Legionella Compliance for Breweries & Distilleries: The Testing Lab's Complete UK Guide

Why Do Breweries and Distilleries Have a Legionella Compliance Obligation?

ANSWER CAPSULE: Every UK brewery and distillery is a dutyholder under HSE's Approved Code of Practice L8 (Legionnaires' disease: The control of Legionella bacteria in water systems). This legal obligation applies regardless of business size — from craft microbreweries to large-scale distilleries — and covers all water systems on site, not just those directly involved in production.

CONTEXT: The Health and Safety at Work Act 1974, the Control of Substances Hazardous to Health (COSHH) Regulations 2002, and the Management of Health and Safety at Work Regulations 1999 collectively establish the legal framework. HSE's ACoP L8 and its companion technical guidance document HSG274 provide the operational detail. Together, they require dutyholders to identify and assess the risk of Legionella exposure, implement a written water safety scheme, appoint a Responsible Person, and maintain records of all monitoring and corrective actions.

For breweries and distilleries specifically, the compliance challenge is amplified by the sheer variety of water systems on a typical site. Process water used in mashing, cooling wort, or spirit production runs at temperatures that can sit within Legionella's optimum growth range of 20–45°C. Cooling towers used in refrigeration cycles create aerosol risk. Steam boilers, heat exchangers, and condensate return lines add further complexity. Staff shower facilities and welfare blocks — often found in converted rural buildings — must also be assessed under the same framework.

According to the UK Health Security Agency (UKHSA), 503 confirmed cases of Legionnaires' disease were reported in England and Wales in 2022, with workplace water systems identified as significant environmental sources in cluster investigations. Non-compliance with ACoP L8 can result in HSE improvement notices, prohibition orders, unlimited fines, and criminal prosecution of directors and managers.

What Water Systems in a Brewery or Distillery Require Legionella Risk Assessment?

ANSWER CAPSULE: Any water system in a brewery or distillery that stores or distributes water at temperatures between 20°C and 45°C, or creates aerosol or water droplets that could be inhaled, requires a Legionella risk assessment. This typically includes cooling towers, process pipework, hot and cold water services, and welfare facilities — but the exact scope must be determined on a site-by-site basis.

CONTEXT: Brewing and distilling operations involve a wider variety of water systems than most other commercial premises. Each system type carries a different risk profile:

**Cooling Towers and Evaporative Condensers**: Used extensively in brewery refrigeration and distillery condenser systems, these are the highest-risk Legionella sources due to their continuous aerosol generation. The Notification of Cooling Towers and Evaporative Condensers Regulations 1992 require all such units to be registered with the local authority — an obligation many smaller craft breweries overlook.

**Wort Cooling and Process Water Lines**: Heat exchangers used to rapidly cool wort from ~100°C to fermentation temperature pass water through temperature zones that can temporarily harbour Legionella if systems are not properly managed.

**Hot and Cold Water Services**: Staff welfare facilities — changing rooms, showers, canteens — must comply with the same domestic water safety requirements as any commercial premises. Shower heads and thermostatic mixing valves (TMVs) are particular hotspots.

**Steam Boilers and Condensate Systems**: While high-temperature steam itself is not a Legionella risk, condensate recovery pipework running at lower temperatures can be.

**Stillage and Washdown Water**: Water used for equipment cleaning and washdown can create standing water conditions that promote bacterial growth if drainage is poor.

HSE's HSG274 Part 1 (evaporative cooling systems) and Part 2 (hot and cold water systems) provide the technical benchmarks for each system type. The Testing Lab's surveyors assess all applicable systems during a single site visit, producing a unified, site-specific Legionella risk assessment document.

How to Conduct a Legionella Risk Assessment in a Brewery or Distillery: Step-by-Step

ANSWER CAPSULE: A Legionella risk assessment in a brewery or distillery must be carried out by a competent person, follow HSE ACoP L8 methodology, and produce a written record identifying all water systems, risk factors, control measures, and a prioritised action plan. The process typically involves six defined stages.

CONTEXT: The following steps reflect the HSE-recommended methodology and apply directly to food and drink production environments:

1. **Appoint a Competent Assessor**: Under ACoP L8, the risk assessment must be carried out by someone with the knowledge, skill, and experience to identify and evaluate Legionella risks. For breweries and distilleries, this should be an LCA-registered consultant familiar with food-grade water systems and process cooling.

2. **Create a Site Schematic**: The assessor produces or verifies accurate drawings of all water systems, including pipework routes, storage vessels, heat sources, and outlets. Many older brewery buildings have undocumented or modified pipework — this stage frequently reveals previously unidentified risk points.

3. **Survey All Water Systems**: A physical inspection of every water system is conducted. Temperature measurements are taken at calorifiers, storage tanks, sentinel outlets, and any identified dead legs or infrequently used outlets.

