HSE Compliant PPM Water Hygiene Schedule for UK Facilities, 60°C/50°C
Your planned preventative maintenance schedule must be driven by the written scheme that comes out of a legionella risk assessment, not a generic calendar. Use HSE’s HSG274 temperature and sentinel-check targets as your baseline: hot water stored at 60°C or above, hot distribution reaching at least 50°C, cold water below 20°C, and 55°C at outlets within one minute in healthcare settings. Baseline frequencies exist, but the risk assessment decides which ones apply to your site.
TL;DR:
A risk assessment determines the specific frequencies for checks like flushing outlets weekly and inspecting cold water tanks every six months, rather than following a fixed calendar.
Sentinel outlet temperature checks should be performed monthly, with hot water reaching at least 50°C within one minute, and cold water below 20°C, to meet guidance requirements.
Servicing and cleaning of thermostatic mixing valves and showerheads must follow manufacturer guidance and risk assessment, with showerhead descaling at least quarterly.
Records of temperature readings, remedial actions, and inspections must be retained for at least five years, with a designated Responsible Person overseeing the schedule.
Healthcare premises require stricter temperature targets and pathogen testing, with governance managed by a Water Safety Group and escalation protocols for failed checks.
Table of Contents
TMVs, showers and low-use outlets: technical maintenance notes
Making PPM auditable: records, retention and responsibilities
Healthcare note: HTM 04-01 requirements and how PPM schedules differ
Implementing PPM as a closed loop: mapping, scheduling, escalation and review
How Bespoke Compliance Solutions can help implement and manage your PPM schedule
What a water hygiene PPM programme must include
A PPM schedule is only as good as the documents behind it. Before any task list gets written, the Responsible Person should be able to point to a current risk assessment, a written scheme, a system schematic and, in healthcare, a Water Safety Plan tied to a Water Safety Group. Our legionella risk assessment guidance covers when that document needs updating, which matters because an outdated assessment produces an outdated schedule.
The core tasks that sit on top of those documents are fairly consistent across sites:
Flushing of outlets that see little or no use should be carried out regularly.
Regular checks of sentinel outlets and calorifier flow and return temperatures should be performed.
Cold water storage tanks should be inspected periodically.
Calorifier inspection should be carried out periodically and cleaning performed based on condition rather than a fixed schedule.
TMV servicing and showerhead descaling should follow manufacturer guidance and risk assessment recommendations.
Water sampling should be conducted when identified as necessary by the risk assessment.
To turn this into a working schedule, group your assets (calorifiers, tanks, outlet clusters, TMVs), then assign each group a frequency, an acceptance criterion and a named owner for escalation in line with a three phase risk based cleaning validation strategy. A list of tasks with no named owner and no pass/fail criterion is not a schedule, it is a wish list.
Baseline schedule: frequencies and sentinel-point checks
HSE guidance on managing legionella sets out practical checks that form the backbone of most PPM calendars: monthly sentinel-outlet temperature checks, weekly flushing of infrequently used outlets, and cold-water storage-tank temperature checks at least every six months. HSG274 Part 2 adds detail on calorifier checks and shower maintenance, recommending descaling of showerheads and hoses at least quarterly as a starting point before risk-assessment-led adjustments.
Task | Baseline frequency | Acceptance criterion |
Flush little-used outlets | Weekly | Outlet run to clear stagnant water |
Sentinel outlet temperature | Monthly | Hot ≥50°C, cold <20°C within one minute |
Calorifier flow/return | Monthly | Return temperature ≥60°C |
Cold tank inspection | Six-monthly | No sediment, cover intact, temperature <20°C |
Calorifier inspection/clean | Annual (condition-led) | Clean internal surfaces, no scale build-up |
Shower descaling | Quarterly (baseline) | No visible limescale or fouling |
Sentinel points should include outlets nearest to and furthest from the calorifier or cold storage tank, giving a representative picture of the whole distribution system rather than just the points closest to the plant room. Measure for a full minute at the outlet, since a snapshot reading can miss the moment the temperature actually stabilises.
Microbiological testing is not routinely needed for a well-controlled enclosed system, but it becomes relevant where testing and monitoring guidance flags unclear control effectiveness, repeated failure to hit temperature targets, or a healthcare setting with pathogen-specific limits.
Pro Tip: Log the actual reading, not just a tick, every time, so a pattern of near-misses shows up before it becomes a failure.
TMVs, showers and low-use outlets: technical maintenance notes
Thermostatic mixing valves and showers are where PPM schedules most often go wrong, usually because the outlet reading looks fine while the inlet has drifted. HSE’s guidance on things to consider stresses measuring the hot inlet to the TMV as well as the blended outlet, because a healthy-looking outlet temperature can mask a failing hot supply upstream.
Practical points for this part of the schedule:
Service TMVs at the frequency set by the manufacturer and your own risk assessment, not a fixed industry default.
Measure both the hot inlet and the blended outlet at every check, not just the outlet.
Clean and descale showerheads and hoses at least quarterly as a baseline, replacing hoses or heads where fouling persists despite cleaning.
Add sampling for showers in higher-risk settings such as care homes or hospitals.
Flush low-use outlets and dead legs weekly, taking care to avoid generating aerosols while doing so.
Remove redundant pipework where it is practical to do so, since dead legs are a recurring source of stagnant water.
