An emergency eyewash station might be triggered in earnest once in a decade. A deluge safety shower might never run for real at all. That is the whole problem. Kit installed for the worst day on site spends every other day holding still water.
Now picture the day it is finally needed. Someone has caught a chemical splash to the face and is standing under the shower or bent over the eyewash heads, flushing for a sustained period with their eyes held open and, quite possibly, broken skin. A plumbed unit that has stagnated for months sprays whatever has been growing in that branch directly at the most vulnerable target imaginable. The control that exists to prevent one injury must not deliver a second.
So the uncomfortable truth is that the safety case for this equipment and its Legionella risk point the same way. The feature — almost never used — is the hazard — stagnation. Treat every plumbed emergency wash unit as a little-used outlet, because that is exactly what it is.
Plumbed-in versus self-contained: where the risk actually sits
Not all of this kit carries the same standing risk, and the first useful thing you can do is classify what you have.
Plumbed, mains-fed units are a permanent branch off the wholesome supply, usually sited near a process or store and rarely operated. The water in that branch warms towards room temperature and sits there. This is a textbook dead leg, and it carries the highest standing Legionella risk of the three types. Infrequently-used outlets and the dead legs that feed them are repeatedly named among the features that let the bacteria establish, because the water stays warm and undisturbed long enough for colonies to build [1]. A plumbed eyewash is close to the purest example of that on many sites.
Gravity-fed, self-contained units are the portable tanks you bolt to a wall: a sealed reservoir of water dosed with a biocidal preservative, fed by gravity when you flip the activation lever. They are not plumbed, so there is no dead leg to the mains. The risk shifts rather than disappears. The preservative additive has a service life, the tank can be contaminated when it is refilled, and someone topping it up with ordinary tap water instead of the manufacturer’s fluid quietly reintroduces the problem. Maintained to the cycle, these are lower-risk than a neglected plumbed unit.
Sealed-cartridge units use single-use cartridges of sterile saline or solution that hold no standing water between uses and are simply swapped at their expiry date. For Legionella specifically, this is the lowest-risk arrangement — the realistic failure here is an empty or out-of-date cartridge, which is a different audit, not a stagnation one.
Knowing which type sits where decides what goes on the schedule. The expensive mistake is assuming a self-contained label means “no water risk”, or never noticing that the shower in the loading bay has been hard-plumbed all along.
The tepid-water trap
Here is the part that makes emergency wash kit genuinely awkward, and it is worth dwelling on because the usual Legionella playbook does not work.
To flush a casualty’s eyes or skin safely for a sustained period, the water has to be tepid. Cold water drives people off the unit before they have flushed long enough and risks hypothermia over a long flush; hot water scalds already-injured tissue. Tepid is commonly cited as roughly 16-38°C. That band sits squarely on top of the temperature range where Legionella multiplies most readily — broadly 20-45°C [1].
You cannot design your way out of this the normal way. The standard defence is to keep cold water genuinely cold, below 20°C, and hot water stored near 60°C [2]. Neither is acceptable at the point an injured person is using the equipment. The water that reaches them has to be in the danger zone by design.
The pragmatic resolution is to control the bulk supply and only create the tepid blend at the point of use. Keep the cold feed below 20°C and the hot stored near 60°C right up to a dedicated tepid blending valve sited as close to the unit as the layout allows, then keep the blended leg downstream of that valve as short as physically possible. A long run of stored tepid water is the worst of both worlds: a permanent reservoir held at growth temperature. In my view, minimising the volume of blended water held between the valve and the heads matters more here than any single number, because that small warm volume is the bit you can never keep cold and can never keep hot.
Whatever you cannot fix by design, you flush.
Weekly activation: the same logic as any little-used outlet
Displacing standing water is the workhorse control, and the method is the same one you would use on a tap nobody turns. Activate the unit and run it long enough to discharge the full standing volume and draw fresh water through from the main — for an eyewash that means running both heads, for a shower it means actually discharging it, not just cracking the valve. The reasoning is set out in Flushing little-used outlets: best practices, and the wider cost of letting these features sit untouched is the subject of Neglected water systems: the danger of stagnation.
Weekly activation is the common benchmark for plumbed emergency wash units, but your risk assessment and the manufacturer’s instructions set the actual frequency for your site. Two practical points people skip. First, a deluge shower throws a large volume, so drainage and containment have to be sorted or the weekly flush quietly stops happening — and a flush that stops happening is just stagnation with a tick-box over it. Second, activating a stagnant unit aerosolises whatever is in it, so trigger the first burst from clear of the spray rather than standing under it.
This is the same family of problem as the mains-fed fire kit covered in Fire sprinkler systems and hose reels: managing permanently stagnant water: safety equipment plumbed to the supply that almost never moves water.
