ACoP L8 Legionella Compliance Explained – PPM Requirements UK

What ACoP L8 Legionella Compliance Really Demands in Practice

If you are a UK dutyholder, estates lead or property manager, Legionella compliance under ACoP L8 is not just a policy on paper. It is the ongoing control of water system risks, backed by evidence that would withstand questions from regulators, insurers and senior management.

That means understanding how ACoP L8 fits into wider health and safety law, turning its duties into day‑to‑day PPM tasks, and assigning clear responsibility for water safety. With a structured regime, you can treat Legionella as a managed risk rather than a constant source of anxiety.

• Turn legal duties into clear, routine Legionella control tasks
• Build records that satisfy auditors, insurers and regulators
• Integrate Legionella PPM into your wider compliance framework

---

---

---

Legionella Compliance, ACoP L8 & PPM: A Safe, Defensible Route for UK Dutyholders

Legionella compliance under ACoP L8 means you deliberately control water system risks and can prove it through structured planned preventive maintenance (PPM) and clean, traceable records. In practice, you need to know where Legionella risk exists in your buildings, put sensible controls in place, check they are working, and keep records that show this clearly to anyone who asks. This information is general and does not constitute legal advice; you should confirm details with a competent professional before making decisions.

Clear duties backed by repeatable routines turn Legionella from a constant worry into a managed, defensible risk.

How ACoP L8 fits into UK health and safety law

ACoP L8 is the Health and Safety Executive’s approved code of practice on controlling Legionella bacteria in water systems. It explains what “good” looks like if you want to comply with wider health and safety law. It sits under the Health and Safety at Work etc. Act, the Control of Substances Hazardous to Health (COSHH) Regulations and the Management of Health and Safety at Work Regulations.

ACoP L8 is not an Act of Parliament, but it has a special legal status. If your organisation follows ACoP L8, you are normally regarded as complying with the underlying law for Legionella. If you decide to follow a different model and something goes wrong, you will have to show a court that your alternative system was at least as effective. That is why many insurers, auditors and regulators now treat “L8 and HSG274 compliant” as the baseline expectation rather than a nice‑to‑have.

Why PPM is the operational side of ACoP L8

Planned preventive maintenance is where you turn ACoP L8’s legal duties into day‑to‑day control of Legionella risk. A policy or statement on Legionella does not protect you on its own; ACoP L8 expects you to convert those high‑level duties into concrete tasks and routines through a structured PPM regime.

For hot and cold water systems, that usually includes:

• keeping the risk assessment current
• monitoring key temperatures at representative outlets
• flushing infrequently used outlets
• inspecting, cleaning and, where required, disinfecting tanks and calorifiers
• checking and servicing thermostatic mixing valves (TMVs)
• arranging remedial works when results fall out of specification

The detailed “how often and how exactly” is set out in HSE’s technical guidance (HSG274), which most organisations now use to build Legionella PPM schedules. Many dutyholders ask a specialist partner to design and deliver these tasks so that nothing critical is missed, readings are consistent, and evidence is captured in a way that stands up to external scrutiny.

Who counts as the dutyholder and responsible person?

Your dutyholder is the person or organisation in control of premises and water systems, and they must appoint a responsible person to run Legionella control day to day. In practice, the dutyholder could be:

• an employer that owns or occupies a building
• a freeholder or head landlord who retains responsibility for common services
• a managing agent that has taken on those responsibilities under contract
• a board or RTM company for a residential block

The dutyholder must appoint a “responsible person” with enough authority, knowledge and resources to manage Legionella day to day. That role can sit in estates, facilities, health and safety, or property management, but it needs to be documented, trained and visibly supported. In multi‑site portfolios it is common to have a central responsible person with local deputies on key sites, so decisions and escalations are clear.

