A visit from the Health and Safety Executive almost never arrives out of nowhere. By the time an inspector is in your plant room asking to see the logbook, something in your water-safety regime has usually slipped already — and slipped weeks or months before they showed up. The visit is the symptom. The control gap is the disease.
So the most useful thing a responsible person can do with an enforcement encounter is treat it as a fault-finding exercise. Every line an inspector writes down points backwards to a decision that never got made, a record that never got kept, or a task that quietly stopped happening. Find that, fix it at source, and the same problem cannot rebuild the moment they leave.
What actually brings them to your door
HSE involvement in Legionella tends to start one of a few ways: a confirmed or suspected case of Legionnaires’ disease linked to your premises, a complaint from a worker or member of the public, a referral after a local outbreak investigation, a report you made yourself, or a planned inspection of a site type. Cooling towers and evaporative condensers carry their own notification duty, and certain cases of disease are reportable under RIDDOR [1].
Whatever the trigger, the inspector’s first move is documentary. Expect them to ask for your current risk assessment, your written scheme of control, and the records that show the scheme is actually being followed — temperature readings, flushing logs, cleaning and disinfection records, sampling reports, and the status of any outstanding remedial actions [2].
What happens next sits on a ladder. At the bottom is informal advice or a letter setting out what to put right. Above that sit formal enforcement notices: an improvement notice gives you a deadline to fix a specific breach while you keep operating, and a prohibition notice can stop a dangerous activity straight away. At the top sits prosecution. The rung you land on reflects how serious the risk is and how far short your arrangements fall of what is reasonably practicable. The mechanics of the notices themselves are worth reading separately — see HSE improvement notices explained.
One detail is worth holding onto. The Approved Code of Practice, L8, has a special legal standing: follow it and you are doing enough to comply, and depart from it and you must be able to show, if a case ever reaches court, that you achieved the same level of control another way [3]. That is why an inspector measures your arrangements against L8 and HSG274 rather than against whatever felt reasonable at the time [3][4].
Read the finding, not the fear
It is tempting to read an enforcement notice as a verdict on you personally. It is more useful to read it as a sheet of test results. Each entry marks a place where the system failed to prove control — and behind almost every one of those entries is a predictable, fixable cause. Most Legionella failures are not mysterious; they cluster around the same handful of gaps, which is exactly why they are worth pre-empting (the recurring ones are catalogued in common control mistakes).
Tracing a finding back to its root cause
Work each finding the way you would a fault on any other system. Start with the symptom the inspector recorded, name the most likely cause, run the check that confirms it, then act on the cause rather than the symptom. The table below maps the findings that come up most often.
| What the inspector flags | Most likely root cause | The check that confirms it | The fix that holds |
|---|---|---|---|
| No risk assessment, or one that predates major changes to the building | Nobody owns the trigger that forces a review | Compare the assessment date against changes to plant, occupancy or use | Commission a competent reassessment and write down the events that must trigger the next one |
| Records cannot be produced, or the logbook has gaps | Monitoring is happening but not recorded — or it quietly stopped | Spot-check the last two months of temperatures and flushing against who was rostered to do them | Assign a named owner, set a recording routine, and consider a digital log so gaps surface immediately |
| Outlet temperatures out of range | Treated as a boiler fault when it is usually circulation, a dead leg or a mis-set blending valve | Take readings at the sentinel and the furthest outlets; check return temperatures and the TMV | Rebalance the circuit, remove the dead leg, correct the blend — not simply turn the boiler up |
| Remedial actions still open from the previous assessment | No process closes actions out once they are raised | Pull the action log and check the owner, deadline and status on each item | Give every action an owner and a date, and escalate the overdue ones to management |
| A contractor does the work but nobody checks it | Accountability was outsourced along with the task | Ask who reads the contractor’s reports and acts on the exceptions in them | Bring oversight back in-house and confirm the provider’s competence, for example LCA registration [5] |
If the same weakness shows up across more than one finding — missing records, plus open actions, plus an out-of-date assessment — stop treating them as separate defects. That pattern is a single management failure: nobody is reviewing the evidence. Fixing three symptoms one at a time achieves little if the thing that lets them recur is left in place. The fault is the review loop, not the readings.
