How to write a water safety policy for your organisation
- 7 days ago
- 9 min read
A water safety policy is a formal document that defines how an organisation identifies, controls, and monitors risks from water systems to protect the health of everyone on site. Writing a water safety policy for your organisation is not optional where the Health and Safety at Work etc Act 1974 applies. That legislation obliges duty holders to eliminate or control risk where reasonably practicable. The industry term for the structured approach behind such a policy is a Water Safety Plan, a framework endorsed by the WHO and the International Water Association. Getting the document right from the start prevents regulatory failure, protects occupants, and gives your compliance team a clear operational reference.
What do you need before you write a water safety policy?
Preparation determines whether your policy holds up under scrutiny or collapses at the first audit. Before a single word goes on the page, you need a clear picture of your organisation’s water systems, your regulatory obligations, and the people who will own the process.
Define your scope first. Map every water system on site: cold water storage tanks, hot water calorifiers, cooling towers, swimming pools, decorative fountains, and any point of use outlet. Each system carries different risk profiles and may trigger different regulatory requirements. A healthcare facility faces different obligations from a hotel, even when both operate similar pipework.
Assemble your Water Safety Group. This team typically includes a health and safety officer, a competent water technician, a senior responsible person from leadership, and representatives from facilities management. The compliance manager’s role is to coordinate this group and ensure accountability sits with named individuals rather than departments.
Gather your baseline data. Review previous risk assessments, incident logs, water test results, and any enforcement notices. RoSPA’s 2026 report found that many local authorities in England acknowledge water safety’s importance but lack formal policies. That gap in policy-level commitment is precisely what your document must close.
Review the legislative and guidance landscape. Key references include:
The Health and Safety at Work etc Act 1974
The Control of Substances Hazardous to Health Regulations 2002 (COSHH)
WHO 2026 drinking-water quality guidelines, which stress comprehensive risk management over sole reliance on product testing
Approved Code of Practice L8 and HSG274 for Legionella control
IWA Water Safety Plan Manual, 2nd edition
Pro Tip: Before your first drafting session, walk every water system on site with your water technician and photograph current conditions. Photographs taken during this survey become evidence in your risk assessment and give the policy genuine site-specific grounding.
How do you structure and write the policy document?
A water safety policy that works in practice follows a consistent structure. Each section serves a defined purpose, and the order matters because reviewers, auditors, and staff all navigate the document differently.
Policy statement. Open with a short declaration of intent signed by a senior leader. State the organisation’s commitment to controlling waterborne risk and name the legislation the policy responds to.
Scope and application. Define which sites, systems, and populations the policy covers. Be specific: “all water systems at [Site Name] including cold water storage, hot water distribution, and pool plant” is more useful than “all water on site.”
Roles and responsibilities. Name the Responsible Person, the Water Safety Group members, and any external contractors. The health and safety manager’s role in water risk is to translate policy obligations into day-to-day operational tasks.
Risk assessment summary. Summarise findings from your water hygiene risk assessment, including the risk rating for each system. Link to the full assessment as an appendix rather than reproducing it in full.
Control measures. Detail the specific controls for each risk: temperature monitoring regimes, biocide dosing schedules, flushing programmes for infrequently used outlets, and TMV servicing intervals.
Normal Operating Procedures and Emergency Action Plans. Pool and beach operators must have both a Normal Operating Plan and an Emergency Action Plan to meet their general duties under health and safety legislation. The same principle applies to any water facility. Emergency Action Plans should pre-assign specific roles to named staff and require those roles to be practised before an incident occurs.
Monitoring, reporting, and communication. Set out the frequency of water temperature checks, microbiological sampling, and visual inspections. Define how results are recorded and who receives exception reports.
Review and improvement. Commit to a minimum review frequency and name the trigger events that prompt an unscheduled review, such as a change in water use, a significant staff change, or a positive Legionella sample.
Pro Tip: Use a simple traffic-light risk matrix in your policy appendix. A water hygiene risk matrix gives auditors an at-a-glance view of your risk profile and demonstrates that your controls are proportionate to the hazard.