Linking Legionella control to your wider compliance framework

Legionella control works best when you treat it as part of your wider safety and property compliance framework, not as an isolated technical issue. Legionella is only one of several safety and property risks you must manage – alongside gas safety, fire, asbestos, electrical testing and more. ACoP L8 effectively encourages you to run water safety the same way you run other core obligations:

• embed it in your risk register
• align it with your health and safety policy
• include it in your internal audit and board assurance cycles

Many organisations now fold Legionella PPM into their CAFM or PPM system so that risk assessments, jobs, readings and remedials sit alongside other statutory tasks with the same disciplines. All Services 4U frequently helps clients do exactly that, so their water safety regime feels like part of a single compliance backbone, rather than an add‑on that only a few people understand.

---

The Real Cost of Getting ACoP L8 Wrong: Legal, Financial and Human Risk

Weak or poorly evidenced Legionella control under ACoP L8 exposes your organisation to avoidable legal, financial and reputational damage. Consequences can range from formal enforcement notices and significant fines through to serious harm and long‑term damage to your organisation’s name. Even with no known case of illness, insurers and lenders now probe water hygiene controls closely; vague, undocumented answers can mean higher premiums, conditions, or refinancing problems. When you see these risks clearly, it becomes much easier to argue that a robust PPM regime is a risk‑management investment, not an “extra cost”.

Legal and enforcement consequences

Legionella failings can escalate quickly from advisory letters to formal enforcement and, in serious cases, prosecution. Where HSE or a local authority finds serious Legionella failings – especially after illness – they can issue improvement or prohibition notices and, in more severe cases, bring prosecutions under health and safety law.

Sentencing guidelines for health and safety offences take account of:

• the actual or potential level of harm
• how far below the required standard your controls were
• your turnover or resource level

For larger organisations, fines can reach six or seven figures. Directors and senior managers can also face personal consequences where gross failures are proven. Even where matters stop at an improvement notice, the process consumes leadership time, internal resource and legal support, and often results in substantial unplanned remedial costs.

Insurance, finance and reputational impact

Insurers increasingly test how credible your Legionella controls are before they commit to cover or pay claims. They may want to see evidence of:

• a current Legionella risk assessment
• a written scheme of control
• regular temperature, flushing and inspection records
• clear roles, responsibilities and training

Where answers are weak, insurers may impose conditions, increase excesses or premiums, or in extreme cases decline cover. Lenders and valuers take a similar interest for higher‑risk stock such as high‑rise residential, care and healthcare buildings, often asking whether water hygiene sits within a structured compliance regime with demonstrable oversight.

Beyond the financials, a high‑profile Legionella incident attracts media, regulator and sometimes coroner attention. Even if liability is eventually shared between several parties, your organisation can be named repeatedly in reports and commentary for years.

The cost difference between prevention and failure

Preventive Legionella control has a predictable cost; failures are unpredictable and disproportionately expensive. A risk‑based PPM regime has a planned annual cost made up of assessments, monitoring visits, internal time, and remedial works. When this is well designed, it reduces unplanned failures and helps you plan capital works such as tank replacement, system alterations or controls upgrades.

By contrast, a failure can generate:

• emergency call‑outs and disinfection
• temporary closures or restrictions on water use
• relocation or decant costs for residents, staff or service users
• professional fees and project management for remedial works
• potential civil claims and increased insurance premiums over several years

A simple comparison makes the contrast more tangible:

Aspect	Planned PPM	Failure or incident
Direct works cost	Scheduled assessments and visits	Emergency call‑outs and major remedial works
Disruption	Short, planned access windows	Unplanned shutdowns and service restrictions
Financial impact	Predictable OPEX and capex planning	Claims, excesses, premium impact and legal fees

Seen in that light, a clear ACoP L8‑aligned PPM programme is often the more economical – and certainly the more defensible – option over the life of a building.

---

ACoP L8 in Plain English: What the HSE Expects From Dutyholders and Landlords

ACoP L8 reduces complex law into a small number of practical duties: assess risk, plan your controls, appoint competent people, carry out and monitor your PPM, and keep suitable records. Whether you are a social landlord, private freeholder, managing agent or small block owner, those duties still apply – but the depth and formality should be proportionate to the risk and the complexity of your water systems.

Five plain-English duties under ACoP L8

For most dutyholders, ACoP L8 expectations boil down to five repeatable duties you can explain, implement and audit.

