Some buildings keep failing their Legionella checks no matter how diligent the maintenance is. The flushing happens, the temperatures get logged, the contractor turns up on schedule — and the same outlet still throws a positive every quarter. When that pattern shows up, the fault usually sits upstream of maintenance. It is built into the pipework.
You cannot flush, monitor or sample your way out of a dead leg. If the system guarantees a pocket of warm, still water, no amount of routine task-ticking removes it; the tasks just keep the problem at a simmer. The useful skill is learning to read a stubborn symptom back to the design decision that caused it.
When the symptom points at design, not maintenance
Most control work assumes the system is sound and the job is to run it well: keep hot water hot, cold water cold, water moving. That holds for the large majority of buildings. A minority carry a flaw baked in — sometimes at the drawing board, more often accreted over years of extensions, part-decommissions and “temporary” alterations that quietly became permanent.
The tell is repetition. A single high count after a quiet bank holiday is a use problem you fix by flushing. The same tap failing again and again, or a cold outlet that never drops into a safe range however long you run it off, is the system telling you something structural. If a remedial keeps reopening on the same fitting, start with the close-out discipline in on why positive results keep returning, then look harder at the pipe behind the tap.
Reading a symptom back to the design
Start with the symptom you can actually measure — a temperature, a sample, a complaint — and trace backwards. The grid below maps the common symptoms to the design fault that usually sits behind them, the check that confirms it, and the fix that actually holds rather than the one that suppresses it for a few weeks.
| Symptom you can measure | Probable design fault | The check that confirms it | What actually fixes it |
|---|---|---|---|
| Cold water still warm at the tap after a proper run-off | Cold pipe routed through a heated riser or plant room, run alongside hot or heating pipes; oversized storage with slow turnover | Compare the temperature at the tank with the outlet; trace the route; check stored volume against daily demand | Re-route or insulate the run, separate it from heat sources, or cut storage volume to lift turnover |
| Hot water never quite reaches temperature at a far outlet | No recirculation, an unbalanced return, or a long single-pipe leg out to the fitting | Time how long it takes to reach temperature; look for a return leg; read flow and return temperatures | Balance or extend the recirculation, shorten the run, or fit local point-of-use heating |
| One outlet keeps sampling positive despite flushing | A dead leg or blind end upstream — a capped spur from a removed appliance, or a stagnant component | Trace the pipework for capped branches; check for non-flow-through fittings | Cut the dead leg back to the live main; swap dead components for flow-through types |
| General counts creeping up across the whole system | Oversized cold water storage, a warm storage location, low overall turnover | Check stored volume against demand and the storage temperature; review the system’s age and extension history | Right-size or split storage, relocate or insulate the tank, design out redundant capacity |
| A cluster of low-use outlets that always fail | Too many outlets designed in — redundant showers, basins in rooms nobody uses | Map which outlets are genuinely in regular use | Decommission and physically remove redundant outlets at the branch, not just cap them |
One thread runs through every row of that grid: capping an outlet is not the same as removing a dead leg. A capped spur is a dead leg with a lid on it. HSE technical guidance is clear that pipework should be kept as short as practical and lengths where water can stagnate should be designed out rather than tolerated [2].
The design flaws that cause the most trouble
A handful of structural faults turn up again and again across UK building stock. Recognising them by name makes the diagnostic far quicker.
Dead legs and blind ends. A length of pipe with little or no through-flow. The classic origin is an appliance removed and the pipe left behind — a decommissioned dishwasher, a sealed-off shower, a “future-proofing” spur that never got used. Water sits there, warms to room temperature, and feeds the live system every time pressure shifts.
Oversized everything. Storage tanks sized for a demand that never arrived, or for a firefighting reserve that sits untouched; pipe diameters wider than the flow needs. Big and slow means warm and still. Right-sizing is the cure, but it is genuine capital work, not a maintenance tweak.
