Is ESOS mandatory?

The short answer — yes, ESOS is mandatory

ESOS is mandatory for qualifying UK organisations. The Energy Savings Opportunity Scheme Regulations 20141 (SI 2014/1643) impose statutory obligations on organisations meeting the qualification thresholds at the relevant qualification date. The regulations were substantially amended by SI 2023/11824 (Energy Savings Opportunity Scheme (Amendment) Regulations 2023), which strengthened audit requirements, introduced action plans and progress updates, and applies to Phase 3 (mid-cycle) and Phase 4 (in full).

"Mandatory" means civil sanctions enforcement7, not criminal prosecution. The Environment Agency6 (and equivalent regulators in the devolved nations and offshore) applies the Regulatory Enforcement and Sanctions Act 20088 framework, with statutory maximum penalties of £45,000 for failure to notify and £90,000 for failure to undertake an energy audit, plus publication of non-compliance on a public register7.

Legal basis — SI 2014/1643 + SI 2023/1182

ESOS was created by the Energy Savings Opportunity Scheme Regulations 20141 (SI 2014/1643), made under the European Communities Act 1972 to implement Article 8 of the EU Energy Efficiency Directive 2012/27/EU5. The original regulations established the four-yearly mandatory energy audit framework that continues today.

After Brexit, the regulations remained in force as retained EU law and continue to operate as a domestic UK scheme1. The Energy Act 20239 provides the Secretary of State with broad powers to make ESOS regulations covering methodology, the responsibilities of energy audit authorities, carbon footprint measurement, and implementation.

The most significant amendment to date is the Energy Savings Opportunity Scheme (Amendment) Regulations 20234 (SI 2023/1182), made in November 2023 under powers in the Energy Act 20239. The amending instrument inserted approximately 28 modifications to the original 2014 regulations and introduced substantive new structural requirements including the ESOS Action Plan and Progress Update framework (Part 6A). Phase 3 participants comply with the Phase 3-relevant amendments; Phase 4 participants comply with the full SI 2023/11824 changes.

Phase 4 dates

Phase 4 mechanics26:

• Qualification date — 31 December 2026; UK group status on this single day determines Phase 4 scope
• Compliance deadline — 5 December 2027; notification, energy audit completion, Action Plan submission
• Audit reference period — 12 consecutive months within the 24 months ending on compliance deadline (earliest 1 January 2026; latest 4 December 2027)
• Notification mechanism — MESOS (Manage your Energy Savings Opportunity Scheme) digital system
• Subsequent Phase 5 — 2027-2031 cycle

The single-date qualification test means structural changes around 31 December 2026 are determinative. Acquisitions completed before this date count toward group thresholds; divestments before this date are excluded. Structural changes after 31 December 2026 do not affect Phase 4 scope, even where they would otherwise change qualification status3.

Who must comply

SI 2014/1643 Regulation 52 defines a "large undertaking" as a body corporate, partnership, or unincorporated association carrying on a trade or business that meets either:

• 250 or more employees in the UK on the qualification date, OR
• Fewer than 250 employees but BOTH annual turnover exceeding €50 million AND annual balance sheet total exceeding €43 million

Both financial thresholds must be met together — meeting only one is insufficient for the financial route. The employee test (250+) qualifies independently.

For comprehensive coverage of qualification mechanics including the corporate group rule, "responsible undertaking" designation, and treatment of structural changes around the qualification date, see ESOS Phase 4 Thresholds.

Euro vs GBP thresholds

An important point of precision: SI 2014/1643 Regulation 52 denominates the financial thresholds in EUROS (€50 million turnover, €43 million balance sheet total), not pounds. This is an inheritance from the EU Energy Efficiency Directive 2012/27/EU5 that originally introduced ESOS into UK law.

The regulations specify conversion at the Bank of England spot rate on the qualification date2. At recent exchange rates, the euro thresholds convert to approximately £44 million turnover and £38 million balance sheet total. These are the figures conventionally cited in DESNZ guidance6 and most third-party ESOS commentary, but the legally binding threshold is the euro amount.

