---
title: "Corporate manslaughter and Legionella: when an outbreak becomes a case against the organisation"
source_url: https://legionella.io/articles/corporate-manslaughter-legionella/
canonical_url: https://legionella.io/articles/corporate-manslaughter-legionella/
pillar: "Common Failures & Enforcement"
summary: "A Legionella death can put the organisation itself in the dock. Learn the corporate-manslaughter threshold and how it differs from an HSE prosecution."
primary_keyword: "corporate manslaughter Legionella"
date_published: 2026-05-26
date_reviewed: 2026-06-26
author: "Legionella.io editorial team (REMOTE TECH LTD)"
reviewed_against: "HSE L8 and HSG274 guidance"
region: "United Kingdom"
license: "(c) REMOTE TECH LTD. Quote freely with attribution and a link to source_url."
---

# Corporate manslaughter and Legionella: when an outbreak becomes a case against the organisation

Yes, a Legionnaires' disease death can put the organisation itself in the dock for corporate manslaughter — but the bar is high and precise. Prosecutors must prove a gross breach of a duty of care, arising substantially from the way senior management ran things, that caused the death. Miss any one of those and the case is not corporate manslaughter; it is something else.

That distinction matters, because Legionella fatalities in the UK have generally been prosecuted under health and safety law rather than as corporate manslaughter. Knowing which route a death is likely to take — and why — tells a board exactly where its exposure sits.

## What the corporate manslaughter offence actually targets

The offence comes from the Corporate Manslaughter and Corporate Homicide Act 2007. In England, Wales and Northern Ireland it is "corporate manslaughter"; in Scotland the same offence is called "corporate homicide". Either way the defendant is the organisation — a company, an NHS trust, a partnership, a local authority — not a named individual.

Four elements have to line up:

1. The organisation owed the deceased a relevant duty of care (an employer's or an occupier's duty, for example).
2. The way its activities were managed or organised caused the death.
3. That management amounted to a gross breach — conduct falling far below what could reasonably be expected.
4. A substantial element of that breach lay in the way senior management organised or managed the activity.

The senior-management element is the part people underestimate. A single caretaker who skips a flush is not, on its own, corporate manslaughter. The Act reaches into how the organisation was run at a senior level — budgets withheld, a competent person removed and never replaced, risk-assessment findings left unactioned in a director's inbox. On conviction the court can impose an unlimited fine and, distinctively, a publicity order forcing the organisation to publicise the conviction, plus a remedial order requiring the failure to be put right.

## Four ways a Legionella death can reach a courtroom

A fatality rarely sits in one neat legal box. The same facts can support more than one charge against more than one defendant. Here is how the main routes differ.

| Route | Who is in the dock | What must be proved | Maximum outcome on conviction |
|---|---|---|---|
| HSWA 1974, s.2/s.3 | The organisation | It failed to ensure health and safety so far as reasonably practicable — no death needs to be shown | Unlimited fine |
| Corporate manslaughter / corporate homicide (2007 Act) | The organisation | A gross breach causing death, arising substantially from senior-management failure | Unlimited fine, publicity order, remedial order |
| HSWA 1974, s.37 | A director, manager or officer | The organisation's offence happened with their consent, connivance or neglect | Unlimited fine; possible imprisonment |
| Gross negligence manslaughter | An individual | That person owed a duty, grossly breached it, and the breach caused the death | Up to life imprisonment |

Set HSWA against corporate manslaughter and the design of the law becomes clear. A HSWA prosecution puts the organisation on the hook without anyone having to die — the breach is the failure to manage risk. Corporate manslaughter raises the stakes by requiring a death and a *gross* failure rooted in senior management. Both are organisation-level prosecutions aimed at the body itself. The two individual routes — section 37 and gross negligence manslaughter — run in parallel and can be charged alongside the organisational ones. We cover the personal side in [Personal liability: can individuals be prosecuted for Legionella failures?](https://legionella.io/articles/personal-liability-can-individuals-be-prosecuted-for-legionella-failures/).

## Why the corporate-manslaughter route is harder than it looks

Two hurdles make corporate manslaughter a difficult charge for a Legionella death specifically.

The first is causation. Source attribution is genuinely hard. A susceptible person can be exposed at home, in hospital, from a cooling tower streets away, or from your building — and proving to the criminal standard that your system caused this particular death is a steep climb. UKHSA's outbreak investigations use water sampling and genomic matching to link clinical cases to a source, but a clean match is not always achievable [3].

