Legionella risk assessment

Legionella bacteria grow in water between 20 and 45°C, and people catch Legionnaires' disease by breathing in fine droplets from taps and showers. Every employer and anyone in control of premises must assess the risk from their water system. This example covers a small two storey office with a cold water tank in the loft, a hot water cylinder and a staff shower.

Last reviewed 20 October 2026

Opens in the generator with every field filled. The controls start unticked so you record what is in place at your site. Draft, not yet reviewed.

Hazards at a glance · Water system in a small building

  • Legionella in the hot water system15→5
  • Legionella in the cold water system15→5
  • Legionella in little used outlets, dead legs and showers20→5

Rated before and with controls, likelihood × severity out of 25.

Next review20 October 2027
OutputPDF, numbered and dated

Controls in place

11

across 3 hazards, each one ticked as actually in place

The completed risk assessment

As it prints. Open it in the generator and tick what is in place at your site.

Edit it for your workplace

Risk assessment

Management of Health and Safety at Work Regulations 1999, regulation 3

Assessment numberRA-004
Revision1
Date of assessment20 October 2026
Last reviewed20 October 2026
Next review20 October 2027
Company or siteCalder and Shaw Surveyors
ActivityWater system in a small building
Location2 Mill Lane, both floors and the loft
AssessorMartin Calder
Reviewed byMartin Calder
Approved by—

1. The activity

What is doneHot and cold water system in a two storey office building: cold water storage tank in the loft feeding the toilets and hot water cylinder; gas fired hot water cylinder in the ground floor cupboard; kitchen taps, four wash hand basins and one staff shower. No cooling towers, humidifiers or spa pools.
Who does it, and who else could be affectedTwelve office staff, two of whom use the shower after cycling to work; visitors and clients; the contract cleaner; the plumbing contractor. Employees, Visitors, Contractors

2. Hazards, who could be harmed, controls and rating

RefHazardWho might be harmed and howRisk before controlsCurrent controls in placeRisk with controlsFurther action to reduce the risk
SLRiskSLRisk
1Legionella in the hot water systemHSE: Hot and cold water systems: things to considerEveryone using the hot taps and the shower. Three members of staff are over 45. Legionnaires' disease, a potentially fatal pneumonia, from breathing in fine droplets of water from taps and showers. Legionella bacteria grow in water between 20 and 45°C, so hot water that is stored or delivered too cool lets them multiply.5315• The hot water cylinder or calorifier stores water at 60°C or above, and the outgoing temperature is checked and recorded• Hot water at the sentinel outlets, nearest and furthest from the cylinder, reaches at least 50°C within one minute, checked and recorded monthly• The cylinder is checked at least annually to make sure it is clean, with no build up of scale or sludge515• Check the hot supply to each thermostatic mixing valve monthly and shorten any pipe run after a valve that is longer than 2 metres.
2Legionella in the cold water systemHSE: Hot and cold water systems: things to considerEveryone using the cold taps. The loft gets hot in summer, so the tank is the main concern. Legionnaires' disease from cold water that warms above 20°C, most often water stored in a tank in a warm loft or plant room, or pipes running next to heating.5315• Cold water at the sentinel outlets is below 20°C after running for two minutes, checked and recorded monthly• The cold water tank has a tight fitting lid and air vent, holds no more than about a day's use, and is inspected at least annually and cleaned when needed• Cold water pipes and the tank are insulated and kept away from sources of heat515• Check the cold tank temperature at the ball valve outlet every six months.
3Legionella in little used outlets, dead legs and showersHSE: Hot and cold water systems: things to considerThe two staff who use the shower, and whoever flushes it. Legionnaires' disease from water left standing in pipes to taps and showers that are rarely used, or in redundant pipework, and from showerheads where scale and biofilm build up and the spray forms fine droplets.5420• Taps and showers that are not used every week are flushed weekly, run to drain without releasing spray, and the flushing is recorded• Dead legs and redundant pipework have been removed, and pipe runs are kept as short as possible• Showerheads and hoses are dismantled, cleaned and descaled quarterly, or as often as the assessment requires• A named person is responsible for the water system, and the checks are written down and kept for at least five years• The first floor accessible toilet, which is rarely used, is on the weekly flushing list with the showerand 2 more515None
Severity →
L 5510152025
448121620
33691215
2246810
112345
S 1 to 5

Rating = likelihood × severity

  1 to 7 low. Monitor.

  8 to 14 medium. Reduce where reasonably practicable.

  15 to 25 high. Do not start or continue until reduced.

Likelihood: 1 very unlikely to 5 almost certain. Severity: 1 minor to 5 fatal.

3. Further action required, with owner and date

  • Legionella in the hot water system: Check the hot supply to each thermostatic mixing valve monthly and shorten any pipe run after a valve that is longer than 2 metres.Owner: ________. By ________
  • Legionella in the cold water system: Check the cold tank temperature at the ball valve outlet every six months.Owner: ________. By ________
  • Add the cold tank temperature at the ball valve to the check sheet, every six months, starting in the summer when the loft is warmestOwner: Martin Calder. By 30 June 2027
  • Book the plumbing contractor to inspect the loft tank and the cylinder this yearOwner: Office manager. By 15 December 2026

4. Notes

Sentinel outlets: nearest, the kitchen tap; furthest, the first floor wash hand basin by the shower. Check sheet and thermometer are kept in the cylinder cupboard. The shower is flushed every Monday for two minutes with the head held low in the tray.