Group aggregation

SI 2014/1643 Regulation 63 establishes the corporate group aggregation rule: if any single UK group entity meets the qualification thresholds at 31 December 2026, the entire UK group becomes subject to ESOS Phase 4 — including individually sub-threshold entities. Only UK-incorporated entities count for ESOS group aggregation; overseas entities are excluded.

The group must designate a "responsible undertaking" with overall responsibility for ESOS compliance3. Typically the UK parent or holding company. The responsible undertaking bears full legal responsibility for compliance; penalties for non-compliance fall on the responsible undertaking. Energy audits must cover the entire UK group, including individually sub-threshold subsidiaries.

What "mandatory" means — civil sanctions

ESOS uses civil sanctions under the Regulatory Enforcement and Sanctions Act 20088 framework. This is different from criminal prosecution in three important ways:

• No Crown Court — civil sanctions are imposed administratively by the Environment Agency and devolved equivalents, not by judicial process
• Statutory maximums — penalties are capped (£45,000 / £90,000) under the regulations, unlike open-ended criminal fines
• Civil standard of proof — the EA applies the balance of probabilities standard, not the criminal beyond reasonable doubt standard
• No criminal record — civil sanctions do not produce criminal records for the organisation or its directors

The civil sanctions structure was a deliberate policy choice when ESOS was introduced1 — a proportionate enforcement mechanism for a mandatory energy assessment scheme. The £45,000 and £90,000 statutory maximums are intended to be material enough to incentivise compliance without imposing the operational burden of criminal prosecution.

Four-step penalty assessment

The Environment Agency assesses each penalty using a published four-step process7:

• Step 1 — Determine the statutory maximum penalty available for the breach (£45,000 or £90,000 typically)
• Step 2 — Set the initial penalty amount based on the nature of the breach (e.g. failure to notify vs failure to undertake audit)
• Step 3 — Work out the starting point and range using factors for organisation size and culpability (recklessness, negligence, deliberate breach)
• Step 4 — Adjust for aggravating circumstances (history of non-compliance, lack of cooperation) and mitigating circumstances (prompt remediation, cooperation, first-time entrant status)

A worked illustrative example from Annex 27: a large organisation with negligent culpability that failed to undertake an energy audit might face an initial penalty range of £12,600 to £67,500 within the £90,000 statutory cap, before adjustment for aggravating or mitigating factors. The structured assessment is intended to produce proportionate outcomes — first-time entrants and organisations demonstrating good-faith effort typically face lower penalties than persistent or deliberate non-compliers.

Publication of non-compliance

Beyond the financial penalty, the Environment Agency publishes details of organisations subject to enforcement action7. Publication includes the organisation name, the nature of the breach, the penalty amount, and the corrective action taken.

Practical consequences of publication:

• Public register — visible to anyone searching the Environment Agency's ESOS enforcement record
• Sustainability disclosures — increasingly required to include details of regulatory non-compliance affecting environmental matters
• Customer due diligence — large customers (particularly in public sector and regulated sectors) ask about ESOS compliance status
• Investor ESG screens — institutional investors and ESG ratings agencies factor ESOS compliance into governance and environmental scores
• Procurement — public sector tendering increasingly includes ESOS compliance questions in pre-qualification questionnaires

The reputational dimension is typically the most material consequence beyond the financial penalty. Organisations subject to publication face downstream consequences across multiple stakeholder relationships that may persist for several years.

Enforcement bodies — five UK regulators

Enforcement powers are split between five UK regulators67:

• Environment Agency (EA) — England, and UK scheme administrator
• Scottish Environment Protection Agency (SEPA) — Scotland
• Natural Resources Wales (NRW) — Wales
• Northern Ireland Environment Agency (NIEA) — Northern Ireland
• Offshore Petroleum Regulator for Environment and Decommissioning (OPRED) — participants undertaking oil and gas activities wholly or mainly offshore

The Environment Agency6 is the lead administrator for the UK as a whole. Each devolved regulator applies an equivalent civil sanctions framework. For groups with operations across UK jurisdictions, the relevant regulator is typically determined by the location of the responsible undertaking, though enforcement can be coordinated across jurisdictions where appropriate.

