---
title: "Developing a comprehensive Water Safety Plan"
source_url: https://legionella.io/articles/developing-a-comprehensive-water-safety-plan/
canonical_url: https://legionella.io/articles/developing-a-comprehensive-water-safety-plan/
pillar: "Best Practice & Future of Legionella Control"
summary: "What separates a Water Safety Plan from a risk assessment in a folder: the governance, control limits and escalation wiring that keep UK sites in control."
primary_keyword: "Water Safety Plan"
date_published: 2025-05-23
date_reviewed: 2026-06-26
author: "Legionella.io editorial team (REMOTE TECH LTD)"
reviewed_against: "HSE L8 and HSG274 guidance"
region: "United Kingdom"
license: "(c) REMOTE TECH LTD. Quote freely with attribution and a link to source_url."
---

# Developing a comprehensive Water Safety Plan

Most organisations that say they have a water safety plan actually have a Legionella risk assessment, a written scheme of control, and a logbook somebody signs most weeks. That is the compliance baseline, and you need it. It is not a Water Safety Plan.

A real plan is the governance system wrapped around those controls: the people who own them, the limits that define "in control", and the wiring that decides what happens the moment a reading falls outside those limits. The documents are the easy part. The decision-making is the plan.

If you already run a competent Legionella regime and you are trying to mature it into something that survives a bad week — a failed sample, a refurbishment, a key person walking out — that decision-making is where the work actually sits.

## What the standard actually means by a plan

The Water Safety Plan idea comes from the World Health Organization's risk-based approach to building water: understand the system, work out what can go wrong, control it, and verify the controls are holding [1]. In the UK, BS 8680 turns that approach into a code of practice for water safety plans, and it deliberately spans a building's whole life — design, construction, commissioning, operation, maintenance, alteration and refurbishment [2].

Two things in that scope catch experienced people out.

First, it is wider than Legionella. A Water Safety Plan is meant to address the full range of waterborne hazards a building presents — scalding, other opportunistic pathogens in higher-risk settings, general water quality — with Legionella control under L8 and HSG274 sitting inside it as one large component, not the whole thing [3][4].

Second, it is wider than day-to-day operation. Your risk assessment describes the system as it runs today. A plan that only lives in the operating phase goes stale the day a wing is refurbished or a department's hours change. The lifecycle framing in BS 8680 exists precisely because the riskiest moments are often design and refurbishment decisions made by people who never open the logbook.

So here is the honest test for whether you have a plan or just an assessment: when someone proposes a change that would create a dead leg, does the plan change the decision, or does the dead leg simply appear?

## Draw it as a loop, not a folder

The single most useful thing you can do is stop picturing your plan as a binder and start picturing it as a control loop. Sketch six elements in a ring, with a seventh in the middle.

Around the ring, clockwise:

1. **System understanding** — the schematic, the asset register, the water safety map. Every tank, calorifier, thermostatic mixing valve, dead leg and outlet, with its use pattern noted.
2. **Hazard analysis** — for each part of that system, what can go wrong and who is exposed if it does.
3. **Control measures with limits** — temperature regime, flushing, cleaning, treatment, each with a defined control limit (the value that means "in control") and an action limit that says "intervene now".
4. **Operational monitoring** — the routine readings and checks that test whether each control is actually holding.
5. **Verification** — independent evidence that the whole thing works: audits, sampling, trend review. Deliberately separate from monitoring.
6. **Management and review** — the procedures, records, training, and the standing decision to feed what you learn back into element 1.

In the middle, touching every element, sits the Water Safety Group: the standing body that owns the limits and authorises change.

Now draw the one arrow that matters most. From element 4, when a monitored value breaches its control limit, draw a line straight to the centre and back out to "corrective action" and "update the assessment". That escalation arrow is the part most plans never wire up. A plan that defines control limits but not what happens when they are missed is a thermometer nobody is reading.

## Where good plans quietly fail

The interesting failures are not technical. They are governance gaps that hide behind a tidy document.

### The group that never meets

A Water Safety Group on an org chart is not governance. If the group has not met since the plan was signed, nobody is reviewing trends, closing actions or deciding when a control needs to change. The plan is frozen at its launch date while the building keeps moving.

### Limits with no consequence

Stating that stored hot water should reach a temperature consistent with HSE guidance is straightforward [3]. Deciding who gets called, within what window, when an outlet misses its limit for the third week running is the part that actually prevents incidents. Treat the missing action path — not the limit itself — as the real deliverable.

