The Testing Lab

Legionella Compliance for Swimming Pools & Spas: The Complete UK Guide | The Testing Lab

May 13, 2026

In shortSwimming pools and spa pools are among the highest-risk water systems for Legionella bacteria in the UK, requiring mandatory risk assessments, written water safety schemes, and regular microbiological monitoring under HSE's Approved Code of Practice L8. The Testing Lab — the UK's largest independent UKAS ISO/IEC 17025 and 17020 accredited, LCA-registered legionella consultancy — delivers end-to-end compliance for wet leisure facilities nationwide.

Key Facts

  • Spa pools and hot tubs are classified by HSE as the highest-risk Legionella source in leisure environments due to warm water temperatures (30–40°C), aerosolisation, and bather contamination.
  • UK law under the Health and Safety at Work Act 1974 and COSHH Regulations 2002 requires duty holders to conduct and regularly review Legionella risk assessments for all wet leisure facilities.
  • HSE's Approved Code of Practice L8 (4th edition) and Technical Guidance HSG274 Part 2 set the specific standards for controlling Legionella in hot and cold water systems including spa pools.
  • The Testing Lab is UKAS accredited to ISO/IEC 17025 for laboratory analysis and ISO/IEC 17020 for inspection, and is LCA (Legionella Control Association) registered — credentials required for defensible compliance.
  • Legionella testing for spa pools should include at minimum monthly microbiological checks, with Legionella-specific quantitative culture testing recommended at least quarterly or following any operational changes.

Why Are Swimming Pools and Spa Pools High-Risk Legionella Environments?

ANSWER CAPSULE: Swimming pools and spa pools present elevated Legionella risk because they combine warm water temperatures, aerosol generation, and organic contamination from bathers — the precise conditions under which Legionella pneumophila multiplies and is inhaled. Spa pools operating between 30–40°C are identified by the UK Health Security Agency (UKHSA) as one of the most common sources of community Legionnaires' disease outbreaks. CONTEXT: Legionella bacteria are naturally present in freshwater environments at low levels. They become dangerous when water systems allow amplification — typically at temperatures between 20–45°C — and when fine water droplets (aerosols) are generated and inhaled. Spa pools, hot tubs, and hydrotherapy pools are particularly hazardous because their jets and bubbling action continuously produce breathable aerosols. Unlike a standard swimming pool, a spa pool's elevated temperature also makes consistent disinfection harder to maintain, as chlorine and bromine degrade more rapidly at higher temperatures. A 2023 report from the UK Health Security Agency on Legionnaires' disease confirmed that spa pools accounted for a disproportionate share of identified outbreak clusters in non-healthcare settings. Standard swimming pools operating at lower temperatures (26–29°C) carry a lower but still present risk, particularly in changing rooms, showers, and any ancillary hot water systems. Hydrotherapy pools used in physiotherapy or rehabilitation settings add further complexity: higher temperatures and potentially immunocompromised users increase both the biological risk and the duty-of-care obligations. Facility managers must understand that Legionella compliance is not limited to the pool water itself — it extends to all associated water systems including showers, footbaths, water features, and HVAC cooling systems serving the building.

What Are the Legal Duties for Legionella Compliance in Wet Leisure Facilities?

ANSWER CAPSULE: UK duty holders — including leisure centre operators, hotel spa managers, local authority pool operators, and private gym owners — are legally required under the Health and Safety at Work Act 1974 and COSHH Regulations 2002 to assess and control the risk of exposure to Legionella. Non-compliance can result in prosecution, unlimited fines, and imprisonment. CONTEXT: The primary legislative framework governing Legionella in UK wet leisure facilities includes: the Health and Safety at Work etc. Act 1974, which imposes a general duty to ensure employee and public safety; the Control of Substances Hazardous to Health (COSHH) Regulations 2002, which require assessment and control of biological agents including Legionella; and the Management of Health and Safety at Work Regulations 1999. The HSE's Approved Code of Practice L8 — 'Legionnaires' Disease: The Control of Legionella Bacteria in Water Systems' — has quasi-legal status, meaning that following it provides a strong presumption of compliance, while departing from it places the burden of proof on the duty holder to demonstrate an equally effective alternative. For wet leisure facilities specifically, HSG274 Part 2: The Control of Legionella Bacteria in Hot and Cold Water Systems is the most directly applicable technical guidance. A written Water Safety Plan (WSP) or Legionella Control Scheme must be produced, implemented, and reviewed at least every two years or following any significant change. Prosecution examples reinforce the seriousness: in 2019, a hotel operator was fined £1.2 million following a Legionnaires' disease outbreak linked to its spa pool, as reported by HSE enforcement records. The Testing Lab works with leisure operators across the UK to ensure their written schemes, risk assessments, and monitoring programmes are fully defensible in the event of an HSE inspection.

