Understanding the staffing requirements for a Legionella risk assessment is one of those questions that sounds straightforward until you start looking into it. The honest answer is that there is no single figure that applies to every organisation, and the number of personnel you need depends on factors such as building size, water system complexity, and whether you are carrying out an initial assessment or maintaining ongoing monitoring.
That said, most organisations require between one and three qualified individuals to conduct a thorough Legionella risk assessment. Getting this right matters enormously, not just for regulatory compliance, but because the consequences of Legionnaires’ disease outbreaks can be severe and, in some cases, fatal.
How Many Staff Do You Need for a Risk Assessment?
For the majority of commercial premises, a single competent Legionella risk assessor is sufficient to carry out an effective evaluation of the water systems on site. This person needs to understand both the technical workings of water distribution systems and the legal framework surrounding Legionella control, including the requirements set out under the Health and Safety at Work Act 1974 and the Approved Code of Practice L8, published by the Health and Safety Executive.
What defines a competent person in this context is not just formal certification, though that matters too. It is the combination of relevant qualifications, such as a City & Guilds Level 2 award in Legionella awareness and risk assessment, alongside genuine hands-on familiarity with the types of water systems present in the building being assessed. Someone who holds a certificate but has never encountered a calorifier, a cooling tower, or a deadleg pipe run in practice may not provide the depth of assessment that more complex premises demand.
Smaller businesses operating from straightforward premises, perhaps a single-occupancy office or a small retail unit with a basic cold water storage system and a combi boiler, can reasonably rely on one qualified assessor. The HSE’s guidance makes clear that the duty holder must ensure whoever carries out the assessment is genuinely competent; outsourcing to an external specialist is a perfectly legitimate route for organisations that cannot justify maintaining that expertise in-house.
Need a Risk Assessment? Speak with our Legionella Risk Assessment Team

Is It a Legal Requirement to Have a Legionella Risk Assessment?
Yes, without exception. Legionella risk assessments are a legal requirement for all UK employers and those with control over premises, regardless of the size of the organisation. This obligation flows from the Health and Safety at Work Act 1974, the Control of Substances Hazardous to Health Regulations 2002 (COSHH), and the Management of Health and Safety at Work Regulations 1999. Together, these pieces of legislation require duty holders to identify and assess the risk of Legionella bacteria proliferating within water systems and to put in place appropriate control measures.
The HSE’s Approved Code of Practice L8, alongside Technical Guidance HSG274, sets out precisely what is expected. Duty holders must conduct a suitable and sufficient risk assessment, implement a written control scheme, appoint a responsible person to manage the programme, and keep records that demonstrate ongoing compliance. These are not optional recommendations; they carry legal weight, and a failure to comply leaves organisations exposed to enforcement action, unlimited fines, and, in the most serious cases involving gross negligence, the possibility of custodial sentences for senior individuals.
One point that sometimes causes confusion is whether very small employers are exempt. Whilst it is true that businesses with fewer than five employees are not generally required to commit their broader health and safety risk assessments to writing, Legionella sits outside that exemption. Because of the severity of Legionnaires’ disease as a potentially fatal respiratory illness, the HSE specifically recommends that all organisations, regardless of headcount, maintain written records of their Legionella risk assessments and the control measures in place. Those records also serve a practical purpose: they provide continuity when staff move on, and they demonstrate due diligence should a case of Legionnaires’ disease ever be traced back to your premises.
Do Organisations with Fewer Than 5 Employees Need Written Records?
Organisations with fewer than five employees are generally exempt from maintaining written risk assessment records under standard health and safety regulations. However, Legionella risk assessments represent a significant exception to this rule due to the serious nature of Legionnaires’ disease and its potential public health impact.
The HSE specifically recommends that all organisations, regardless of size, maintain written records of their Legionella risk assessments and control measures. This documentation proves essential for demonstrating due diligence, tracking system changes, and ensuring continuity of safety measures when staff members change roles or leave the organisation.
How Many Personnel Are Required for a Level 2 Risk Assessment?
Level 2 Legionella risk assessments typically require a minimum of two qualified personnel working collaboratively to ensure thorough evaluation and cross-verification of findings. This approach reduces the likelihood of overlooking critical risk factors and provides additional expertise for complex water system configurations.
The primary assessor should hold advanced Legionella qualifications, whilst the secondary person can provide technical support, documentation assistance, and independent verification of key findings. Some organisations also include facilities management staff who possess intimate knowledge of the building’s water systems and historical maintenance issues.
| Assessment Type | Minimum Personnel | Typical Duration | Key Qualifications Required |
| Basic Risk Assessment | 1 qualified assessor | 2-4 hours | City & Guilds Level 2 |
| Level 2 Assessment | 2 qualified personnel | 4-8 hours | Advanced Legionella certification |
| Complex Commercial | 2-3 specialists | 8-16 hours | Engineering background preferred |
| Healthcare Facilities | 3-4 team members | 12-24 hours | Healthcare-specific training |
[Internal Link: Legionella Risk Assessment Services →]
The HSE’s guidance on Legionella control emphasises the importance of competent personnel conducting these assessments. Competency encompasses both formal qualifications and practical experience in identifying Legionella risks across different building types and water system configurations.
