Authorising Engineer (Water): Role, Duties and When You Need One
An Authorising Engineer (Water), usually shortened to AE (Water), is an independent specialist who audits and advises on how an organisation manages the safety of its water systems. The role comes from NHS healthcare engineering guidance, so it is standard in hospitals and NHS trusts in England and increasingly asked about by other healthcare providers. Outside healthcare, the law does not use the title, but it does require a competent person to help manage Legionella risk. This guide explains the difference, who does what, and how to appoint the right person.
TL;DR
An AE (Water) is an independent adviser and auditor of water safety. They do not run the water system day to day.
The role is defined in NHS guidance (HTM 00 and HTM 04-01), not in a standalone statute. For healthcare premises in England, it is the expected model.
Outside the NHS, the legal duty under the HSE’s L8 Approved Code of Practice is to assess risk and appoint a competent person. A formal AE is not named in that law.
The AE sits alongside the dutyholder and the Responsible Person (Water). Each has a separate job, and independence is the point of the AE.
Appoint in writing, check competence and independence, and make sure the underlying risk assessment and monitoring are sound first.
Table of Contents
What an Authorising Engineer (Water) is
The NHS guidance on safe water in healthcare, HTM 04-01, describes the AE (Water) as an independent professional adviser with expertise in water safety, waterborne pathogens and system design. Their job is to give the organisation assurance that water is being managed safely and that governance is working.
The same guidance places the role inside the wider Health Technical Memoranda framework, specifically HTM 00 and HTM 04-01. Those documents set out how healthcare engineering is governed in England. Other disciplines, such as medical gases and ventilation, have their own AEs under the same model.
Two words matter most in the definition: independent and assurance. An AE is not the person who flushes outlets, logs temperatures or services valves. They are the person who checks, from the outside, that the system for doing those things is adequate and being followed.
Who needs an Authorising Engineer (Water)?
The clearest answer is NHS healthcare organisations. HTM 04-01 treats the AE (Water) as a key part of the safe water arrangements, and it is required or strongly advised for NHS bodies in England.
Beyond the NHS, the picture is less formal:
Independent and private hospitals, hospices and care providers often adopt HTM 04-01 as the benchmark for good practice, and so appoint an AE or an equivalent independent auditor.
Dental surgeries, GP practices and medical facilities may not be able to justify a standing AE, but need the same underlying controls. Our guide to Legionella in NHS GP surgeries covers risks and responsibilities in that setting.
Schools, universities, offices, hotels and housing providers are not covered by HTM 04-01. They are covered by general health and safety law and the Legionella ACOP, which asks for a competent person rather than an AE.
If you manage a non-NHS site and a tender, insurer or funder asks whether you have an “AE (Water)”, the sensible reading is: do you have independent, competent oversight of your water safety management? That can be met with an independent audit programme, even if the job title differs.
Is appointing an AE a legal requirement?
There are two layers, and it helps to keep them apart.
Law. The HSE’s Approved Code of Practice and guidance, L8, says dutyholders should identify and assess sources of risk, and appoint a competent person with enough authority and knowledge to help them comply with the law. It also applies a risk assessment requirement to all systems within its scope. So a Legionella risk assessment is a legal expectation for most premises with water systems. A formally titled AE (Water) is not.
NHS guidance. HTM 04-01 is guidance, not an Act of Parliament, but it is the standard NHS organisations are expected to follow, and the HSE and other regulators look to it when assessing healthcare premises. In that world, the AE (Water) is part of the expected structure.
New-build and major refurbishment work adds a further point. NHS England’s Technical Bulletin NETB 2024/3, a supplement to HTM 04-01, says that for projects serving high-risk patients the project duty holder should make sure a project-specific Water Safety Group includes the AE (Water), a specialist adviser or a subject matter expert from the start. Bringing the AE in at design stage is far cheaper than discovering dead legs and poor tank design after handover.
