ACOP L8 and the Legionella Responsible Person: The 5 Parts That Carry Legal Weight
A water hygiene contractor's folder arrives at reception. It is substantial: a risk assessment, schematics, temperature logs, tank inspection photographs and a certificate. Somebody signs for it and it goes in the plant room cupboard.
Ask the obvious question of that folder and almost nobody can answer it. Which pages in there would actually be used against you.
It is a fair question with a precise answer, and the answer is not "all of them". The Approved Code of Practice known as L8 sits in a legal category of its own, somewhere between legislation and ordinary advice. More usefully, only five areas of it carry that status. Everything else in the legionella literature, including the whole of the technical guidance in HSG274, is guidance.
Knowing which five, and what the law does with them, changes where you put your effort. Here they are.
What an approved code actually does to you
This is the part worth understanding before looking at any folder, because it explains why L8 matters more than a trade standard and less than a regulation.
Approved codes are approved by the Health and Safety Executive under section 16 of the Health and Safety at Work etc. Act 1974. Section 17 then sets out what happens in a prosecution, and it does two things that pull in opposite directions.
First, section 17(1) is permissive. Failing to observe an approved code does not of itself render a person liable to any civil or criminal proceedings. There is no offence of breaching L8.
Second, section 17(2) is not permissive at all. Any provision of the code the court considers relevant to the alleged breach is admissible in evidence, and where the prosecution proves a failure to observe a relevant provision on a matter it has to establish, that matter is taken as proved unless the court is satisfied the requirement was complied with in a way other than by observing that provision.
Read that twice. On the five areas below the practical effect is close to a reversed burden: the prosecution shows you did not follow the code, and the point is treated as made unless you satisfy a court that you achieved the same thing another way. You may depart from an approved code. You may not depart from it without a defensible alternative you can evidence, which is why these five deserve different treatment from the rest of the folder.
Which law puts you in scope in the first place
Briefly, because this is where people assume they are outside it.
There is no Legionella Regulations. The duties come from the general law: section 2 of the 1974 Act for employees and section 3 for persons not in your employment, regulation 3 of the Management of Health and Safety at Work Regulations 1999 for the assessment, and regulation 6 of the Control of Substances Hazardous to Health Regulations 2002 where the bacterium is treated as a substance hazardous to health.
The HSE's statement of what dutyholders must do names the same stack, and identifies the dutyholder as an employer or someone in control of premises, including landlords. So an office tenant with a hot water system and a few infrequently used outlets is inside this, and so is a landlord, and frequently both at once.
1. The risk assessment
Need Expert H&S Guidance?
Our qualified consultants can help you implement the right health & safety measures for your business.
The first area with approved status, and the one most organisations have.
What matters is less whether an assessment exists than whether it describes your building. The common failures are structural rather than technical: an assessment carried out before a refit changed the pipework, a schematic that no longer matches what is installed, dead legs created by removing a kitchenette and never recorded, and outlets added by a fit out that appear nowhere in the document.
The test to apply is whether somebody could walk the building with the assessment and find every asset it names, and find nothing it does not. Our note on legionella risk assessment covers what one contains and who needs it.
2. The responsible person
The second area, the one that moved into approved status in the current edition, and the one almost nobody can evidence.
The HSE describes this as the specific role of an appointed competent person, known as the responsible person, with managerial responsibility for the control measures. Three things follow.
The appointment is of a person, not a contractor. A water treatment company carries out the work; it does not become your responsible person, any more than a payroll provider becomes your finance director.
It needs authority as well as knowledge. Somebody who understands the scheme but cannot get a failed thermostatic mixing valve replaced is not managerially responsible for anything.
And it needs cover. Monitoring on a weekly or monthly cycle does not pause for annual leave, so an appointment with no named deputy fails in the ordinary course of business rather than in a crisis.
This is the same shape of problem as the general appointment under the Management Regulations, which our notes on the competent person role and the competent person service cover. The legionella appointment is a separate one, and both need names.
3. The written control scheme
The third area. The scheme is the document that says what will be done to prevent or control the risk, to what parameters, how often and by whom.
This is where the gap between having a folder and having a scheme usually shows. Temperature logs are evidence that monitoring happened. They are not a scheme. A scheme states the control regime for each part of the system, so that a log showing an out of range reading can be recognised as a failure against something rather than filed as a number.
A practical check: take last month's monitoring record and try to find the document that tells you whether those readings were acceptable. If the only answer is the contractor's judgement, the scheme is in somebody's head.
4. Review of control measures
The fourth area, and the one that quietly expires.