Long runs with no working recirculation. Hot water that leaves the calorifier at temperature and arrives tepid because the run is long and the return is missing or unbalanced. HSE guidance expects hot water to reach the outlet hot — commonly cited as around 50°C within roughly a minute — and cold water to stay below about 20°C [3]. Where a run physically cannot deliver that, the design is the limiter, not the schedule.
Hot and cold sharing space. Cold pipes boxed in next to the calorifier, run through a warm riser, or laid against heating flow. The cold side gains heat and drifts up into the proliferation band, broadly the 20–45°C range in which Legionella multiplies most readily [1]. Separation and insulation are design fixes, not flushing problems.
Components that trap water. Non-flow-through expansion vessels, redundant strainers, dead branches on a ring main, and mixing valves that rarely see use. Each is a small reservoir feeding the wider system. Flow-through alternatives exist for most of them.
Blending too far upstream. Where a thermostatic mixing valve sits well back from the tap, it leaves a warm dead leg of pre-mixed water parked in the growth range between valve and outlet. Keeping the blend close to the point of use is a design decision that pays off every day after.
When it’s a quick fix, and when to escalate
Some of these you can resolve with a spanner and a sign-off: cut a short dead leg, insulate an exposed cold run, move a single fitting. Others — re-sizing storage, adding a recirculation loop, re-routing a riser — are capital projects that need competent design input and materials that meet the Water Supply (Water Fittings) Regulations.
The judgement call is an honest cost comparison. If a task is being repeated indefinitely purely to suppress a symptom, price the permanent fix against several years of that recurring effort and the standing exposure it never closes. More often than not the redesign wins, and on the cost of an outbreak puts the downside of leaving it alone in perspective. Stagnation, the mechanism behind most of these faults, is covered in Neglected water systems: the danger of stagnation.
Escalate to a design review when you see any of three things: recurring positives at the same point after correct flushing; an inability to hit target temperatures however the system is run; or a remedial action that keeps reopening. Those are design problems wearing a maintenance costume.
Before you reach for the pipe cutter
Spotting a design flaw is not the same as having the authority — or the competence — to re-plumb a building. A material alteration to a water system can require a competent designer, must meet the relevant water fittings regulations and use approved materials, and should be driven through your risk assessment and written scheme rather than improvised on a hunch. The temperatures and ranges mentioned here are general guidance; the figures that actually apply to your building come from your own assessment and a competent person. Take everything above as a prompt to look, measure and ask a sharper question — not as an instruction to start cutting copper this afternoon.
FAQ
Can good maintenance make up for a badly designed water system?
Only up to a point, and only by paying for it forever. Flushing a dead leg every week or chasing a tepid outlet with extra monitoring suppresses the symptom without removing the reservoir, so the cost and the residual risk never go away. Durable control comes from designing the flaw out, after which the routine tasks have a sound system to protect.
Is a dead leg the same thing as a long pipe run?
No, and the distinction changes the fix. A long run still gets full flow whenever its outlet is used, so the cure is better temperature delivery — recirculation, insulation, a shorter route. A dead leg has little or no flow regardless of how the building is used, which is why a capped spur counts as one. You manage a long run; you remove a dead leg.
Whose job is it to fix a design flaw — the contractor or the duty holder?
The decision and the accountability sit with the duty holder. A contractor or competent designer can survey the system, advise on the fault and do the work, but commissioning the fix, funding it and recording why it was done remain duties you cannot outsource [4].
Sources
[1] HSE, “Legionnaires’ disease. The control of legionella bacteria in water systems - Approved Code of Practice and guidance (L8)”. https://www.hse.gov.uk/pubns/books/l8.htm [2] HSE, “Legionnaires’ disease: Technical guidance (HSG274)”. https://www.hse.gov.uk/pubns/books/hsg274.htm [3] HSE, “Hot and cold water systems”. https://www.hse.gov.uk/legionnaires/hot-and-cold.htm [4] HSE, “Legionnaires’ disease - what you must do”. https://www.hse.gov.uk/legionnaires/what-you-must-do/index.htm