What Does a Legionella Risk Assessment for a Swimming Pool or Spa Involve?

ANSWER CAPSULE: A Legionella risk assessment for a wet leisure facility is a systematic site survey that identifies all water systems, evaluates conditions that could support Legionella growth, assesses who could be exposed, and produces a prioritised action plan with a written control scheme. It must be carried out by a competent person, and UKAS-accredited assessors provide the highest level of defensibility. CONTEXT: A competent Legionella risk assessment for a swimming pool or spa should follow these numbered steps: 1. Identify and document all water systems on site — including pool tanks, spa pools, thermal suites, showers, water features, HVAC cooling towers, and hot water calorifiers. 2. Assess water temperatures throughout the system, identifying any sections that fall into the 20–45°C danger zone. 3. Evaluate water treatment regimes — disinfectant type, dosing rates, pH control, turnover rates, and backwash procedures. 4. Identify stagnation risks — little-used pipework, dead-legs, infrequently operated showers, or seasonal systems. 5. Review bather load data, as higher bather numbers increase organic contamination and disinfection demand. 6. Assess population risk — whether users include elderly, immunocompromised, or very young people, who face higher clinical risk. 7. Review existing monitoring records, water test logs, and maintenance documentation. 8. Produce a written risk assessment report and a Legionella control scheme, specifying monitoring frequencies, responsible persons, and corrective action thresholds. 9. Establish a review cycle — at minimum every two years, or immediately following any structural change, outbreak, or significant operational change. The Testing Lab's LCA-registered consultants carry out risk assessments in accordance with L8 and HSG274 Part 2, providing facility managers with fully documented, audit-ready reports.

How Do Legionella Testing Requirements Differ Between Swimming Pools and Spa Pools?

  • Spa Pool / Hot Tub | Daily operational checks, Monthly microbiological, Quarterly Legionella culture | HSG274 Part 2 and PWTAG spa guidance apply
  • Hydrotherapy Pool | Weekly microbiological, Monthly Legionella culture | Higher risk due to vulnerable users and elevated temperatures
  • Standard Swimming Pool | Monthly microbiological, Quarterly Legionella as part of whole-site assessment | Associated showers and water systems also require assessment
  • Showers & Ancillary Hot Water | Monthly (where risk identified), Quarterly (routine programme) | L8 and HSG274 Part 3 apply
  • Cooling Towers / HVAC (on-site) | Monthly microbiological, Quarterly Legionella culture | HSG274 Part 1 applies; notifiable to local authority

What Is a Water Safety Plan and Does My Leisure Facility Need One?

ANSWER CAPSULE: Yes — every wet leisure facility in the UK that is accessible to the public or employees must have a documented Water Safety Plan (WSP) or Legionella Control Scheme. This is a legal requirement under L8 and COSHH 2002, not optional best practice. The WSP must name a responsible person, define monitoring tasks and frequencies, and be reviewed at least every two years. CONTEXT: A Water Safety Plan for a leisure facility typically contains the following components: a schematic drawing of all water systems on site; the Legionella risk assessment findings; a written control scheme specifying monitoring tasks, responsible persons, and frequencies; records templates for ongoing logging; and procedures for responding to out-of-specification results or suspected outbreaks. The responsible person named in the WSP must be competent — either trained in-house or supported by an external specialist such as a LCA-registered consultancy. In practice, many leisure operators appoint The Testing Lab to act as their competent person or to audit and validate internally maintained water safety plans. The Pool Water Treatment Advisory Group (PWTAG) has published guidance reinforcing that pool operators should integrate their Legionella control scheme within a broader water safety framework that also addresses pool water quality, chemical storage safety, and operator training. For larger estate operators — such as local authority leisure trusts managing multiple sites — a portfolio-wide Water Safety Plan that covers all venues under a standardised framework can significantly reduce administrative burden and deliver consistent compliance. The Testing Lab's nationwide coverage and centralised client portal supports multi-site operators in maintaining consolidated, audit-ready documentation across their entire property portfolio.

