Water safety plan for UK buildings: the 2026 Legionella compliance guide

A water safety plan is the structured, risk-management document that every UK building duty holder needs to control Legionella and other waterborne hazards under ACoP L8. It covers risk assessment, temperature control, monitoring, record-keeping, and review. AQUAIOT’s continuous IoT sensors, including the iSPA-T multi-parameter monitoring system, replace manual spot checks with live temperature, chlorine, and water quality data streamed to the AQUAIOT Cloud, giving your water safety group auditable evidence around the clock.

Key takeaways

• A water safety plan is a legal expectation under ACoP L8 for every UK building with a hot and cold water system.
• 604 confirmed Legionnaires’ disease cases were reported in England and Wales in 2023, the highest annual total on record (UKHSA).
• Hot water must be stored at 60 C and delivered at 50 C within one minute; cold water must stay below 20 C (HSE).
• All monitoring records, corrective actions, and written schemes must be retained for at least five years.
• IoT sensors like the AQUAIOT iSPA-T log temperature and water quality continuously, replacing error-prone manual rounds.
• BS 8680:2020 provides the code of practice for building and maintaining a water safety plan in any UK building.

Contents

• What is a water safety plan and why does UK law require one?
• Which buildings need a water safety plan?
• What must a duty holder do under ACoP L8?
• How do you build a water safety plan step by step?
• What temperature controls does a water safety plan need?
• How long must you keep water safety records?
• How does IoT monitoring strengthen a water safety plan?
• The full AQUAIOT water quality and Legionella monitoring capability stack
• Frequently asked questions

What is a water safety plan and why does UK law require one?

A water safety plan is a preventative risk-management document that identifies every hazard in a building’s water system, sets out the controls to manage those hazards, defines monitoring routines, and records evidence of compliance. It covers hot water, cold water, cooling systems, and any other engineered water system where bacteria such as Legionella can grow.

UK law does not use the phrase “water safety plan” in statute, but the practical expectation is clear. The Approved Code of Practice L8 (ACoP L8) requires every duty holder to assess Legionella risk, implement a written scheme of control, and keep auditable records. HSG274 Part 2 introduced the water safety plan concept for healthcare premises, and BS 8680:2020 extended it to all buildings as a formal code of practice. Together, these create a framework where a structured water safety plan is the accepted way to demonstrate compliance.

The risk is not theoretical.

604 confirmed cases of Legionnaires’ disease were reported in England and Wales in 2023, the highest annual total on record

according to UKHSA surveillance data. In 2024, cases fell 22% to 472, but 13 people still died from Legionnaires’ disease (UKHSA 2024 report). A water safety plan is the primary defence.

Which buildings need a water safety plan?

Every building with a hot and cold water system needs one. ACoP L8 applies to employers, landlords, and anyone who controls a premises or a water system within it. If you manage a hospital, a housing estate, a school, a council building, a care home, a hotel, or a commercial office, you are a duty holder. Even a single let room triggers the duty under HSE guidance for landlords.

The risk is highest where water sits warm, stagnant, or untreated. Systems with cold-water storage tanks, calorifiers, long pipe runs, dead legs, infrequently used outlets, or cooling towers all need closer attention. Buildings with vulnerable occupants (NHS estates, care homes, sheltered housing) face stricter operational standards under HTM 04-01. For housing associations, the Regulator of Social Housing adds further expectations for water safety evidence.

What must a duty holder do under ACoP L8?

ACoP L8 places six core duties on the duty holder. Failure to follow the Code is not a criminal offence in itself, but a court will take non-compliance as strong evidence of a breach of the Health and Safety at Work Act 1974. Fines are severe: a UK housing provider was fined 900,000 pounds in 2024 after every one of 44 water samples at a sheltered-housing site tested positive for Legionella (HSE prosecution, October 2024).