When to escalate, and to whom
Some situations need more than an internal fix.
If your assessment is out of date or you cannot defend its conclusions, bring in a competent provider rather than patching it yourself. An LCA-registered service provider is a reasonable benchmark for that competence [5].
If you receive a formal notice, take advice before you respond. Notices carry deadlines and, in general, a route of appeal, and the wording of your reply matters more than the speed of it.
If a case of disease may be linked to your building, your reporting duties under RIDDOR sit separately from anything the inspector asks for on the day, and a live outbreak investigation can involve UKHSA alongside HSE [1][6]. Resist the urge to “tidy up” while that investigation is open: disinfecting a suspect system or clearing out records before samples are taken can destroy the very evidence that would later show what actually happened.
And do not lean on a clean sample as a defence. HSE is explicit that testing supports verification or investigation; it does not replace control of temperature, stagnation and cleanliness, and an inspector knows the difference [7]. A negative result describes one outlet on one day, not a system under control.
What this guide can and cannot do for you
Enforcement outcomes turn on the specifics of your premises, your records and the inspector’s judgement — none of which a general guide can second-guess. Treat the table above as a way to think about diagnosing and closing gaps, not as legal advice on a notice you have actually received. Where a formal notice or prosecution is in play, get a competent water-safety provider and a solicitor involved early; the cost of advice is small against the cost of answering the wrong way.
The single most useful move you can make this week is to run that finding-to-cause logic on yourself before anyone else does. Pick the five rows above, test your own site against each, and close the gaps you find. An enforcement visit you have already pre-empted is one you are far less likely to receive.
FAQ
Does the HSE give notice before an inspection?
Not always. Some visits are planned and arranged in advance; others follow a complaint, a reported case or an outbreak and can arrive unannounced. Inspectors have the right to enter premises to check compliance, so the practical safeguard is to keep your assessment and records in a state you would be comfortable showing at short notice.
If our water tests come back clear, can we still face enforcement?
Yes. Enforcement turns on whether you are managing foreseeable risk, not on whether one sample was negative on one day. An inspector can act on a missing risk assessment, gaps in your records, or uncontrolled temperatures even when recent sampling looks clean, because none of those things prove the system is under control [7].
What is the difference between an improvement notice and a prohibition notice?
An improvement notice sets a deadline to put a specific breach right while you carry on operating. A prohibition notice is more serious: it stops a particular activity because the risk is judged immediate or serious, and it takes effect straight away. a companion guide covers how each one works and how to respond to it.
Sources
[1] HSE, “Other duties: RIDDOR and notification of cooling towers or evaporative condensers”. https://www.hse.gov.uk/legionnaires/what-you-must-do/duties.htm [2] HSE, “Legionnaires’ disease - what you must do”. https://www.hse.gov.uk/legionnaires/what-you-must-do/index.htm [3] HSE, “Legionnaires’ disease. The control of legionella bacteria in water systems - Approved Code of Practice and guidance (L8)”. https://www.hse.gov.uk/pubns/books/l8.htm [4] HSE, “Legionnaires’ disease: Technical guidance (HSG274)”. https://www.hse.gov.uk/pubns/books/hsg274.htm [5] Legionella Control Association, “Code of Conduct for Service Providers”. https://www.legionellacontrol.org.uk/ [6] UKHSA, “Investigation of Legionnaires’ disease: cases, clusters and outbreaks”. https://www.gov.uk/government/publications/investigation-of-legionnaires-disease-cases-clusters-and-outbreaks [7] HSE, “Testing and monitoring your water system for legionella”. https://www.hse.gov.uk/legionnaires/testing-monitoring-water-system.htm