---
title: "Duty Holder and Responsible Person roles in Legionella management"
source_url: https://legionella.io/articles/duty-holder-and-responsible-person-roles-in-legionella-management/
canonical_url: https://legionella.io/articles/duty-holder-and-responsible-person-roles-in-legionella-management/
pillar: "UK Legionella Law & Compliance"
summary: "Duty holder and responsible person are different Legionella jobs. See who is accountable, who runs the scheme, and what a contractor can never take on."
primary_keyword: "Legionella duty holder"
date_published: 2025-06-04
date_reviewed: 2026-06-26
author: "Legionella.io editorial team (REMOTE TECH LTD)"
reviewed_against: "HSE L8 and HSG274 guidance"
region: "United Kingdom"
license: "(c) REMOTE TECH LTD. Quote freely with attribution and a link to source_url."
---

# Duty Holder and Responsible Person roles in Legionella management

"Duty holder" and "responsible person" get used as if they are the same job. They are not, and the space between them is where a surprising amount of Legionella compliance quietly fails. One is a legal accountability that sits on an organisation. The other is a named individual that organisation appoints to run the control scheme week to week.

Confuse the two and you end up with a logbook full of completed tasks and nobody who can actually answer for them. Or, worse, a belief that signing a contractor has moved the duty off your desk. It hasn't.

## The three roles people muddle together

The **duty holder** is whoever the law puts in control. In most workplaces that is the employer; in shared or let buildings it can be the person or organisation in control of the premises. The duty holder is usually an organisation, not a single person, and the obligation is broad: identify and assess the risk, put proportionate controls in place, keep appropriate records, and review them [1]. It is a legal status, not a title you hand out.

The **responsible person** is the competent individual the duty holder appoints to take day-to-day charge of that control scheme. ACoP L8 treats this appointment as a core part of managing the risk: a manager, director or other person with enough authority and competence to make the scheme actually run [2]. This is a named human being whose name belongs in the logbook, not a department or a job family. Appointing a responsible person and then leaving the role on paper only is one of the commonest gaps an inspector finds.

The **competent contractor or consultant** is external help: the water-treatment company that monitors, samples, cleans and advises within an agreed scope. They can be highly skilled, and registration schemes such as the Legionella Control Association's exist precisely to signal that competence [4]. But a contractor is hired support. They never become the duty holder, however much work you pass across.

## How the roles line up side by side

The quickest way to see the difference is to put the three against the questions that decide who answers for what.

| Role | Who it usually is | What they are on the hook for | Can it be handed to someone else? |
| --- | --- | --- | --- |
| Duty holder | The employer, or the person/organisation in control of the premises | The legal duty: that risk is assessed, controlled, recorded and reviewed | The work can be; the accountability can't |
| Responsible person | A named, competent individual the duty holder appoints, often a facilities, estates or H&S manager | Day-to-day management of the written scheme: tasks happen, results are checked, exceptions are acted on | Specific tasks, yes; the appointment is personal and needs a named deputy for cover |
| Competent contractor / consultant | An external specialist, ideally a recognised service provider | Carrying out and advising on tasks within an agreed scope: monitoring, sampling, cleaning, assessment | They are hired help; they never inherit the duty |

Read the right-hand column twice. It is the whole point of the article in one place: tasks move, the legal duty does not.

## Mapping the roles onto your actual organisation

A small business on one site often collapses the first two roles sensibly. The company is the duty holder, and a named owner or office manager is the responsible person, supported by a visiting contractor. That is perfectly workable, as long as the responsible person genuinely understands the scheme and has the authority to stop or change things.

A multi-site estate is where clarity earns its money. The organisation stays the single duty holder, but you usually need a responsible person per site or cluster, each with a named deputy for holidays and sickness. The classic failure is a control scheme that runs beautifully until the one person who understood it leaves, and no cover was ever appointed.

Let or managed buildings add a twist. When a managing agent runs the water systems on a landlord's behalf, the duties can be split by contract, but they have to be split explicitly and in writing, with no gap where each side assumes the other is covering monitoring. HSE's technical guidance is built around exactly this idea of a documented chain from assessment through control to review [3], so the moment the chain has an unowned link, the arrangement is not compliant in spirit even if every individual task is being done.

## The line that never transfers

Keep this at the front of your mind: tasks delegate, accountability doesn't. You can outsource flushing, temperature checks, sampling, and even the risk assessment itself. You cannot outsource being the duty holder. If something goes wrong, "the contractor handled it" is not a defence. The question will be whether you appointed competent people, gave them a clear scope, and checked the work was genuinely done.

This is general guidance, not a ruling on your particular setup. How the roles map depends on your organisation's structure, your tenancy or management arrangements, and a competent, site-specific risk assessment, which is the document that should name who holds each role and what each one is accountable for. If your current assessment names no responsible person, that is the first gap to close, ahead of any debate about monitoring frequencies.

## Where to start this week

Write down three names. Who is the duty holder, usually the organisation itself? Who is the appointed responsible person, and is that appointment recorded along with their authority and competence? Who covers them when they are away? If any answer is vague, fix that before you touch sampling schedules or temperature regimes. The tidiest logbook means little if no one is truly answerable for it.

For the assessment that should sit behind these roles, see [How to carry out a Legionella risk assessment step by step](https://legionella.io/articles/how-to-carry-out-a-legionella-risk-assessment-step-by-step/). For the technical guidance the responsible person works to day to day, [HSG274 guidance explained](https://legionella.io/articles/hsg274-guidance-explained-practical-legionella-control/) breaks it down in practical terms.

## FAQ

### Can we appoint our Legionella contractor as the duty holder?
No. The duty holder is decided by who controls the premises or employs the people at risk, not by who signs a service contract. You can pay a contractor to do the work and advise you, but the legal duty stays with your organisation [1].

### Does the responsible person have to be one of our own employees?
Usually they are appointed from within, because they need authority over the building and its budgets, but the essential tests are competence and a clear, recorded appointment rather than payroll status. Whoever it is, write the appointment down and name a deputy so cover never lapses [2].

### Who is responsible when a managing agent runs the building?
It depends on what the contract says. Duties can be shared between a landlord and an agent, but only where the split is spelled out in writing with no overlap left to chance. Where the boundary is unclear, treat the gap as yours until you can prove otherwise.

## Related reading

- [How to carry out a Legionella risk assessment step by step](https://legionella.io/articles/how-to-carry-out-a-legionella-risk-assessment-step-by-step/)
- [HSG274 guidance explained: practical Legionella control](https://legionella.io/articles/hsg274-guidance-explained-practical-legionella-control/)
- [Legal requirement for Legionella risk assessments in the UK](https://legionella.io/articles/legal-requirement-for-legionella-risk-assessments-in-the-uk/)
- [Legionnaires disease and Pontiac fever: key differences](https://legionella.io/articles/legionnaires-disease-and-pontiac-fever-key-differences/)

## Sources

[1] HSE, "Legionnaires' disease - what you must do". https://www.hse.gov.uk/legionnaires/what-you-must-do/index.htm
[2] HSE, "Legionnaires' disease. The control of legionella bacteria in water systems - Approved Code of Practice and guidance (L8)". https://www.hse.gov.uk/pubns/books/l8.htm
[3] HSE, "Legionnaires' disease: Technical guidance (HSG274)". https://www.hse.gov.uk/pubns/books/hsg274.htm
[4] Legionella Control Association, "Code of Conduct for Service Providers". https://www.legionellacontrol.org.uk/