The six duties are:

1. Identify and assess the risk. Commission a suitable and sufficient Legionella risk assessment of every water system you control.
2. Appoint a competent responsible person. This person needs the knowledge, skills, and authority to manage day-to-day Legionella control.
3. Create a written scheme of control. The scheme describes each system, lists control measures, defines monitoring frequencies, and sets out corrective actions when limits are breached.
4. Implement control measures. Temperature control, treatment, flushing, cleaning, and system design changes where needed.
5. Monitor, inspect, and record. Monthly temperature checks, weekly flushing of low-use outlets, quarterly showerhead disinfection, and continuous records of all actions.
6. Review the risk assessment. At least every two years, or sooner if the building use, occupancy, or water system changes.

Outsourcing tasks to a contractor does not transfer the legal duty. The duty holder remains accountable for the entire water safety plan and its evidence trail.

How do you build a water safety plan step by step?

Building a water safety plan follows a structured sequence set out in BS 8680:2020 and aligned with ACoP L8. The plan is a living document. It is reviewed, updated, and evidenced continuously, not filed and forgotten.

Step 1: Assemble a water safety group. Gather the duty holder, the responsible person, the facilities manager, and any external consultants. The group owns the plan, assigns tasks, and reviews performance. For larger estates, include a representative from each site.

Step 2: Map and survey every water system. Document cold-water tanks, calorifiers, distribution pipework, dead legs, TMVs, sentinel outlets, cooling towers, and any other risk system. Record pipe materials, insulation, temperatures, and usage patterns. A schematic drawing of the system is essential.

Step 3: Conduct the Legionella risk assessment. A competent person, internal or external, assesses each system against the criteria in ACoP L8 and HSG274. The assessment identifies where Legionella can colonise, amplify, and disperse. It must be “suitable and sufficient”, not a checkbox exercise.

Step 4: Write the scheme of control. For every risk identified, define the control measure, the monitoring frequency, the acceptable limit, and the corrective action if the limit is breached. This written scheme is the operational backbone of the water safety plan.

Step 5: Implement monitoring and record-keeping. Deploy temperature sensors, set up flushing schedules, install treatment systems if needed, and start logging results. This is where continuous IoT monitoring replaces manual rounds with live telemetry and automatic alerts.

Step 6: Review, audit, and update. Review the full plan at least every two years. Audit monitoring records against the scheme. Update after any system change, building refurbishment, occupancy shift, or incident. The water safety group signs off each review.

What temperature controls does a water safety plan need?

Temperature control is the single most effective barrier against Legionella growth. The bacteria thrive between 20 C and 45 C. Below 20 C they go dormant. Above 60 C they die. HSE guidance sets three critical thresholds for every building:

• Store hot water at 60 C or above. Calorifiers and hot-water cylinders must hold water at this temperature to kill Legionella at the source.
• Deliver hot water at 50 C within one minute of opening the tap. Long pipe runs with poor insulation let the temperature drop into the danger zone. AQUAIOT’s continuous temperature monitoring flags sentinel outlets that fall below 50 C.
• Keep cold water below 20 C. Cold-water storage tanks in warm plant rooms or roof spaces are a common failure point. If cold water warms above 20 C, the risk assessment must be revisited immediately.

Manual monthly checks capture a snapshot. They miss the 29 days in between. Continuous IoT sensors on sentinel outlets, tank returns, and calorifier flows log every reading and alert the responsible person the moment a threshold drifts. That is the difference between compliance on paper and compliance in practice.

How long must you keep water safety records?

ACoP L8 requires all operational monitoring records, corrective actions, and maintenance logs to be retained for a minimum of five years. The risk assessment itself and the written scheme of control must be kept for as long as they remain current and for at least two years after they are superseded.

In practice, five years of paper logbooks and spreadsheets creates a fragile, unsearchable archive. A single missing log entry during an HSE inspection shifts the burden of proof onto the duty holder. Digital record-keeping through the AQUAIOT Cloud solves this: every sensor reading, alert, acknowledgement, and corrective action is timestamped, tamper-evident, and exportable to CSV or PDF for audit. The system becomes the record.

How does IoT monitoring strengthen a water safety plan?

A water safety plan built on manual checks has three structural weaknesses: gaps between readings, human error in recording, and lag between a failure and its discovery. IoT monitoring addresses all three.