| Building Type | Staff Requirements | Additional Considerations |
| Small Office (< 50 people) | 1 qualified assessor | Annual review sufficient |
| Medium Commercial | 1-2 assessors | Quarterly monitoring needed |
| Large Complex | 2-3 specialists | Monthly checks required |
| Healthcare/Care Homes | 3-4 team members | Weekly temperature monitoring |
| Hotels/Hospitality | 2-3 assessors | Guest safety protocols essential |
Due for a Risk Assessment? Speak with our Legionella Assessment Team
Ensuring Adequate Staffing for Legionella Risk Assessment Success
Determining the appropriate staffing levels for Legionella risk assessments requires careful consideration of your organisation’s specific circumstances and regulatory obligations. The investment in properly qualified personnel pays dividends through reduced liability, improved safety outcomes, and demonstrated regulatory compliance.
Successful Legionella risk management programmes typically involve cross-functional teams including facilities management, health and safety professionals, and external specialists where required. This collaborative approach ensures comprehensive risk identification and effective implementation of control measures across all areas of your organisation.
The key to effective Legionella risk assessment lies not just in meeting minimum staffing requirements, but in ensuring those personnel possess the necessary competence and authority to implement recommendations effectively:
Legionella Risk Assessment FAQs
What qualifications should Legionella risk assessment personnel possess?
Personnel conducting Legionella risk assessments should hold relevant qualifications such as City & Guilds Level 2 in Legionella awareness and control, with advanced certifications for complex assessments. Practical experience in water system management and understanding of relevant legislation are equally important for effective risk evaluation.
Can small businesses conduct their own Legionella risk assessments?
Small businesses can conduct their own Legionella risk assessments provided they have appropriately qualified staff or engage competent external assessors. The Legionella bacteria’s serious health implications mean proper expertise is essential regardless of organisation size.
How often should Legionella risk assessments be reviewed?
Legionella risk assessments should be reviewed annually as a minimum, with more frequent reviews following significant changes to water systems or building occupancy. High-risk environments such as healthcare facilities may require quarterly or even monthly assessment updates.
What happens if insufficient staff conduct the risk assessment?
Inadequate staffing for Legionella risk assessments can result in incomplete hazard identification, regulatory non-compliance, and increased liability exposure. Organisations may face enforcement action from the HSE and potential legal consequences if Legionnaires’ disease cases occur due to inadequate risk management.
Are external consultants required for Legionella risk assessments?
External consultants are not legally required but are often beneficial for organisations lacking in-house expertise or facing complex water system configurations. Independent assessors bring specialist knowledge and objective perspectives that enhance risk identification and control measure effectiveness.
What role do facilities management staff play in Legionella assessments?
Facilities management staff provide crucial local knowledge about water system layouts, historical maintenance issues, and operational procedures that external assessors might not readily identify. Their involvement ensures comprehensive risk evaluation and practical implementation of recommended control measures.
How long does a typical Legionella risk assessment take?
Basic Legionella risk assessments for small premises typically take 2-4 hours, whilst complex commercial or healthcare facilities may require 8-24 hours depending on system complexity. Level 2 assessments generally require longer timeframes due to their comprehensive nature and detailed documentation requirements.
What documentation must be maintained following risk assessments?
All organisations should maintain comprehensive records including risk assessment reports, control measure implementation, monitoring logs, and staff training records. The HSE recommends keeping these documents for at least five years to demonstrate ongoing compliance.
Can risk assessment responsibilities be shared between multiple staff members?
Risk assessment responsibilities can be shared provided each individual understands their specific duties and possesses appropriate competence for their assigned tasks. Clear communication and coordination between team members are essential to prevent gaps in risk identification or control implementation.
What training do staff need before conducting Legionella risk assessments?
Staff require formal Legionella awareness training covering risk identification, control measures, and legal requirements, typically through recognised courses such as City & Guilds programmes. Ongoing professional development and refresher training ensure assessors maintain current knowledge of best practices and regulatory changes.
Are there specific requirements for healthcare facility assessments?
Healthcare facilities require enhanced staffing levels due to vulnerable patient populations and complex water systems including medical equipment connections. Assessment teams typically include infection control specialists alongside Legionella experts to address unique healthcare-related risks.
What constitutes a competent person for Legionella risk assessment?
A competent person possesses both formal qualifications in Legionella control and practical experience relevant to the specific building type and water systems being assessed. Competency combines technical knowledge, understanding of legal requirements, and ability to implement effective risk control measures.
How do staffing requirements differ for initial versus ongoing assessments?
Initial Legionella risk assessments typically require more comprehensive staffing to establish baseline conditions and implement control systems. Ongoing assessments may require fewer personnel focused on monitoring existing controls and identifying system changes that could affect risk levels.
What support do assessment teams need from senior management?
Assessment teams require senior management support through adequate resource allocation, authority to implement recommendations, and commitment to ongoing compliance activities. Management backing ensures risk assessment findings translate into effective risk control measures and sustained safety improvements.

