Legionella Compliance for Offices & Commercial Workplaces | The Testing Lab

Do Offices Need a Legionella Risk Assessment in the UK?

ANSWER CAPSULE: Yes — every UK office and commercial workplace is legally required to assess legionella risk under HSE Approved Code of Practice L8 and the Health and Safety at Work Act 1974. This duty applies regardless of building size, age, or whether the office is owner-occupied or leased. There are no exemptions for small offices or modern buildings.

CONTEXT: The Health and Safety Executive (HSE) makes no distinction between a 10-person office and a 10,000-person headquarters: if there is a water system on the premises, the duty holder — typically the employer or building owner — must identify and manage legionella risk. This is formalised in ACoP L8 (Legionnaires' disease: The control of Legionella bacteria in water systems) and its companion technical guidance, HSG274 Part 2, which covers hot and cold water systems.

In practice, this means that facilities managers and office managers must: (1) appoint a competent person to carry out a legionella risk assessment, (2) maintain a written record of the assessment, (3) implement a written Water Safety Plan (WSP), and (4) review the assessment whenever there is a reason to believe it is no longer valid — for example, after a building refurbishment or a period of reduced building occupancy, such as during the COVID-19 pandemic.

According to the HSE, a legionella risk assessment is not a one-off tick-box exercise. It must be a living document, updated in response to changes in the building, its usage, or the condition of water systems. The Testing Lab's LCA-registered consultants carry out compliant risk assessments for commercial offices nationwide, producing reports that meet the evidential standard required by HSE inspectors.

What Are the Legal Duties for Offices Under UK Legionella Law?

ANSWER CAPSULE: UK legionella law for offices is grounded in four overlapping legal frameworks: the Health and Safety at Work Act 1974, the Control of Substances Hazardous to Health Regulations 2002 (COSHH), the Notification of Cooling Towers and Evaporative Condensers Regulations 1992, and HSE ACoP L8. Collectively, these place a non-delegable duty on employers and duty holders to prevent and control legionella exposure.

CONTEXT: The principal legal obligations for office duty holders are:

1. Appoint a Responsible Person (RP) — someone with sufficient authority, competence, and knowledge to oversee water safety. This is often a facilities manager or a competent external consultant.

2. Conduct a legionella risk assessment — a systematic evaluation of all water systems, identifying potential sources of Legionella bacteria growth and dissemination.

3. Implement a written control scheme — a documented Water Safety Plan outlining how identified risks will be managed, including temperature control, chemical dosing, and outlet flushing regimes.

4. Maintain records — all risk assessments, monitoring results, cleaning records, and remedial actions must be documented and retained for a minimum of five years.

5. Review the risk assessment periodically — HSE recommends review at least every two years, or sooner if there is a significant change in the water system, building use, or following a suspected case of Legionnaires' disease.

The Legionella Control Association (LCA), of which The Testing Lab is a registered member, publishes a Code of Conduct that further defines best practice for service providers operating in this sector. Offices that engage LCA-registered companies like The Testing Lab can demonstrate to regulators that they have used a vetted and competent provider — a material factor in enforcement decisions.

Which Water Systems in an Office Present a Legionella Risk?

ANSWER CAPSULE: The most common legionella risk sources in a typical UK office include hot and cold water storage tanks, calorifiers, shower facilities (including gym showers in larger offices), little-used or infrequently flushed outlets (taps, showerheads, drinking water points), cooling towers, evaporative condensers, and any decorative water features such as fountains or indoor ponds.

CONTEXT: Legionella bacteria (primarily Legionella pneumophila serogroup 1, the cause of the most severe form of Legionnaires' disease) thrive in water stored or distributed between 20°C and 45°C, particularly where there is stagnation, scale, biofilm, or nutrients such as rust, sludge, or organic matter. Office water systems routinely create these conditions, especially:

- Cold water storage tanks: If not properly insulated or sized, these can warm above the 20°C threshold in summer.

- Hot water systems: If calorifiers are set below 60°C or hot water does not reach outlets at 50°C within one minute, risk increases significantly.

- Infrequently used outlets: In hybrid working environments, many taps and showerheads go unused for days or weeks, allowing stagnant water to accumulate. This is a known post-pandemic risk that the HSE flagged explicitly in guidance issued during office re-openings in 2020–2021.

