Legionella Risk Management: Complete International Guide

Understanding your legal duties for Legionella control across the UK, EU, US, Australia, and beyond

Legionella is more than just a health risk. It is a legal responsibility for every employer, landlord, and duty holder across the developed world. The bacteria that cause Legionnaires' disease are found naturally in water systems but become dangerous when they multiply in poorly maintained systems and are inhaled as contaminated water droplets. The disease is severe: a potentially fatal form of pneumonia with a mortality rate of around 10% even with appropriate treatment.

In the UK, around 500 cases of Legionnaires' disease are reported annually, though the true number is likely higher as many cases go undiagnosed or unreported. Across Europe, the notification rate has been increasing year on year, reaching 2.4 cases per 100,000 inhabitants by 2021. In the United States, the CDC estimates that between 8,000 and 18,000 people are hospitalised with Legionnaires' disease each year, with reported cases increasing more than 200% between 2000 and 2009.

For organisations operating across multiple jurisdictions, Legionella compliance presents particular challenges. Requirements vary significantly between countries, from the specific regulations that apply to action thresholds for Legionella concentrations. This guide provides a comprehensive overview of Legionella risk management requirements across major jurisdictions, practical steps for compliance, and how health and safety consultants can help ensure your water systems are safe and legally compliant.

Understanding Legionella: The Biological Hazard in Your Water Systems

Legionella bacteria are found naturally in freshwater environments such as lakes and streams. They become a health hazard when they colonise and multiply in building water systems. The bacteria thrive in specific conditions: water temperatures between 20°C and 45°C, stagnant or slow-moving water, and the presence of nutrients including rust, sludge, scale, and biofilm.

Infection occurs when people inhale fine water droplets (aerosols) containing the bacteria. This can happen through showers, cooling towers, hot tubs, decorative fountains, and any system that creates airborne water spray. Person-to-person transmission is extremely rare. The disease primarily affects older adults, smokers, and those with weakened immune systems or underlying health conditions such as diabetes.

Water Systems at Risk

Almost any workplace with a water system can harbour Legionella. Systems that present particular risk include:

Hot and cold water systems, particularly those with dead legs, low usage points, or long pipe runs
Cooling towers and evaporative condensers
Spa pools and hot tubs
Humidifiers and air washers
Emergency showers and eyewash stations
Decorative water features and fountains
Vehicle wash systems
Dental chair water lines

UK Legal Requirements for Legionella Control

UK law is clear: if you manage premises with a water system, you must control the risk of Legionella. The legal framework comprises several key pieces of legislation and approved guidance.

Health and Safety at Work etc. Act 1974

Section 2 of the Act requires employers to ensure, so far as is reasonably practicable, the health, safety, and welfare at work of all their employees. Section 3 extends this duty to persons not in their employment who may be affected by the way they conduct their undertaking. This includes visitors, contractors, and members of the public. Section 4 places duties on those who have control of premises to ensure they are safe.

Control of Substances Hazardous to Health Regulations 2002 (COSHH)

COSHH requires employers to assess risks from hazardous substances, including biological agents such as Legionella. Employers must prevent or adequately control exposure to hazardous substances, implement control measures, maintain controls, monitor exposure where necessary, provide health surveillance where appropriate, and provide information, instruction, and training.

Approved Code of Practice L8: Legionnaires' Disease

The HSE's Approved Code of Practice L8, titled 'Legionnaires' disease: The control of Legionella bacteria in water systems', provides practical guidance on how to comply with the legal requirements. While not law itself, the ACOP has special legal status: if you are prosecuted for a breach of health and safety law, and it is proved that you did not follow the relevant provisions of the Code, you will need to show that you complied with the law in some other way or a court will find you at fault.

The ACOP requires duty holders to:

Identify and assess sources of risk
Prepare a written scheme for preventing or controlling risk
Implement, manage, and monitor precautions
Keep records of the precautions implemented
Appoint a competent person to help meet their duties

HSG274: Technical Guidance

The HSE's HSG274 series provides detailed technical guidance supporting ACOP L8:

HSG274 Part 1: Evaporative cooling systems
HSG274 Part 2: Hot and cold water systems
HSG274 Part 3: Other risk systems

International Legionella Requirements: A Global Overview

For global health and safety consultants supporting multinational organisations, understanding Legionella requirements across jurisdictions is essential. While scientific understanding of Legionella is universal, regulatory approaches vary significantly between countries. A comparative analysis of international frameworks reveals common principles but also important differences in target groups, action thresholds, and enforcement approaches.

