The public-health context of water hygiene
Water hygiene — and in particular the control of Legionnaires' disease — is one of the most serious and yet most frequently under-managed property compliance disciplines in the UK. Legionella pneumophila is a waterborne bacterium capable of causing pneumonia with a case fatality rate of around 10%; outbreaks associated with cooling towers, hot and cold water systems, and evaporative condensers continue to be reported to UKHSA (the UK Health Security Agency) every year. For duty holders, the legal framework is unambiguous: the risk must be assessed, controlled, monitored and documented.
Legislative and regulatory framework
The umbrella legislation is the Health and Safety at Work etc. Act 1974 (HSWA 1974), which imposes a general duty on employers and those in control of premises to ensure, so far as is reasonably practicable, the health, safety and welfare of employees and anyone else who may be affected by the work undertaken.
More specifically, the Control of Substances Hazardous to Health Regulations 2002 (COSHH) requires employers to assess and control the risks from exposure to hazardous substances — and Legionella bacteria fall squarely within the definition of a biological agent under COSHH.
The definitive guidance is the HSE's Approved Code of Practice L8 — Legionnaires' disease: The control of legionella bacteria in water systems (fourth edition, 2013). ACoP L8 has special legal status: while compliance with its recommendations is not strictly mandatory, failure to comply places an evidential burden on the duty holder to demonstrate an equivalent or superior alternative. The companion technical guidance HSG 274 Parts 1, 2 and 3 sets out the practical control measures for cooling systems (Part 1), hot and cold water systems (Part 2), and other risk systems such as spa pools (Part 3).
The British Standard BS 8580-1:2019 — Water quality. Risk assessments for Legionella control provides the methodology for competent risk assessment delivery.
The duty holder and the Responsible Person
ACoP L8 requires every duty holder to appoint a Responsible Person who has sufficient authority, competence and knowledge to ensure that all operational procedures are carried out in a timely and effective manner. The Responsible Person may be a member of staff or an external consultant, but the duty itself cannot be contracted out — it remains with the duty holder.
The Legionella Risk Assessment
The first and most critical control measure is the Legionella Risk Assessment. Delivered in accordance with BS 8580-1:2019, each assessment includes: a review of the system schematics and asset register; a physical inspection of all water assets (cold water storage tanks, calorifiers, TMVs, outlets, dead legs, showers); temperature profiling at sentinel and representative outlets; an evaluation of the control regime and records; and a documented set of recommendations with a priority-based action plan. The risk assessment must be reviewed regularly and whenever there is reason to suspect that it may no longer be valid — typically every two years or following any significant system alteration.
The Written Scheme of Control
ACoP L8 requires the duty holder to prepare and implement a Written Scheme of Control (WSC) — a written document that captures the physical system, identifies the controls in place, and sets out the monitoring regime. The WSC typically includes: schematic diagrams; an asset register; the agreed monitoring and inspection frequencies; the control parameters (temperatures, disinfectant concentrations); and the escalation procedures where control is lost.
Monitoring regime — HSG 274 Part 2
For hot and cold water systems, HSG 274 Part 2 sets out a programme of routine tasks designed to demonstrate control. Typical monitoring includes: monthly temperature monitoring at sentinel outlets (the nearest and furthest outlets on each hot and cold loop); quarterly temperature monitoring at a rotating selection of representative outlets; weekly flushing of infrequently used outlets; annual inspection and cleaning of cold water storage tanks; annual thermal flush of calorifiers; and annual servicing of thermostatic mixing valves (TMVs). All monitoring is recorded and retained for a minimum of five years.
Sampling and analysis
Legionella sampling is conducted to BS 7592:2022 — Sampling for Legionella bacteria in water systems and analysed at a UKAS-accredited laboratory under ISO 11731:2017. Sampling frequency is risk-based and determined by the Legionella Risk Assessment, but typically includes quarterly sampling in healthcare, care home and HMO settings, and annual sampling in general commercial premises. Counts are reported in colony-forming units per litre (CFU/L), with action levels — as set out in HSG 274 — triggering documented investigation and corrective action.
Remedial works and disinfection
Where control is lost, OEC delivers the full spectrum of remedial works: chlorination (typically 50 mg/L free chlorine for one hour); pasteurisation (raising system temperatures to 60–70°C); descaling; dead-leg removal; TMV servicing; calorifier inspection, cleaning and draining; and replacement of compromised components. Where an outbreak is confirmed, works are coordinated with UKHSA and the HSE.
Record-keeping and why it matters
ACoP L8 requires all monitoring, inspection, sampling and remedial records to be retained for at least five years. These records are the duty holder's primary evidence of compliance in the event of HSE inspection, insurer audit or civil claim. The average HSE fine following a successful Legionella prosecution exceeds £500,000, and in cases where fatality has occurred, custodial sentences for senior managers have been imposed. Beyond the enforcement risk, a well-run water hygiene regime protects the vulnerable residents, patients and occupants who depend on the integrity of the water system.