Enforcement activity to date

The Environment Agency has been actively enforcing ESOS, particularly in Phase 3. Cumulative enforcement activity across Phases 1-3 (to April 2025)7:

• 2,751 compliance notices issued
• 2,133 enforcement notices issued
• 83 civil penalties imposed
• £1,217,440 total penalty value

The Phase 3 enforcement experience demonstrates that the Environment Agency exercises its statutory powers — including against well-known organisations. Audit committees should treat ESOS compliance as a reputational risk alongside the direct financial penalty exposure. The DESNZ Post-Implementation Review of the ESOS Regulations12 commissioned in 2025 is partly informed by Phase 3 enforcement experience.

Phase 4 changes from SI 2023/1182

SI 2023/11824 introduced approximately 28 modifications to SI 2014/1643. The key Phase 4 changes:

Reduction in de minimis threshold

The audit coverage threshold was raised from 90% to 95% of total energy consumption (de minimis exemption reduced from 10% to 5%)4. This raises the bar for audit thoroughness and requires more rigorous methodology documentation for entities calculating coverage.

ESOS Action Plan requirement (Part 6A inserted)

SI 2023/11824 inserted Part 6A into the ESOS Regulations, requiring participants to produce a forward-looking ESOS Action Plan setting out which audit recommendations they intend to implement, with what targets and by when. The Action Plan must have board sign-off and is published.

Progress Update requirement (also Part 6A)

Annual progress reporting against the Action Plan during the compliance period4. Where Action Plan commitments have not been met, participants must provide an explanation. This creates ongoing accountability between the four-yearly compliance cycles.

Mandatory public disclosure

SI 2023/11824 requires public disclosure of energy consumption, intensity ratios, and material recommendations from the audit. Previously, this information stayed within the audit report. The change increases transparency and supports stakeholder scrutiny of ESOS outputs.

Strengthened Lead Assessor role (Regulation 21 amended)

The Lead Assessor's responsibilities for the quality and standardisation of the audit are more explicitly defined4. Lead Assessor competency continues to be assessed against PAS 51215:2014 for Phase 4 (with PAS 51215-2:2025 updating standards for voluntary application).

Energy savings estimate (Regulation 21A inserted)

Participants now must provide an estimate of energy savings achieved during the compliance period4, broken down by organisational purpose. This connects the audit findings to actual energy outcomes rather than treating the audit as a stand-alone exercise.

Compliance routes (Phase 4)

Phase 4 compliance routes have narrowed compared to earlier phases6:

• ESOS energy audit signed off by an approved Lead Assessor — the primary route; audit covers at least 95% of total energy consumption
• ISO 50001 certification covering 100% of total UK energy use — Regulation 33 alternative route; no separate Lead Assessor sign-off required
• Hybrid — ISO 50001 covering some sites or uses, ESOS audit covering the remainder to meet the 95% coverage requirement

Routes removed for Phase 4 (confirmed by DESNZ in February 2025)6:

• Display Energy Certificates (DECs) — no longer accepted as a compliance route
• Green Deal Assessments (GDAs) — no longer accepted as a compliance route

Organisations that previously relied on DECs or GDAs for partial coverage need to plan for full ESOS energy audits or expanded ISO 50001 scope6.

Two narrow Lead Assessor sign-off exemptions remain6:

• Organisations whose energy supplies are 100% covered by ISO 50001 (no separate Lead Assessor required)
• Organisations with total energy consumption below 40,000 kWh — still in scope of ESOS, but may use a self-declared compliance route

Voluntary PAS 51215-1:2025 route

BSI published PAS 51215-1:202511 on 7 February 2025 in collaboration with DESNZ, providing a voluntary route to integrate net zero considerations into Phase 4 ESOS work. PAS 51215-1:2025 specifies a process for combined energy and decarbonisation assessment, producing an implementation plan for achieving net zero across the assessment scope and boundaries.

Participants voluntarily following PAS 51215-1:2025 during Phase 4 can11:

• Carry out an assessment that includes GHG emissions related to the energy currently covered by ESOS
• Assess governance and risks related to achieving net zero across those emissions
• Propose an implementation plan to achieve net zero by 2050 across those emissions
• Provide feedback to DESNZ to inform decisions on Phase 5 mandatory net zero requirements

The PAS 51215-1:2025 voluntary route11 is particularly relevant for entities also preparing for UK SRS S214 mandatory disclosure from 1 January 2027. The data infrastructure for voluntary net zero assessment under PAS 51215-1:2025 substantially supports UK SRS S2 Scope 1, 2, and 3 disclosure, scenario analysis under paragraph 22, transition plan disclosure under paragraph 14(a)(iii), and target setting under paragraphs 33-36.