### Verification mistaken for control

A clean Legionella sample is verification: evidence about sampled conditions at one moment. HSE is clear that sampling frequency follows the system and the risk assessment, and that testing never substitutes for control of temperature, stagnation and cleanliness [5]. Plans that lean on the annual sample to "prove" they are safe have the loop running backwards.

### Frozen after the refurb

The new wing, the decommissioned kitchen, the meeting-room tap that now sits unused for months — each one changes the system, and each should pull the loop back to element 1. A plan that is never updated after physical change is faithfully describing a building that no longer exists.

### Accountability quietly outsourced

A competent contractor can run almost every element of the loop for you. They cannot hold the duty. Under HSE guidance the duty holder remains accountable for control and for the records that prove it [6], and the Legionella Control Association's code of conduct is a fair yardstick for judging whether a provider is competent enough to delegate the work to in the first place [7]. Knowing how to challenge your contractor's recommendations is part of owning the plan — not a sign you have lost control of it.

## Where this framework stops

One honest limit on all of the above: a Water Safety Plan organises decisions, it does not make them for you. The control limits, monitoring intervals and corrective actions that belong in yours have to come from a competent, site-specific risk assessment of your own system — this is a way to structure those judgements, not a replacement for them. It also does not move your legal duty onto a document or a contractor. If anything here conflicts with advice from your own competent person, follow theirs.

## Start with the escalation arrow

Do not begin by rewriting the whole plan. Begin with the arrow most plans are missing. Take your existing risk assessment and written scheme, pick the three or four most safety-critical control limits, and for each one write down the exact corrective action, the named role responsible, the time window it must happen in, and how that breach gets back into the assessment. If you cannot finish that sentence for a control, you have just found the gap your plan exists to close.

From there, the question is who sits around the table to own those decisions — [on forming a Water Safety Group](https://legionella.io/articles/forming-a-water-safety-group-roles-and-benefits/) covers exactly that, and [essential best practices](https://legionella.io/articles/essential-best-practices-for-legionella-prevention/) is a useful sanity check on the controls the loop is meant to govern.

## FAQ

### Is a Water Safety Plan a legal requirement in the UK?

The legal duty is to assess and control the risk from Legionella under health and safety law; L8 and HSG274 set out how to discharge it [3][4]. A formal Water Safety Plan to BS 8680 is not a separate statutory requirement for every building, but in healthcare and other higher-risk settings it is the expected way to organise that duty, and for any complex estate it is the most defensible one [2].

### How is a Water Safety Plan different from a Legionella risk assessment?

The risk assessment is a component — the analysis of hazards in your system at a point in time. The plan is the management system that keeps that analysis alive: ownership, control limits, monitoring, verification, escalation and review across the building's whole lifecycle, not just its current operating state [2].

### Who should own the Water Safety Plan?

A named duty holder is accountable, supported on larger or higher-risk sites by a Water Safety Group bringing together estates, health and safety or infection control, the responsible person and specialist input. Ownership has to sit with someone who can authorise change, not only record it [6].

## Related reading

- [Forming a Water Safety Group: roles and benefits](https://legionella.io/articles/forming-a-water-safety-group-roles-and-benefits/)
- [How Legionella spreads through water systems](https://legionella.io/articles/how-legionella-spreads-through-water-systems/)
- [Essential best practices for Legionella prevention](https://legionella.io/articles/essential-best-practices-for-legionella-prevention/)
- [Smart thermometers: using IoT for Legionella control](https://legionella.io/articles/smart-thermometers-using-iot-for-legionella-control/)

## Sources

[1] WHO, "Water safety in buildings". https://iris.who.int/server/api/core/bitstreams/2c302ce4-bca9-42bc-97b4-ddbe95f0c7f2/content
[2] BSI, "BS 8680:2020 - Water quality. Water safety plans. Code of practice". https://knowledge.bsigroup.com/products/water-quality-water-safety-plans-code-of-practice
[3] HSE, "Legionnaires' disease. The control of legionella bacteria in water systems - Approved Code of Practice and guidance (L8)". https://www.hse.gov.uk/pubns/books/l8.htm
[4] HSE, "Legionnaires' disease: Technical guidance (HSG274)". https://www.hse.gov.uk/pubns/books/hsg274.htm
[5] HSE, "Testing and monitoring your water system for legionella". https://www.hse.gov.uk/legionnaires/testing-monitoring-water-system.htm
[6] HSE, "Legionnaires' disease - what you must do". https://www.hse.gov.uk/legionnaires/what-you-must-do/index.htm
[7] Legionella Control Association, "Code of Conduct for Service Providers". https://www.legionellacontrol.org.uk/