NYC Fire Code & Access Control Compliance Guide

In New York City, an electromagnetic (mag) lock can only be used on a required means-of-egress door if it releases the instant someone operates the door's panic or exit hardware, releases automatically on loss of power, and is UL 294 listed. A keycard or keypad reader is never allowed to be the only way out of a building — code always requires a way to leave without a credential, a key, or special knowledge. Getting this wrong is one of the most common reasons a Fire Department of New York (FDNY) or Department of Buildings (DOB) inspector issues a violation on an otherwise well-designed access control system.

Why Access Control Compliance Is Its Own Discipline in NYC

Installing a keycard reader or mobile-credential system sounds like an IT project. In New York City, it's also a life-safety project. Any locking hardware on a door that's part of a building's required means of egress falls under the NYC Construction Codes (Title 28 of the NYC Administrative Code), which layer NYC-specific amendments on top of the base building and fire codes. That means the electrician or access-control vendor wiring your reader has to satisfy the same door-hardware rules that govern fire doors and panic hardware — not just get the badge system online.

This is the gap we see most often in NYC buildings: a perfectly good access control platform (HID, Brivo, Salto — see our access control solutions page for how we evaluate these) installed by a low-voltage contractor who never coordinated with a fire-alarm or code specialist. The system works great for keeping tenants happy — until an inspection.

Where Electromagnetic Locks Are Allowed — and What They Must Do

NYC's electromagnetically locked egress door provisions (Building Code §1010.1.9.9) permit mag locks in several common occupancy types: apartment buildings and hotels (Groups R-1 and R-2), office and business space (Group B), retail (Group M), assembly space (Group A), and educational occupancies (Group E). In plain terms — most of the buildings a property manager, co-op board, or commercial landlord actually operates.

To be code-compliant, the locking hardware must meet all of the following:

• A single, obvious release. Anyone must be able to unlock the door with one hand, using an action that's obvious even in the dark or in an emergency — no special knowledge, no second step.
• Direct power interruption. Operating the release hardware has to cut power to the magnet directly, not send a signal to a controller that then decides whether to unlock. The mechanical act of pushing the bar or door has to be what releases the lock.
• UL 294 listing. The lock hardware itself must carry Underwriters Laboratories' UL 294 access-control-system listing.
• Fail-safe on power loss. If the building loses power, the door must unlock automatically — never fail locked.
• Integration with required exit hardware. If code requires panic or fire exit hardware on that door, operating that hardware must also release the electromagnetic lock, not just unlatch the door underneath a still-energized magnet.

Delayed Egress: A Different (and Stricter) Category

Some buildings — often retail spaces managing loss prevention, or facilities with a legitimate security reason to slow down an exit — use delayed egress locking systems instead of an instant-release mag lock (Building Code §1010.1.9.7). These are a separate, more tightly regulated category: the door can delay release for a short interval (typically up to 15 seconds, extendable to 30 in specific cases) after someone attempts to exit, but it must release immediately if the fire alarm or sprinkler system activates, and the building generally has to be fully sprinklered and alarmed for this locking type to be permitted at all. Because the occupant-load and travel-distance conditions attached to delayed egress locking are building-specific, this is not a configuration to select off a product spec sheet — it needs sign-off from a licensed fire protection engineer or architect familiar with your certificate of occupancy.

Institutional occupancies with vulnerable populations — memory care units, certain group homes, and similar Group I-1/I-2 facilities — have their own, even more specific controlled-egress-door provisions layered on top of this, precisely because those buildings have to balance resident safety (preventing wandering) against fire egress.

