Skip to content
LokalMatch

Access Control

Access Control near you

Access control means deciding who gets through a door without handing out keys: fobs and cards on a communal entrance, a keypad on a side gate, a reader on a home office or a garden studio, a barrier across a shared parking area. It is bought most often by blocks of flats, by people running a business from a converted outbuilding, and by households that have got tired of cutting keys for cleaners, dog walkers and adult children.

Tell us about your access control project and we’ll help you find local security installers who serve your area.

Free for homeowners · No obligation to hire

On this page

The rule that shapes the whole design is a fire safety one, and it applies where most access control is actually installed. Article 6 of the Regulatory Reform (Fire Safety) Order 2005 excludes domestic premises, but article 2 defines those as premises occupied as a private dwelling including any garden, yard, garage, outhouse or other appurtenance which is not used in common by the occupants of more than one such dwelling. The common parts of a block therefore sit inside the Order, and article 14 then requires that emergency doors must not be so locked or fastened that they cannot be easily and immediately opened by any person who may require to use them in an emergency.

The second rule catches anyone tempted by a fingerprint reader. Article 9(1) of the UK GDPR prohibits the processing of biometric data for the purpose of uniquely identifying a natural person unless one of the conditions in Article 9(2) applies. A fob does not raise that question. A fingerprint does, and it is a question worth asking before the panel is ordered rather than after the residents have been enrolled.

Fobs, codes, readers and the app: what is actually being sold

  • Proximity fobs and cards: the default for communal entrances, cheap to issue and cheap to cancel when one is lost.
  • Keypads: no credential to carry and no credential to lose, but a code shared once is shared for good, so they suit gates and outbuildings better than front doors.
  • Phone-based credentials: convenient and easy to revoke, and they make the system dependent on an account, a network and a manufacturer that has to still exist next year.
  • Biometric readers: fingerprint or face, which bring Article 9 of the UK GDPR into the project and need a fallback for anyone who cannot use them.
  • Standalone versus networked: a standalone reader stores its own users at the door, while a networked system holds them centrally and can produce an audit trail across several doors.
  • Barriers and powered gates on a shared drive, which are machinery as well as access control and are covered in the fencing and driveways guide rather than here.

The door still has to open in a fire: article 14 and the communal entrance

Article 14 of the Regulatory Reform (Fire Safety) Order 2005 sets out what emergency routes and exits must do, and three of its requirements decide how an access control system is specified. Emergency doors must open in the direction of escape. They must not be so locked or fastened that they cannot be easily and immediately opened. And sliding or revolving doors must not be used for exits specifically intended as emergency exits.

In practice that is the difference between fail-secure and fail-safe hardware, and between a door that is controlled on entry only and one that is controlled in both directions. Controlling entry to a block while leaving exit free is the ordinary answer, because the person inside needs no permission to leave. Where a door genuinely has to be controlled on the way out too, the release arrangements have to satisfy the responsible person for the building, which for common parts is normally the landlord, freeholder or managing agent rather than any individual leaseholder.

The Order applies in England and Wales. Scotland and Northern Ireland have their own fire safety legislation and their own enforcing authorities, so if you are outside England and Wales, put the question to your local fire and rescue service before hardware is ordered rather than after. A single private house with no common parts is outside the Order altogether, but the same physical logic applies: nobody should have to find a fob to get out of a burning building.

Fingerprints and faces: what Article 9 of the UK GDPR changes

Article 9(1) of the UK GDPR prohibits the processing of a defined list of special categories of personal data, and that list expressly includes biometric data for the purpose of uniquely identifying a natural person. A fingerprint reader on a communal door is doing exactly that. The prohibition is lifted only where one of the conditions in Article 9(2) is met — for a residential entrance the realistic candidate is Article 9(2)(a), explicit consent given for one or more specified purposes.

Consent that is genuinely free is hard to arrange at the only door into somebody's home. If a resident refuses, they still have to be able to get in, which means a fob or a code has to exist alongside the reader, which in turn means the biometric part is convenience rather than security. That is not an argument against biometrics everywhere — a reader on a home office door used only by the householder is a different proposition — but it is the argument that decides most communal installations against them.

Where you are the only data subject and the system serves purely your own household, the ordinary household position applies and this stops being a regulatory question. The moment the readers cover a shared entrance, other people's data is in the system, and somebody has to be responsible for it. Settle who that is before enrolment, not after.

Commissioning, credentials and the leaver problem

The install itself is usually short; the administration is what fails. A system is only as good as the moment somebody moves out, and that moment happens at a weekend when the person holding the admin login is away. Agree at the survey who administers the system day to day, how a lost fob is cancelled out of hours, and how long that takes.

Ask for the credential list to be exported and handed over at completion, in a form you can read without the installer's software. Ask what the system does when the network is down, and whether doors default to locked or unlocked in that state. Ask what happens to logs: whether they are kept, for how long and who can read them, because an entry log of who came and went is personal data about the residents and it needs a reason to exist rather than simply existing because the panel does it.

What actually goes wrong with access control

  • Doors held open on a wedge because the closer has been adjusted too heavily, which defeats the whole system and often the fire strategy with it.
  • Fobs cloned or simply passed around, so the population of people who can get in stops matching the population who live there.
  • Keypad codes never changed since installation, and written somewhere near the door by whoever kept forgetting them.
  • Strike and magnet failures that lock the door shut rather than open, which is the failure mode nobody plans for.
  • Batteries in standalone readers that die in cold weather, usually on the coldest morning.
  • An administrator who left the building, taking the only login with them, which turns a small change into a system replacement.

