Yes. Nothing in UK health-and-safety law says your Legionella records have to live on paper. The Approved Code of Practice, L8, tells duty holders to keep records of the risk assessment, the written scheme, the monitoring carried out and the people responsible for it — and says nothing about what those records are printed on [1]. A tablet, a logbook app, a spreadsheet on a shared drive: all acceptable in principle.

The catch sits in that last phrase. “Legally acceptable” is not the same as “will hold up when an HSE inspector, a new responsible person, or an outbreak investigator starts pulling the file apart.” A digital record only earns its place if it does the job a well-kept paper logbook did: show who did what, when, what they found, and what happened next. Plenty of systems fail that test while looking perfectly tidy on screen.

So the real question is not paper versus digital. It is whether your evidence trail is complete, attributable and retrievable — by someone who wasn’t there when the work was done.

What the law actually asks of a record

Strip it back and the duty is narrow. L8 expects you to keep records of the precautions taken, the monitoring done, and the management arrangements that hold it together [1]. HSE is equally clear that accountability stays with the duty holder: you have to be able to demonstrate that control is happening, not merely assert it [2].

The format is left to you. The burden is not. The working test for any system — digital or otherwise — is this: could a competent stranger reconstruct exactly what was done to your water system, and why, from the records alone? If the honest answer is “not without ringing the chap who left in March,” the records aren’t doing their job, whatever they run on.

What makes a digital record stand up

Run your system against the checks below before you trust it. Group them the way an auditor would.

Attribution and integrity

  • Tie every entry to a named individual, not a shared “site iPad” login.
  • Capture a timestamp the user cannot silently back-date, and flag any entry made or amended late.
  • Keep an audit trail of edits: the original value, who changed it, when, and why.
  • Make deletion impossible without a trace — a record that can quietly vanish is not evidence.

Completeness of the evidence

  • Record the reading, the acceptable range, and whether it passed — not just a tick.
  • Capture the response to every out-of-range result: the action taken, who owns it, and how it was closed out.
  • Attach the supporting proof where it matters — photos, sample certificates, contractor reports.
  • Link each task to the specific asset and to the clause of the written scheme it satisfies.

Retention and retrievability

  • Confirm you can export the full history, not just a dashboard summary.
  • Keep records for the full period L8 expects — plan retention in years, and verify the exact figure against L8 itself [1].
  • Make sure the data outlives the contract: if you change software supplier, the history comes with you.
  • Hold an independent backup, so a lost device or a vendor going under doesn’t erase your proof of control.

Clear all three groups and the legality of digital records stops being a worry and becomes a strength — because most of these are easier to do well in software than on a clipboard.

Putting the checklist to work

Don’t audit the system in the abstract. Pick one outlet and one month, and try to tell its whole story from the app alone: every temperature check, every flush, the one reading that came in low, and what was done about it. The gaps you hit are your real risk, and they are far cheaper to find now than during an investigation.

Then record the decision, not just the task. “This outlet is flushed weekly because use is intermittent; a missed flush escalates to the responsible person; three misses trigger a review of the use pattern.” That one habit turns a list of completed jobs into a defensible account of managed control — which is what an inspector is actually reading for.

The bits people skip

A handful of failures show up again and again:

  • Shared logins. When every entry reads “Maintenance,” you have lost attribution, and with it most of the value of the record.
  • Trusting the green dashboard. A summary that averages a month of readings hides the single missed flush on the low-use shower — and that outlet is exactly where risk concentrates.
  • No exit plan. Teams pick a platform without ever asking how they would get five years of data back out of it. Vendor lock-in is a compliance risk, not just a commercial one.
  • Binning the paper too early. If you scan historic logs, check the scans are complete and legible before the originals reach the shredder. Migration is the moment records go missing.

Several of these are the same reasons a switch from paper goes wrong, so it is worth reading Paper vs digital logbooks before you commit. For the long-tail retention question, Archiving Legionella records covers keeping records reachable years after the work was done.

A word of caution

This is general guidance on record-keeping, not a legal ruling on any particular app or platform. Whether your specific records satisfy a regulator depends on your own risk assessment, your retention obligations, and how the system is used day to day on your site. If a digital logbook sits at the centre of your compliance, have its audit-trail behaviour and its export tested by someone competent before you rely on it — and before the paper goes anywhere.

FAQ

Will an HSE inspector accept records kept only in an app?

In principle, yes — there is no requirement for paper. What an inspector wants is to see control demonstrated: a complete, attributable, contemporaneous account they can follow without your help [2]. If the app produces that on demand, the format is not the sticking point.

Do we still need to keep the old paper logbook after going digital?

No law forces you to retain paper once a complete digital trail exists. The sensible order is to keep the originals until you have confirmed the digital system captures everything the paper did, the historic data has migrated cleanly, and you can export it. Verify first, then recycle.

What happens to our records if we stop using the software?

Your duty to retain them does not end when the contract does. Before you sign up — and certainly before you leave — make sure you can take the full history with you in a usable, readable format. Records you cannot retrieve are records you do not really have.

Sources

[1] HSE, “Legionnaires’ disease. The control of legionella bacteria in water systems — Approved Code of Practice and guidance (L8)”. https://www.hse.gov.uk/pubns/books/l8.htm [2] HSE, “Legionnaires’ disease — what you must do”. https://www.hse.gov.uk/legionnaires/what-you-must-do/index.htm