When is a legionella management plan needed?

A legionella management plan is needed where controlling the risk requires coordinated, ongoing action rather than a one-off inspection or test. This is commonly the case in workplaces, residential buildings, healthcare premises, leisure facilities, hospitality venues and other properties where water is stored, distributed, heated, cooled or released as an aerosol.

The plan turns the findings of a risk assessment into a working system of control. It should make clear what must be done, who is responsible, how results are recorded, what happens when readings or inspection findings are outside the required parameters, and when the arrangements must be reviewed.

Situations that commonly require a formal plan

• The premises contains hot and cold water systems with storage tanks, calorifiers, secondary return systems or extensive pipework.
• Water may stagnate because of low use, infrequently occupied areas, redundant outlets, dead legs or oversized storage capacity.
• Water temperatures may support legionella growth, or the system is difficult to maintain within its intended temperature range.
• Outlets such as showers, spray taps, whirlpool baths, humidifiers or other equipment can create breathable droplets or aerosols.
• Cooling towers, evaporative condensers or other evaporative systems are present.
• People using the premises may be particularly vulnerable to legionnaires’ disease, including older people, smokers and those with impaired immunity or underlying respiratory conditions.
• The water system is complex, shared between several occupiers, or managed by more than one organisation.
• There has been a change to the building, occupancy, water services, equipment, operating procedures or responsible personnel.

A small, simple system with limited storage and little opportunity for aerosol exposure may need fewer controls than a large or complex installation. However, the absence of a high-risk feature does not remove the need to consider legionella. The appropriate level of documentation depends on the actual system, its use and the people who may be exposed.

UK duties and recognised guidance

Employers and other dutyholders must assess and control health and safety risks arising from work activities. Where exposure to legionella bacteria is reasonably foreseeable, relevant duties can arise under the Health and Safety at Work etc. Act 1974 and the Control of Substances Hazardous to Health Regulations 2002. The Management of Health and Safety at Work Regulations 1999 also support the requirement for suitable risk management arrangements.

The Health and Safety Executive’s Approved Code of Practice L8, Legionnaires’ disease: The control of legionella bacteria in water systems, and the associated HSG274 guidance explain accepted approaches to managing the risk. These documents are not a substitute for a site-specific assessment, but they provide an important benchmark for identifying hazards, selecting controls and demonstrating that arrangements have been considered properly.

A written management plan is particularly important where several people contribute to water safety. It provides evidence that the dutyholder has assigned responsibilities and established a consistent process, rather than relying on informal knowledge held by one employee or contractor.

What the plan should cover

• The water systems and equipment included within its scope, supported by current schematic drawings or asset information where appropriate.
• The findings and assumptions from the legionella risk assessment, including areas requiring particular attention.
• The named dutyholder, responsible person and deputies, with clearly defined authority and competence requirements.
• Routine monitoring of temperatures, usage, inspections, cleaning, disinfection and other relevant control measures.
• Methods for recording results, retaining records and escalating failures or missed tasks.
• Procedures for managing outlets or systems that are unused, intermittently used or taken out of service.
• Actions following alterations, maintenance, breakdowns, water-quality concerns or changes in occupancy.
• Emergency arrangements for suspected exposure, an outbreak, loss of temperature control or contamination of the system.
• Training requirements for employees and contractors carrying out monitoring, maintenance or remedial work.
• Dates and triggers for reviewing the risk assessment and management arrangements.

The plan should be proportionate and usable. Excessive paperwork does not compensate for unclear responsibilities or controls that are impractical to carry out. Equally, a short generic document may be inadequate if it does not reflect the building’s actual pipework, equipment, operating patterns and vulnerable occupants.

When a plan should be updated

Review is needed after significant changes, not only on a fixed calendar date. Relevant triggers include installing or removing plant, modifying pipework, changing water temperatures, altering occupancy, reopening a building after extended closure, identifying persistent control failures, or receiving information that changes the understanding of exposure. An incident involving suspected legionella exposure should prompt a prompt review of both the risk assessment and the control arrangements.

Changes in personnel also matter. If the responsible person leaves, responsibilities are transferred or contractors change, the plan should be checked to confirm that the new arrangements are understood and that competence, access and reporting lines remain suitable.

When specialist input may be appropriate

Independent technical advice is useful where the system is complex, records are incomplete, control measures are not working as intended, or the organisation lacks the competence to assess the risks. A suitable service may include a detailed risk assessment, review of existing records, water sampling where justified, audit of monitoring arrangements and recommendations for remedial work. Testing alone does not replace a management plan, because a sample provides information about a particular point in time while effective control depends on the system’s design, operation and maintenance.

For a business deciding whether a plan is necessary, the practical test is whether legionella control involves recurring tasks, multiple responsibilities, foreseeable changes or people who could be exposed to aerosols. If it does, a documented plan provides the structure needed to manage those duties consistently and to show how the organisation is controlling the risk.