When UK NHS Sites Must Sample Under HTM 04-01: Monthly Checks
HTM 04-01 does not require blanket routine microbiological testing across every water outlet. It sets a risk-based approach built on temperature control, a documented Water Safety Plan and, where sampling is actually triggered, UKAS-accredited laboratory analysis. If you manage a healthcare site, your immediate priorities are checking sentinel outlet temperatures, reviewing your Water Safety Plan against HTM 04-01 and HSE’s L8 guidance, and commissioning sampling only when a genuine trigger exists.
TL;DR:
Routine microbiological testing is only justified when temperature control failures, outbreak suspicions, or high-risk areas trigger sampling, not as part of regular checks.
Sampling must specify testing methods, locations, and laboratories upfront to ensure results are usable for risk management, especially during commissioning or outbreak response.
Accredited UKAS laboratories with proven proficiency are essential for reliable results, and interpreting single samples requires weighing temperature logs and recent maintenance alongside lab data.
Temperature monitoring of sentinel outlets should be monthly, with deviations prompting targeted remedial actions and potentially microbiological sampling if thresholds are exceeded.
Effective water safety management depends on comprehensive documentation, including risk assessments, logs, certifications, and a functioning Water Safety Group overseeing continuous oversight and response.
Table of Contents
What HTM 04-01 covers and how the parts apply to healthcare sites
Sampling methods and test types for healthcare water systems
Temperature control and sentinel monitoring: the frontline defence
TMVs and D 08: balancing scald risk against microbial control
How Bespoke Compliance Solutions can help with HTM 04-01 compliance
What HTM 04-01 covers and how the parts apply to healthcare sites
Health Technical Memorandum 04-01 is the reference document NHS England produces for managing hot and cold water systems in healthcare premises, and it applies to any organisation responsible for water safety on a healthcare site, from acute trusts to GP surgeries and care homes. The guidance is split into three parts, each aimed at a different stage of a building’s life and a different reader.
Part A deals with design and installation: pipework layout, materials, dead-leg avoidance and commissioning requirements for new or altered systems. Part B covers operational management once a system is running, including risk assessment, Water Safety Plans, monitoring and staff training. Part C addresses augmented care areas, where patients are more vulnerable to waterborne infection, with specific attention to Pseudomonas aeruginosa.
The NETB 2024 supplement sits alongside these three parts and adds specific advice on non-tuberculous mycobacteria (NTM) risk in augmented care units, an area the original document treated more lightly.
HTM 04-01 is not a standalone legal instrument. It works alongside the Health and Safety Executive’s L8 Approved Code of Practice on Legionella control and the statutory sampling obligations water undertakers carry under the Water Supply (Water Quality) Regulations 2016.
The intended readership spans several roles on a typical trust or care provider:
Estate managers and facilities teams responsible for day-to-day system operation.
Infection prevention and control specialists assessing clinical risk.
Designers and engineers working on new builds or refurbishments.
Water Safety Group members who own the overall governance framework.
A detailed overview of HTM 04-01 and how it applies across a healthcare estate is worth reading alongside the original document if you are new to the framework.
When is microbiological testing actually required?
Testing under HTM 04-01 follows a risk-based principle rather than a fixed calendar. HSE guidance confirms that routine microbiological monitoring of enclosed hot and cold water systems is not usually needed unless a site-specific risk assessment, a temperature control failure, a suspected outbreak, or a high-risk clinical area points to it.
Several situations commonly justify commissioning a sample:
Sentinel outlet temperatures fall outside target ranges on repeated checks.
A patient or member of staff develops an infection with a plausible water source.
New or altered pipework is being commissioned before first use.
Augmented care units (intensive care, neonatal, haematology) require baseline or periodic verification given their heightened vulnerability to Pseudomonas aeruginosa and NTM.
A Water Safety Group review identifies a system fault, such as dead legs, low usage outlets or recent disinfection work.
