Housing Association Legionella Duties: 4 Legal Layers in England
Housing associations in England are legal dutyholders for Legionella control. That means identifying and assessing risk, putting controls in place, appointing a responsible person and keeping records. The duty sits under the Health and Safety at Work etc. Act and COSHH, interpreted through HSE’s ACoP L8 and HSG274, and it now overlaps with the Regulator of Social Housing’s Safety and Quality Standard and Awaab’s Law timeframes.
TL;DR:
Keep cold water below 20°C, store hot water at 60°C, and ensure outlets reach at least 50°C within one minute.
Flush little used outlets weekly, log routine temperature checks, and retain records of precautions and monitoring for at least five years where required.
Routine microbiological testing is generally unnecessary for simple domestic systems; reserve it for complex or communal systems, vulnerable residents, or specific concerns.
When risk cannot be eliminated through simple measures, ACoP L8 and HSG274 require a written control scheme with named responsibilities and monitoring schedules.
Review assessments at least every two years, and sooner after system changes, refurbishment, an outbreak, or a change in building use.
Table of Contents
Legal framework and regulator expectations for housing associations in England
Practical control measures and monitoring for hot and cold water systems
Risk assessments and written schemes: scope, timing and review triggers
Roles, competence and governance: dutyholder, responsible person and board oversight
Practical compliance checklist: priorities, tenant access and tracking remedial actions
How Bespoke Compliance Solutions helps housing associations meet these duties
Legal framework and regulator expectations for housing associations in England
The Health and Safety at Work etc. Act and the Control of Substances Hazardous to Health Regulations set the underlying duty: control exposure to a hazardous substance, and Legionella bacteria qualify. HSE’s guidance for landlords confirms that housing associations, as dutyholders, must identify and assess sources of risk, implement precautions, and keep records of what they have done. Failure to do so can lead to HSE enforcement action.
Approved Code of Practice L8 adds the practical detail. It requires a suitable and sufficient risk assessment, a named competent responsible person wherever risk is reasonably foreseeable, and a written control scheme when the risk cannot be designed out.
Since April 2024, the Regulator of Social Housing’s Safety and Quality Standard has pulled water hygiene into consumer-standards territory: registered providers must show that homes are safe, which includes completing water safety assessments and acting on their findings.
Awaab’s Law then sets the clock. Guidance for social landlords requires action on serious hazards “as soon as reasonably practicable”, with emergency repairs expected promptly in specified circumstances.
Together, these create a layered duty:
A statutory health and safety obligation under HSWA and COSHH
A technical compliance standard through ACoP L8 and HSG274
A consumer-standards obligation through the Regulator of Social Housing
A statutory repair timeframe through Awaab’s Law
Practical control measures and monitoring for hot and cold water systems
Control measures follow a simple physical logic: Legionella bacteria thrive between 20°C and 45°C, so the aim is to keep water outside that range wherever possible. HSE’s guidance sets the benchmark figures: cold water should stay below 20°C, hot water should be stored at 60°C, and outlets should reach at least 50°C within one minute of running.
Pro Tip: Build temperature checks into routine visits you’re already making, such as gas safety inspections, rather than scheduling separate trips.
For day-to-day management, most housing-association teams work through the same sequence:
Flush infrequently used outlets weekly, particularly in communal areas and void properties, to prevent stagnation.
Check stored hot water temperatures and representative outlet temperatures on a routine schedule, logging every result.
Flag voids immediately for an automated flushing protocol until they are re-let.
Disinfect or descale tanks and shower heads where scale or biofilm is found, and service thermostatic mixing valves on a planned cycle rather than waiting for a fault.
Reserve microbiological sampling for complex or communal systems, high-risk residents, or where temperature checks and visual inspection raise concern.
Record retention matters as much as the checks themselves. HSE guidance states that records of precautions and monitoring should be kept for at least five years where relevant, giving you an audit trail if the regulator or HSE asks for evidence.
Self-contained domestic systems in individual properties usually need only basic temperature checks and maintenance. Complex communal systems, central tanks and shared heating circuits warrant closer attention and, often, a specialist assessment.
Risk assessments and written schemes: scope, timing and review triggers
A Legionella risk assessment is only useful if it is “suitable and sufficient”, the phrase both HSE and ACoP L8 used to describe the standard required. That means it has to cover the actual sources of risk on site: water sources, aerosol-generating outlets such as showers, the presence of vulnerable or immunosuppressed residents, temperature profiles across the system, and any areas prone to stagnation such as dead legs or little-used outlets.
Where risk cannot be eliminated by simple means, ACoP L8 and HSG274 Part 2 require a written scheme of control. A typical scheme sets out:
The system description, including tanks, pipework and outlets
The control measures and monitoring schedule for each part of the system
Named responsibilities for carrying out checks and recording results
The process for reviewing and updating the scheme itself
Local authority and housing-provider policies, such as Cannock Chase Council’s Legionella policy, show the common pattern in practice: risk assessments for communal systems, a written scheme, a designated compliance manager and electronic record retention for at least five years. A review of your risk assessment should happen at least every two years, or sooner after any system change, outbreak, refurbishment, or change of use.
