Legionella risk assessments are a legal requirement across a wide range of UK properties, from commercial premises and office buildings to rental housing and healthcare facilities. Understanding who holds responsibility for commissioning, maintaining, and reviewing these assessments is essential, not just for legal compliance, but for protecting the health of anyone who occupies or uses a building.
The question of responsibility is one that causes genuine confusion, particularly in settings where multiple parties are involved in managing a property. Landlords, employers, managing agents, and appointed competent persons can all play a role, and the lines between legal duty and delegated responsibility are not always immediately clear.
Who Is Responsible for a Legionella Risk Assessment?
The legal responsibility for ensuring a legionella risk assessment is conducted lies with the duty holder. In most cases, this is the employer in a workplace setting or the person in control of a premises, which in residential lettings is typically the landlord.
This responsibility is set out under the Health and Safety at Work etc. Act 1974 and the Control of Substances Hazardous to Health Regulations 2002 (COSHH). The duty holder does not necessarily need to carry out the assessment themselves, but they must ensure it is completed by someone who is competent to do so, and they remain accountable for its accuracy and implementation.
Need a Risk Assessment? Speak with our Legionella Risk Assessment Team
Who Is Responsible for Ensuring a Legionella Risk Assessment Is Carried Out?
Ultimately, the duty holder cannot transfer their legal accountability to another party, even if they appoint a contractor or specialist to conduct the assessment. If an assessment is never commissioned, or if the findings are ignored, it is the duty holder who faces potential prosecution.
In practice, many organisations appoint a responsible person to manage the day-to-day oversight of legionella controls. This individual takes on the operational duties associated with the water risk management programme, but the overarching obligation to ensure the assessment happens in the first place rests firmly with the duty holder.
| Premises Type | Typical Duty Holder |
|---|---|
| Workplace / Commercial | Employer or person in control |
| Residential Rental | Landlord |
| Multi-occupancy Building | Managing agent or freeholder |
| Healthcare / Care Home | Registered provider or manager |
| Hotel / Hospitality | Business owner or operator |
What Is the Difference Between Duty Holder and Responsible Person?
These two terms are often used interchangeably, but they carry distinct meanings in the context of legionella management. The duty holder is the legal entity, whether an individual or organisation, who bears ultimate accountability under health and safety legislation.
The responsible person, by contrast, is typically the individual appointed by the duty holder to implement and oversee the water hygiene control programme on a day-to-day basis. They may be an internal facilities manager, a health and safety officer, or in smaller organisations, the business owner themselves. Critically, appointing a responsible person does not remove the duty holder’s legal obligations.
| Term | Definition | Legal Accountability |
|---|---|---|
| Duty Holder | The employer or person in control of premises | Yes, legally accountable |
| Responsible Person | Appointed individual managing day-to-day controls | Operationally responsible |
| Competent Person | Trained individual conducting the risk assessment | Responsible for assessment quality |
| Appointed Contractor | External specialist carrying out works | Contractually responsible |
When Should the Legionella Risk Assessment Be Reviewed and Updated?
A legionella risk assessment is not a one-time document. The Health and Safety Executive (HSE) is clear that assessments must be kept up to date and reviewed regularly to remain valid and legally compliant. For most premises, a review every two years is considered good practice, though this does not replace the need for ongoing monitoring.
Certain events should trigger an immediate review regardless of when the last assessment was completed. These include significant changes to the water system, such as new pipework, a change in water temperature, or alterations to the building layout. An assessment should also be reviewed following a suspected or confirmed case of Legionnaires’ disease linked to the premises, or if there is reason to believe the existing controls are no longer effective.
For detailed official guidance on carrying out a legionella risk assessment, the HSE’s Approved Code of Practice L8 provides the definitive framework that duty holders and responsible persons are expected to follow.
If a premises has been unoccupied or water systems have been left stagnant for an extended period, for instance during a business closure or prolonged void period in a rental property, this too warrants a full review. Stagnant water at temperatures between 20°C and 45°C creates conditions where Legionella bacteria can multiply rapidly, increasing the risk to occupants when the building reopens.
Landlords in particular should be aware of their obligations under the Health and Safety Executive’s guidance for landlords, which outlines specific requirements for assessing and managing legionella risks in residential rental properties.