None of this is exotic, but it is the detail that separates a schedule that reads well from one that actually controls risk.
Making PPM auditable: records, retention and responsibilities
A PPM schedule that cannot be evidenced is not compliance, it is paperwork. HSE’s guidance on keeping records sets out what an auditable trail needs to contain and for how long.
Keep the current risk assessment and written scheme, plus monitoring logs showing the original reading, the date, and the name of whoever carried out the check.
Record every remedial action taken against a failed check, along with its closure date.
Retain the written scheme and significant findings while current, and normally for at least two years after they are superseded.
Retain monitoring, inspection and test records for at least five years.
Appoint a named Responsible Person who owns the schedule, and make sure contractor records feed into the same log rather than sitting separately.
Our temperature monitoring checks guide walks through how to take and record sentinel and calorifier readings so the log stands up to scrutiny. In healthcare, these records should feed directly into the Water Safety Plan rather than existing as a separate facilities document.
Healthcare note: HTM 04-01 requirements and how PPM schedules differ
Healthcare premises work to a tighter standard than the general HSG274 baseline. HTM 04-01 Part B requires hot water storage at 60°C with distribution reaching 55°C at outlets within one minute, a stricter target than the 50°C used elsewhere, alongside pathogen-focused monitoring that includes Pseudomonas aeruginosa testing and tight microbiological limits.
Governance sits above the schedule itself: a Water Safety Group oversees the Water Safety Plan, linking day-to-day temperature and sampling results to clinical risk rather than treating them as a purely facilities matter. Testing frequency in HTM 04-01 is set with escalation routes built in, so a failed result triggers a defined clinical and estates response rather than a note for the next review meeting. Our HTM 04-01 guide covers this governance structure in more depth for estates and infection control teams working together.
Implementing PPM as a closed loop: mapping, scheduling, escalation and review
A written scheme only becomes a working PPM programme once it is mapped, scheduled and reviewed as a loop rather than a one-off document.
Step 1: map the system. Identify sentinel outlets, asset groups and dead legs from the schematic.
Step 2: build the calendar. Attach frequency, acceptance criteria and a named owner to each asset group, linked directly to the written scheme.
Step 3: monitor and escalate. Define trigger limits, record remedial works against each failure, and review the risk assessment after any system change, shutdown or abnormal result.
HSE guidance on preventing and controlling risk frames the written scheme as something that specifies the checks, their frequency, who manages them and what corrective action applies when they fail. Remote or automated monitoring can support this loop by flagging drift between physical visits, but it should only be configured where a competent person has agreed it fits the risk assessment. Our automated temperature monitoring article covers where this fits alongside manual checks.
Pro Tip: Review the risk assessment every time the system changes, not just on its scheduled renewal date.
Why bespoke, risk-led PPM beats calendar-only approaches
A generic calendar treats every outlet the same, which is exactly how low-use dead legs and ageing TMVs slip through unnoticed. Risk-led scheduling costs more to set up properly but catches the failures that a tick-box calendar misses, because it puts the detail where the actual risk sits rather than spreading effort evenly across a site. That is the difference between a schedule that looks compliant and one that is.
— Sammi
How Bespoke Compliance Solutions can help implement and manage your PPM schedule
We build PPM schedules the way this article describes: starting from a bespoke legionella risk assessment rather than a template, so the frequencies and acceptance criteria actually match your site.
[
Our services map directly onto the tasks above:
A site survey and written scheme from our risk assessment team.
Automated water temperature monitoring for continuous sentinel-point data between physical visits.
Tank cleaning, disinfection and ongoing maintenance contracts to keep the schedule running.
TMV servicing and remedial works when checks flag a fault.
Get in touch to book a site survey or request a bespoke written scheme for your buildings.
FAQ
What is a water hygiene PPM schedule?
A water hygiene PPM schedule is a planned set of checks, tests and maintenance tasks, set by a legionella risk assessment, that keeps a building’s hot and cold water systems within safe temperature and condition limits. It covers everything from weekly outlet flushing to annual calorifier inspection.
How often should legionella checks be carried out?
Baseline frequencies from HSG274 include weekly flushing of little-used outlets, monthly sentinel and calorifier checks, six-monthly cold tank inspections and annual calorifier inspection, but the risk assessment can increase or reduce these depending on the site.
What temperature should hot water be to prevent legionella?
Hot water should be stored at 60°C or above and reach at least 50°C at outlets within one minute, according to HSE guidance. In healthcare premises, HTM 04-01 raises the outlet target to 55°C.
How long must legionella monitoring records be kept?
HSE guidance on recordkeeping states that monitoring, inspection and test records should be retained for at least five years, while the written scheme and significant findings should be kept while current and normally for at least two years afterwards.
Who is responsible for legionella compliance in a building?
The duty holder, often supported by a named Responsible Person, is accountable for the risk assessment, written scheme and PPM schedule under ACoP L8. In healthcare settings, this sits alongside a Water Safety Group overseeing the Water Safety Plan.
Sources
For the legal and technical detail behind this schedule, start with HSG274 Part 2 and the ACoP L8 as the cornerstone references, alongside HSE’s practical pages on checks and recordkeeping. Healthcare premises should also consult HTM 04-01 Part B for governance and monitoring requirements specific to clinical settings.
Recommended
Comments