Managing legionella risk in UK workplaces is a serious legal obligation, not merely a best practice recommendation. Employers, building managers, and duty holders must understand exactly which laws govern their responsibilities, because non-compliance can result in prosecution, financial penalties, and, most critically, preventable harm to the people who occupy or use a building.
Three core pieces of legislation form the backbone of legionella risk management in the UK. Understanding how they interact, what they require, and who they apply to is essential for any organisation that operates water systems where legionella bacteria could grow and spread.
What Are the Main Pieces of Legislation and Guidance for Legionella Control?
The three primary legislative frameworks governing legionella risk management are the Health and Safety at Work etc. Act 1974, the Control of Substances Hazardous to Health Regulations 2002 (COSHH), and the Management of Health and Safety at Work Regulations 1999. Together, these create a comprehensive legal structure that places clear duties on employers and those responsible for premises.
The Health and Safety at Work etc. Act 1974 is the overarching statute that established the modern framework for workplace health and safety in Great Britain. It places a general duty on employers to ensure, so far as is reasonably practicable, the health, safety, and welfare of all employees and any other persons who may be affected by their work activities, which explicitly includes exposure to harmful biological agents such as legionella.
| Legislation | Year | Primary Duty |
|---|---|---|
| Health and Safety at Work etc. Act | 1974 | General duty to ensure health, safety and welfare |
| Management of Health and Safety at Work Regulations | 1999 | Risk assessment and preventive measures |
| Control of Substances Hazardous to Health (COSHH) | 2002 | Control of hazardous biological agents including legionella |
m, then consider who is at risk and under what circumstances. From there, you weigh the likelihood and severity of harm against existing controls, implement any additional precautions needed, and commit to reviewing the assessment whenever circumstances change.
Need a Risk Assessment? Speak with our Legionella Risk Assessment Team
Which UK Legislation Requires Employers to Control the Risk of Legionella in the Workplace?
The Control of Substances Hazardous to Health Regulations 2002, commonly referred to as COSHH, is the specific legislation that directly requires employers to assess and control the risk from biological agents, including legionella bacteria. Under COSHH, legionella is classified as a hazardous substance because it can cause Legionnaires’ disease, a potentially fatal form of pneumonia.
COSHH requires duty holders to carry out a suitable and sufficient assessment of the risks from exposure to hazardous substances, then implement appropriate control measures to prevent or adequately control that exposure. For legionella, this means identifying all water systems and conditions where the bacteria could proliferate, then taking documented, systematic action to eliminate or minimise that risk.
What Is the L8 Legislation for Legionella?
Approved Code of Practice L8, formally titled “Legionnaires’ Disease: The Control of Legionella Bacteria in Water Systems,” is the primary guidance document published by the Health and Safety Executive (HSE) that accompanies the legislative framework. While L8 is technically an Approved Code of Practice (ACoP) rather than legislation itself, it carries significant legal weight because following its guidance is considered sufficient to comply with the law.
L8 sets out practical guidance on how duty holders should identify and assess sources of risk, implement control measures, manage and monitor precautions, and keep records. Crucially, if a prosecution is brought against an employer for legionella-related failings and it can be shown that the employer did not follow L8, the burden of proof effectively shifts to the employer to demonstrate that they complied with the law by other equally effective means.
| L8 ACoP Key Requirement | Practical Obligation |
|---|---|
| Risk Assessment | Identify and evaluate all potential legionella risk sources |
| Control Scheme | Implement a written scheme for controlling identified risks |
| Responsible Person | Appoint a competent person to manage the water safety programme |
| Monitoring and Records | Maintain documented records of all monitoring, treatments, and inspections |
| Review | Regularly review the risk assessment, particularly after system changes |
What Is the First of the 5 Key Elements in Risk Management for Legionella?
The first of the five key elements in legionella risk management is identifying and assessing sources of risk. Before any control measures can be implemented, a duty holder must carry out a thorough and systematic assessment of all water systems within a premises to determine where conditions could support legionella growth, including areas where water is stored, heated, or where aerosols may be generated.
This initial risk assessment must be conducted by a competent person, someone with sufficient knowledge, training, and experience to understand what they are looking at and what constitutes a genuine risk. The HSE provides detailed guidance on what a suitable risk assessment should cover, including water temperature ranges, stagnation points, the condition of the system, and whether any particularly vulnerable people, such as the elderly or immunocompromised individuals, use the building. You can find further guidance on this process via the HSE’s dedicated legionella risk assessment page.