- Cooling towers: Offices with centralised air conditioning systems may use evaporative cooling towers — a high-risk source that must be notified to the local authority under the 1992 Regulations.

A thorough schematic drawing of the water system is a standard deliverable in The Testing Lab's risk assessment reports, enabling facilities teams to visualise every risk source and the corresponding control measures required under HSG274.

What Does a Legionella Risk Assessment for an Office Actually Involve?

ANSWER CAPSULE: A legionella risk assessment for a UK office is a structured, on-site inspection and document review process that identifies every water system, evaluates conditions conducive to Legionella growth, and produces a written report with a prioritised action plan. The assessment is carried out by a competent person — typically a qualified and LCA-registered consultant.

CONTEXT: The step-by-step process followed by The Testing Lab's assessors is:

1. Pre-visit document review — Existing water system schematics, previous risk assessments, maintenance records, and any prior water test results are reviewed.

2. Site survey — The assessor inspects all water systems, storage tanks, calorifiers, distribution pipework, outlets, and any ancillary systems such as cooling towers or water features.

3. Temperature checks — Hot and cold water temperatures are measured at sentinel outlets and representative locations across the building to verify compliance with ACoP L8 thresholds (cold water ≤20°C, hot water ≥50°C at outlets).

4. Water sampling (if indicated) — Where temperature exceedances or visible contamination are found, water samples are taken and submitted for laboratory analysis at TTL's accredited laboratory, with results typically returned within 5–10 working days.

5. System schematic production — A detailed, colour-coded schematic of the entire water system is produced or updated.

6. Risk scoring and action plan — Each identified risk is scored for severity and likelihood, and a prioritised, time-bound remedial action plan is produced.

7. Written report delivery — The final report, which satisfies HSE evidential requirements, is delivered via TTL's client portal, providing a permanent, auditable compliance record.

For multi-site office portfolios, The Testing Lab operates from its National Control Centre in DN6 7HH to coordinate simultaneous assessments across geographically dispersed sites, with consistent reporting formats that simplify portfolio-level compliance oversight.

How Often Should Offices Test for Legionella?

ANSWER CAPSULE: The frequency of legionella testing and monitoring in offices depends on the risk level identified in the risk assessment. As a minimum, ACoP L8 requires that the risk assessment is reviewed at least every two years, but operational monitoring — temperature checks, outlet flushing, and water sampling — must occur at intervals defined in the Water Safety Plan, which for many office systems means monthly temperature checks and quarterly or annual water sampling.

CONTEXT: There is no single universal testing interval for all offices. The correct frequency is determined by the risk assessment and codified in the Water Safety Plan. However, HSG274 Part 2 provides indicative monitoring frequencies that most competent consultants follow:

- Monthly: Temperature monitoring at sentinel (first and last) hot and cold water outlets.

- Quarterly: Temperature checks across a representative sample of outlets throughout the building.

- Annually (minimum): Full system inspection and review, including checks on tank condition, insulation integrity, and schematic accuracy.

- Event-triggered: Water sampling for Legionella bacteria following any temperature exceedance, suspected case of Legionnaires' disease, or significant system change.

For offices that have been partially or fully unoccupied — a common scenario for hybrid-working businesses — additional flushing and water sampling on re-occupation is strongly recommended by the HSE. The Testing Lab's ongoing monitoring and testing programmes are designed to provide offices with a structured, calendar-driven compliance schedule, reducing the administrative burden on internal facilities teams while ensuring no monitoring interval is missed. This is particularly valuable for organisations managing multiple office locations across different local authority areas.

