What records demonstrate effective Legionnaires’ disease prevention risk controls?

Effective Legionnaires’ disease prevention records are those that demonstrate, in a traceable and reviewable way, that identified risks were controlled in practice. A document stating that a control exists is not enough on its own. The record should show what was checked, when it was checked, who carried it out, what was found, whether the result was acceptable and how any deviation was addressed.

Records should describe the system clearly. Evidence is more useful when it can be linked to particular assets and locations. This may include an up-to-date schematic, asset register, outlet list, plant-room details and information about storage tanks, calorifiers, secondary return systems, showers, expansion vessels and other relevant components. Where systems change, the associated drawings, schedules and written descriptions should be amended so that monitoring records still relate to the installation in its current form.

Monitoring entries need enough detail to be auditable. A temperature log, for example, should identify the outlet or plant item tested rather than merely recording a general site reading. It should include the date, time where relevant, measured result, person completing the check and any applicable acceptance criterion. Electronic records can provide useful controls such as user identification, time stamps and restricted editing, while paper records should be legible and protected from loss or unauthorised alteration.

Records should also make clear whether the expected control was achieved. A completed form containing only ticks can be difficult to interpret if it does not explain what the tick represents. Where readings fall outside the required range, the entry should not be silently corrected or omitted. The original result, the significance of the deviation and the action taken should remain visible.

Corrective-action records are particularly important. They should connect a problem to its response and eventual resolution. Useful evidence may include:

• the date and location of the failure or abnormal result;
• the control that was not achieved and the likely significance of the finding;
• the immediate precaution taken to manage the risk;
• the person or role responsible for further action;
• the work completed, such as cleaning, disinfection, repair, alteration or additional monitoring;
• follow-up results confirming whether the issue was resolved; and
• formal closure or acceptance by an appropriately responsible person.

An open action that appears repeatedly on inspection reports without an explanation does not provide the same assurance as a documented action plan with ownership, timescales and verification. If an action cannot be completed as originally planned, the reason, interim control and revised approach should be recorded.

Testing evidence should be interpretable, not just filed. A laboratory report should be linked to the sampled locations and dates, with sufficient information to identify the system and sampling scope. The organisation should retain the assessment of what the result means for its control arrangements, including any decision to repeat sampling, investigate the system or undertake remedial work. Results should be considered alongside temperature, usage, maintenance and operational information rather than treated as isolated certificates.

Records should show that responsibilities are understood. A written management arrangement can identify the duty holder, responsible person, contractors and other staff involved in operating or maintaining the water system. It should explain who reviews records, who authorises remedial work and how significant findings are escalated. Training and competence evidence is more meaningful when it identifies the role covered, the subject matter, the date and any need for refresher or additional instruction.

Review records demonstrate that the system is being actively managed. Periodic reviews should consider whether the risk assessment remains accurate, whether control measures are consistently achieved, whether recurring failures indicate a deeper problem and whether changes to the building or water system have introduced new risks. A review should record its outcome, the evidence considered, decisions made and any resulting amendments to procedures or the risk assessment.

Useful review triggers include alterations to plant, changes in occupancy or water use, periods of low use, changes to responsible personnel, incidents, repeated out-of-range readings and significant maintenance work. Recording the reason for a review helps show that the arrangements were reconsidered when circumstances changed, rather than simply signed off at fixed intervals.

Record management is part of the evidence. Documents should be current, accessible to those who need them and protected against accidental loss. Superseded versions should be identifiable so that staff do not rely on outdated instructions. There should also be a defined retention approach consistent with the organisation’s procedures, contractual arrangements and applicable health and safety guidance. Records held by contractors should be available to the responsible person and incorporated into the site’s overall control record.

The strongest record system therefore allows an independent reviewer to follow the complete chain from system information and risk evaluation through routine control, testing, exception handling, remedial work and management review. Gaps, unexplained alterations, repeated unresolved findings or records that cannot be matched to specific assets weaken the evidence, even where the underlying work may have been carried out. Regular compliance audits and structured reviews can help identify those weaknesses before they affect confidence in the water safety arrangements.