For employers seeking to understand their specific legal obligations under health and safety law, the Health and Safety Executive’s overview of the Health and Safety at Work Act provides a clear foundation for understanding how general duties apply to legionella management specifically.
Understanding the Three Main Pieces of Legislation Used in the Management of Legionella Risk
The three main pieces of legislation used in the management of legionella risk work in concert rather than in isolation. The Health and Safety at Work etc. Act 1974 creates the foundational duty of care; the Management of Health and Safety at Work Regulations 1999 makes risk assessment a specific and enforceable legal requirement; and COSHH 2002 directly addresses the control of hazardous biological agents, including legionella. Layered on top of this is the L8 ACoP, which translates these legislative obligations into practical, sector-specific guidance that duty holders are expected to follow.
For building managers, facilities teams, and employers, the practical takeaway is straightforward: compliance with legionella legislation is not optional, and ignorance of the law is not a defence. The consequences of a legionella outbreak can extend well beyond regulatory prosecution, including civil litigation, reputational damage, and, most devastatingly, the loss of life. Organisations that invest in proper risk assessments, appoint a competent responsible person, and maintain thorough records are not simply ticking boxes; they are fulfilling a genuine moral and legal duty to protect the people in their care.
Getting legionella management right starts with understanding these three legislative pillars and making sure everyone involved in property or facilities management is familiar with them. A robust water safety programme built on the Health and Safety at Work Act, COSHH, and the Management Regulations, guided by L8, gives organisations the clearest possible path to both legal compliance and genuine risk reduction.
What Are the Three Main Pieces of Legislation Used in the Management of Legionella Risk: Frequently Asked Questions
Yes, under the Health and Safety at Work etc. Act 1974 and the COSHH Regulations, all employers and those in control of premises must assess and manage legionella risk. This applies to both residential landlords and commercial property managers.
A legionella risk assessment should be reviewed at least every two years, or sooner if there are significant changes to the water system, building use, or following any incident involving potential contamination. Regular monitoring and control measures should continue throughout the interim period.
Legionella is a type of bacteria found naturally in water sources that, when inhaled as fine droplets, can cause Legionnaires’ disease, a severe and potentially fatal form of pneumonia. For a comprehensive overview of the bacteria and associated risks, the Wikipedia page on Legionella provides a useful starting point.
The landlord or managing agent is legally responsible for ensuring that a legionella risk assessment has been carried out and that appropriate control measures are in place to protect tenants. This responsibility cannot be passed on to the tenant.
An assessor will inspect the entire water system, including tanks, pipework, outlets, showers, and any water features, checking for conditions that could promote bacterial growth. They will then produce a written report outlining identified risks and recommended control measures.
Yes, as a landlord you have a duty to assess legionella risk regardless of the size or type of rental property. A simple domestic property may be assessed by a competent landlord following HSE guidance, but a professional assessment is advisable in most cases.
For a small residential property, an assessment typically takes between one and two hours on site. Larger commercial buildings can take a full day or longer depending on the complexity of the water system.
Templates can be a useful starting point for self-assessment in simple domestic properties, but they must be adapted to accurately reflect the specific water system in your property. The HSE provides guidance documentation to support this process and ensure assessments are thorough and compliant.
Failing to conduct a legionella risk assessment can result in enforcement action from the Health and Safety Executive, including improvement notices, prohibition notices, or prosecution. In the event of a legionella outbreak, liability can lead to significant civil and criminal penalties.
Buildings with complex water systems, water storage tanks, cooling towers, or infrequently used outlets are at higher risk of legionella proliferation. Healthcare facilities, hotels, and older office buildings are among the property types where risk tends to be elevated.
A legionella risk assessment evaluates the conditions within a water system that could allow the bacteria to grow, whereas a legionella water test involves physically sampling the water to check for bacterial presence. Both are useful tools but serve different purposes within a legionella control programme.
There is no formal expiry date on a legionella risk assessment, but it should be reviewed at least every two years or whenever significant changes occur. Keeping an up-to-date assessment is essential for ongoing legal compliance.
Assessors should hold a recognised qualification in legionella risk assessment, such as the RSPH Level 2 Award in Legionella Awareness, along with demonstrable experience in water system assessment. Membership of a professional body such as the Legionella Control Association is also a positive indicator of competency.
For most landlords, the cost of a legionella risk assessment is considered an allowable expense and can be offset against rental income when calculating tax liability. It is advisable to consult an accountant or refer to HMRC guidance to confirm how this applies to your specific circumstances.