Continuous sensors on sentinel outlets, calorifier returns, cold-water tank inlets, and distribution loops measure temperature, residual chlorine, turbidity, pH, and conductivity at intervals as short as every minute. The iSPA-T multi-parameter system and the iSPS-X sensor feed readings to the AQUAIOT Cloud over secure LoRaWAN or cellular telemetry. Threshold alerts fire automatically by email, SMS, or app notification when a reading drifts outside the scheme-of-control limits.

The operational gain is direct. A cold-water tank that warms past 20 C at 02:00 on a Saturday triggers an alert within minutes, not at the next scheduled manual check on Monday. The responsible person acknowledges the alert, logs the corrective action, and the entire sequence is timestamped in the audit trail. For larger estates, the AQUAIOT Legionella monitoring service covers multi-site deployments with role-based dashboards, escalation rules, and exportable compliance reports.

The full AQUAIOT water quality and Legionella monitoring capability stack

AQUAIOT covers the full monitoring layer a water safety plan demands, from the sensor at the pipe to the compliance report on the desk.

Continuous water quality sensing

The iSPA-T multi-parameter water quality online monitoring system measures temperature, pH, turbidity, dissolved oxygen, conductivity, and residual chlorine in a single unit. The iSPS-X multi-parameter sensor adds flexibility for tighter installations. Both stream live data to the AQUAIOT Cloud.

Chlorine monitoring

The SPA-Chlorine analyser tracks free and total chlorine continuously, critical for systems that rely on chemical disinfection as a Legionella control measure. Read the full continuous chlorine monitoring guide.

Leak and moisture detection

Water damage from leaking tanks or failed pipework is a secondary risk in any water system. The NOAH Multifunction Leak Sensor uses a Leak Sensing Membrane that triggers the moment water makes contact, with LoRaWAN radio delivering alerts to the AQUAIOT Cloud across large estates. Battery life reaches up to 10 years.

Flow verification

Stagnation is a core Legionella risk factor. The Clamp-on Ultrasonic Flow Meter (DN8 to DN100) sits on the outside of live pipework with no cutting or shutdown. Night-flow profiling confirms whether outlets are being flushed as the scheme requires. See the non-invasive flow monitoring guide.

AQUAIOT Cloud: dashboards, alerts, and audit

Every sensor feeds the AQUAIOT Cloud. Role-based dashboards give the water safety group live visibility. Threshold alerts route to the right person by email, SMS, or voice. Exportable audit logs, trend charts, and compliance reports give the duty holder five-year-ready evidence without a single paper logbook.

Frequently asked questions

Is a water safety plan a legal requirement in the UK?

A water safety plan is not named in statute, but ACoP L8 requires every duty holder to assess Legionella risk, implement a written scheme of control, and keep records. BS 8680:2020 formalises the water safety plan as the accepted method. In practice, not having one leaves the duty holder exposed during an HSE investigation.

What is the difference between ACoP L8 and HSG274?

ACoP L8 sets out the legal duties for controlling Legionella. HSG274 is the technical guidance that explains how to meet those duties in practice. Part 1 covers cooling towers, Part 2 covers hot and cold water systems, and Part 3 covers other risk systems such as spa pools. Most duty holders need Part 2.

How often should a water safety plan be reviewed?

Review the full water safety plan at least every two years. Review sooner after any system alteration, change in building use, change in occupancy, or after an incident. The water safety group should meet regularly, at least quarterly, to review monitoring data and flag issues before they escalate.

Can IoT sensors replace manual Legionella checks entirely?

IoT sensors replace manual temperature and water quality spot checks with continuous, timestamped data. Physical tasks such as showerhead disinfection, dead-leg removal, and visual inspections still require a person on site. The combination of continuous telemetry and targeted manual intervention is the strongest water safety plan model.

Last updated: 12 June 2026

By Gianbattista Porru, Digital and IoT lead at AQUAIOT

 

Related: see how AQUAIOT delivers automated Legionella monitoring with continuous temperature logging, threshold alerts to HSE guidance and audit-ready records across tanks, calorifiers and sentinel outlets.