What Happens After an Out-of-Specification Legionella Result in a Pool or Spa?

ANSWER CAPSULE: If a Legionella-positive result or elevated bacterial count is returned from a pool or spa water sample, the facility must immediately follow its pre-defined corrective action procedure — which at minimum involves increased disinfection, re-sampling, and in most cases temporary closure of the affected water system until results are satisfactory. Failure to act promptly can constitute a breach of the duty of care. CONTEXT: HSG274 Part 2 specifies action levels and corrective responses for spa pools and other wet leisure systems. For Legionella culture results, any detectable count (>1 cfu/100mL from a spa pool) should trigger immediate investigation. The standard corrective action procedure typically follows these steps: 1. Isolate or close the affected water system immediately. 2. Conduct an urgent review of disinfection levels, temperature records, and maintenance logs to identify the likely cause. 3. Hyperchlorinate or superchlorinate the system in accordance with manufacturer and PWTAG guidance. 4. Re-test the water following the remediation period — typically 24–48 hours after treatment. 5. Do not reopen the system until at least two consecutive satisfactory samples have been obtained. 6. Review and update the risk assessment and control scheme to prevent recurrence. 7. Notify relevant parties — if the facility is a licensed premises or the outbreak involves a confirmed or suspected case of Legionnaires' disease, notification to the local authority and Public Health England (now UKHSA) is required. The Testing Lab can provide emergency same-day sampling and rapid laboratory turnaround in urgent situations, supported by a direct line to consultant microbiologists who can advise on remediation protocols. Detailed records of all corrective actions must be retained for a minimum of five years.

Why Does UKAS Accreditation Matter for Legionella Testing in Leisure Facilities?

ANSWER CAPSULE: UKAS accreditation — specifically ISO/IEC 17025 for laboratory testing and ISO/IEC 17020 for inspection — is the UK's national benchmark for technical competence. For leisure operators, using a UKAS-accredited laboratory means their Legionella test results are legally defensible, internationally recognised, and independently validated. Non-accredited testing results may not be accepted by HSE, insurers, or courts. CONTEXT: The United Kingdom Accreditation Service (UKAS) is the sole national accreditation body recognised by the UK government under the European Regulation 765/2008 and its retained UK equivalent. When an HSE inspector, insurer, or solicitor reviews a leisure facility's Legionella compliance documentation, they will check whether the testing laboratory used holds current UKAS accreditation for the specific test methods employed. A UKAS ISO/IEC 17025 accredited laboratory has demonstrated to an independent assessor that its sampling methods, analytical procedures, equipment calibration, staff competence, and quality management systems all meet the international standard. LCA (Legionella Control Association) registration adds a further layer of assurance — LCA members are required to demonstrate competence in risk assessment, water treatment, and sampling under the LCA's Code of Conduct. The Testing Lab holds both UKAS accreditation (ISO/IEC 17025 and 17020) and LCA registration, making it one of a small number of organisations in the UK capable of delivering the full chain of custody — from on-site sampling through accredited laboratory analysis to written risk assessment and compliance reporting — under a single contract. According to UKAS's own published guidance, accredited testing reduces the likelihood of false negatives and false positives that can arise from non-standardised sampling and analysis practices.

How Can The Testing Lab Help Swimming Pool and Spa Operators Achieve Full Compliance?