Control measures have to be reviewed, and the trigger is change as much as time. New occupancy patterns, a floor taken out of use, a building running at half capacity, a refit, a change of water treatment contractor or a period of reduced occupancy all alter the risk and several of them create it where it did not exist before.
Low occupancy deserves specific mention because it is now a standing feature rather than an event. Hybrid working leaves outlets unused for weeks at a time in buildings whose schemes were written for five days of full occupancy, which is a flushing regime question that most schemes have never been updated to answer. Our note on legionella compliance covers the wider duty set.
5. The duties of those involved in supplying water systems
The fifth area is the one nobody reads, because it appears to be about somebody else. It is about designers, installers and suppliers of water systems, and it is the reason this belongs in a project conversation rather than only a facilities one.
Legionella risk is largely designed in. Oversized tanks, runs that create dead legs, materials that support growth and a layout that makes temperature control impossible are decisions made at fit out and paid for over the following decade. That is when this area of the code applies, and when it is cheap to influence. Our note on the fit out brief deals with what to specify before sign off, and where a managing agent or facilities provider holds the work, our note on outsourced facilities management covers the duties that stay with you.
The five, and what a weak answer looks like
| Area with approved status | What a weak position looks like | What you want |
|---|---|---|
| Risk assessment | Exists, predates the last refit | Matches the building as installed |
| Responsible person | The contractor's name | A named employee with authority and a deputy |
| Written control scheme | Temperature logs only | Parameters per asset, so a reading can fail |
| Review of control measures | Reviewed annually by habit | Triggered by change, including low occupancy |
| Duties on supply and design | Never considered | Applied at fit out and specification |
Rows two and three are where almost every finding sits, and neither requires an engineer to fix. Both are documents and a decision.
Holding a scheme, a monitoring record per asset, an appointment with a deputy and a review trigger in one place is a practical case for health and safety consultants and software working as one thing rather than two, because this is a weekly and monthly duty rather than an annual one. Periodic health and safety audits should test it in one move: ask who the responsible person is, then ask who covers the role when they are away.
Who has legionella risk without realising it
The assumption that this is a hospital and hotel problem produces most of the gap. It reaches any building with a hot and cold water system, which is every office; showers in end of trip facilities, now standard in refurbished buildings and the classic aerosol route; infrequently used outlets in kitchenettes and disabled toilets; water features and humidifiers; sports and changing facilities on a school or university campus, where our note on duties education settings miss covers the wider picture; and any building a landlord maintains while a tenant occupies it, where the duty sits with both.
The adjacent questions tend to arrive together. Our note on office ventilation covers air rather than water, our guide to what COSHH is and our COSHH work cover the regulation that brings the bacterium into scope, and this duty belongs with the recurring set in our note on statutory building checks. The HSE's legionella pages are the starting point for anyone new to it.
How this travels across an international estate
For groups with buildings in several countries, legionella is an unusually clean illustration of a pattern we see everywhere: the science is identical and the legal instrument is not.
The organism behaves the same way in every climate, so one group standard for schematics, control parameters and monitoring frequency is both achievable and worth having. That part exports.
The approved code does not. The British arrangement, where a non-statutory document acquires evidential force through section 17 while the rest remains guidance, is distinctive. Elsewhere the subject is handled by binding national rules, mandatory sampling at prescribed intervals, or notification and registration for defined installations such as cooling towers, with testing by an accredited laboratory rather than a contractor of your choosing.
So the asset register, the schematic and the control philosophy export. The interval, the sampling obligation, the laboratory and the notification requirement are local, and a group calendar built on a British scheme will understate what several jurisdictions require. Our note on legionella risk management internationally covers how the frameworks differ.
Where Arinite fits
Arinite does not carry out water treatment or sampling. Our legionella work establishes whether the assessment still describes your building, whether a written scheme exists or only logs, who the responsible person actually is, and whether the review has been triggered by anything other than the calendar. That is where the finding usually is. We support 1,500+ businesses in 50+ countries and protect 100,000+ employees, with 95%+ client retention over 15+ years.
Our health and safety consultants work extensively with offices, education, property and real estate and hospitality clients, where showers, shared water systems and split landlord and tenant responsibility are the normal position.
For multi-country estates, our global health and safety consultants apply the local sampling and notification rules rather than exporting the approved code model, and our international health and safety consultants can tell you which sites need an accredited laboratory or a registered installation.
Ask two questions this week. Who is our legionella responsible person, and who covers the role when they are on holiday. Then book a free gap analysis and we will tell you in one call which of the five you can evidence.
Related Articles
Written by
Arinite Health & Safety Consultants
Health & Safety Expert at Arinite