Keeping the credential list honest

Access control degrades quietly. Nothing breaks; the list of who can get in simply grows. Audit it at a fixed interval — twice a year is enough for most buildings — and cancel every credential nobody can account for. It is quicker to reissue a fob to a resident who still needs one than to guess who holds the seventeen fobs nobody has claimed.

Test the mechanical side on the same schedule: that the door closes and latches on its own, that the release works from the inside without a credential, and that the emergency release is where people would look for it. Where there is a maintained system with an escape release, the person responsible for the common parts should be keeping records of those checks anyway.

What drives an access control quote, and how LokalMatch fits in

Door count drives the headline number, but the door itself drives the real one. A timber door in a Victorian conversion, a communal aluminium entrance and a uPVC side door each need different locking hardware and different making good. After that the variables are cabling from each door back to a controller, whether the system is standalone or networked, whether power has to be brought to the door, and how many credentials are being issued on day one. Where mains work is involved it follows the building regulations and is certified by whoever does it, which is covered in the smart home installation guide.

LokalMatch handles the introduction and nothing beyond it. Describe the doors, the building and how many people need access, once, with your postcode, and installers working in your area contact you themselves. It costs homeowners nothing; pros pay for the requests they receive. LokalMatch does not fit, manage or maintain access control, sets no prices, and does not vet, rank or recommend the firms that reply, so compare their answers on fire release and handover yourself.

Access Control: frequently asked questions

Can a communal door be locked so people need a fob to get out?

Not in a way that defeats escape. Article 14 of the Regulatory Reform (Fire Safety) Order 2005 requires that emergency doors must not be so locked or fastened that they cannot be easily and immediately opened by any person who may require to use them in an emergency, that they open in the direction of escape, and that sliding or revolving doors are not used as emergency exits. Common parts of a block fall inside the Order, so the responsible person for the building has to be satisfied with the release arrangement.

Does the fire safety order apply to my own house?

Article 6 excludes domestic premises, and article 2 defines those as premises occupied as a private dwelling, including a garden, yard, garage, outhouse or other appurtenance not used in common by the occupants of more than one dwelling. A single house with no shared parts is therefore outside it. The common parts of a building containing two or more dwellings are not, which is why a block's entrance is treated so differently from your back gate.

Is a fingerprint reader allowed on a block of flats?

It is not banned, but it is regulated. Article 9(1) of the UK GDPR prohibits processing biometric data for the purpose of uniquely identifying a natural person unless a condition in Article 9(2) applies, and for a residential entrance that realistically means explicit consent under Article 9(2)(a). Because consent has to be genuinely free, any resident who refuses still needs another way in, so a fob or code system usually has to exist alongside it.

Do I need a licence to install access control in the UK?

There is no installer licence for this work. The activities the Security Industry Authority can license are listed in Schedule 2 to the Private Security Industry Act 2001 and installation is not among them, a point covered in more detail in the home security guide. What is worth checking instead is who certifies any electrical work, who the responsible person for the building is, and what standard the fire release arrangement has been agreed against.

What happens to the system in a power cut?

That depends entirely on how it was specified, which is why it belongs in the quotation. Ask whether each door is fail-safe or fail-secure, how long the standby supply lasts, and whether doors default to locked or unlocked when the controller loses its network. Also ask how you get in and out manually, and make sure the answer does not involve waiting for the installer to arrive.

Should the system keep a log of who comes and goes?

Only if somebody can say why. An entry log is personal data about residents, so it needs a purpose, a retention period and someone accountable for it. Plenty of blocks are better off with a system that simply grants or refuses access and keeps no long-term record. If you do keep logs, decide in advance who can read them, and do not let the default settings make that decision by themselves.

Sources

  1. Regulatory Reform (Fire Safety) Order 2005, article 14: emergency routes and exits
  2. Regulatory Reform (Fire Safety) Order 2005, article 6: application
  3. Regulatory Reform (Fire Safety) Order 2005, article 2: interpretation and domestic premises
  4. UK GDPR, Article 9: processing of special categories of personal data
  5. Private Security Industry Act 2001, Schedule 2: activities liable to control
  6. HSE: powered gates

Written by the LokalMatch editorial team. Last reviewed 21 September 2026. How we write and check our guides

Find security installers by city

England

Show 173 cities

What affects the cost of access control

Prices depend on the details of your project. We only publish price ranges when they’re backed by real LokalMatch quote data or reliable sources. Until then, here’s what usually changes the price:

  • Number of cameras, sensors or devices
  • Wired or wireless installation
  • Monitoring and subscription fees
  • Running cables through finished walls or ceilings
  • Size and layout of the home
  • Integration with other smart home or network equipment

How to compare security installers before you hire

  • Choose an installer who looks at your home in person and explains where cameras, sensors or access points should go.
  • Ask whether monitoring is included, whether it's optional and what the contract length and cancellation terms are.
  • Find out whether you'll own the equipment or lease it, and whether it works with other systems.
  • For hardwired systems, make sure any electrical work is done by a licensed electrician.
  • Ask how they'll set up passwords, apps and network security, and make sure you get the admin access.

Questions to ask security installers before you hire

  • Will I own the equipment, or is it leased or tied to a contract?
  • Is monitoring required, and what are the cancellation terms?
  • Where will the cameras point, and will they capture my neighbours' property?
  • Who will have access to the video and the account?
  • Will this work with my existing Wi-Fi, locks or smart home devices?
  • What warranty covers the equipment and the installation?

Access control permits and local rules

Some access control work needs a permit or has to meet local bylaws. Rules vary by municipality, so ask your pro whether a permit is needed and who will apply for it — and check with your city or town if you’re unsure.

Permits and licensing

Ready to get access control quotes?

Tell us about your access control project.

Do you offer access control services?

Join LokalMatch to get matched with homeowners in the areas you serve.