This website uses non-intrusive cookies to improve your user experience. You can visit our cookie privacy page for more information.

What you must do

If you are an employer, or someone in control of premises, including landlords, you must understand the health risks associated with legionella. This section can help you to control any risks.

Duties under the Health and Safety at Work etc Act 1974 (HSWA) extend to risks from legionella bacteria, which may arise from work activities. The Management of Health and Safety at Work Regulations (MHSWR) provide a broad framework for controlling health and safety at work.  More specifically, the Control of Substances Hazardous to Health Regulations 2002 (COSHH) provide a framework of actions designed to assess, prevent or control the risk from bacteria like Legionella and take suitable precautions.  The Approved Code of Practice: Legionnaires’ disease: The control of Legionella bacteria in water systems (L8) contains practical guidance on how to manage and control the risks in your system. 

As an employer, or a person in control of the premises, you are responsible for health and safety and need to take the right precautions to reduce the risks of exposure to legionella. You must understand how to:

Identify and assess sources of risk

Carrying out a risk assessment is your responsibility. You may be competent to carry out the assessment yourself but, if not, you should call on help and advice from either within your own organisation or from outside sources, e.g. consultancies.

You or the person responsible for managing risks, need to understand your water systems, the equipment associated with the system such as pumps, heat exchangers, showers etc, and its constituent parts. Identify whether they are likely to create a risk from exposure to legionella, and whether:

Your risk assessment should include:

If you conclude that there is no reasonably foreseeable risk or the risks are low and are being properly managed to comply with the law, your assessment is complete. You may not need to take any further action at this stage, but any existing controls must be maintained and the assessment reviewed regularly in case anything changes in your system.

Managing the risk

As an employer, or person in control of premises, you must appoint someone competent to help you meet your health and safety duties and to take responsibility for controlling any identified risk from exposure to legionella bacteria. A competent person, often known as the responsible person, is someone with sufficient authority, competence, necessary skills, knowledge of the system, and experience. The appointed responsible person could be one, or a combination of:

If there are several people responsible for managing risks, e.g. because of shift-work patterns, you must make sure that everyone knows what they are responsible for and how they fit into the overall risk management of the system.

If you decide to employ contractors to carry out water treatment or other work, it is still the responsibility of the competent person to ensure that the treatment is carried out to the required standards. Remember, before you employ a contractor, you should be satisfied that they can do the work you want to the standard that you require. There are a number of external schemes to help you with this, for example, A Code of Conduct for service providers . The British Standards Institute have published a standard for legionella risk assessment.

Preventing or controlling the risk

You should first consider whether you can prevent the risk of legionella by looking at the type of water system you need, e.g. identify whether it is possible to replace a wet cooling tower with a dry air-cooled system. The key point is to design, maintain and operate your water services under conditions that prevent or adequately control the growth and multiplication of legionella.

If you identify a risk that you are unable to prevent, you must introduce a course of action ie a written control scheme, that will help you to manage the risk from legionella by implementing effective control measures, by describing:

You should:

Keeping records

If you have five or more employees you have to record any significant findings, including those  identified as being particularly at risk and the steps taken to prevent or control risks.  If you have less than five employees, you do not need to write anything down, although it is useful to keep a written record of what you have done.

Records should include details of the:

  1. person or persons responsible for conducting the risk assessment, managing, and implementing the written scheme
  2. significant findings of the risk assessment
  3. written control scheme and details of its implementation
  4. details of the state of operation of the system, i.e. in use/not in use
  5. results of any monitoring inspection, test or check carried out, and the dates  

These records should be retained throughout the period for which they remain current and for at least two years after that period. Records kept in accordance with (e) should be retained for at least five years.

Other duties

Under the Notification of Cooling Towers and Evaporative Condensers Regulations 1992, you must notify your local authority in writing, if you have a cooling tower or evaporative condenser on site, and include details about where it is located. You must also tell them if/when such devices are no longer in use. Notification forms are available from your local authority/environmental health department.
Although less common, other systems that do not rely solely on the principle of evaporation, are dry/wet coolers or condensers. Owing to their different principles of operation, these systems may not require notification under the Notification of Cooling Towers and Evaporative Condensers Regulations 1992 (NCTEC) but it is important to assess the system against the notification requirements defined in NCTEC, eg where such systems spray water directly onto the surface of the heat exchanger.

In addition, under the Reporting of Injuries, Diseases and Dangerous Occurrences Regulations (RIDDOR), you must report any cases of legionellosis in an employee who has worked on cooling towers or hot and cold water systems that are likely to be contaminated with legionella.

Specific risk systems

You will also need to consider technical and further information on the following risk systems:

Update 2014-11-20 --> --> -->