Hazard descriptions and controls drawn from HSE guidance: HSE, Hot and cold water systems: things to consider; HSE, Hot and cold water systems; HSE, Legionnaires' disease: monitoring and keeping records. This assessment follows the five steps in HSE guidance on risk assessment. It is a starting point; the employer must review it against the actual workplace before relying on it. Review by the next review date, and sooner if the activity, the equipment or the people doing it change, or after an accident or near miss.

Why these controls

For a small building with a simple hot and cold water system, HSE expects a simple assessment. If it shows the risks are low and properly managed, the assessment is complete; what matters after that is doing the checks and writing them down.

Temperature is the main control. Hot water stored at 60°C and reaching the taps at 50°C within a minute, and cold water kept below 20°C, keeps the water out of the range where the bacteria grow. The monthly checks at the nearest and furthest outlets show whether that is still true.

The shower is the weak point. It is used by two cyclists in summer and almost nobody in winter, so the water in its pipe stands for days and the spray makes exactly the fine droplets that carry the bacteria. It is flushed every week and the head is descaled every quarter.

Who has to do it

Employers, and anyone in control of premises, must identify and assess the risk from legionella, prevent or control it, keep records, and review what they do. That includes landlords who rent out a property, or even a room. The law is the Health and Safety at Work etc. Act 1974, the Management of Health and Safety at Work Regulations 1999 and COSHH; HSE's Approved Code of Practice L8 says how to meet it.

For landlords of homes, HSE says the duty does not require an in-depth assessment: the risk from most domestic hot and cold systems is low, because the water is used and replaced every day.

What the assessment should include

  • Who is responsible for the water system, and the name of the competent person if you use one
  • A description of the system: where the water is stored and heated, and which outlets it feeds. A simple sketch is enough for a small building
  • Where the risks are: water between 20 and 45°C, water that is stored or stands in pipes, rust, sludge and scale, and outlets that make spray
  • Who could be at higher risk
  • The controls in place, the checks that show they are working, and how often
  • How the checks are recorded, and when the assessment will be reviewed

Routine checks for a simple hot and cold water system

These are the checks HSE lists for hot and cold water systems. Sentinel outlets are the taps nearest to and furthest from the cylinder and the tank. Use a digital thermometer with a probe, and write every result down.

CheckHow oftenWhat you are looking for
Hot water at the sentinel outletsMonthlyAt least 50°C within one minute of running
Cold water at the sentinel outletsMonthlyBelow 20°C after running for two minutes
Hot water leaving the cylinder or calorifierWhen the sentinel outlets are checkedAt least 60°C
Hot supply to thermostatic mixing valves, where fittedMonthlyAt least 50°C within one minute
Cold water tank, at the ball valve outletEvery six monthsBelow 20°C
Cold water tank and hot water cylinderAt least annuallyClean, lid and vent in place, no sludge, scale or rust
Taps and showers not used every weekWeeklyFlushed through to drain without releasing spray
Showerheads and hosesQuarterly, or as the assessment decidesDismantled, cleaned and descaled

Records

If you have five or more employees, record the significant findings of the assessment. Keep a log of who is responsible, the control scheme, whether the system is in use, and the results and dates of every check. Monitoring results should be kept for at least five years; other records for as long as they are current and two years after.

When you need specialist help

Get a competent person if you do not have the skills to assess the system yourself, if the checks keep failing, or if the building is larger or more complex. Cooling towers, evaporative condensers and spa pools carry a much higher risk and need specialist control and routine testing. In healthcare premises hot water should reach 55°C at the outlet, and where vulnerable people use the water, thermostatic mixing valves stop it leaving the tap above 44°C to prevent scalding.

Sources: HSE, Legionnaires' disease: what you must do; HSE, Hot and cold water systems: things to consider; HSE, Legionnaires' disease: monitoring and keeping records; HSE, Testing and monitoring your water system for legionella; HSE, Legionella and landlords' responsibilities; HSE L8, Legionnaires' disease: the control of legionella bacteria in water systems.

Hazard descriptions and controls follow HSE guidance: HSE, Hot and cold water systems: things to consider; HSE, Hot and cold water systems; HSE, Legionnaires' disease: monitoring and keeping records. Checked 20 October 2026.

This document is a starting point. The employer must check it against the actual workplace, the product safety data sheet and current HSE guidance before relying on it. It is not an HSE approved document.

Hazards in this assessment

Common questions

Do I need a legionella risk assessment?
Yes, if you are an employer or in control of premises, including a landlord. The duty comes from the Health and Safety at Work etc. Act 1974 and COSHH, which covers legionella as a biological agent. HSE's Approved Code of Practice L8 explains what to do.
Can I do my own legionella risk assessment?
Yes, if you understand your water system and the controls. For a small building with a simple hot and cold system most people can. If you do not have the skills, get help from a competent person, inside or outside your organisation.
Does a legionella risk assessment have to be written down?
If you have five or more employees you must record the significant findings. The results of monitoring, inspections and checks should be kept for at least five years. With fewer than five employees you do not have to write it down, but HSE says it is useful to.
Do I need to test the water for legionella?
Not usually, for an enclosed hot and cold water system. HSE says testing may be needed where there is doubt about the controls, or the temperatures are not being reached consistently. Cooling towers, evaporative condensers and spa pools are different and need routine testing.
How often should a legionella risk assessment be reviewed?
Regularly, and whenever there is reason to think it is no longer valid: changes to the water system or its use, a change in who uses the building, checks that show the controls are not working, or a case of Legionnaires' disease.

Other completed examples

Ready to do yours?

Every field filled in. Change the site and tick what is in place.