What an FDNY or DOB Inspector Actually Checks

When a mag-locked door gets flagged, it's rarely because the access control platform itself is bad — it's almost always one of these:

1. The release isn't wired to the actual exit hardware. A badge reader disarms the system, but the panic bar underneath is a separate mechanical path that was never tied into the magnet's power circuit.
2. No UL 294 label, or hardware substituted after the original inspection that was never re-certified.
3. The door fails locked, not unlocked, on a power test. This is the single most common — and most serious — finding.
4. No connection to the fire alarm system on doors where code requires the lock to release on alarm activation, not just on manual override.
5. Missing or non-compliant signage at the door describing how to exit.
6. "Convenience" bypass wiring added after the original install — often by a well-meaning IT vendor — that lets the lock stay energized under conditions the original approved design never intended.

Beyond Fire Code: Building-Wide Entrance Requirements

NYC access control compliance isn't only about individual egress doors. New York's Multiple Dwelling Law (§50-A) separately requires that in buildings built or converted after January 1, 1968, the main entrance door must be self-closing and self-locking except when staff are physically present, and buildings with eight or more apartments must have a working intercommunication (buzzer/intercom) system so residents can identify and remotely admit visitors without leaving their unit. Older buildings can be brought under the same requirement if a majority of tenants consent in writing. Owners are responsible for keeping this equipment installed, approved, and in working order — a broken buzzer system isn't just an inconvenience, it's a maintenance violation.

Roof doors get the opposite treatment: they must be self-closing but generally cannot be self-locking from the exterior, and must open freely from the inside without a key, so residents are never trapped on the roof during an emergency.

If you're layering a modern video intercom or keyless entry system onto a building's main entrance, both this entrance-level requirement and the individual-door lock requirements we cover in our NYC Apartment Security Guide need to be satisfied at the same time — an elegant app-based buzzer system that fails to let a resident physically admit a visitor, or that leaves the roof door locked from the inside, solves one problem while creating a compliance gap.

How This Intersects With Fire-Rated Doors and Panic Hardware

If the door in question is a rated fire door assembly, every component — the lock, the closer, the hardware finish — has to be listed for use on that specific assembly, or the whole door loses its fire rating. We cover this in detail in our fire doors guide and our panic bars guide. Access control retrofits are one of the most common ways a previously-compliant fire door assembly gets accidentally decertified — an access-control installer drills or substitutes hardware without checking whether it's rated for that specific door.

Frequently Asked Questions

Are mag locks legal on NYC apartment building doors? Yes, on the categories of doors described above, provided the hardware meets the release, power-failure, and UL 294 requirements. A mag lock installed without those safeguards — even on the exact same door — is not compliant.

What happens to access control during a power outage? A code-compliant system unlocks automatically. If your building's system stays locked during a power test, that is a fail-safe violation that needs to be corrected immediately, not a feature.

Does my building need FDNY approval before installing access control? Any locking hardware tied into (or replacing hardware on) a required means of egress, or connected to the fire alarm system, should go through the same plan-review and inspection process as other fire-and-life-safety work. Confirm scope with your architect, fire alarm contractor, or the Department of Buildings before installation, not after.

Can a landlord install a mag lock as the only way to secure a stairwell door? No. A stairwell door on a means of egress must always allow free exit without a card, code, or key — access control can restrict who enters that stairwell from the corridor side, but it cannot restrict who can leave through it.

This Is Not Legal Advice

This guide explains general code concepts to help property managers and building owners ask the right questions — it is not a substitute for a code review by a licensed architect, fire protection engineer, or the NYC Department of Buildings and FDNY themselves. Requirements vary by occupancy classification, building-specific conditions, and are updated over time; always verify current requirements for your specific building before installing or modifying access control or egress hardware.

Get It Designed Right the First Time

Door Security Group's installation team designs access control systems around your building's actual occupancy classification and existing fire-safety infrastructure, not just the product catalog. If you're planning a new system or inheriting one you're not confident is compliant, request a commercial security assessment or get a quote and we'll walk the building with you before anything gets wired.

See our case study on a Brooklyn shelter's failed door operator inspections for a real example of how an installation problem invisible on a spec sheet can fail inspection twice before anyone finds the actual cause.