Resources

A Legionella risk assessment is a structured and systematic assessment of a water system to identify and evaluate the factors that could allow Legionella bacteria to grow, multiply and potentially be dispersed in water droplets or aerosols.

A competent assessment will consider the design, condition and operation of the water systems within a building, including hot and cold water services, storage tanks, calorifiers, distribution pipework, outlets and other relevant equipment. It will also consider factors such as water temperatures, stagnation, low-use outlets, dead legs, scale and sediment, system complexity, water usage patterns and the effectiveness of existing control measures.

The assessment should also take account of the people who may be exposed, particularly where premises are occupied by individuals who may be more susceptible to Legionnaires’ disease.

Following the assessment, a detailed report should identify significant findings, existing controls, areas of concern and practical recommendations for managing or reducing the risks identified.

A Legionella risk assessment is not simply a water temperature survey or a visual inspection. It forms an important part of an organisation’s overall Legionella management strategy and should provide a clear basis for ongoing control and monitoring.

Any organisation or individual with responsibility for premises or water systems should consider whether there is a reasonably foreseeable risk of exposure to Legionella and whether a suitable and sufficient risk assessment is required.

This can apply to a wide range of premises, including offices, factories, schools, care homes, hotels, residential and commercial properties, leisure facilities, healthcare environments, landlords and property management companies.

The requirement and extent of the assessment will depend on the circumstances of the premises and the water systems present. Factors such as system complexity, building occupancy, water usage, vulnerable occupants and existing control measures should all be considered.

Where an organisation has a duty to manage health and safety risks, it should be able to demonstrate that Legionella risks have been properly considered and appropriately controlled.

There is no single fixed interval that applies to every Legionella risk assessment. The frequency of review should reflect the nature and complexity of the water systems, the level of risk and any changes that may affect the original assessment.

A risk assessment should be reviewed whenever there is reason to suspect that it is no longer valid or where there has been a significant change to the premises, water systems or management arrangements.

Examples of circumstances that may trigger a review include alterations to plumbing systems, changes in building use or occupancy, changes to water usage, installation or removal of equipment, changes in responsible personnel, significant maintenance or refurbishment, or the identification of new risks.

Periodic reviews are also good practice because water systems and building operations can change over time. An assessment should remain a current and accurate representation of the systems being managed rather than simply being treated as a document that is completed once and filed away.

A professional Legionella risk assessment involves examining the water systems, how they operate and how the associated risks are currently being controlled.

The assessment will typically include a review of the relevant hot and cold water systems and, where applicable, storage tanks, calorifiers, secondary return systems, distribution pipework, showers, taps, TMVs, thermostatic devices and other water outlets or equipment capable of generating aerosols.

The assessor may review system schematics, existing monitoring records, maintenance arrangements, previous risk assessments and relevant written control procedures. Physical inspection and temperature measurements will normally form an important part of the assessment.

The assessor will consider potential risk factors such as:

• Areas of stagnation or infrequently used outlets
• Dead legs and redundant pipework
• Inadequate or inconsistent water temperatures
• Poorly maintained storage vessels
• Scale, corrosion or sediment
• System design and complexity
• Low water turnover
• Changes in building occupancy or use
• The condition and accessibility of components
• Existing monitoring and control measures
• The competence and responsibilities of relevant personnel

The resulting report should clearly explain the findings and provide prioritised, practical recommendations that enable the person responsible for the premises to take appropriate action.

Legionella sampling and microbiological testing can form part of a Legionella management programme, but testing is not automatically required for every premises or every water system.

Whether sampling is appropriate should be determined by a competent assessment of the circumstances and the risks involved. Sampling may be considered where there is a particular concern regarding the effectiveness of control measures, evidence of elevated risk, a history of Legionella contamination, suspected cases of Legionnaires’ disease, or specific circumstances where microbiological monitoring is considered appropriate.

It is important to understand that a negative Legionella test result does not, by itself, demonstrate that a water system is being effectively managed. Legionella levels can change over time, and sampling represents conditions at the time and locations sampled.

Effective Legionella management should therefore be based on a proportionate combination of risk assessment, appropriate system controls, monitoring, maintenance and competent management. Where sampling is undertaken, the results should be interpreted within the wider context of the water system and its risk controls.