Step 1 – Identify and assess the risk

Carry out a Legionella risk assessment for your water systems and users, and keep it under review so it stays accurate as the building and its use change.

Step 2 – Write a scheme of control

Document how you will keep the risk under control, including temperatures, flushing, cleaning, treatment and any design changes. Make it clear enough that others can follow it without guesswork.

Step 3 – Appoint a competent responsible person

Give someone clear authority and training to manage the scheme, coordinate internal teams and contractors, and escalate issues when controls are not working.

Step 4 – Implement and monitor controls

Put in place a PPM regime that fits your risk, and check that it is working in practice, not just in theory. Results should be reviewed and reacted to, not simply filed.

Step 5 – Keep records

Maintain a logbook or equivalent that shows what has been done, when, by whom and with what outcome, and record what you did when results were out of range.

For smaller landlords and simpler systems, these steps may be shorter and less formal, but they do not disappear. For complex estates and HRBs, the scheme and records need to be much more detailed, integrated and routinely reviewed.

Domestic, HMOs and blocks: what is proportionate?

Proportionate control means matching your effort to the actual complexity and risk of the water system. A single rented flat with a combi boiler and no stored water poses less risk than a large sheltered housing scheme with tanks, secondary circulation and many vulnerable residents. ACoP L8 and HSG274 allow for this by stressing “suitable and sufficient” control, not identical control everywhere.

For simpler systems, proportionate measures might include:

• a straightforward risk assessment at change of tenancy or when systems change
• basic checks to confirm hot and cold water reach safe temperatures quickly
• information to tenants on using showers and avoiding stagnation

For HMOs and blocks with more complex pipework, stored hot water and higher numbers of residents, you would expect:

• a more detailed risk assessment and schematic
• regular sentinel temperature checks
• flushing of little‑used outlets
• clear arrangements for communal plant such as tanks and cylinders

The key is to be able to explain, in writing, why your chosen controls and frequencies are reasonable for the specific system, occupancy and risk profile.

Common misunderstandings that create avoidable risk

Several recurring myths still cause avoidable gaps between what senior people think is happening and what actually occurs on site. Examples include:

• “We had a risk assessment once, so we’re covered.”: Assessments need review when systems, usage or guidance change, or after a specified period.
• “Tenants run the taps so that is enough flushing.”: You cannot assume occupiers will behave in a way that controls risk, especially in voids, guest rooms or store areas.
• “Our systems are simple so we don’t need a written scheme.”: Even a short written scheme clarifies who does what, how often, and how results are reviewed and escalated.

Untested assumptions like these can unravel very quickly if an incident or inspection shines a light on your arrangements. Challenging them now is much cheaper than defending them later.

---

Your ACoP L8 PPM Regime: Risk Assessments, Temperatures, Flushing & TMVs

A workable Legionella PPM regime turns ACoP L8 and HSG274 into a calendar of checks, routes and work orders that your team and contractors can follow without improvising. The detail will differ by building, but most hot and cold water systems share the same main elements: risk assessment review, temperature monitoring, flushing, TMV maintenance, cleaning and targeted sampling where justified.

Risk assessment review cycle

Your Legionella risk assessment is only valid while it reflects how the system and building are actually used. ACoP L8 requires that your assessment is kept up to date and reviewed when it may no longer be valid. HSG274 examples include:

• significant changes to the water system or plant
• changes in building use or occupancy, such as conversions or long‑term voids
• evidence that controls are not working, for example repeated temperature failures
• a suspected or confirmed case of Legionnaires’ disease associated with the premises

Many dutyholders adopt a maximum review interval (often around two years for typical commercial or residential blocks) and bring that review forward if any of the triggers above occur. The important point is to be able to show a clear, risk‑based rationale for your chosen cycle and to stick to it.