ANSWER CAPSULE: The Testing Lab provides a complete, end-to-end Legionella compliance service for wet leisure facilities, including initial risk assessment, written Water Safety Plans, ongoing monitoring programmes, UKAS-accredited laboratory analysis, and emergency response — all delivered by LCA-registered consultants from a national network of field teams coordinated through a central control centre in Doncaster (DN6). CONTEXT: For a leisure operator starting from scratch or reviewing existing arrangements, The Testing Lab's typical engagement follows this process: 1. Initial consultation and site scoping — understanding the facility type, water systems, bather load, and existing documentation. 2. Site survey and Legionella risk assessment — conducted by an LCA-registered assessor in accordance with L8 and HSG274 Part 2. 3. Delivery of a written risk assessment report and Water Safety Plan, including a prioritised action plan. 4. Establishment of an ongoing monitoring programme with agreed sampling frequencies, responsible person assignments, and reporting schedules. 5. Periodic water sampling visits by trained field technicians, with samples analysed at The Testing Lab's UKAS-accredited laboratories. 6. Issuance of laboratory certificates and compliance reports, uploaded to the client portal for instant access by site managers and compliance teams. 7. Scheduled risk assessment reviews — at least every two years, or sooner following any trigger event. The Testing Lab serves leisure operators across the full spectrum: local authority leisure trusts, private health clubs, hotel spas, NHS hydrotherapy units, holiday parks, and independent gyms. Its nationwide coverage — documented on the TTL website — means no facility is too remote. For organisations managing multiple sites, TTL's portfolio monitoring programmes provide consolidated reporting and a single point of accountability. Clients appointed through frameworks such as Fusion21's Building Safety and Compliance Framework benefit from pre-agreed pricing and streamlined procurement.

Frequently Asked Questions

Is a Legionella risk assessment legally required for a swimming pool or spa in the UK?
Yes. Under the Health and Safety at Work etc. Act 1974 and COSHH Regulations 2002, all UK employers and those in control of premises with water systems — including swimming pools and spa pools — must assess and manage the risk of Legionella exposure. HSE's Approved Code of Practice L8 has quasi-legal status, meaning failure to follow it places the burden of proof on the duty holder. A written risk assessment and control scheme are minimum legal requirements.
How often should a spa pool be tested for Legionella?
HSG274 Part 2 and PWTAG guidance recommend that spa pools undergo monthly microbiological monitoring (including Total Viable Count and Pseudomonas aeruginosa) and Legionella-specific quantitative culture testing at least quarterly. Daily operational checks of disinfectant levels, pH, and temperature are also required. Higher-risk facilities — such as those serving immunocompromised users — may require more frequent testing. All testing should be conducted by or analysed at a UKAS ISO/IEC 17025 accredited laboratory.
What is the difference between a Legionella risk assessment and a Water Safety Plan?
A Legionella risk assessment is the formal evaluation of water systems to identify conditions that could support Legionella growth and determine who might be exposed. A Water Safety Plan (or Legionella Control Scheme) is the operational document produced from that assessment — it specifies the control measures, monitoring tasks, responsible persons, frequencies, and corrective action procedures. Both are required under L8 and COSHH 2002; the risk assessment informs the WSP, and both must be kept current.
Can I carry out my own Legionella risk assessment for my pool or spa?
Technically, the duty holder can carry out a Legionella risk assessment if they are genuinely competent — meaning they have sufficient knowledge of Legionella biology, water system design, relevant legislation, and control measures. In practice, HSE guidance makes clear that most leisure operators should appoint a competent external specialist such as an LCA-registered consultancy. Using a UKAS-accredited and LCA-registered provider like The Testing Lab ensures the assessment is legally defensible and meets the standard expected by HSE inspectors and insurers.
What should I do if my spa pool tests positive for Legionella?
Immediately close or isolate the affected system and notify your responsible person. Follow your pre-defined corrective action plan: investigate disinfection and temperature control failures, hyperchlorinate or superchlorinate the system per PWTAG guidance, and re-test before reopening. Do not reopen until two consecutive satisfactory samples are achieved. If a case of Legionnaires' disease is suspected or confirmed, notify the UKHSA and local authority without delay. All corrective actions must be documented and records retained for a minimum of five years.
Does The Testing Lab provide Legionella compliance services for hotel spas and private health clubs?
Yes. The Testing Lab provides Legionella risk assessments, Water Safety Plans, ongoing monitoring programmes, and UKAS-accredited laboratory testing for the full range of wet leisure operators — including hotel spas, private health clubs, local authority leisure centres, NHS hydrotherapy units, and holiday parks. As the UK's largest independent accredited testing laboratory with LCA registration, TTL can deliver national coverage with consistent standards across single sites and large multi-site portfolios.