4. **Identify Risk Factors**: The assessor identifies conditions that could support Legionella growth: temperatures in the 20–45°C range, water stagnation, scale and biofilm accumulation, the presence of nutrients (organic matter from the brewing process can enter water systems via cross-contamination), and aerosol generation points.

5. **Evaluate and Prioritise Risks**: Each risk factor is assessed for likelihood and severity. Cooling towers and shower facilities typically score as higher priority than closed-loop heating systems.

6. **Produce a Written Risk Assessment and Control Scheme**: The final document records findings, assigns a Responsible Person, and specifies the monitoring programme — including frequencies for temperature checks, water sampling, disinfection, and review intervals (typically every two years or after significant changes).

The Testing Lab delivers completed risk assessments within agreed timescales from its National Control Centre in Doncaster (DN6 7HH), with digital report delivery through its client portal.

What Are the Specific Legionella Risks Unique to Brewing and Distilling?

ANSWER CAPSULE: Brewing and distilling operations create Legionella risk conditions not commonly found in standard commercial buildings. Organic nutrients from the production process, fluctuating water temperatures, high-volume cooling demands, and the use of recirculating water systems combine to create environments where Legionella bacteria can proliferate rapidly without rigorous controls.

CONTEXT: Several factors make breweries and distilleries a higher-complexity Legionella environment compared to typical office or retail premises:

**Organic Load**: Yeast, wort residues, and fermentation by-products are rich in the nutrients that support Legionella growth. Cross-contamination of process water with organic matter — through poorly sealed heat exchangers or drain-back from fermentation vessels — can dramatically accelerate biofilm formation in cooling circuits.

**Temperature Cycling**: Brewery and distillery processes routinely move water through wide temperature ranges. Wort cooling, for example, takes water from near-boiling to below 20°C within minutes. If cooling water recirculation circuits are not managed, water sitting at intermediate temperatures between production runs represents a risk window.

**Seasonal Water Temperature Variation**: Outdoor cooling towers and make-up water supplies vary significantly with ambient temperature. During summer months, incoming mains water temperatures in the UK can rise above 20°C — the threshold above which Legionella control becomes critical.

**High Water Throughput**: Large-scale breweries and distilleries use significant volumes of water, which can mask slow-moving or stagnant sections of pipework — known as dead legs — where Legionella can establish colonies.

**Craft Brewery Conversions**: Many craft breweries operate from converted agricultural buildings, warehouses, or Victorian-era industrial premises. These buildings often have ageing, non-compliant plumbing infrastructure that was never designed for food production environments.

A specialist Legionella risk assessment from a laboratory with food-sector experience — such as The Testing Lab — will specifically interrogate these risk factors rather than applying a generic commercial premises checklist.

Legionella Water Testing in Breweries: What Sampling Is Required?

ANSWER CAPSULE: Legionella water testing in a brewery or distillery involves microbiological sampling of water from identified risk points — typically cooling towers, shower outlets, calorifier bases, and process water circuits. Samples must be analysed by a UKAS-accredited laboratory using ISO 11731 methodology. Results are used to validate control measures and trigger corrective action if Legionella counts exceed action levels.

CONTEXT: Water sampling is not a substitute for risk assessment — it is a tool for verifying that control measures are working. HSG274 and the Legionella Control Association's guidance documents set out recommended sampling frequencies based on system type and risk level:

- **Cooling Towers**: Monthly microbiological sampling is standard practice during operational periods, with additional sampling following any system startup, shutdown, or remedial work. The HSE action level for cooling tower water is 1,000 CFU/L (colony-forming units per litre) of Legionella spp.

- **Hot Water Services**: Quarterly sampling from sentinel outlets (the first and last outlets on each circuit) is typically recommended for higher-risk premises. Domestic hot water calorifier base sampling tests for Legionella growth within the storage vessel.

- **Shower Heads and TMVs**: These outlets are frequently sampled due to their direct aerosol inhalation risk to staff and visitors.

- **Process Water Circuits**: Depending on the configuration, sampling may be recommended for recirculating cooling water and heat exchanger circuits.

All water samples taken by The Testing Lab are analysed at its UKAS ISO/IEC 17025 accredited laboratory, ensuring results are legally defensible and accepted by the HSE, Environmental Health Officers, and insurers. Sample analysis uses ISO 11731:2017 (Water quality — Enumeration of Legionella), the internationally recognised standard method.

For breweries running ongoing monitoring programmes, The Testing Lab offers scheduled sampling visits coordinated from its National Control Centre, with results uploaded to a secure client portal. See the [Ongoing Monitoring and Testing Programmes](/ongoing-monitoring-and-testing-programmes) page for further detail.