AE (Water), Responsible Person and dutyholder: who does what
Confusion between these three roles is the most common problem we see. They are different jobs held by different people.
Role | Who they usually are | What they do |
Dutyholder | The board, chief executive or equivalent owner of the premises | Holds ultimate legal accountability and makes sure effective management is in place |
Responsible Person (Water) | An internal appointee, often in estates or facilities | Has day-to-day responsibility for putting the water safety arrangements into practice |
Authorising Engineer (Water) | An independent external specialist | Audits and advises on the system, and reports on whether it is being managed properly |
This split follows HTM 04-01. The AE provides independent advice, audit and oversight. The Responsible Person implements. The dutyholder is accountable.
The independence rule is strict. The guidance says the AE (Water) must remain independent from the organisation’s internal operational and maintenance structure, particularly for auditing. An AE who also services your valves, writes your logbook and then audits both is marking their own homework. That is why a good AE keeps clear of contracting work on the same site.
What an AE (Water) actually does
In practice, the AE’s work falls into a handful of activities.
Auditing the management system
The AE reviews whether the written arrangements, the risk assessments and the records match what really happens on site. They look at whether the Responsible Person is competent and resourced, whether roles are clear, and whether problems are escalated and closed out. HTM 04-01 describes this as independent auditing of management schemes and risk assessments.
Advising the Water Safety Group
Healthcare organisations are expected to have a Water Safety Group (WSG) that oversees the Water Safety Plan (WSP). The AE advises the group on technical compliance and helps make sure the plan is robust and properly implemented. Their input matters most when something goes wrong: a positive Legionella or Pseudomonas result, an unexpected temperature failure, or a proposed change to the building.
Validating control measures
The aim is to protect patients from pathogens such as Legionella and Pseudomonas aeruginosa. The AE checks that the chosen control measures, such as temperature regimes, disinfection, flushing and sampling, are suitable for the hazards identified and for how vulnerable the people using the building are.
Reviewing design and change
When a ward is refurbished, a tank is replaced or a new wing is planned, the AE is the person asking whether the design creates stagnation, heat gain, or outlets that cannot be flushed. This is where early involvement saves money.
Qualifications and competence
HTM 04-01 expects an AE (Water) to have extensive technical knowledge of water safety legislation and guidance, particularly HTM 04-01 itself, and of pathogen control. That is usually evidenced through professional memberships and years of relevant experience.
The guidance also notes that NHS England and IHEEM (the Institute of Healthcare Engineering and Estate Management) are working towards standardising these requirements through a formal central registration and certification process. If you are appointing now, ask any candidate where they stand in relation to that process and keep an eye on the latest HTM 00 and IHEEM publications for the current position.
What to check before you appoint
Independence. Do they, or their employer, deliver maintenance, remedial or testing work on your site? If so, who audits that work?
Knowledge of the right documents. Ask them to explain how HTM 04-01 applies to your wards, outpatient areas or dental suites, not just to quote it.
Professional registration and membership. Ask for evidence rather than a logo on a website.
Track record. Ask for examples of system audits and how findings were followed through, with client confidentiality respected.
Reporting style. A useful AE report ranks findings by risk and says what to do next. A weak one lists observations with no priority.
How an AE is appointed
HTM 04-01 says the AE (Water) is appointed in writing by the healthcare organisation, often by the Responsible Person or the Designated Person. Put the following in the appointment letter or contract:
The scope: which sites, buildings and systems are covered.
The audit frequency and what will be delivered after each visit.
How the AE reports, and to whom, including how serious findings are escalated to the dutyholder.
A statement on independence and any conflicts of interest.
Access rights to records, risk assessments, logbooks and the WSG.
Keep a copy with your water safety documents so an inspector, insurer or new Responsible Person can find it.
What an AE needs from you first
An AE can only audit what exists. Before they visit, make sure the foundations are in place:
A current Legionella risk assessment for every system within scope. L8 expects this, and it is the base document the AE will test. If yours is old or the building has changed, read our note on reviewing a Legionella risk assessment.