The table below compares the core elements of a Normal Operating Procedure against an Emergency Action Plan:
Element | Normal Operating Procedure | Emergency Action Plan |
Purpose | Day-to-day system management | Response to an incident or system failure |
Trigger | Routine schedule | Alarm, incident, or test result breach |
Staff roles | Monitoring and maintenance duties | Pre-assigned emergency response roles |
Documentation | Logbook entries and inspection records | Incident report and corrective action log |
Review frequency | At least twice yearly | After every incident or drill |
What are the common pitfalls when creating water safety policies?
The most damaging mistake organisations make is treating a water safety policy as a one-off document. A policy written once and filed away becomes a liability rather than a safeguard.
Policies must embed recurring reviews at least twice yearly to address staff changes, shifts in water use, or seasonal hazards. Relying on outdated assessments is the primary compliance risk identified by water safety practitioners. A review cycle written into the policy itself, with named reviewers and calendar dates, removes the risk of this being overlooked.
A second common failure is treating rescue equipment as a hardware problem rather than a governance problem. Effective public rescue equipment requires supporting governance, signage, and user instruction. Hardware alone is insufficient. Your policy must specify who checks equipment, how often, and what the standard is for acceptable condition.
Accessibility is equally non-negotiable. Rescue equipment must be physically accessible within 30 seconds, stored in unlocked, weatherproof locations near the water. If your policy does not specify this standard, your site may fail an inspection even with equipment present.
“Interagency collaboration and consistent responsibility assignment improve water safety implementation. RoSPA’s analysis of Scotland’s local authorities shows that joint working over a decade produced measurably enhanced water safety practice. Organisations that silo responsibility within a single team consistently underperform against those that share accountability across functions.”
Further pitfalls to avoid:
Writing a policy at a high strategic level without site-specific operational detail
Failing to account for climate-related changes in water temperature or seasonal demand
Neglecting equity considerations, such as whether all staff groups receive training in their working language
Omitting contractor management, leaving gaps in accountability when external teams work on water systems
How do you implement, communicate, and maintain your policy?
A signed policy document achieves nothing until the people responsible for water safety know what it says and what it requires of them. Implementation is where most policies succeed or fail.
Communicate across all levels. Share the policy with the Water Safety Group, line managers, facilities staff, and any external contractors who work on water systems. For healthcare settings, clinic safety protocols in 2026 demonstrate how multi-disciplinary communication of safety documents reduces incident rates across complex environments.
Run structured training. Staff with emergency roles need to practise those roles before an incident occurs. Training should cover the Normal Operating Procedure, the Emergency Action Plan, and the specific responsibilities assigned to each role. Document every training session with dates, attendees, and the topics covered.
Schedule and document audits. A water compliance management system gives you a structured framework for scheduling inspections, recording results, and tracking corrective actions. Without this, audit trails become fragmented and difficult to present to regulators.
Key implementation actions include:
Issuing the policy to all relevant staff and contractors with a signed acknowledgement
Scheduling the first review date at the point of sign-off, not retrospectively
Creating a central log for all water test results, inspection records, and incident reports
Using automated temperature monitoring to reduce manual recording errors and generate real-time alerts
Assigning a named deputy for every key role to prevent gaps during absence
Pro Tip: Link your policy review calendar to your organisation’s existing governance cycle. If your board reviews health and safety annually in october, schedule your water safety policy review for september so findings can be reported upward immediately.
What examples and templates support policy development?
Practical templates reduce drafting time and ensure you cover every required element. The most useful starting point is a policy structure checklist that maps each section to its regulatory basis.
A typical water safety policy for a commercial premises covers: policy statement, scope, roles and responsibilities, risk assessment summary, control measures schedule, monitoring log templates, NOP and EAP documents, training records, and a review log. Healthcare facilities require additional sections covering water risk assessments specific to clinical environments, including immunocompromised patient populations and point-of-use filtration requirements.
The WHO 2026 guidelines and the IWA Water Safety Plan Manual both provide process templates for risk characterisation, control measure selection, and monitoring verification. These are publicly available and form a credible basis for your own organisation’s documentation.