Roles, competence and governance: dutyholder, responsible person and board oversight
The dutyholder is the organisation legally responsible for compliance, usually the housing association itself. The responsible person is the named individual who manages day-to-day control, and ACoP L8 expects this person to have enough competence to understand the system and spot a problem. Where that competence does not exist in-house, HSE guidance supports appointing external specialist advisors.
The dutyholder carries ultimate legal accountability for the organisation’s Legionella controls.
The responsible person needs practical competence, not just a job title, and should be named in the written scheme.
Contractors carrying out testing, disinfection or remedial work should hold relevant water-hygiene accreditation.
Boards should receive regular reporting on open remedial actions, overdue assessments and training coverage, not just a yearly assurance statement.
Pro Tip: Ask your board reports to show the number of overdue high-risk remedial actions, not just the number of risk assessments completed, since that is the figure the Regulator of Social Housing is most likely to ask about.
Practical compliance checklist: priorities, tenant access and tracking remedial actions
Once a risk assessment identifies issues, the real test is what happens next.
Grade every finding by risk and set a deadline for each: high-risk items in communal plant rooms or shared hot water systems typically need action within days to weeks, not months.
Record every access attempt to a tenant’s home in writing, and use the tenancy agreement’s access clause where repeated attempts fail.
Coordinate water hygiene visits with other scheduled appointments, such as gas safety checks, to reduce the number of separate call-outs.
Link every risk assessment finding to your work-order system, with automatic flags for anything marked high-risk, so items cannot be closed until the remedial work is actually completed.
Prioritise blocks with central tanks, communal showers or complex heating circuits for specialist review ahead of simpler, self-contained domestic systems.
Several practical examples for social housing and a tenant water hygiene checklist set out how to keep this process consistent across a large portfolio.
How Bespoke Compliance Solutions helps housing associations meet these duties
We map our services directly onto the duties above, so each statutory task has a clear deliverable attached to it:
Risk assessments that feed straight into a written scheme of control, built to ACoP L8 standards
Water sampling and microbiological testing where temperature checks alone are not enough
Automated temperature monitoring that gives you continuous, time-stamped evidence for board and regulator reporting
Legionella awareness training that creates a documented competence record for staff and responsible persons
Remedial works, tank disinfection and TMV servicing that close out high-risk findings rather than leaving them open
Our logbook system keeps all of this in one place, and we work with housing-association sites across England.
Board-level priorities and common operational pitfalls
The housing associations that struggle with Legionella compliance rarely fail at the risk assessment stage. They fail afterwards, when a high-risk finding sits in an inbox rather than a work order, or when access attempts go undocumented and the issue quietly ages past its deadline.
The fix is usually structural rather than technical: an escalation pathway for overdue high-risk items, and a dashboard the board actually looks at. Governance, not technology, closes the gap between a good risk assessment and a genuinely safe building.
— Sammi
Get a tailored Legionella compliance plan in place
Meeting these duties across a large housing stock is easier with one partner handling the assessment, the evidence and the remedial follow-up. We offer Legionella risk assessments built around a written scheme, automated water temperature monitoring for continuous evidence, and Legionella awareness training to establish competence records across your team.
[
Request a site-specific risk assessment and written scheme
Book automated monitoring for communal or complex systems
Arrange training for your responsible persons and site staff
Where testing or remedial work is needed, our water testing and analysis services and tank cleaning and disinfection services close the loop between finding a problem and fixing it. Get in touch to talk through your portfolio and the right starting point for your sites.
This article is general information, not a substitute for advice from a qualified doctor. Consult a qualified healthcare professional about your own circumstances before acting on anything here.
FAQ
What are a landlord’s responsibilities for controlling Legionella?
Landlords and housing associations are dutyholders who must identify and assess Legionella risk, put suitable controls in place, appoint a competent responsible person and keep records of what they have done, under HSE’s landlord guidance. For most domestic properties this means proportionate checks rather than a complex programme, though communal systems need closer management.
Is there a risk of a Legionnaires’ disease outbreak in 2026?
Legionella risk is ongoing wherever water systems are poorly maintained, stagnant or run at the wrong temperature, rather than tied to a particular year. Keeping stored hot water at 60°C, cold water below 20°C and outlets flushed regularly remains the standard way to manage that risk in housing stock.
What are the requirements for Legionella testing in the UK?
HSE guidance does not require routine microbiological testing for most simple domestic systems: temperature checks and basic maintenance are usually sufficient. Testing becomes appropriate for complex or communal systems, after a disinfection, or where a risk assessment flags a specific concern.
Does Legionella fall under COSHH?
Yes. Legionella bacteria are treated as a hazardous substance under the Control of Substances Hazardous to Health Regulations, and the duty to assess and control the risk sits alongside the wider requirements of the Health and Safety at Work Act. ACoP L8 sets out how that duty should be met in practice for water systems.
How often should a Legionella risk assessment be reviewed?
A written scheme and its underlying risk assessment should be reviewed at least every two years, or sooner after any change to the water system, a refurbishment, an outbreak, or a change in how the building is used. ACoP L8 treats this as an ongoing management process rather than a one-off exercise.
Sources
Recommended
Comments