Sentinel temperature monitoring

Temperature checks at key outlets are the simplest way to prove that your hot and cold water controls are working. Temperature is a primary control measure for hot and cold water systems. A typical monitoring pattern, based on HSG274 Part 2, might look like:

Task	Typical focus	Typical interval*
Hot sentinel outlet check	Nearest and furthest taps	Monthly
Cold sentinel outlet check	Nearest and furthest taps	Monthly
Representative outlet sample	Wider spread of outlets	Annually
Stored hot water temperatures	Calorifier/tank flow/return	Monthly/Quarterly

*Your actual intervals should be set by risk assessment.

The goal is to confirm that hot water reaches at least the recommended temperature quickly at outlets and is stored and circulated at safe temperatures, and that cold water remains sufficiently cool. Sporadic, unlogged temperature checks provide little assurance; consistent, recorded readings, taken by trained people, provide strong evidence of control and make trend analysis possible.

Flushing infrequently used outlets

A clear flushing regime for infrequently used outlets prevents stagnation, which is a key driver of Legionella risk. Stagnant water increases the risk of Legionella growth. HSG274 defines “infrequently used” outlets as those not used for around a week or more. In practice, these might include:

• guest showers
• taps in rarely used rooms
• hose points and cleaners’ sinks

Controls normally involve either removing redundant outlets and dead‑legs altogether, or putting them onto a flushing regime, often weekly, with the water run to waste until it reaches normal operating temperature. Your logbook should show which outlets are classed as infrequently used, when they were flushed, by whom, and any issues noticed on site.

TMV checks and servicing

A structured TMV regime protects users from scalding without creating new Legionella risks at the outlets. Thermostatic mixing valves protect users from scalding by blending hot and cold water, but they also create conditions where Legionella could grow if not properly controlled. A risk‑based TMV regime usually includes:

• regular outlet temperature checks at representative TMV‑controlled points
• periodic internal inspection, cleaning, descaling and functional testing of the valves

In many non‑healthcare settings, internal servicing is carried out annually, with more frequent attention in higher‑risk areas such as healthcare and certain care environments. Your risk assessment should set the exact pattern and explain why it is appropriate. All Services 4U can combine TMV servicing with wider Legionella PPM so these checks happen in a single coordinated visit, reducing disruption and missed tasks.

---

---

Proving Compliance: Records, Evidence and Audit-Ready Documentation

Your Legionella regime only becomes defensible when you can show, on paper or screen, what has been done and how you responded when results were not as expected. Doing the right checks is only half the storey; you also need records that explain what you did, why you did it and what changed when readings were out of range. A clear Legionella logbook or digital record then becomes your single source of truth when dealing with HSE, insurers, clients, residents or your own board.

What a Legionella logbook should contain

A good logbook brings together your risk assessment, scheme and day‑to‑day activity in one place. For most premises, an audit‑ready logbook will include at least:

• the current Legionella risk assessment and previous relevant versions
• the written scheme of control for the water systems in scope
• names, roles and responsibilities for the dutyholder, responsible person and deputies
• an inventory and schematics of relevant water systems
• PPM records: temperature logs, flushing records, inspections and TMV tests
• cleaning and disinfection reports for tanks, calorifiers and key components
• records of sampling and laboratory results where taken
• details of remedial works, such as removing dead‑legs or replacing tanks

Some sectors, such as healthcare and care homes, may go further with incident logs, non‑conformance reports and documented management reviews. The key is that anyone reviewing the logbook can understand the system and see how you are keeping risk under control.

What auditors and insurers actually look for

Auditors, insurers and clients look for a joined‑up storey rather than isolated documents. When external parties review Legionella control they typically focus less on the existence of a policy and more on whether your records tell a coherent storey. They will often ask:

• Are risk assessments current and clearly linked to the controls you carry out?
• Are temperature and flushing records continuous, legible and signed or initialled?
• Is there evidence that out‑of‑range results triggered corrective action and follow‑up?
• Do training records match the people recorded as carrying out checks?
• Are reviews and internal audits documented, with findings, actions and closure?

Being able to answer these questions quickly and confidently does more for your credibility than any amount of general reassurance. As insurers and lenders increasingly expect this level of structure, many dutyholders ask firms like All Services 4U to help them get logbooks and digital records into reliable shape.