PAS 51215-2:2025 updates Lead Assessor competency standards by strengthening existing energy competencies and adding new ones for GHG and net zero11. PAS 51215:2014 remains the binding Lead Assessor competency standard for Phase 4 mandatory compliance; PAS 51215-2:2025 applies for voluntary applications.

Common misconceptions

Several persistent misconceptions about ESOS mandatoriness:

"ESOS is criminal — directors can be prosecuted"

No. ESOS is enforced through civil sanctions under the Regulatory Enforcement and Sanctions Act 20088 framework. There are no Crown Court prosecutions and no criminal records. The actual statutory maximums are £45,000 for failure to notify and £90,000 for failure to undertake an audit, plus publication of non-compliance7.

"Companies Act 'large' = ESOS in scope"

Not necessarily. ESOS uses its own euro-denominated thresholds inherited from the EU Energy Efficiency Directive5 (€50m turnover AND €43m balance sheet, OR 250 employees). The April 2025 changes to Companies Act size thresholds (which raised the general "large company" thresholds) do not affect ESOS qualification. ESOS and Companies Act size tests are independent2.

"ESOS overlaps with SECR — I only need to do one"

Different regimes, different scope, different obligations. ESOS is a four-yearly energy audit scheme administered by the Environment Agency6. SECR is annual energy and emissions reporting in the Directors' Report under the Companies Act 2006. UK SRS S214 (where in scope) is annual climate-related financial disclosure under FCA Listing Rules. Most large UK organisations are in scope of all three. See ESOS, SECR and UK SRS combined guide.

"ISO 50001 certification means I'm exempt from ESOS"

Not exempt — but it's an alternative compliance route under Regulation 331 if the certification covers 100% of total UK energy use. Notification via MESOS6 is still required. Where ISO 50001 covers only part of energy use, an ESOS energy audit must cover the remainder to meet the 95% coverage threshold4.

"I used a Display Energy Certificate for Phase 3 — I can use one for Phase 4"

Not anymore. DECs and Green Deal Assessments have been removed as compliance routes for Phase 46. The only routes remaining are ESOS energy audits (Lead Assessor signed off) and ISO 50001 certification. Organisations that relied on DECs or GDAs in Phase 3 will need to plan for full Phase 4 audits or expanded ISO 50001 scope.

"Net zero is now mandatory under ESOS Phase 4"

No, it's been postponed. The previous government had signalled an intention to make net zero considerations mandatory in Phase 4 audits, but DESNZ confirmed in February 20256 that this has been postponed to Phase 5 (2027-2031). Voluntary net zero assessment under PAS 51215-1:202511 is available during Phase 4.

ESOS mandatoriness vs other regimes

Three UK regulatory regimes cover energy and emissions reporting with different mandatoriness structures:

• ESOS — mandatory for qualifying UK groups; civil sanctions enforcement by Environment Agency; four-yearly cycle
• SECR — mandatory for quoted companies (any size) and large unquoted entities (two of three); civil penalties under Companies Act 2006 s.453 for late filing; annual disclosure
• UK SRS S2 — mandatory for listed companies in UKLR 6/14/15/16/22 from 1 January 2027 under FCA CP26/5; FCA supervision and disciplinary powers; voluntary for any UK entity from February 2026

For organisations in scope of multiple regimes, "mandatory" has different operational meanings — ESOS produces a Lead Assessor-signed audit and Action Plan, SECR produces annual Directors' Report disclosure, UK SRS produces investor-facing Strategic Report disclosure. The data infrastructure overlap is substantial; the analytical depth and audience differ.

Section 463 of the Companies Act 200613 — the director protection safe harbour for false or misleading statements in the Strategic Report — applies to UK SRS disclosure within the Strategic Report and to SECR content within the Directors' Report. ESOS notifications are submitted directly to the Environment Agency and do not fall within section 463 — separate compliance framework, separate enforcement.

Frequently asked questions