Organisations responsible for premises and water systems have legal duties to assess and control health and safety risks, including risks associated with exposure to Legionella bacteria where applicable.

The principal legal framework can include the Health and Safety at Work etc. Act 1974 and the Control of Substances Hazardous to Health Regulations (COSHH), alongside relevant guidance issued by the Health and Safety Executive (HSE).

HSE’s guidance on the control of Legionella bacteria in water systems, including HSG274, provides important information on managing the risks associated with different types of water systems. The Approved Code of Practice L8 is also an important reference for those with responsibilities for controlling Legionella risks.

The precise duties placed upon an organisation will depend on its activities, premises, water systems and responsibilities. Simply having a risk assessment does not remove the duty to manage the risks identified.

Organisations should ensure that appropriate responsibilities have been allocated, suitable control measures are implemented, monitoring is undertaken where required, records are maintained and relevant personnel have the necessary information, instruction and training.

The Responsible Person is the individual or individuals appointed to take responsibility for helping to manage and control the risks associated with Legionella within a premises or organisation.

The Responsible Person should have the appropriate authority, competence, knowledge, time and resources necessary to carry out their responsibilities effectively. Their role will vary depending on the size and complexity of the organisation and its water systems.

Responsibilities may include overseeing the implementation of the Legionella control scheme, ensuring that monitoring and maintenance activities are completed, reviewing records, ensuring recommendations from risk assessments are addressed and arranging appropriate specialist support when required.

In larger or more complex organisations, the Responsible Person may need to work with facilities teams, estates personnel, contractors, maintenance providers and specialist consultants.

Appointing someone as the Responsible Person should therefore be more than simply giving them a job title. They need to understand the responsibilities involved and have sufficient competence and organisational support to fulfil the role effectively.

Personnel involved in managing, monitoring, maintaining or controlling water systems should receive appropriate information, instruction and training relevant to their responsibilities.

The level and content of training should be proportionate to the individual’s role. Someone carrying out routine temperature monitoring will have different training requirements from a Responsible Person overseeing an organisation-wide Legionella control programme.

Appropriate training helps ensure that personnel understand the risks associated with Legionella, the importance of effective control measures and the specific procedures they are expected to follow.

Training may cover subjects such as temperature monitoring, flushing regimes, record keeping, recognising changes in water systems, escalation procedures and understanding the organisation’s written control scheme.

It is also important to recognise that training should not necessarily be viewed as a one-off exercise. Competence should be maintained through appropriate refresher training, updates and practical experience, particularly where responsibilities, systems or guidance change.

Legionella training should be tailored to the responsibilities of the individuals attending and the complexity of the water systems they are responsible for managing.

Depending on the course and level of responsibility, training may cover:

• The characteristics of Legionella bacteria
• Legionnaires’ disease and other forms of Legionellosis
• How Legionella can grow and multiply within water systems
• Routes of exposure and potential sources of aerosol
• Factors that increase the risk of Legionella growth
• Hot and cold water system design and operation
• Temperature control principles
• Stagnation and low-use outlets
• The responsibilities of the Responsible Person
• Risk assessment principles
• Monitoring and inspection requirements
• Record keeping and documentation
• Written control schemes
• Corrective and remedial actions
• Contractor and maintenance management
• Relevant UK legislation and HSE guidance
• Recognising changes that may affect the risk profile
• Responding to concerns or elevated risks

For Responsible Persons and those with greater management responsibilities, training should go beyond basic awareness and provide sufficient understanding to enable them to manage their duties competently and make informed decisions.

Legionella consultancy can provide specialist support to organisations that need assistance with assessing, managing or improving their water hygiene arrangements.

Consultancy services can be tailored to the specific needs of the organisation and may include Legionella risk assessments, reviews of existing assessments, written control schemes, Legionella management plans, compliance audits, monitoring programme reviews, remedial action planning and advice on water system management.

A consultant may also assist with interpreting risk assessment findings, prioritising recommendations and providing practical guidance where an organisation is unsure how to address identified issues.

For organisations with more complex premises or multiple sites, consultancy can provide an additional layer of specialist expertise to support internal facilities, estates or health and safety teams.