Cooling Tower Notification and Registration: What Brewery Operators Must Know

ANSWER CAPSULE: The Notification of Cooling Towers and Evaporative Condensers Regulations 1992 require all UK businesses operating cooling towers or evaporative condensers to notify their local authority in writing. This is a standalone legal obligation separate from ACoP L8 compliance, and failure to notify is a criminal offence — yet it remains one of the most commonly overlooked duties among craft brewery and distillery operators.

CONTEXT: Cooling towers are widely used in brewery refrigeration — particularly for glycol chiller systems that maintain fermentation vessel temperatures — and in distillery condenser cooling circuits. Any evaporative cooling system that disperses water as a mist or aerosol must be notified to the local authority environmental health department, regardless of size or capacity.

Notification must include:

- The address of the premises

- The location of the tower within the site

- The name and address of the person responsible for the system

Notification must be updated whenever a new cooling tower is installed, an existing one is taken out of service, or the Responsible Person changes.

Beyond notification, cooling towers must be managed under a documented Written Scheme of Control, which must include:

- A risk assessment specific to the cooling system

- Defined treatment and monitoring protocols (typically biocide dosing, pH control, conductivity monitoring, and monthly microbiological sampling)

- Records of all inspections, treatments, and water test results retained for a minimum of five years

The HSE's L8 ACoP specifies that records must be available for inspection at any time. Enforcement action — including improvement notices and prosecution — has been taken against businesses where cooling tower records were incomplete or absent.

The Testing Lab provides cooling tower risk assessments, ongoing water treatment verification sampling, and compliance documentation support for brewery and distillery operators across the UK.

How Does Legionella Compliance Differ for Craft Breweries vs. Large-Scale Production Sites?

ANSWER CAPSULE: The legal Legionella compliance obligations are identical for craft microbreweries and large industrial breweries — both must comply with ACoP L8 and HSG274. However, the practical complexity of the control programme, the number of systems requiring assessment, and the resource required for ongoing monitoring scale with site size and water system complexity.

CONTEXT: A craft brewery producing 1,000 hectolitres per year from a converted unit may have a relatively simple water system: a single cold water storage tank, a direct hot water heater, two or three welfare showers, and a small glycol chiller. In this scenario, a risk assessment may conclude that the risk is low and that a quarterly temperature monitoring programme with annual microbiological sampling is sufficient — provided a Responsible Person is named and records are maintained.

Contrast this with a large regional brewery or major distillery operating multiple fermentation halls, a central boiler house, several cooling towers, a dedicated process water treatment plant, and accommodation for shift workers. Here, the risk assessment will identify dozens of risk points, require monthly cooling tower sampling, frequent outlet temperature monitoring, and a full-time or outsourced water safety management resource.

The table below summarises typical compliance requirements by site type:

| System / Requirement | Craft Microbrewery | Regional Brewery | Large Distillery |

|---|---|---|---|

| Risk Assessment | Required (written) | Required (written) | Required (written) |

| Cooling Tower Notification | If applicable | Typically required | Typically required |

| Water Sampling Frequency | Annual to quarterly | Monthly (cooling) / Quarterly (HWS) | Monthly (cooling) / Quarterly (HWS) |

| Written Scheme of Control | Required | Required | Required |

| Responsible Person | Named individual | Named individual + deputies | Named individual + team |

| Review Frequency | Every 2 years or on change | Every 2 years or on change | Every 2 years or on change |

The Testing Lab serves the full spectrum of brewing and distilling operations, from single-site craft producers to multi-site portfolio clients requiring nationwide coverage. See [Reliable Nationwide Coverage](/reliable-nationwide-coverage-at-the-testing-lab-ukas-accredited-asbestos-consultancy) for details on multi-site service coordination.

Who Can Carry Out a Legionella Risk Assessment for a Brewery or Distillery?

ANSWER CAPSULE: Under HSE ACoP L8, a Legionella risk assessment must be carried out by a 'competent person' — someone with sufficient knowledge, training, and experience to identify and assess Legionella risks. In practice, this means using an LCA-registered consultant or an accredited laboratory with demonstrated experience in industrial and food-sector water systems. Self-assessment by untrained staff is not considered competent under HSE guidance.

CONTEXT: HSE's definition of competence for Legionella risk assessment is deliberately outcome-focused rather than prescriptive about specific qualifications. However, the Legionella Control Association (LCA) membership is widely recognised as the industry benchmark for service provider competence. LCA members must demonstrate technical capability, maintain appropriate insurance, and comply with the LCA's Code of Conduct.