European Union

The European Technical Guidelines for the Prevention, Control and Investigation of Infections caused by Legionella species, published by the ESCMID Study Group for Legionella Infections, provide a harmonised approach across EU Member States. These guidelines aim to standardise procedures for preventing and investigating Legionella infections and provide technical guidance for those designing, installing, commissioning, assessing risks, and managing building water systems.

EU-OSHA has noted that most Member States have addressed Legionella primarily as a public health issue rather than an occupational hazard, though the technical guidance for public health can equally be used to reduce workplace risks. The European Centre for Disease Prevention and Control (ECDC) monitors Legionnaires' disease through the European Legionnaires' Disease Surveillance Network (ELDSNet).

Germany

Germany has some of the most comprehensive Legionella regulations globally. The Protection Against Infection Act (Infektionsschutzgesetz) regulates drinking water, swimming pools, and wastewater treatment plants. The country's federal Environmental Protection Agency has established specific requirements under the EU Drinking Water Directive. A key requirement is that every large building with more than 400 litres of hot water storage or more than three litres of hot water between the heater and the last tap must have a Legionella risk management plan. The German approach emphasises that Legionella concentrations should be "as low as reasonably achievable."

France

France has mandatory regulations for cooling towers, hot water systems, and other high-risk installations. The Code de la santé publique establishes requirements for monitoring and controlling Legionella in public establishments. Healthcare facilities face particularly stringent requirements given the vulnerability of hospital patients. France has implemented specific action thresholds and mandatory reporting requirements.

United States

The United States has no specific OSHA standard addressing Legionellosis. However, under Section 5(a)(1) of the Occupational Safety and Health Act of 1970, known as the General Duty Clause, employers are obligated to provide a workplace free from recognised hazards that could cause death or serious physical harm. OSHA can enforce the General Duty Clause where there is a recognised, serious hazard without a specific standard.

The CDC has developed guidance on water management programmes, and ASHRAE Standard 188 provides industry guidance on Legionella risk management for building water systems. The Environmental Protection Agency's Surface Water Treatment Rule sets a Maximum Contaminant Level Goal of zero Legionella organisms for drinking water. However, building water systems fall outside EPA jurisdiction, and the US has been noted as lagging behind European counterparts in producing engineering and water treatment standards.

Australia

Australian states and territories have enacted specific Legionella regulations, with cooling tower registration, testing, and maintenance requirements. The Public Health Act in most jurisdictions establishes notification requirements and enforcement powers. Work health and safety legislation also applies to occupational exposure to Legionella. AS/NZS 3666 provides detailed guidance on air-handling and water systems for building microbial control.

Common Principles Across Jurisdictions

Despite different regulatory frameworks, common principles exist across international requirements:

Avoiding and monitoring critical points where Legionella growth is likely
Avoiding water stagnation through system design and regular flushing
Maintaining hot water above 60°C at the calorifier and above 50°C at outlets
Maintaining cold water below 20°C (or ideally below 25°C)
Conducting risk assessments for water systems
Implementing written control schemes and maintaining records

Legionella Risk Assessment: The Foundation of Compliance

A Legionella risk assessment is the first and most important step towards compliance. It identifies hazards in your water system, assesses who is at risk, and determines the control measures needed to eliminate or adequately control those risks. Without a suitable and sufficient risk assessment, you cannot demonstrate compliance with legal requirements.

What the Assessment Must Cover

A compliant Legionella risk assessment should address:

Identification of all water systems and their components
Assessment of Legionella growth conditions including temperature, stagnation, and nutrient sources
Identification of potential exposure routes (aerosol generation)
Identification of people at risk, including vulnerable groups
Review of existing control measures and their effectiveness
Recommendations for additional controls where needed
A schematic diagram of the water system

Who Can Conduct the Assessment

The assessment must be carried out by a competent person: someone with sufficient training, knowledge, and experience to understand the risks and the control measures needed. For simple systems in small premises, this may be possible in-house with appropriate training. For larger or more complex systems, including cooling towers and healthcare facilities, specialist expertise from experienced health and safety consultants is strongly recommended.

Review Frequency

The HSE recommends reviewing your Legionella risk assessment at least every two years. However, it should also be reviewed whenever there is a significant change to your water system, building use, or occupancy. Changes that should trigger a review include alterations to the water system, changes in building occupancy or use patterns, identification of a case of Legionnaires' disease, audit findings indicating inadequate control, and appointment of a new responsible person.

Practical Control Measures for Legionella

Once risks have been identified through assessment, appropriate control measures must be implemented. The specific measures will depend on the type of water system, but key principles apply universally.