A sample monitoring checklist for a cold water storage tank includes: visual inspection of tank condition and lid integrity, temperature measurement at the tank base, microbiological sampling frequency, record of any remedial actions taken, and the name and signature of the person completing the check. Adapting this format to your site-specific systems gives you a defensible audit trail from day one.
Key takeaways
A water safety policy works only when it is site-specific, assigns named responsibilities, and is reviewed at least twice yearly against current conditions and regulatory standards.
Point | Details |
Start with scope and stakeholders | Map all water systems and assemble a Water Safety Group before drafting begins. |
Structure around NOP and EAP | Every water facility needs both a Normal Operating Procedure and an Emergency Action Plan with pre-assigned staff roles. |
Review at least twice yearly | Outdated policies are the primary compliance risk; embed a fixed review cycle with named reviewers. |
Governance beats hardware | Rescue equipment and control measures require supporting governance, signage, and training to be effective. |
Use a risk matrix | A documented risk matrix demonstrates proportionate controls and supports regulatory inspection. |
What I have learned from organisations that get this right
Organisations that produce genuinely effective water safety policies share one characteristic: they treat the document as a live management tool, not a compliance exercise. I have seen well-resourced organisations produce lengthy, beautifully formatted policies that nobody reads and nobody updates. I have also seen lean, two-page frameworks that drive daily behaviour because every person named in the document knows exactly what they are responsible for.
The shift that makes the difference is moving from policy as proof to policy as instruction. When a facilities manager can open the document and find the answer to “what do I do if a temperature reading is out of range?” in under a minute, the policy is working. When they have to phone someone to find out, it is not.
The 2026 regulatory context adds pressure that did not exist five years ago. Climate-related temperature shifts are pushing cold water systems closer to Legionella growth thresholds in summer months. Digital monitoring tools now make continuous temperature logging affordable for most organisations. Policies written without reference to these realities will need significant revision within a year of sign-off.
My strongest advice: write the policy with the people who will use it, not for the people who will audit it. The result will satisfy both audiences far more effectively.
— Sammi
How Bespokecompliancesolutions supports your water safety compliance
Drafting a water safety policy is the starting point. Maintaining compliance across your sites requires ongoing risk assessment, monitoring, and specialist intervention when systems fall outside safe parameters.
Bespokecompliancesolutions works with commercial, healthcare, housing, and facilities management organisations across the UK to deliver legionella compliance for offices and commercial premises, bespoke risk assessments, water sampling and analysis, and full system disinfection and flushing services. Every solution is tailored to your specific sites and water systems, giving you a defensible compliance record and the confidence that your policy is backed by expert practice. Contact Bespokecompliancesolutions to discuss your organisation’s requirements.
FAQ
What is a water safety policy?
A water safety policy is a formal document that defines an organisation’s approach to identifying, controlling, and monitoring risks from water systems. It assigns responsibilities, sets control measures, and establishes review procedures to meet health and safety legislation.
How often should a water safety policy be reviewed?
A water safety policy should be reviewed at least twice yearly. Reviews should also be triggered by staff changes, alterations to water systems, incidents, or significant shifts in water use patterns.
What is the difference between a Normal Operating Procedure and an Emergency Action Plan?
A Normal Operating Procedure covers day-to-day management of water systems, while an Emergency Action Plan defines the response to an incident or system failure. Both documents require pre-assigned staff roles and regular practice drills.
Which regulations apply when writing a water safety policy in the UK?
The Health and Safety at Work etc Act 1974, COSHH Regulations 2002, Approved Code of Practice L8, and HSG274 are the primary regulatory references for UK water safety policies. WHO 2026 guidelines and IWA Water Safety Plan standards provide additional best practice frameworks.
Do small organisations need a formal water safety policy?
Any organisation that operates water systems where Legionella or other waterborne risks are present has a legal duty to manage those risks. A formal written policy is the most defensible way to demonstrate that duty is being met, regardless of organisation size.
Recommended
Comments