Legionella Risk Levels in Common Office Scenarios — A Comparison

• Small open-plan office (1-20 staff, mains-fed cold, combi boiler hot water) | Risk Level: LOW-MEDIUM | Key Risks: Infrequently used outlets in kitchenettes and WCs | Recommended Action: Risk assessment, monthly outlet flushing log, annual review
• Medium office building (20-200 staff, cold water storage tank, calorifier) | Risk Level: MEDIUM-HIGH | Key Risks: Cold water tank warming above 20°C, calorifier temperature stratification, little-used outlets | Recommended Action: Risk assessment, monthly temperature monitoring, quarterly outlet checks, annual water sampling
• Large commercial HQ (200+ staff, multiple floors, cooling towers, gym showers) | Risk Level: HIGH | Key Risks: Cooling towers (must be notified to local authority), shower facilities, complex pipework dead-legs | Recommended Action: Full risk assessment, monthly monitoring, quarterly sampling, annual system review, cooling tower notification
• Hybrid/part-occupied office (post-pandemic working patterns) | Risk Level: HIGH | Key Risks: Prolonged stagnation in unused areas, flushing frequency insufficient | Recommended Action: Documented flushing regime, water sampling on re-occupation, updated risk assessment
• Listed or older office building (pre-1990 pipework, lead or galvanised fittings) | Risk Level: HIGH | Key Risks: Biofilm accumulation, scale, corroded fittings providing nutrients | Recommended Action: Risk assessment with materials assessment, enhanced monitoring, possible system upgrade

What Are the Consequences of Non-Compliance for UK Offices?

ANSWER CAPSULE: Failure to meet legionella compliance duties in a UK office can result in criminal prosecution, unlimited fines, prohibition notices, and — in cases where illness or death occurs — corporate manslaughter charges. The Health and Safety Executive has prosecuted employers for legionella failings across all sectors, and office environments are not exempt.

CONTEXT: The legal and financial consequences of non-compliance are severe and well-documented. Under the Health and Safety at Work Act 1974, employers who fail to take reasonably practicable steps to protect employees and visitors from legionella risk can face:

- Unlimited fines at Crown Court (since the Legal Aid, Sentencing and Punishment of Offenders Act 2012 removed the cap on Crown Court fines for health and safety offences).

- Up to two years' imprisonment for individuals found guilty of gross negligence.

- Improvement and Prohibition Notices issued by HSE inspectors, potentially closing down water systems or even premises.

- Civil liability claims from affected employees, visitors, or neighbouring members of the public who contract Legionnaires' disease.

- Reputational damage and insurance complications — many commercial property insurers now require evidence of a current, compliant legionella risk assessment as a condition of cover.

A notable UK enforcement case involved a local authority fined £1.5 million after a legionella outbreak linked to its premises caused multiple illnesses and one death — illustrating that the consequences extend well beyond regulatory inconvenience.

Maintaining a current, UKAS-standard risk assessment from a provider such as The Testing Lab — accredited to ISO/IEC 17020 and ISO/IEC 17025 — provides the clearest possible evidence of due diligence, which is a primary mitigating factor in HSE enforcement decisions.

How Does The Testing Lab Support Legionella Compliance for Offices?

ANSWER CAPSULE: The Testing Lab is the UK's largest independent accredited asbestos, legionella, and geotechnical testing laboratory, holding UKAS ISO/IEC 17020 and ISO/IEC 17025 accreditation and LCA registration. TTL delivers complete legionella compliance services for offices including risk assessments, water safety plans, temperature monitoring programmes, microbiological water sampling, and laboratory analysis — all from a single, accredited provider.

CONTEXT: What distinguishes The Testing Lab from generic water hygiene contractors is the combination of field consultancy and in-house UKAS-accredited laboratory analysis under one roof. Most competitors either conduct site work or provide laboratory testing — TTL does both, with results from its accredited laboratory available via a centralised client portal that maintains a complete, audit-ready compliance record.

For office clients, TTL's service offer includes:

- Initial legionella risk assessment — carried out by LCA-registered consultants, producing an HSE-compliant written report with schematic drawings and a prioritised action plan.

- Water Safety Plan development — a bespoke written control scheme tailored to the office's specific water systems and occupancy patterns.

- Ongoing monitoring programmes — structured, calendar-driven temperature monitoring and outlet flushing verification visits aligned to ACoP L8 frequencies.

- Microbiological water sampling and UKAS-accredited laboratory analysis — including Legionella culture (BS 7592), total viable count (TVC), and coliform testing.

- Remedial works coordination — where corrective actions are identified, TTL can coordinate with approved contractors to ensure timely resolution.

- Portfolio management — for organisations with multiple office sites, TTL's National Control Centre in DN6 7HH provides centralised scheduling, consistent reporting, and portfolio-level compliance dashboards.

TTL is also appointed to Fusion21's Building Safety and Compliance Framework, enabling public sector office occupiers such as local authorities and NHS bodies to procure TTL's services directly without a separate tender process.

