023/11824 introduced approximately 28 modifications to SI 2014/1643.

These were the Phase 3 changes, not the Phase 4 ones — the Phase 4 amendments came later, in SI 2026/70116.

They carry into Phase 4 as the standing requirements of the scheme:

Reduction in de minimis threshold (Phase 3)

The audit coverage threshold was raised from 90% to 95% of total energy consumption, with the de minimis exemption reduced from 10% to 5%, by SI 2023/1182 for Phase 34.

This raises the bar for audit thoroughness and requires more rigorous methodology documentation for entities calculating coverage.

ESOS Action Plan requirement (Part 6A inserted)

SI 2023/11824 inserted Part 6A into the ESOS Regulations, requiring participants to produce a forward-looking ESOS Action Plan setting out which audit recommendations they intend to implement, with what targets and by when.

The Action Plan must have board sign-off and is published.

Progress Update requirement (also Part 6A)

Progress reporting against the Action Plan during the compliance period4.

Phase 3 requires two updates; Phase 4 requires three, the third added by regulation 28 of SI 2026/70116.

Where Action Plan commitments have not been met, participants must provide an explanation.

This creates ongoing accountability between the four-yearly compliance cycles.

Mandatory public disclosure

SI 2023/11824 requires public disclosure of energy consumption, intensity ratios, and material recommendations from the audit.

Previously, this information stayed within the audit report.

The change increases transparency and supports stakeholder scrutiny of ESOS outputs.

Strengthened Lead Assessor role (Regulation 21 amended)

The Lead Assessor's responsibilities for the quality and standardisation of the audit are more explicitly defined4.

Lead Assessor competency continues to be assessed against PAS 51215:2014 for Phase 4 (with PAS 51215-2:2025 updating standards for voluntary application).

Energy savings estimate (Regulation 21A inserted)

Participants must provide an estimate of energy savings achieved during the compliance period4, broken down by organisational purpose.

This connects the audit findings to actual energy outcomes rather than treating the audit as a stand-alone exercise.

Phase 4 changes from SI 2026/701

The Environment Agency published Comply with the Energy Savings Opportunity Scheme (ESOS) phase 4 on 30 July 202615.

It implements the ESOS (Amendment) Regulations 2026 (SI 2026/701), made 23 June 2026, laid before Parliament 1 July 2026 and in force 22 July 202616.

Achieved savings must be reported

The ESOS report and the notification of compliance must state the energy savings actually achieved during the compliance period15.

That means the measures implemented, the saving from each measure in kWh, and each measure's energy-saving category.

Only the combined saving across all measures is published; the per-measure figures are withheld as potentially commercially sensitive15.

The action plan review

The report and notification must identify the measures proposed in the previous action plan that were not implemented, and explain why15.

Those submissions are not published, although action plans and progress updates themselves are15.

A third progress update

Regulation 28 of SI 2026/701 amends regulation 34B to require a final progress update for compliance periods ending on or after 5 December 202716.

The Phase 4 action plan is due 5 December 2028 and covers 6 December 2027 to 5 December 2031, with progress updates on 5 December 2029, 5 December 2030 and 5 December 203115.

DECs and GDAs removed

Regulation 26 of SI 2026/701 omits regulation 34 of the 2014 Regulations, ending Display Energy Certificates and Green Deal Assessments as compliance routes16.

The Environment Agency's reason is that they "provide more limited and less tailored recommendations than an ESOS energy audit"15.

Zero energy consumption and insolvency

A new regulation 33A means an organisation with zero energy consumption need not carry out an ESOS assessment or appoint a lead assessor, though it must still submit a notification of compliance16.

The insolvency exclusion is widened: undertakings in insolvency proceedings at any point between the qualification date and the compliance date are excluded, as are group undertakings of an insolvent large undertaking unless another large undertaking in the group is solvent16.

SI 2026/701 left the qualification thresholds alone, and ESOS/SECR threshold alignment remains deferred to Phase 516.

Compliance routes (Phase 4)

Phase 4 compliance routes have narrowed compared to earlier phases6:

• ESOS energy audit reviewed by a lead assessor from an approved register — the primary route; the audit covers at least 95% of total energy consumption
• ISO 50001 certification covering total OR significant energy consumption — the participant is then deemed to have complied with the duties to appoint a lead assessor, carry out an ESOS energy audit and produce an ESOS report
• Hybrid — where ISO 50001 covers only part of consumption, the exemption applies only to the certified portion; the remainder must be audited and a lead assessor appointed

Routes removed for Phase 4 by regulation 26 of SI 2026/701, which omits regulation 34 of the 2014 Regulations16:

• Display Energy Certificates (DECs) — no longer accepted as a compliance route
• Green Deal Assessments (GDAs) — no longer accepted as a compliance route

Organisations that previously relied on DECs or GDAs for partial coverage need to plan for a full ESOS energy audit or expanded ISO 50001 scope15.

Data collected for a DEC or GDA may still feed an ESOS report — an intensity ratio, for instance — but it cannot substitute for the audit15.

Lead assessor exemptions15:

• Organisations whose ISO 50001 certification covers total or significant energy consumption — no lead assessor required
• Organisations with total energy consumption below 40,000 kWh — still in scope of ESOS, but no lead assessor required
• Organisations with zero energy consumption — no ESOS assessment and no lead assessor under the new regulation 33A, but a notification of compliance is still required

Voluntary PAS 51215-1:2025 route

BSI published PAS 51215-1:202511 on 7 February 2026 in collaboration with DESNZ, providing a voluntary route to integrate net zero considerations into Phase 4 ESOS work.

