CDM 2015 Regulation 27: What It Means for Site Access Control

What is CDM 2015?

The Construction (Design and Management) Regulations 2015 are the primary set of regulations governing health and safety on construction projects in Great Britain. They replaced the previous CDM 2007 regulations and apply to all construction work, regardless of project size.

CDM 2015 places duties on clients, principal designers, principal contractors, contractors, and workers. For site access control, the key regulation is Regulation 27.

Regulation 27: Site Access Control

Regulation 27 states that a principal contractor must take reasonable steps to prevent unauthorised access to the construction site. Specifically:

• Prevent access by unauthorised persons to the construction site
• Ensure that the site perimeter is identified by suitable signs and is so far as reasonably practicable fenced off
• Only persons who have been properly inducted should be allowed access to the site

This isn't just good practice — it's a legal requirement. Failure to comply can result in enforcement action by the HSE, including improvement notices, prohibition notices, and prosecution.

What "Reasonable Steps" Looks Like in Practice

The regulations don't prescribe exactly how you must control access. The HSE expects "reasonable steps" proportionate to the risks. In practice, this means:

At Minimum (All Sites)

• Clear site boundary with hoarding or fencing
• Signage indicating it's a construction site with no unauthorised access
• A sign-in process for everyone entering the site
• Verification that all workers have completed a site-specific induction

For Higher-Risk Sites

• Controlled entry points with a gate or turnstile
• ID verification (CSCS card, company ID, or site-specific credential)
• A real-time record of who is on site at any given moment
• Visitor management procedures

The Problem with Paper Sign-In Sheets

Most construction sites still use paper sign-in sheets at the gate. While technically meeting the letter of the law, paper sheets have serious practical problems:

• Incomplete records — workers forget to sign in or out
• No real-time visibility — you can't quickly determine who is on site right now
• Lost or damaged — paper gets wet, blows away, or goes missing
• No induction verification — signing a sheet doesn't confirm someone has been inducted
• Emergency evacuation — in a fire or structural collapse, you need an accurate headcount immediately

In an HSE inspection, you need to demonstrate that your access control is effective, not just that it exists.

Digital Alternatives

Modern site management platforms address these issues by replacing the clipboard with digital attendance:

• QR code attendance — workers scan a code on their phone to sign in. No hardware needed, instant digital record
• RFID/NFC tap — workers tap a card or fob at a reader. Faster and more reliable than QR for high-throughput gates
• Automated gate control — physical barriers that only open when a valid, inducted worker taps in
• Real-time dashboard — see who is on site right now, with instant headcount for emergency evacuation

The key advantage is that digital systems can enforce rules automatically. If a worker hasn't completed their induction, they simply can't sign in. If their CSCS card has expired, the system flags it. The record is complete, timestamped, and impossible to lose.

Linking Access Control to Inductions

Regulation 27 doesn't exist in isolation. CDM 2015 also requires that workers receive appropriate site-specific information and instruction before starting work. A good access control system ties these together:

1. Worker completes a digital site induction (health and safety briefing, site rules, emergency procedures)
2. Only after completing the induction can they sign in or tap into the site
3. The system maintains a record of both the induction completion and every subsequent site entry

This gives you a complete audit trail: you can demonstrate to the HSE that every person who entered your site was properly inducted and their attendance was recorded.

What About Visitors and Deliveries?

CDM 2015 applies to everyone on site, not just workers. Your access control process needs to cover:

• Visitors — signed in, given a safety briefing, escorted or restricted to safe areas
• Delivery drivers — signed in for the duration of their time on site
• Subcontractor workers — inducted and signed in like any other worker

A digital system can handle different categories of site entrant with different induction requirements and access levels.

Getting Started

You don't need expensive hardware to comply with Regulation 27 digitally. Start with:

1. A printed QR code at your site entrance — workers scan to sign in
2. A digital induction that workers complete on their phone before their first visit
3. A dashboard that shows you who is on site right now

This can be set up in minutes with no hardware cost. As your needs grow, you can add RFID readers, NFC tap, or full gate control — all on the same platform.

---

SiteBot provides construction site attendance tracking, digital inductions, and access control that helps you comply with CDM 2015 Regulation 27. Learn more about our features or book a demo.