In the last post we looked at how the regulator moved from waiting for failure to actively looking for it. This post is about the legal change that made that possible, and what it does to the board.
The pivot sits in one phrase that has now gone from the rulebook. For years the regulator could only intervene on consumer matters where there was a risk of serious detriment to tenants. It was a high bar, and a deliberately high one, designed for an era of light-touch, co-regulatory oversight. The Social Housing (Regulation) Act 2023 removed it. The regulator no longer has to wait until harm is serious and demonstrable before it acts. It can form a view, and act on that view, far earlier in the life of a problem.
Read quickly, that sounds like a technical adjustment, but it is not. It rewires the relationship between a board and its regulator, because it removes the buffer that used to sit between "something is going wrong" and "someone with powers is entitled to do something about it." That buffer is gone and the practical effect is that the standard of evidence a board needs to hold has risen, even though the wording of many of the standards themselves has barely moved.
The most visible expression of this is the regulator's published judgements on governance and financial viability. The grades themselves are familiar to any board. A governance judgement runs from G1 down, with G1 and G2 signalling compliance and G3 and G4 signalling that the regulator has found material problems. Financial viability runs on the same logic through the V grades. What has changed is not the existence of the scale but how readily the regulator now reaches a conclusion, and how early.
It is worth being clear with your fellow board members about what a downgrade actually costs, because it is easy to treat a grade as a reputational matter and underestimate the rest. A move out of compliance is read closely by the people who fund you. Lenders price risk, and a governance or viability downgrade is a signal they are obliged to take seriously, which can feed into the cost and the terms of the borrowing that underpins your development programme and your existing commitments. It affects how partners, local authorities and prospective tenants see you. And it tends to invite exactly the kind of sustained regulatory attention that consumes executive time you would far rather spend elsewhere. A grade is not a score. It is a set of consequences.
This doesn't impact where responsibility sits. The board remains collectively accountable for the organisation's governance and for the outcomes it delivers to tenants. What has changed is the test the board has to pass to discharge that responsibility.
The old test, broadly, was whether the board had the right machinery. The right committees, the right policies, the right assurances coming up through the structure. Most well-run associations pass that test comfortably, because most have invested years in exactly that machinery. The new test is harder, and quieter. It asks whether the board genuinely understands what is happening inside its own organisation, and whether it can show that understanding rests on something more solid than reassurance.
This is where the phrase "we have a policy for that" stops doing the work it used to. A policy describes what you intend to happen. Proactive regulation is interested in evidence of what is actually happening, and the two are not the same thing. An inspector looking at your governance is not satisfied by a well-drafted policy on, say, complaints or stock condition. They want to see that the policy is operating, that the board can see whether it is operating, and that when it is not, the board finds out in time to act. The document is the easy part. The evidence of effect is the part that catches good organisations out.
Here is the uncomfortable mechanic underneath all of this. Most of what determines whether you are compliant happens a long way from the board table, and most of the information about it reaches the board after being collected, summarised and shaped by hand. When the people preparing the board pack are also, in effect, reporting on their own performance, the board does not see the picture. It sees a version of the picture. In calm times that distinction rarely matters. Under a regulator that is actively looking, it is the whole game.
This is the point at which governance becomes a question of information, not just intent. A board cannot give the regulator assurance it cannot itself rely on, and it cannot rely on assurance assembled inconsistently from systems and spreadsheets that were never built to be examined. The associations getting ahead of this are the ones treating board reporting as infrastructure rather than administration. They are standardising how status is captured and rolled up, so that the board sees real status across the organisation rather than a tidied summary of it, and so that the evidence behind a compliance claim is there before anyone asks for it. This is precisely the kind of reporting standardisation we have worked on with housing associations, and the boards that have done it describe the same shift: less time chasing assurance, more time governing.
Post 1 left you with one question. This post sharpens it. Not "do we have the right policies?", which you almost certainly do, but "could our board see a problem forming in time to act, without waiting to be told?" If the honest answer is that the board would find out when the executive chose to raise it, that is not a failing of the people involved. It is a gap in the information, and it is the gap the regulator is now built to find.
Post 1 left you with one question. This post sharpens it. Not "do we have the right policies?", which you almost certainly do, but "could our board see a problem forming in time to act, without waiting to be told?" If the honest answer is that the board would find out when the executive chose to raise it, that is not a failing of the people involved. It is a gap in the information, and it is the gap the regulator is now built to find.
________________________________
Next in the series: the one deadline a board cannot delegate away. The Competence and Conduct Standard comes into force in October 2026, and it reaches further into how your organisation is run than any rule we have looked at so far.
If you would like to talk through what board-grade assurance reporting looks like in practice, that is a conversation we are always happy to have.