PAS 51215-1:2025 specifies a process for combined energy and decarbonisation assessment, producing an implementation plan for achieving net zero across the assessment scope and boundaries.

Participants voluntarily following PAS 51215-1:2025 during Phase 4 can11:

• Carry out an assessment that includes GHG emissions related to the energy currently covered by ESOS
• Assess governance and risks related to achieving net zero across those emissions
• Propose an implementation plan to achieve net zero by 2050 across those emissions
• Provide feedback to DESNZ to inform decisions on Phase 5 mandatory net zero requirements

The PAS 51215-1:2025 voluntary route11 is particularly relevant for entities also preparing for UK SRS S2 proposed mandatory disclosure from 1 January 2027.

The data infrastructure for voluntary net zero assessment under PAS 51215-1:2025 substantially supports UK SRS S2 Scope 1, 2, and 3 disclosure, scenario analysis under paragraph 22, transition plan disclosure under paragraph 14(a)(iii), and target setting under paragraphs 33-36.

PAS 51215-2:2025 updates Lead Assessor competency standards by strengthening existing energy competencies and adding new ones for GHG and net zero11.

PAS 51215:2014 remains the binding Lead Assessor competency standard for Phase 4 mandatory compliance; PAS 51215-2:2025 applies for voluntary applications.

Common misconceptions

Several persistent misconceptions about ESOS mandatoriness:

"ESOS is criminal — directors can be prosecuted"

No. ESOS is enforced through civil sanctions under the Regulatory Enforcement and Sanctions Act 20088 framework.

There are no Crown Court prosecutions and no criminal records.

The actual statutory maximums are £45,000 for failure to notify and £90,000 for failure to undertake an audit, plus publication of non-compliance7.

"Companies Act 'large' = ESOS in scope"

Not necessarily.

ESOS uses its own thresholds — £44m turnover AND £38m balance sheet, OR 250+ employees — originally inherited from the EU Energy Efficiency Directive5 and re-denominated into sterling by SI 2023/11824.

The April 2025 changes to Companies Act size thresholds (which raised the general "large company" thresholds) do not affect ESOS qualification.

ESOS and Companies Act size tests are independent2.

"ESOS overlaps with SECR — I only need to do one"

Different regimes, different scope, different obligations.

ESOS is a four-yearly energy audit scheme administered by the Environment Agency6.

SECR is annual energy and emissions reporting in the Directors' Report under the Companies Act 2006.

UK SRS S214 (where in scope) is annual climate-related financial disclosure under FCA Listing Rules.

Most large UK organisations are in scope of all three.

See ESOS, SECR and UK SRS combined guide.

"ISO 50001 certification means I'm exempt from ESOS"

Not exempt — but it is an alternative compliance route, and Phase 4 made it a stronger one.

Where the certification covers total or significant energy consumption, the participant is deemed to have complied with the duties to appoint a lead assessor, carry out an ESOS energy audit and produce an ESOS report15.

Certification does not have to cover 100% of energy use — significant consumption means the areas comprising at least 95% of the total15.

Notification via MESOS6 is still required.

Where ISO 50001 covers only part of energy use, the exemption applies only to the certified consumption — the remainder must be audited and a lead assessor appointed15.

"I used a Display Energy Certificate for Phase 3 — I can use one for Phase 4"

Not anymore.

DECs and Green Deal Assessments were removed as compliance routes by regulation 26 of SI 2026/701, which omits regulation 34 of the 2014 Regulations16.

The only routes remaining are the ESOS energy audit (reviewed by a lead assessor) and ISO 50001 certification.

Organisations that relied on DECs or GDAs in Phase 3 will need to plan for a full Phase 4 audit or expanded ISO 50001 scope.

"Net zero is now mandatory under ESOS Phase 4"

No, it's been postponed.

The previous government had signalled an intention to make net zero considerations mandatory in Phase 4 audits, but that has been deferred to Phase 5 (2027-2031) per the DESNZ ESOS guidance6, and SI 2026/701 did not introduce it16.

Voluntary net zero assessment under PAS 51215-1:202511 is available during Phase 4.

ESOS regulations vs other mandatory regimes

Three UK regulatory regimes cover energy and emissions reporting with different mandatoriness structures:

• ESOS — mandatory for qualifying UK groups; civil sanctions enforcement by Environment Agency; four-yearly cycle
• SECR — mandatory for quoted companies (any size) and large unquoted entities (two of three); civil penalties under Companies Act 2006 s.453 for late filing; annual disclosure
• UK SRS S2 — proposed mandatory for listed companies in UKLR 6/14/15/16/22 from 1 January 2027 under FCA CP26/5; FCA supervision and disciplinary powers; voluntary for any UK entity from February 2026

For organisations in scope of multiple regimes, "mandatory" has different operational meanings — ESOS produces a Lead Assessor-signed audit and Action Plan, SECR produces annual Directors' Report disclosure, UK SRS produces investor-facing Strategic Report disclosure.

The data infrastructure overlap is substantial; the analytical depth and audience differ.

Section 463 of the Companies Act 200613 — the director protection safe harbour for false or misleading statements in the Strategic Report — applies to UK SRS disclosure within the Strategic Report and to SECR content within the Directors' Report.

ESOS notifications are submitted directly to the Environment Agency and do not fall within section 463 — separate compliance framework, separate enforcement.

Frequently asked questions