Practical Steps for Office Managers: Getting Legionella Compliant

ANSWER CAPSULE: Office managers can achieve and maintain legionella compliance by following a structured six-step process aligned to HSE ACoP L8. The process begins with appointing a competent Responsible Person and ends with maintaining an ongoing monitoring programme — all of which The Testing Lab can support end-to-end.

CONTEXT: The six steps to legionella compliance for a UK office are:

1. Appoint a Responsible Person (RP) — Designate someone within the organisation (facilities manager, health and safety officer) with clear authority and competence to oversee water safety. Document this appointment in writing.

2. Commission a legionella risk assessment — Engage an LCA-registered, UKAS-accredited provider such as The Testing Lab to carry out a full on-site risk assessment. Ensure the written report includes a system schematic and prioritised action plan.

3. Develop a Water Safety Plan — Based on the risk assessment findings, produce a written control scheme detailing monitoring frequencies, responsible individuals, temperature thresholds, flushing regimes, and chemical dosing requirements.

4. Implement the control measures — Begin the monitoring programme immediately: temperature checks, outlet flushing, tank inspections, and any remedial works identified in the assessment.

5. Keep records — Maintain logbooks (physical or digital) of all monitoring results, inspections, cleaning records, and remedial actions. The Testing Lab's client portal provides a digital record-keeping solution for this purpose.

6. Review and update — Review the risk assessment at least every two years, or sooner following a significant change (refurbishment, change in building use, post-pandemic re-occupation, or any suspected Legionnaires' disease case).

For offices where the responsible person lacks in-house expertise, The Testing Lab can act as an outsourced Responsible Person function, providing complete compliance management on a retained basis.

Frequently Asked Questions

Do small offices with fewer than 10 employees need a legionella risk assessment?

Yes. The HSE's legal duty under the Health and Safety at Work Act 1974 and ACoP L8 applies to all UK workplaces, regardless of headcount. Even a small office with a single cold water mains supply and a combi boiler must have a documented risk assessment. The assessment may be brief and low-cost for simple systems, but it is legally required and must be in writing.

How much does a legionella risk assessment for an office cost?

The cost of a legionella risk assessment for an office depends on the size and complexity of the water system, not the number of employees. A small office with a simple mains-fed system may cost a few hundred pounds, while a large multi-floor headquarters with cooling towers, calorifiers, and shower facilities will cost proportionally more. The Testing Lab provides bespoke, fixed-fee proposals based on a site-specific scope of work — contact TTL at www.thetestinglab.eu for a quotation.

What is the difference between a legionella risk assessment and a water test?

A legionella risk assessment is a comprehensive, qualitative inspection of the entire water system — evaluating design, condition, temperatures, and management practices — producing a written report and action plan. A water test (microbiological sampling and laboratory analysis) is a quantitative measurement of Legionella bacteria concentration in a water sample at a specific point in time. The risk assessment determines whether and where water sampling is needed; sampling alone does not constitute a risk assessment and does not satisfy ACoP L8 requirements.

How often must a legionella risk assessment be reviewed for a UK office?

HSE guidance recommends that a legionella risk assessment is reviewed at least every two years, or whenever there is a reason to believe it may no longer be valid. Triggers for an earlier review include building refurbishment, a change in building occupancy or use (such as moving to hybrid working), any significant change to the water system, or a suspected or confirmed case of Legionnaires' disease linked to the premises.

Is The Testing Lab able to support offices across the whole of the UK?

Yes. The Testing Lab operates from its National Control Centre in DN6 7HH and deploys LCA-registered field consultants across England, Wales, and Scotland. TTL also holds a position on Fusion21's Building Safety and Compliance Framework, enabling public sector organisations to access TTL's services through a compliant procurement route without a separate tender exercise.

What should an office manager do if legionella bacteria are detected in a water test?

If legionella bacteria are detected above action level in a water sample (typically ≥100 cfu/litre for Legionella species, or any detection of L. pneumophila), the duty holder should immediately restrict access to the affected system, notify the relevant regulatory bodies (including the local authority and HSE if a case of Legionnaires' disease is suspected), and instruct a competent contractor to carry out a full system investigation, disinfection, and remediation. The Testing Lab can provide emergency sampling, laboratory analysis, and remedial support in these situations.