Legionella Testing Compliance Requirements in the UK: What You Need to Know
Why Legionella Compliance Matters
Legionella bacteria thrive in water systems where temperatures sit between 20°C and 45°C. When water containing Legionella is inhaled as a fine mist or aerosol, it can cause Legionnaires' disease — a severe and potentially fatal form of pneumonia. In the UK, there are clear legal duties on those responsible for water systems to manage this risk.
Whether you manage a commercial property, a care home, a hotel, or an industrial facility, understanding your legal obligations is the first step to protecting people and staying compliant.
The Legal Framework: What the Law Says
The primary legislation governing Legionella control in the UK is the Health and Safety at Work etc. Act 1974, supported by the Control of Substances Hazardous to Health Regulations 2002 (COSHH). These place a duty on employers and those in control of premises to manage the risk from Legionella.
The Health and Safety Executive (HSE) has published two key guidance documents that set out how to comply:
- ACOP L8 – Legionnaires' Disease: The Control of Legionella Bacteria in Water Systems: This Approved Code of Practice has special legal status. If you are prosecuted for a breach of health and safety law and it is proved that you did not follow the relevant provisions of the ACOP, a court will find you at fault unless you can show that you complied with the law in some other way.
- HSG274 – Technical Guidance: This provides detailed technical guidance on how to implement the requirements of ACOP L8 across different water system types.
Who Is Responsible?
The law places responsibility on the dutyholder — typically the employer, or the person who has control of the premises. This could be a landlord, a facilities manager, or a business owner. The dutyholder must:
- Identify and assess sources of risk
- Prepare a written scheme for preventing or controlling the risk
- Implement, manage, and monitor precautions
- Keep records of all actions taken
- Appoint a competent person to help manage compliance
What Does a Legionella Risk Assessment Involve?
A Legionella risk assessment is a systematic review of your water systems to identify potential risks. It should cover:
- The type and condition of your water systems (hot and cold water, cooling towers, spa pools, etc.)
- Water temperatures throughout the system
- Whether water is stored or recirculated
- The presence of nutrients that encourage bacterial growth (e.g. scale, corrosion, biofilm)
- The likelihood of water droplets being produced and who might be exposed
Risk assessments should be reviewed regularly and whenever there is reason to suspect they may no longer be valid — for example, after changes to the water system or building use.
Testing Requirements and Frequency
Regular microbiological testing is a key part of any Legionella control programme. HSG274 recommends:
- Monthly monitoring of temperatures at sentinel outlets (the first and last outlets on each circuit)
- Quarterly or more frequent Legionella testing for higher-risk systems such as cooling towers and spa pools
- Annual testing as a minimum for many domestic hot and cold water systems, though more frequent testing may be required based on risk assessment findings
Testing should be carried out by a UKAS-accredited laboratory to ensure results are reliable and legally defensible. Our UKAS-accredited water testing kits are designed to make compliant sampling straightforward, whether you are testing for Legionella, Total Viable Count (TVC), or Pseudomonas.
Consequences of Non-Compliance
Failing to comply with Legionella regulations can have serious consequences:
- Criminal prosecution: Dutyholders can face prosecution under health and safety law, with unlimited fines and up to two years' imprisonment in serious cases.
- Civil liability: If someone contracts Legionnaires' disease linked to your premises, you may face civil claims for damages.
- Improvement and prohibition notices: The HSE can issue notices requiring you to improve your practices or stop using water systems until risks are controlled.
- Reputational damage: An outbreak linked to your premises can cause lasting damage to your business reputation.
Record Keeping
ACOP L8 requires dutyholders to keep records of all risk assessments, control measures, monitoring results, and any remedial actions taken. Records should be kept for at least five years. Good record keeping demonstrates due diligence and is essential if you ever need to defend your compliance position.
Getting Started with Compliant Testing
If you are unsure where to start, the most important first step is to commission a Legionella risk assessment from a competent person. From there, you can put in place a written control scheme and begin regular monitoring and testing.
Our range of UKAS-accredited Legionella testing kits makes it easy to collect compliant water samples and have them analysed by an accredited laboratory. Each kit includes full instructions, sample bottles, and a pre-paid return envelope so your samples reach the lab quickly and safely.
If you have questions about which testing kit is right for your system, or how many samples you need to take, get in touch with our team — we are here to help.