Staying Legally Compliant: Who Is Responsible for Ensuring Legionella Risk Assessments Are Carried Out and Kept Up to Date?
Responsibility for legionella risk assessments sits at multiple levels within any organisation or property arrangement, but the duty holder carries the ultimate legal burden. Whether that is an employer, landlord, or the person in control of a premises, they cannot outsource their accountability, even when competent contractors are appointed to carry out the practical work.
For many businesses and landlords, the most effective approach is to establish a clear internal structure that separates the duty holder’s oversight role from the responsible person’s operational duties. This distinction ensures that assessments are not only completed but actively managed, reviewed on schedule, and updated when circumstances change. Without that structure, risk assessments can become outdated documents that provide a false sense of compliance rather than genuine protection.
Legionella is a genuine public health risk, and the legal framework surrounding it exists for good reason. Duty holders who treat their obligations seriously, by commissioning competent assessments, appointing knowledgeable responsible persons, and scheduling regular reviews, are far better positioned to protect the people in their care and avoid the significant penalties that come with non-compliance.
Who Is Responsible for Ensuring Legionella Risk Assessments Are Carried Out: Common Questions Answered
Yes, under the Health and Safety at Work etc. Act 1974 and COSHH Regulations 2002, duty holders are legally required to assess and manage the risk of Legionella in any premises they control. Failure to comply can result in prosecution, significant fines, and in serious cases, imprisonment.
The duty holder is the employer in a workplace or the person in control of a premises, such as a landlord in a residential rental property. In complex arrangements involving managing agents or freeholders, the duty holder is typically the party with day-to-day control over the water systems.
A landlord can carry out their own assessment if they are competent to do so, meaning they have sufficient knowledge of water systems, microbial risks, and control measures. For most landlords, engaging a qualified water hygiene specialist is the more practical and defensible approach.
The duty holder may face enforcement action from the HSE, including improvement notices, prohibition notices, or prosecution. In cases where someone contracts Legionnaires’ disease as a result of negligence, criminal liability can follow. For more background on Legionella bacteria and the associated health risks, the Wikipedia page on Legionellosis provides a useful overview.
Most guidance, including HSE’s Approved Code of Practice L8, recommends a review every two years as a minimum for most premises. However, reviews should also be triggered by any significant change to the water system, building structure, or occupancy patterns.
The responsible person is the individual appointed by the duty holder to oversee the day-to-day implementation of water hygiene controls and the legionella management programme. They are often a facilities manager, health and safety officer, or an external contractor retained for this purpose.
No, appointing an external contractor does not transfer the duty holder’s legal obligations. The duty holder remains accountable for ensuring the assessment is suitable, that findings are acted upon, and that controls remain effective over time.
An immediate review is required following significant changes to pipework or water systems, alterations to the building’s use, extended periods of low or no water use, or any confirmed or suspected outbreak of Legionnaires’ disease linked to the premises.
The legal framework is the same, but HSE guidance acknowledges that the practical risks in domestic settings are generally lower than in large commercial systems. That said, landlords are still required to assess and manage the risk, particularly where water systems include features such as stored water tanks or spa baths.
A competent person is someone with sufficient training, knowledge, and experience to assess Legionella risks accurately and recommend appropriate control measures. Competency is not a formally regulated qualification in all cases, but professional bodies such as the Legionella Control Association set recognised standards.
Yes, in smaller organisations or properties, the duty holder and responsible person are often the same person, such as a self-employed landlord who manages their own property. What matters is that the individual understands both the legal obligations and the practical requirements of managing water hygiene risks.
Duty holders should retain the written risk assessment, any associated control schemes, records of monitoring activities, and evidence of remedial actions taken. These records may be requested during HSE inspections and serve as evidence of due diligence.
A legionella risk assessment specifically evaluates the risk posed by Legionella bacteria within a water system and recommends appropriate controls. A water hygiene survey is often broader in scope and may include sampling, system condition reports, and compliance audits, though the two terms are sometimes used interchangeably in industry.
Penalties under health and safety legislation can include unlimited fines for both organisations and individuals, along with custodial sentences in serious cases. The HSE has the power to issue enforcement notices and prosecute where it identifies serious failings in the management of legionella risks.