The second is the senior-management test. Showing that a substantial element of a gross breach sat with senior management — not just a maintenance lapse on the ground — needs evidence of how the organisation was actually run. That is why such fatalities have more often been pursued under the Health and Safety at Work etc. Act, where the duty is to manage and control the risk so far as is reasonably practicable [1], than as corporate manslaughter.

None of that makes the organisational route theoretical. It changes what prosecutors look for. They look upward.

## What a senior-management failure looks like (illustrative)

The following is a composite, not a real case. Picture a care provider whose Legionella risk assessment flags a redundant, dead-legged run of pipework feeding little-used shower rooms and recommends its removal. The recommendation is logged. A budget request is declined twice at board level on cost grounds. The water-hygiene contract is then downgraded to save money, and the competent person who had been chasing these actions leaves and is not replaced. Months later a resident dies of Legionnaires' disease and sampling implicates that pipework.

The failure here is not one missed task — it is a pattern of senior decisions that left a known risk in place. That is the territory the 2007 Act was written for. The lesson generalises: documented risk that an organisation knowingly chose not to resource is the most dangerous evidence a board can create. [Serious incident review: learning from fatal Legionnaires disease cases](https://legionella.io/articles/serious-incident-review-learning-from-fatal-legionnaires-disease-cases/) walks through how investigators reconstruct exactly this kind of decision trail.

## What actually reduces an organisation's exposure

The answer to a gross-breach allegation is a genuinely managed system, evidenced. In practice that means:

- A current, competent Legionella risk assessment, with its recommendations tracked to completion — not filed and forgotten.
- A named duty holder and competent person, each with the authority and budget to act.
- Board-level visibility of water-safety risk, minuted, so decisions are owned rather than left to drift.
- Monitoring records that show the written scheme of control is being followed, to the standard ACoP L8 sets out [2].
- RIDDOR-reportable cases escalated promptly rather than buried [4].

That paper trail does two jobs: it controls the real-world risk, and if the worst happens it demonstrates the breach was neither gross nor a senior-management failure. The same records that keep people safe are the ones that keep an organisation out of the worst charge. You can see how an enforcement file is built in [Case study: a Legionella compliance prosecution in the UK](https://legionella.io/articles/case-study-a-legionella-compliance-prosecution-in-the-uk/) and [Legal case: a company fined for Legionella failures](https://legionella.io/articles/legal-case-a-company-fined-for-legionella-failures/).

This is general guidance, not legal advice. Which offence — if any — a given set of facts supports is a matter for prosecutors and the courts, applied to your specific circumstances. Treat your own position as something to work through with your risk assessor and, where a serious incident is in play, a solicitor.

## FAQ

### Has any organisation been convicted of corporate manslaughter for Legionnaires' disease?
We are not aware of a UK conviction for corporate manslaughter arising specifically from a Legionella death; such fatalities have generally been prosecuted under health and safety law. Treat any "what if" scenario as illustrative, and confirm the current position before relying on it.

### Can a director personally go to prison over a Legionella death?
Not for corporate manslaughter — that offence convicts the organisation, not individuals. But a director can face gross negligence manslaughter, or a HSWA section 37 charge if the organisation's offence involved their consent, connivance or neglect, and those routes carry the possibility of imprisonment.

### How is corporate manslaughter different from an HSE prosecution?
A HSWA prosecution punishes the failure to manage risk and needs no death to be proved. Corporate manslaughter requires a death, a gross breach, and a substantial senior-management failure. They are not alternatives — both can be charged on the same facts.

### Does this apply in Scotland?
Yes. The same 2007 Act applies, but the offence is called corporate homicide and runs through the Scottish prosecution system.

## Where to start

Pull your most recent Legionella risk assessment and find the open recommendations. The single most exposing thing an organisation can hold is a documented risk it chose not to resource. Get each outstanding action either closed or formally reassessed and owned at the right level this month — that is the gap an organisation-level investigation would look for first.

## Sources

[1] HSE, "Legionnaires' disease - what you must do". https://www.hse.gov.uk/legionnaires/what-you-must-do/index.htm
[2] HSE, "Legionnaires' disease. The control of legionella bacteria in water systems - Approved Code of Practice and guidance (L8)". https://www.hse.gov.uk/pubns/books/l8.htm
[3] UKHSA, "Investigation of Legionnaires' disease: cases, clusters and outbreaks". https://www.gov.uk/government/publications/investigation-of-legionnaires-disease-cases-clusters-and-outbreaks
[4] HSE, "RIDDOR - Reporting of Injuries, Diseases and Dangerous Occurrences Regulations". https://www.hse.gov.uk/riddor/