The system type matters too. Open systems such as cooling towers carry different statutory obligations and typically need more frequent monitoring because of their higher amplification risk. Enclosed hot and cold water systems, which make up most healthcare plumbing, rely primarily on temperature control and only move to sampling when a trigger is present.
Culture methods for Legionella must meet a minimum detection limit of no more than 100 cfu per litre, which sets the baseline sensitivity any laboratory report should be judged against.
In practice, a temperature breach on a sentinel outlet is the most common trigger facilities managers will encounter. A single missed reading rarely justifies sampling on its own, but a pattern of low hot water temperatures at the same outlet, combined with low usage, is exactly the profile that pushes a Water Safety Group towards commissioning a sample. Commissioning of new pipework is the other frequent trigger: HTM 04-01’s Part A expects verification sampling before a new water system is brought into clinical use, particularly where augmented care patients will be exposed.
Sampling methods and test types for healthcare water systems
Once a trigger is identified, the sampling brief needs to specify exactly what is being tested for, where, and using which method. Getting this wrong is one of the more common reasons a lab result ends up unusable for risk management.
Legionella culture sampling follows BS7592 methodology, the referenced standard for how samples are collected, handled and transported to preserve viable organisms until analysis.
Sentinel outlet selection should include both the outlet closest to the water source (often a calorifier or cold water storage tank) and the outlet furthest along the distribution run, since these two points show the range of temperature and stagnation risk across the system.
Pseudomonas aeruginosa sampling in augmented care areas follows the appendices in HTM 04-01 Part C, with tighter sampling frequency and lower tolerance thresholds than general Legionella monitoring; a detailed look at Pseudomonas triggers sets out the specific cfu thresholds that prompt action in clinical settings.
Sample volume and handling need to match the laboratory’s stated method: pre-flush versus first-draw samples give different information, and mixing the two without labelling them separately makes results impossible to interpret consistently.
NTM testing carries known limitations. The NETB 2024 supplement flags that laboratories differ in their NTM detection capability, so results from different labs, or even the same lab using different methods over time, are not always directly comparable.
That last point deserves emphasis. HTM 04-01 itself notes that facilities should explicitly require laboratories to state their methods and their participation in proficiency testing, and should avoid comparing results across laboratories without confirming the methods are harmonised. If you are tracking trends over several years, changing laboratory or method partway through the programme can make a genuine improvement look like a deterioration, or vice versa.
Commissioning and project assurance sampling deserves its own line in the brief. New systems, extensions or refurbished wings should be sampled before patients are exposed, with sentinel and worst-case outlets both represented. This is where Part A of HTM 04-01 and the operational expectations of Part B meet: a system can be built to specification and still fail its first sample if flushing, disinfection or commissioning sequencing was rushed.
Specifying the method in writing, rather than leaving it to the laboratory’s default protocol, is the single most effective way to avoid a result that cannot be acted on.
Laboratory standards and how to read the results
Any laboratory carrying out Legionella or Pseudomonas testing for a healthcare site should hold UKAS accreditation and take part in a recognised proficiency testing scheme. This is not a paperwork formality: accreditation and proficiency testing are what allow you to trust that a result of, say, 50 cfu per litre from one sampling round means the same thing as 50 cfu per litre from the next, even if conditions or technicians change.
A few points are worth checking before you commission any sampling round:
Confirm the laboratory’s UKAS scope explicitly covers the test type you need, Legionella culture, Pseudomonas or NTM, since accreditation is granted per method, not blanket.
Ask which proficiency testing scheme the laboratory participates in and how recently it passed.
Request the reporting format in advance so results map cleanly onto your Water Safety Plan’s action thresholds.
Check the stated detection limit matches the minimum standard HSE guidance expects for culture methods.
Pro Tip: Before you sign off a sampling contract, ask the laboratory for a sample report from a previous client, anonymised, so you can see exactly how results, detection limits and method notes are presented before you need to interpret one under pressure.
