An owner’s guide to compliant, safe data centre roof access without the downtime
This comprehensive guide delivers essential insights for facility owners managing high-risk rooftops, showing how compliant safety access protects workers without causing operational downtime.
)
Gareth Light
Key takeaways
As the owner-operator, the WHS duty for safe rooftop access sits with you, not the contractor and not the crew.
Compliant access on a live Tier III or IV facility is achievable without taking the IT load offline.
Mechanically assembled aluminium suits a live facility, installs without hot works, and can be retrofitted onto an existing roof without a shutdown.
Your duty runs across the whole asset lifecycle: install, inspection, reconfiguration and replacement, not just day one
Can you give your maintenance crews safe, compliant rooftop access on an operational Tier III or IV data centre, without taking the IT load offline? Yes, but the access system you choose decides whether that is possible. As the owner, the WHS duty is yours, and so is the operational risk.This article explains how to get both right.
Your duty as an owner-operator
Under the Australian Work Health and Safety framework, the PCBU duty for safe rooftop access sits with you as the owner-operator, not the contractor who installs the access and not the crews who use it. That duty is to ensure, so far as is reasonably practicable, that work at height on your facility is carried out safely and on compliant systems.
In practice that means your rooftop walkways, platforms and guardrails meet AS 1657:2018, the Australian standard for fixed platforms, walkways, stairways and ladders, and your anchor points and fall-arrest systems meet AS/NZS 5532 and AS/NZS 1891.4. It also means height safety is designed under the WHS Regulation's safety-by-design requirements, rather than left to be retrofitted reactively after an incident or an audit finding. Where a facility is changing, expanding or was never designed for safe access, a planned retrofit with the right modular system closes that gap without compromising the live load. Recent industrial manslaughter legislation across most states and territories has reinforced that this is a board-level responsibility.
The takeaway is straightforward: getting roof access right protects your maintenance crews, your operations, and the officers accountable for the business. You can delegate the installation, but not Data centre hub: owner article (for internal review) the duty. In practice you trust your contractor or installer to deliver and certify a compliant system, and if it is installed incorrectly, even without your knowledge, the PCBU duty still rests with you.
What is at stake for an operator
A data centre is one of the few buildings where the cost of getting roof access wrong sits squarely with the owner.
Worker safety. A fall from a non-compliant rooftop is a workplace incident before it is anything else. Your maintenance crews and visiting contractors are people you are responsible for.
Uptime and SLA risk. Every maintenance crew on the roof is on your live load. Access systems that need hot works to install or modify raise the chance of an incident that reaches the IT environment.
Contamination risk to the IT load. Airborne debris from cutting or grinding during an install are a recognised risk to sensitive IT equipment. Any install method that produces swarf or dust above active intakes is an event your operations team has to manage around.
Tier classification and fire compartmentation are not the same thing
These two are separate obligations, and both sit with you as the owner. Tier classification, under the Uptime Institute system, concerns your power and cooling topology and concurrent maintainability. Fire compartmentation is a separate building-code obligation under the National Construction Code. For rooftop access the point is practical: the system, and the way it is installed, should be sequenced so it does not interrupt a redundant cooling or power path or breach a fire compartment. Those are decisions we work through with you and your trades on site, not areas we make claims about on your behalf.
What compliant access looks like on a live data centre
For the large majority of rooftop access on an operational data centre, walkways between rows of plant, condenser-yard access, plant-deck rails, ladders between levels and roof access hatches, the right system is mechanically assembled aluminium, built to AS 1657:2018 and installed without hot works.
This is exactly what makes the approach suited to retrofit. The same properties that let it install on a live load, no hot works,and onsite adjustability, are what let it go onto an existing or repurposed roof without a shutdown.
For a live facility
Aluminium, mechanically fixed
Steel, welded or drilled
Install on a live load
Suited to it
High risk, usually a planned outage
Hot works permit
Not required
Required
Reconfiguration later
Modular, changes as the plant changes
Difficult, often a rebuild
Best suited to
The day-to-day access crews actually use
Heavy plant-lift and structural frames
At NEXTDC S3, a Tier IV hyperscale data centre in Artarmon, Sydney, Kattsafe delivered rigid rail facade access and rooftop walkways on a live IT load and live cooling, with no hot works permit required across the install. And on the operational data centres Kattsafe has assessed, the most common compliance gap is a missing or out-of-date asset register for the existing rooftop access systems, before any question of new equipment.
Where compliance lives across the asset lifecycle
Owner accountability does not stop at install. The lifecycle obligations are yours.
Install and commissioning. Your contractor or installer delivers and signs off the system as compliant with AS 1657:2018. You receive and retain those compliance records in your asset register, and it is on you to make sure they exist and stay current.
Annual inspection and recertification. Anchor points and fall-arrest systems need ongoing certification under AS/NZS 1891.4 and AS/NZS 5532, and walkways, platforms and guardrails need periodic structural inspection. Making sure use, maintenance and recertification happen correctly, and keeping the records, is your responsibility.
Equipment changes. Condenser swap-outs, capacity expansions and new rooftop plant change the access requirements. A modular system can be reconfigured; a fixed steel one usually cannot. Repurposing a building into a data centre, or changing its use, sits here too.
Retrofit and replacement. Access systems often reach end-of-life before the facility does, and a change of use or capacity upgrade can trigger a retrofit well before that. Plan for re-inspection, reconfiguration and replacement as a normal part of the lifecycle, not a reaction to an incident.If you do not have a current asset register and inspection schedule for your rooftop access, that is the first compliance gap to close, whatever system you eventually choose
Where this approach has limits
Mechanically assembled aluminium covers the large majority of routine rooftop access on a Tier III or IV data centre. Heavy plant-lift platforms, structural cooling-tower frames and some seismic-rated supports may still need steel and engineered fixings, and those are scoped into planned outages rather than live install windows. For everything inside that majority, which the access crews use day to day, the right system is aluminium, modular and mechanically fixed. Maximum safety. Minimum fuss.
Frequently ask questions
Book a site assessment
If you own or operate a data centre and you are not sure whether your existing rooftop access is compliant, or whether it can be safely retrofitted or modified for a repurposing or capacity upgrade, book a Kattsafe site assessment. Our team will walk the roof with you, audit the existing systems against AS 1657:2018 and AS/NZS 5532, identify the gaps and scope any remediation that can be done without disrupting your live load. Call 1300 301 755.
)
)
)
)
:focal(2847x3369:2848x3370))