Descaling the heads
Spray and diffuser heads collect scale, sediment and biofilm, and the rose on a deluge shower is no different from any other shower head in that respect. Clean and descale them on a defined schedule so the surfaces that produce the spray are not themselves a colonised reservoir; the approach in Showerhead cleaning and descaling schedules transfers directly, and the technical guidance treats cleaning and descaling of such fittings as routine control work [3]. While you are there, check the dust caps that protect eyewash diffusers between uses are present and seat correctly — they keep airborne contamination off the heads and should release automatically on activation.
A recordable check routine for emergency wash kit
Group the checks the way you will actually carry them out, and record an outcome for each line so a missed week is visible rather than invisible.
At each activation (weekly, or as your assessment sets):
- Run each eyewash head and discharge the shower until standing water is fully displaced and fresh water is drawn through.
- Stand clear of the first burst, then confirm a steady, even flow from every head.
- Note any discolouration, slime, smell or weak flow as a defect, not a pass.
Temperature:
- Measure the delivered water temperature at the unit during the flush.
- Confirm the tepid blending valve is holding its set range and has not drifted.
- Check the cold feed reads below 20°C and hot storage near 60°C upstream of the blend [2].
Cleaning and descaling:
- Remove, clean and descale the eyewash diffusers and the shower rose on schedule.
- Confirm dust caps are fitted, undamaged and release on activation.
- Inspect the bowl, pipework and fittings for scale, biofilm or corrosion.
Self-contained units:
- Check the fluid or cartridge expiry date and replace before it lapses.
- Replace gravity-fed fluid and its preservative on the manufacturer’s cycle, not when you remember.
- Do not top up a sealed tank with ordinary tap water unless the maker explicitly permits it.
Recording:
- Log the date, who did it, the temperature, what was flushed or descaled, and any fluid replaced.
- Flag any unit that missed its check so it surfaces, rather than disappearing off the bottom of a sheet.
A caveat worth stating plainly
This is general guidance to help you recognise the Legionella risk in emergency wash equipment and ask better questions on site. It is not legal, medical or design advice, and it does not override the equipment’s own requirements. The tepid range, activation frequency and fluid-replacement cycle are set by the manufacturer and the relevant equipment standard; the Legionella controls, monitoring and frequencies come from a current, site-specific risk assessment carried out by a competent person under the ACoP L8 framework [4]. Nothing here should reduce the speed, flow or availability of equipment a casualty depends on.
What to do today
Walk the site and write down every emergency eyewash station and safety shower you can find, including the one in the chemical store everyone forgets. Against each, mark whether it is plumbed, gravity-fed sealed-fluid, or sealed-cartridge, and check it actually appears on a maintenance schedule. You will probably find at least one that does not.
These are precisely the assets that fall off a paper rota — installed once for compliance, then orphaned, because no busy week ever revolves around an eyewash nobody used. Moving each unit onto a schedule that records its activation, temperature and fluid checks, and flags a missed one, is what keeps a rarely-used safety control from becoming a rarely-checked Legionella reservoir.
FAQ
Do self-contained or cartridge eyewash stations need Legionella flushing?
Sealed-cartridge units hold no standing water, so there is nothing to flush — you manage them by replacing the cartridge before its expiry date. Gravity-fed self-contained units are not plumbed either, so the control is replacing the fluid and its preservative on the manufacturer’s cycle and refilling correctly, rather than weekly flushing. Plumbed, mains-fed units are the ones that need the flushing regime.
What temperature should emergency eyewash water be?
It needs to be tepid so a casualty can flush comfortably for a sustained period without hypothermia or scalding — commonly cited as roughly 16-38°C, with the precise figure set by the equipment standard and manufacturer. That range overlaps the Legionella growth band, which is why the bulk supply is kept properly cold and hot and the tepid blend is created close to the unit, with the blended leg kept short and flushed regularly [1].
How often should a plumbed eyewash station be flushed?
Weekly activation is the common benchmark for plumbed emergency wash units, on the same logic as any little-used outlet: displace the standing water before it stagnates. Your risk assessment and the manufacturer’s instructions confirm the frequency for your specific unit and use pattern [4].
Sources
[1] HSE, “Systems most likely to create legionella risk”. https://www.hse.gov.uk/legionnaires/risk-systems.htm [2] HSE, “Hot and cold water systems”. https://www.hse.gov.uk/legionnaires/hot-and-cold.htm [3] HSE, “Legionnaires’ disease: Technical guidance (HSG274)”. https://www.hse.gov.uk/pubns/books/hsg274.htm [4] HSE, “Legionnaires’ disease. The control of legionella bacteria in water systems - Approved Code of Practice and guidance (L8)”. https://www.hse.gov.uk/pubns/books/l8.htm