The objective should be to provide practical, proportionate and technically sound advice that enables the organisation to understand its responsibilities and maintain effective Legionella control arrangements.

A Legionella risk assessment and ongoing monitoring serve different but complementary purposes.

The risk assessment is used to identify and evaluate potential sources of Legionella risk and determine whether existing control measures are appropriate. It provides the foundation for deciding what needs to be controlled and how.

Monitoring is the ongoing process of checking that the required control measures are being implemented and remain effective. Depending on the water system and the control scheme, this may include temperature monitoring, inspection, flushing, cleaning, maintenance and the keeping of appropriate records.

For example, a risk assessment may identify a requirement for specific temperature controls or management of infrequently used outlets. Ongoing monitoring then provides evidence that those measures are being carried out as required.

Effective Legionella management therefore requires both a suitable assessment of the risks and a robust system for implementing, monitoring and reviewing the controls identified.

Yes. Identifying risks is only one part of effective Legionella management. Organisations also need to understand how those risks should be addressed and prioritised.

Following a risk assessment, specialist consultancy can help interpret the findings and develop a practical action plan. Recommendations may range from improvements to monitoring and management procedures through to engineering or remedial works where deficiencies in the water system have been identified.

Support can include reviewing existing control measures, helping prioritise actions according to risk, advising on monitoring arrangements, reviewing written procedures, providing staff training and liaising with relevant maintenance or water hygiene contractors.

Where remedial work is recommended, the organisation responsible for the premises should ensure that the proposed solution is appropriate for the water system and addresses the underlying cause rather than simply treating the immediate symptom.

The aim is to provide practical solutions that reduce risk and support long-term effective management rather than simply producing a report and leaving the client to determine what to do next.

Legionella risk assessments can be undertaken across a wide range of commercial, public and residential premises where water systems may present a foreseeable risk.

This can include:

• Offices and commercial buildings
• Schools and educational establishments
• Care homes and supported living facilities
• Hotels and guest accommodation
• Factories and industrial premises
• Retail and hospitality premises
• Leisure centres and sports facilities
• Residential blocks and managed properties
• Healthcare-related premises
• Community buildings
• Landlord and property management portfolios
• Other premises with hot and cold water systems

Every building is different, so the assessment should be tailored to the actual water systems, building use, occupancy and management arrangements rather than relying on a generic template.

Where an organisation manages multiple properties, a consistent assessment methodology can also help establish a structured approach to managing Legionella risks across an entire portfolio.

Choosing a competent Legionella risk assessor is an important decision because the quality of the assessment directly affects the organisation’s ability to understand and manage its risks.

When selecting an assessor, organisations should consider their relevant qualifications, training, practical experience and technical knowledge. The assessor should have experience appropriate to the type and complexity of water systems being assessed.

It is also worth considering whether the assessor understands current UK legislation and relevant HSE guidance and can demonstrate a practical understanding of water system operation rather than simply completing a checklist.

A good assessment should be clear, evidence-based and specific to the premises. It should explain the significant findings, identify areas requiring attention and provide practical recommendations that the duty holder can understand and act upon.

For more complex systems, it may be particularly important to establish that the assessor has appropriate experience of similar systems and premises.

Organisations should also consider the assessor’s independence and whether they have any commercial interest in recommending additional works. Transparency around competence, scope and recommendations is an important part of selecting a suitable provider.

A Legionella risk assessment should be the starting point for effective risk management rather than the end of the process.

Once the assessment has been completed, the responsible organisation should review the findings and ensure that appropriate actions are assigned and implemented. Recommendations should be prioritised according to the level and nature of the risk.

Where necessary, this may involve changes to monitoring procedures, improvements to record keeping, management of low-use outlets, changes to maintenance arrangements, remedial works or additional staff training.

The organisation should also ensure that appropriate responsibilities are clearly allocated and that relevant personnel understand the control measures they are required to implement.

Records of monitoring, maintenance, inspections and corrective actions should be maintained as appropriate to demonstrate that the control scheme is being implemented.

Finally, the risk assessment should be reviewed when circumstances change or when there is reason to believe that it may no longer accurately reflect the water systems or risks present.

Effective Legionella management is an ongoing process of assessment, control, monitoring, review and continual improvement rather than a one-off compliance exercise.