Interpreting a result is where many facilities teams stumble. A single culture result is a snapshot of conditions at one outlet, on one day, using one method. It is not a pass or fail verdict on the whole system, and it should never be read in isolation from your temperature logs, recent maintenance work or usage patterns at that outlet. A low or negative result does not prove the system is safe going forward, and a positive result at low colony counts does not automatically mean an outbreak is under way. Both need to be weighed within the Water Safety Plan, alongside repeat sampling where the picture is unclear.
This is also why a written laboratory brief matters more than people expect. Setting out the sampling points, method, turnaround time and reporting format before the first visit avoids the common problem of receiving a technically correct report that nobody on site can actually use to make a decision. Our guide to checking UKAS credentials walks through the specific questions to ask a prospective laboratory partner.
Temperature control and sentinel monitoring: the frontline defence
Temperature management is the control measure HTM 04-01 and HSE both lean on hardest, because it works continuously rather than relying on a periodic snapshot. Getting the numbers right at storage and distribution points does more to suppress Legionella growth than any sampling programme, since sustained cold and hot temperatures outside the bacteria’s growth range prevent the problem before it starts.
A sentinel outlet programme puts this into practice. Outlets are chosen to represent the extremes of the system, typically the one nearest the calorifier or cold water tank and the one furthest away, and checked on a defined schedule:
Monthly checks on sentinel hot and cold outlets, recording actual temperature and time taken to reach it.
Six-monthly checks extended to a wider sample of non-sentinel outlets to catch localised problems sentinel points might miss.
Consistent use of the same named outlets each time, since rotating measurement points makes trend data meaningless.
A named responsible person recorded in the Water Safety Plan for each monitoring round.
When a sentinel reading falls outside target, the response should be graded rather than automatic. A single marginal reading often warrants a re-check and a look at recent usage at that outlet. A repeated or significant deviation, particularly on a hot outlet failing to reach 50°C or a cold outlet sitting above 20°C, should trigger remedial action such as flushing, checking for dead legs, or adjusting calorifier settings, and may be the point at which microbiological sampling becomes justified. Automated monitoring systems remove much of the manual burden here and flag deviations in close to real time rather than waiting for the next scheduled manual check.
TMVs and D 08: balancing scald risk against microbial control
Thermostatic mixing valves sit at an awkward junction in water safety. They protect patients, particularly children, older adults and anyone with reduced sensation, from scalding by blending hot water down to a safe delivery temperature, but that same blending can create conditions closer to Legionella’s preferred growth range if the valve is not commissioned and maintained correctly. HTM 04-01’s D 08 supplement sets the performance specification that reconciles the two risks.
Type 3 TMVs, the class typically specified where vulnerable patients are present, must be commissioned against D 08’s flow and thermal performance tests before entering service. Commissioning alone is not enough. The valve then needs an in-service testing regime, recorded in the site’s asset register, to confirm it continues to perform as installed rather than drifting out of tolerance as components wear.
A practical TMV maintenance programme typically includes:
Commissioning tests against D 08 performance criteria before first use.
Routine in-service testing at intervals set by the manufacturer and the site’s Water Safety Plan.
Visual and functional checks for scale build-up, which is a common cause of performance drift in hard water areas.
A clear escalation path to servicing or replacement when a valve fails to maintain its set temperature within tolerance.
Installation without ongoing checks is one of the more frequent gaps auditors find. A TMV that passed commissioning three years ago tells you nothing about its current performance, and a valve that has drifted can quietly create either a scald risk or a microbial one, sometimes both. Where servicing reveals a valve is beyond reliable adjustment, replacement is usually more cost-effective than repeated remedial visits.
Governance: Water Safety Groups, plans and recordkeeping
A Water Safety Group is the body HTM 04-01 expects every healthcare site to have, bringing together estates, infection control, clinical representation and, where relevant, external consultants to own water safety decisions collectively rather than leaving them with one individual. The group’s central output is the Water Safety Plan, a living document that records the system description, risk assessment findings, monitoring schedules, sampling triggers and named responsibilities.