Choosing a record-keeping format that works

Your record‑keeping method should match the scale and complexity of your estate as well as your audit obligations. Paper logbooks, spreadsheets and specialist digital systems can all work if used consistently. The choice depends on the size and spread of your estate, your IT environment and your audit needs. Consider:

• how easy it is to collate data across multiple buildings
• how quickly you can retrieve information on a specific asset, outlet or date
• how you manage version control and retention periods
• who needs access and how they will use the information

For a small number of sites, a well‑kept paper logbook may be entirely adequate. As your portfolio grows, digital systems usually make it easier to search, trend data and share evidence with auditors or insurers. All Services 4U regularly works with both paper and digital formats. The priority is to design a structure that matches HSE expectations and your own governance processes so that evidence is both reliable and easy to produce under time pressure.

---

Why DIY and Low-Cost Legionella Providers Leave You Exposed

DIY arrangements or ultra‑cheap Legionella packages often look attractive until regulators, insurers or courts start asking hard questions about your evidence. Ad‑hoc in‑house checks or minimal external packages can appear to save money, but they often leave gaps in competence, design and documentation that only become obvious under scrutiny. ACoP L8 makes it clear that the legal duty sits with the dutyholder, not the contractor, so weak arrangements simply shift risk back onto your organisation and, ultimately, its leaders.

Where ad-hoc in-house regimes tend to fall short

Informal in‑house practices can give a false sense of security because they are rarely documented or reviewed. In many organisations, caretakers or site staff “run the showers now and then” or take occasional temperature readings. Typical weaknesses include:

• no formal risk assessment to define what should be done and why
• no written scheme that links plant, outlets and tasks
• incomplete, inconsistent or non‑existent logs
• no clear training or competence records for the people doing the work

This can leave senior leaders believing a control system exists, while the evidence tells a different storey. Staff turnover and role changes can quietly erode what structure there was, until knowledge lives only in people’s heads rather than in a managed system that survives changes in personnel.

Typical weaknesses in minimal-scope contracts

Bare‑bones external contracts frequently tick a box on paper while leaving you with most of the risk. At the other end of the spectrum, some low‑cost external offerings focus on a basic risk assessment report and perhaps one annual visit, with limited support for turning findings into live PPM. Common issues include:

• generic assessments that do not reflect actual layouts or usage patterns
• little or no help in writing or updating the written scheme
• minimal temperature monitoring, flushing or TMV work
• limited challenge to design issues such as dead‑legs, poor insulation or tank condition

When incidents or audits occur, dutyholders can be surprised to discover that these contracts were never designed to deliver full L8/HSG274 compliance. The small saving in annual fees can then look insignificant beside enforcement action, claims or major remedial costs.

Questions to put to any Legionella provider

Straightforward questions quickly reveal whether a provider is set up to support full compliance rather than minimal paperwork. To distinguish robust specialists from low‑value providers, it is worth asking:

• How do you ensure your work aligns with the latest ACoP L8 and HSG274 guidance?
• Do you help us design and maintain a written scheme, or only supply reports?
• Which PPM tasks and frequencies are you proposing to deliver, and which remain with our team?
• How will results, failures and remedial recommendations be recorded, escalated and followed up?
• What training and qualifications do your assessors and technicians hold?

A good provider will welcome these questions and answer them clearly. If a provider struggles to give specific, practical answers, it is a warning that your organisation may end up carrying more risk than you realise. All Services 4U builds its Legionella services around exactly these points, so you can see where responsibilities start and end and be confident the full regime stands up to external scrutiny.

---

Our Legionella PPM & Compliance Service: From Risk Assessment to Written Scheme

All Services 4U helps dutyholders turn ACoP L8 and HSG274 into a practical, site‑specific regime that your team can operate with confidence. That means combining competent risk assessment, a clear written scheme, proportionate PPM, and evidence that stands up to insurers, auditors and regulators.