A written scheme and logbook showing temperature checks, flushing, descaling and tank inspections, with names and dates.
Sampling results and action records. If a result failed, the file should show what was done and the retest.
Training records for the Responsible Person and anyone carrying out tasks.
A named Responsible Person and, in healthcare, a functioning WSG.
If your site is a healthcare building, our HTM 04-01 compliance guide walks through what the memorandum expects in practice.
Our perspective
We are not an AE practice, and we say so plainly because independence is the whole value of the role. What we do is help organisations get to the point where an independent audit is a confirmation rather than a shock.
From our work with healthcare, education, housing, hotels and commercial sites, the same gaps come up. The risk assessment is out of date or describes a building that has since been altered. Logbooks are filled in but nobody reviews them. Remedial actions sit open for months because it is unclear who owns them. None of these needs an AE to find, but all of them will be found by one.
Our view is that compliance should be simple and bespoke. A 12-bed dental practice and a multi-site university do not need the same paperwork, but they do need the same clarity: who is responsible, what is checked, how often, and what happens when a result is wrong. If you have that written down and followed, the conversation with an AE, an insurer or an inspector becomes straightforward.
The other point we make to facilities and compliance managers is to separate roles deliberately. If you want an independent audit, keep your auditor away from your delivery contractor. If you want one provider to carry out the work, treat the audit as a separate check from someone else.
— Sammi
Getting your site ready for an audit
If an AE visit, a tender requirement or an insurer’s question is coming up, we can help you close the gaps beforehand. Our Legionella risk assessments start from £185, and Legionella water testing and analysis starts from £55 per sample. For ongoing control, we can also set up automated water temperature monitoring and help with remedial work and system disinfection. Bespoke quotes are available for larger or multi-site estates.
Working with an AE on a non-healthcare site
If you run an office, school, hotel or housing portfolio, you may never need the AE title. You will still benefit from the same principle: independent oversight on top of internal management.
A workable pattern looks like this:
Appoint an internal Responsible Person with clear written duties and enough time to do the work.
Have a competent contractor carry out the risk assessment, sampling and remedial tasks.
Commission an independent review or audit of the whole system, ideally by someone who is not delivering the routine work.
Report findings to the person with ultimate accountability for the premises, and record decisions.
Our page on Legionella compliance for offices and commercial premises sets out how that works for non-clinical buildings.
Common mistakes
Treating the AE as the Responsible Person. The AE advises and audits. If nobody inside owns the day-to-day tasks, the audit will simply record that fact.
Appointing your contractor as your auditor. It undermines the independence the guidance asks for.
Waiting for the audit to commission a risk assessment. The AE will expect one already.
Verbal appointments. HTM 04-01 expects the appointment in writing.
Ignoring findings. An audit that is filed and forgotten is worse than none, because it proves you knew.
FAQ
Is an Authorising Engineer (Water) a legal requirement?
No law names the role directly. The HSE’s L8 Approved Code of Practice requires dutyholders to assess risk and appoint a competent person to help them comply. For NHS organisations in England, HTM 04-01 sets the AE (Water) as part of the expected arrangements, so in practice it is treated as essential there.
Is a water risk assessment a legal requirement?
For premises and systems within the scope of the ACOP, yes: L8 says all such systems need a Legionella risk assessment. It should be reviewed when circumstances change. Whoever carries it out must be competent.
What is the difference between an AE (Water) and a Responsible Person?
The Responsible Person is an internal appointee who puts the water safety arrangements into practice day to day. The AE (Water) is an independent adviser who audits those arrangements and reports on them. The dutyholder, typically the board or chief executive, remains legally accountable for both.
How much does a water risk assessment cost?
The price depends on the size and complexity of the site. Our Legionella risk assessments start from £185, and Legionella water samples from £55 per sample. Larger or multi-site estates are quoted individually.
Sources
Recommended
Comments