Statutory duties reinforce this structure. The Health and Safety at Work etc. Act 1974 places a general duty on employers to manage risks to health, which Legionella control falls under, while the Control of Substances Hazardous to Health Regulations govern any chemical dosing or disinfection work carried out as part of a control programme.
Auditors and inspectors will typically expect to see a defined set of records on file:
The current Legionella risk assessment and evidence it is reviewed regularly.
Sentinel and non-sentinel temperature logs covering at least the preceding twelve months.
Sampling reports with laboratory accreditation details attached.
Commissioning certificates for any new or altered pipework.
TMV commissioning and in-service test records.
Training records showing relevant staff have completed Legionella awareness training.
Missing documentation is a more common finding on audit than an actual water quality failure. A site can be doing the right things operationally and still fail an inspection because the paperwork trail does not demonstrate it. Our guide to drafting a Water Safety Plan sets out what a reviewer expects to find in each section.
Responding to a positive result or suspected outbreak
A concerning sample result or a clinical case with a plausible water link demands a fast, structured response rather than a wait-and-see approach.
Restrict use of the affected outlet or system immediately, using signage or physical isolation where practical, to stop further exposure while the picture becomes clearer.
Notify infection prevention and control on site so clinical risk can be assessed alongside the engineering response, particularly if patients in augmented care areas may have been exposed.
Increase flushing of the affected outlets and consider risk-based disinfection, such as thermal or chemical treatment, based on the scale and location of the contamination.
Contact the local Health Protection Team where there is a suspected case of Legionnaires’ disease or a cluster of cases, since public health involvement is required once human illness is suspected rather than left to internal judgement.
Document every step taken, including timings, who was informed, and what remedial action was carried out, since this record becomes essential both for internal review and for any external investigation.
Commission follow-up sampling once remedial action is complete, to verify the intervention worked, rather than assuming a single clean result some weeks later reflects the intervention rather than natural variation.
Pro Tip: Keep a pre-agreed outbreak response contact list, laboratory, Health Protection Team, water treatment specialist, on the Water Safety Plan itself rather than in a separate document, so nobody is searching for numbers while an outlet is still live.
Verification sampling deserves particular care. One clear result immediately after disinfection does not confirm the problem is resolved, since biofilm regrowth can reintroduce contamination within weeks. A second round of sampling, spaced appropriately after the first, gives a more reliable picture of whether the remedial work has actually addressed the source rather than just suppressed it temporarily.
Practical checklist and what to keep on site
A short, usable checklist beats a filing cabinet of unreviewed documents. At a minimum, every healthcare site should have the following readily accessible, ideally in one place rather than scattered across departments:
A current Water Safety Plan naming the Water Safety Group members and their responsibilities.
A sentinel outlet list specifying exact locations, not just “hot outlet, ward 3”.
A temperature log template covering monthly sentinel checks and six-monthly wider checks.
A written sampling brief specifying method, laboratory and reporting format for any future testing round.
Confirmation of the laboratory’s UKAS accreditation scope and proficiency testing participation, checked annually rather than assumed to be current.
Compliance area | What good looks like | Common gap |
Temperature monitoring | Consistent sentinel outlets checked monthly with logged results | Outlets rotated or checks skipped when busy |
Sampling | Written brief specifying method before laboratory instructed | Default lab protocol used without review |
TMV maintenance | In-service testing recorded in asset register | Commissioning done, no ongoing checks |
Documentation | Risk assessment, logs and certificates in one accessible file | Records split across departments or lost on staff turnover |
Bespoke Compliance Solutions works directly against each of these gaps. Our Legionella risk assessment service produces the written assessment your Water Safety Plan needs, our water testing and analysis service coordinates UKAS-accredited sampling with a proper written brief, and our TMV servicing covers both commissioning verification and the in-service testing D 08 requires. Automated temperature monitoring removes the burden of manual sentinel checks for sites managing multiple buildings or a large outlet count.