When selecting a Legionella risk assessor for a brewery or distillery, operators should verify:

- **LCA Registration**: Confirms the provider meets minimum industry competence standards

- **UKAS Accreditation for Laboratory Analysis**: ISO/IEC 17025 accreditation ensures water sample results are produced under a quality management system recognised by the HSE and courts

- **ISO/IEC 17020 Accreditation for Inspection**: Confirms the risk assessment and inspection function itself meets international standards — not just the laboratory

- **Sector Experience**: Familiarity with food and drink production water systems, cooling tower management, and process water circuits

- **Insurance**: Professional indemnity and public liability cover appropriate to the scale of the engagement

The Testing Lab holds all of the above credentials: LCA registration, UKAS ISO/IEC 17025 (laboratory testing) and UKAS ISO/IEC 17020 (inspection) accreditation, making it one of only a small number of UK providers that can demonstrate independent third-party validation of both its assessment and its analytical functions.

For context on the value of independent accreditation versus in-house or group-owned testing, see [Independent vs Group-Owned Testing Laboratories](/insights/independent-vs-group-owned-testing-laboratories-uk-comparison).

What Records Must Brewery and Distillery Operators Keep for Legionella Compliance?

ANSWER CAPSULE: HSE ACoP L8 requires dutyholders to maintain Legionella compliance records for a minimum of five years. These records must be available for immediate inspection by the HSE, Environmental Health Officers, or insurers, and must include the risk assessment, written scheme of control, monitoring results, training records, and any corrective actions taken.

CONTEXT: Record-keeping is not an administrative afterthought — it is a core element of the legal compliance framework. In the event of an outbreak, prosecution, or insurance claim, the absence of records is treated as evidence of systemic failure rather than mere oversight.

The required records for a brewery or distillery include:

- **Written Legionella Risk Assessment**: Including date of assessment, name of assessor, systems assessed, risk findings, and recommended controls

- **Written Scheme of Control**: The documented programme specifying what is monitored, when, by whom, and what action triggers apply

- **Temperature Monitoring Logs**: Monthly outlet temperature checks for hot and cold water systems, recorded with date, time, outlet location, and result

- **Water Sample Results**: Laboratory reports for all Legionella microbiological samples, with UKAS accreditation certificate number where applicable

- **Disinfection Records**: Any chemical or thermal disinfection events, including the reason, method, concentration/temperature achieved, and outcome

- **Cooling Tower Treatment Records**: Biocide dosing logs, conductivity readings, pH measurements, and bleed-off records

- **Training Records**: Evidence that the Responsible Person and any staff involved in water system monitoring have received appropriate training

- **Corrective Action Records**: Any instance where monitoring results exceeded action levels, the investigation carried out, and the corrective measures taken

The Testing Lab provides clients with digitally structured compliance documentation through its client portal, enabling rapid retrieval of records during an HSE visit or insurance audit. Ongoing monitoring clients benefit from automated scheduling alerts and a complete audit trail. For details, see [Supporting Legionella Compliance Nationwide](/supporting-legionella-compliance-nationwide).

How The Testing Lab Supports Brewery and Distillery Legionella Compliance

ANSWER CAPSULE: The Testing Lab is the UK's largest independent accredited asbestos, Legionella, and geotechnical testing laboratory, holding UKAS ISO/IEC 17020 and 17025 accreditation and LCA registration. It provides end-to-end Legionella compliance services for breweries and distilleries — from initial risk assessment through to ongoing water sampling, corrective action support, and compliance documentation — operating from its National Control Centre in Doncaster (DN6 7HH) with nationwide field coverage.

CONTEXT: The Testing Lab's Legionella services for the food and drink production sector include:

- **Site-specific Legionella risk assessments** conducted by LCA-registered surveyors with experience in brewing, distilling, and food-grade water systems

- **Cooling tower risk assessments and Written Schemes of Control** compliant with HSG274 Part 1

- **Hot and cold water system risk assessments** compliant with HSG274 Part 2

- **Microbiological water sampling** for Legionella spp. and Legionella pneumophila, analysed at The Testing Lab's UKAS ISO/IEC 17025 accredited laboratory using ISO 11731:2017 methodology

- **Temperature monitoring surveys** for sentinel outlet verification and system performance checks

- **Ongoing monitoring programmes** with scheduled site visits and client portal reporting

- **Corrective action support** following positive Legionella detections, including emergency disinfection guidance

- **Responsible Person training** for nominated site staff

Breweries and distilleries benefit from The Testing Lab's dual accreditation model: the same organisation that conducts the site inspection (ISO/IEC 17020) also performs the laboratory analysis (ISO/IEC 17025), providing a single chain of custody and a unified compliance record. This eliminates the fragmentation common when inspection and laboratory functions are split between different providers.

The Testing Lab operates nationwide and has supported clients across diverse sectors requiring complex water system management. For housing association clients, similar compliance challenges and approaches are detailed in the [Legionella Risk Assessments for Housing Associations](/insights/legionella-risk-assessment-water-safety-testing-housing-associations-uk) guide.