How All Services 4U assesses and designs your control scheme

A clear assessment and control scheme is the foundation for reliable Legionella management. A typical engagement starts with a review or completion of your Legionella risk assessment. Our specialists:

• survey the site and water systems
• map assets and produce or refine schematics
• identify hazards such as stored water, dead‑legs, aerosol‑producing outlets and vulnerable users
• evaluate your existing controls, records and any external contracts

From there we develop or update your written scheme of control, clearly setting out:

• what needs to be done, broken down by system and outlet type
• how often each task should occur, justified by risk and HSG274 guidance
• who is responsible, whether your team, All Services 4U or other specialists
• how results will be recorded, reviewed and escalated

This becomes the operational blueprint for your Legionella control and can be mapped into your CAFM or PPM system if you use one, so that nothing depends solely on memory or goodwill.

Integrating monitoring, remedials and reporting

Ongoing monitoring and remedial work need to slot naturally into your existing maintenance processes. Depending on your resources, All Services 4U can:

• deliver routine monitoring such as temperatures, flushing, inspections and TMV checks
• support your in‑house team with training and periodic verification checks
• manage remedial works identified by assessments or monitoring, from removing dead‑legs to tank upgrades

Reporting is structured to support governance as well as operations. You receive clear visit reports, updated logs and, where needed, summary dashboards that show completion rates, exceptions and trends. Where you already have a CAFM system, we work with your data structures; where you do not, we provide simple, consistent formats that still meet ACoP L8 expectations and make life easier at audit time.

Supporting your people and governance

Competent people and clear governance keep your Legionella regime effective over time. A strong scheme depends on competent people as much as on paperwork. All Services 4U supports dutyholders and responsible persons by:

• providing awareness and role‑specific training so people know what “good” looks like
• helping define and document roles, responsibilities and escalation routes across estates, FM and H&S
• running periodic governance reviews against ACoP L8/HSG274 expectations
• assembling evidence packs ahead of regulator visits, client audits, insurance renewals or refinancing

The result is not just a set of checks, but a managed system you can explain to your board, your residents, your insurers and – if required – to a regulator.

---

---

Book Your Free Consultation With All Services 4U Today

All Services 4U can help you understand where your current Legionella regime stands against ACoP L8 and HSG274 and show you how to move towards a clear, proportionate and defensible control system. A short, focused consultation gives you clarity on priorities without committing you to a full programme.

What happens on your free consultation

Your first consultation is a structured conversation that turns concerns into a concrete picture of risk and options. In a typical introductory session we will:

Step 1 – Understand your buildings and systems

Discuss your buildings, water systems and how you currently manage Legionella risk in practice, including who holds the responsible person role.

Step 2 – Review your assessments, PPM and records

Explore how you handle risk assessments, PPM scheduling and record‑keeping, including any external contracts and internal routines.

Step 3 – Highlight obvious gaps and options

Identify clear gaps or inconsistencies against HSE guidance and outline practical options to address them, phased where necessary to fit budgets and operational constraints.

You come away with a clearer view of strengths, weaknesses and the most logical next steps for your portfolio.

Options for pilots and phased engagement

Phased engagement lets you prove the approach on a manageable slice of your portfolio before scaling up. Many organisations prefer to test an approach on a representative building before rolling it out. All Services 4U can:

• design a pilot PPM schedule and evidence framework for a single site or block
• align the pilot with your budget year and other planned works
• refine routes, tasks and reporting based on real‑world experience and feedback from your team

From there, scaling to additional properties becomes a matter of repetition rather than reinvention, with lessons from the pilot baked into your standard model.

Who should be involved from your side

Having the right people on your side of the table makes it easier to move from discussion to action. To get maximum value from the consultation, it helps to involve:

• the person currently acting as Legionella responsible person
• someone from estates or FM who understands day‑to‑day operations and access constraints
• a representative from health and safety or compliance who owns policies and risk registers
• for larger organisations, a sponsor from finance or asset management who sees the risk and cost picture

When these roles are in the room together, decisions about risk, cost and operations can be made faster and with fewer surprises. If you want your Legionella regime to be clear, proportionate and defensible, All Services 4U is ready to help you build it and stand behind it.

---

Frequently Asked Questions

Explore our FAQs to find answers to planned preventative maintenance questions you may have.