Temperature Control

Temperature is the primary control for hot and cold water systems:

Store hot water at 60°C or above
Distribute hot water at 50°C or above within one minute of running the tap
Keep cold water below 20°C
Monitor temperatures regularly at representative outlets and storage

Avoiding Stagnation

Stagnant water allows Legionella to multiply:

Flush little-used outlets weekly
Remove dead legs from the system where possible
Ensure tanks are sized appropriately for actual usage
Maintain good water turnover throughout the system

System Cleanliness

Biofilm, scale, and debris provide nutrients for Legionella growth:

Keep cold water tanks clean with fitted lids and insect screens
Inspect tanks annually and clean as necessary
Descale showerheads and spray outlets quarterly
Maintain calorifiers and clean as indicated by inspections

Monitoring, Testing, and Record Keeping

Ongoing monitoring is essential to verify that control measures remain effective. This includes routine temperature monitoring, visual inspections, and in some circumstances, Legionella testing.

Routine Monitoring

Monthly temperature checks at sentinel outlets (those nearest and furthest from storage)
Quarterly checks of representative outlets throughout the system
Weekly flushing of little-used outlets with records kept
Annual inspection of tanks, calorifiers, and other system components

Legionella Testing

Legionella testing is not always mandatory in the UK, but monitoring through temperature and inspection alone may not be sufficient for higher-risk systems. Testing may be required if your risk assessment identifies elevated risk, if temperature control cannot be reliably maintained, for cooling towers and other high-risk systems, in healthcare settings, or following an outbreak or suspected case. Action thresholds vary between jurisdictions. The UK HSG274 suggests that where Legionella is detected at above 100 CFU/litre, the system should be reviewed to identify any remedial actions. Concentrations above 1,000 CFU/litre generally require immediate investigation and remedial action.

Records

Comprehensive records are essential for demonstrating compliance. Records should include:

The current Legionella risk assessment
Written scheme for controlling risk
Details of the responsible person and competent persons
Temperature monitoring results
Flushing and maintenance records
Test results and inspection reports
Training records for relevant staff
Records of remedial actions taken

Consequences of Non-Compliance

Failure to manage Legionella risks can have severe consequences. First and most importantly, people can become seriously ill or die. Legionnaires' disease has a case fatality rate of around 10%, and even higher among vulnerable populations. Beyond the human cost, organisations face significant legal and financial consequences.

In the UK, failures can result in:

Enforcement notices requiring immediate action
Prohibition notices stopping use of water systems
Prosecution under HSWA 1974 with unlimited fines
Corporate manslaughter charges in cases of gross negligence causing death
Civil claims for compensation
Severe reputational damage

Health and Safety Consultants and Software: Managing Legionella Compliance

Managing Legionella compliance across multiple sites and jurisdictions presents significant challenges. Health and safety consultants and software platforms work together to provide the tools and expertise needed to maintain compliance effectively.

Digital platforms support Legionella management through:

Centralised storage of risk assessments and written schemes
Automated scheduling of monitoring activities and reviews
Mobile temperature monitoring with automatic alerts for out-of-range readings
Digital record keeping for all monitoring, testing, and maintenance
Compliance dashboards showing status across multiple sites
Support for health and safety audits with evidence readily accessible
Task tracking and escalation for overdue activities
Integration with wider health and safety management systems

For international health and safety consultants supporting organisations with water systems across multiple countries, integrated software enables consistent approaches while accommodating different local requirements and action thresholds.

How Arinite Can Help

At Arinite, we are experienced global health and safety consultants who help organisations manage their Legionella compliance obligations effectively. Our team of Chartered (CMIOSH) consultants provides comprehensive support across the UK and internationally.

Our Legionella services include:

Legionella risk assessments for all types of water systems
Development of written schemes for controlling risk
Gap analysis against ACOP L8 and international requirements
Health and safety audits covering Legionella management
Training for responsible persons and maintenance staff
Incident investigation following positive test results or cases
Software implementation for monitoring and compliance tracking
International guidance on Legionella requirements across jurisdictions

With experience supporting over 1,500 UK businesses and operations in more than 50 countries, we understand the challenges of managing biological hazards in water systems across different regulatory environments. Whether you need a risk assessment for a single site, a compliance review across your portfolio, or coordinated support for international operations, our approach is practical, proportionate, and focused on keeping people safe. We call it "Keeping It Simple."

Need Support with Legionella Compliance?

Whether you need a Legionella risk assessment, a review of your written scheme, health and safety audits covering water safety, or guidance on compliance across international jurisdictions, our Chartered consultants can help. Book a free 30-minute Gap Analysis Call to discuss your needs.

Legionella Risk Management: A Complete International Guide to Compliance