Common pitfalls and practical priorities from site work
Three problems come up repeatedly on healthcare sites, regardless of size or trust structure. The first is neglected sentinel checks: outlets get swapped without anyone updating the Water Safety Plan, so months of “monthly” logs are actually tracking different points and telling you nothing useful. The second is inconsistent commissioning, particularly on smaller refurbishment jobs where a new run of pipework goes live without the flushing and verification sampling a full HTM 04-01 commissioning process expects. The third is misinterpreted lab results: a single positive at low colony counts treated as an outbreak, or a clean result treated as permanent reassurance, both of which miss what the data is actually telling you.
My priorities for closing these gaps, in order, are temperature control discipline first, because it is the cheapest and most continuous defence you have. Documentation second, because a well-run site with poor records still fails an audit. Competent contractors third, because a UKAS-accredited laboratory and a properly qualified risk assessor are the difference between evidence you can act on and paperwork that only looks reassuring.
If any of this checklist is thinner than it should be on your site, a site assessment is a faster way to find out than waiting for an inspection to find it for you.
— Sammi
How Bespoke Compliance Solutions can help with HTM 04-01 compliance
Meeting HTM 04-01 well means having the right specialists lined up before a temperature deviation or a positive result forces the issue. Bespoke Compliance Solutions provides the full range of services this article has covered: Legionella water testing and analysis coordinated through UKAS-accredited laboratory partners, Legionella risk assessments that feed directly into your Water Safety Plan, automated temperature monitoring for sites managing multiple sentinel outlets, TMV servicing covering both D 08 commissioning and ongoing in-service testing, and tank cleaning or disinfection where remedial work is needed.
[
Every service is delivered as a bespoke arrangement for your site rather than a generic package, with reporting written to map onto HTM 04-01’s Part A, B and C structure so your Water Safety Group can act on results without translation. Legionella water testing and risk assessment services are offered as one-off costs rather than ongoing subscriptions, with pricing tailored individually for larger or multi-site organisations. If your priority right now is closing a specific gap, whether that is a lapsed risk assessment, an unreliable TMV, or a sampling round you are not confident interpreting, get in touch through our water testing and analysis page for a quote tailored to your site.
Sources
The primary references behind this guide are worth bookmarking rather than relying on secondary summaries, since HTM 04-01 and its supplements are updated periodically.
Read HTM 04-01’s Part B for operational sampling appendices and the D 08 supplement specifically for TMV commissioning detail.
This article is general information, not a substitute for advice from a qualified doctor. Consult a qualified healthcare professional about your own circumstances before acting on anything here.
FAQ
What is HTM 04-01?
HTM 04-01 is NHS England’s guidance document for designing, installing and operationally managing hot and cold water systems in healthcare premises, split into Part A (design and installation), Part B (operational management) and Part C (augmented care and Pseudomonas aeruginosa). It works alongside HSE’s L8 guidance rather than replacing statutory health and safety duties.
Is Legionella testing mandatory in the UK?
Legionella testing is not universally mandatory. HSE guidance confirms testing is risk-based, required when a risk assessment, temperature failure, outbreak suspicion or high-risk clinical area indicates it, and must then be carried out by a UKAS-accredited laboratory.
What are the main water regulations in the UK?
The key frameworks are the Health and Safety at Work etc. Act 1974 and HSE’s L8 Approved Code of Practice for Legionella control, alongside the Water Supply (Water Quality) Regulations 2016 covering drinking water standards. Healthcare premises additionally follow HTM 04-01 for water system design and management.
Can I get my tap water tested for free?
Free testing is not generally available for healthcare premises seeking HTM 04-01 compliance, since this requires accredited laboratory analysis rather than a basic consumer water test. A Legionella water testing service starts from £55 per sample, with UKAS accreditation and proper method documentation included.
How often should sentinel outlets be checked?
Sentinel outlets are typically checked monthly for temperature, with a wider six-monthly check extended to non-sentinel outlets to catch localised problems. The HSE guidance on managing Legionella treats consistent sentinel monitoring as the primary control measure ahead of microbiological sampling.
Recommended
Comments