Ask what the UK could borrow from abroad on Legionella and the honest answer is: not a number. There is no foreign temperature, dwell time or chlorine dose sitting in another country’s rulebook that would make a British water system safer overnight. The UK already runs one of the more prescriptive regimes anywhere.
What does travel across borders is a way of organising the work. Two international frameworks — the World Health Organization’s water safety plan and the water management programme model used widely in the United States — keep exposing the same gap in how many UK sites actually run their compliance: the tasks get done, but nobody manages the system as a whole. That gap is where the genuinely useful global Legionella lessons live.
Where the UK regime is strong, and where it quietly leaks
The legal backbone is sound. ACoP L8 and the HSG274 technical guidance set a clear, risk-assessment-led duty: understand the system, assess who could be exposed, apply proportionate controls, keep records, and review when things change [1] [2]. On paper that is a complete management cycle, and ACoP L8: understanding the UK Legionella Code of Practice covers the duty in detail.
In practice, many sites compress all of that into four habits — an annual risk assessment filed away, a logbook, monthly temperature checks, and a sample when someone remembers. Each task is real. The connective tissue is missing. No one is named as the owner of the water system as a system. Decisions aren’t written down, only results. When a reading drifts out of range, there’s a number in a book and no record of what anyone decided to do about it.
That is compliance behaviour without a management system underneath. It is also exactly the pattern the international frameworks were designed to prevent.
Three ways to frame the same job
Strip away the jargon and the UK duty, the WHO plan and the US programme are all chasing the same outcome: stop Legionella multiplying, and stop the aerosol reaching people. They differ in where they put the emphasis — and that difference is the lesson.
| Approach | What triggers action | Who owns it | How control is verified |
|---|---|---|---|
| UK statutory duty (L8 / HSG274) | A competent risk assessment identifies foreseeable risk | The duty holder and responsible person | Monitoring records reviewed against the written scheme [1][2] |
| WHO water safety plan | Hazards mapped across the whole supply, from main to furthest tap | A standing, multidisciplinary water safety team | Operational monitoring plus periodic independent verification [4] |
| US water management programme | The building meets the risk criteria for a programme | A designated programme team | Validation that controls are actually limiting growth, not just being performed [3] |
Line them up and the pattern is hard to miss. The international frameworks lead with the system and the team; the UK lead-in is the risk assessment and the individual on the hook. Neither is wrong. But the WHO and CDC framing make ownership and verification explicit, where UK practice often leaves them implied. The water safety plan in particular treats the whole supply as one managed system with a named team responsible for it [4], and the water management programme treats validation — proof the controls are working, not just evidence they happened — as a distinct step [3].
Here is the part that should change how you read all of this. The headline lesson from abroad is already available in UK form. BS 8680 is a British code of practice for exactly these water safety plans [5], and in healthcare the NHS already mandates the plan-and-team approach through HTM 04-01 [6]. The thing worth importing isn’t foreign at all — it’s a management discipline most general UK sites simply haven’t adopted yet.
Four shifts from compliance to a managed plan
Moving from minimum compliance to something more resilient doesn’t mean abandoning L8. These four shifts wrap around it.
Name the system, not just the duty holder. UK law names a responsible person; the stronger frameworks name a small water safety group that meets, reviews the evidence, and makes decisions. Even on a single site this can be the responsible person, the maintenance lead and the contractor — but it has to actually convene, not exist on an org chart.
Write the plan, not just the task list. Map the whole system once: source, storage, plant, distribution, every outlet that can produce a spray, and who uses each. The risk assessment becomes a living plan rather than a filed PDF. Developing a comprehensive Water Safety Plan walks through building one.
Verify, don’t just monitor. Monitoring asks “was the task done and was the reading in range?” Verification asks “does the evidence, taken together, prove the system is under control?” A drawer of green ticks is not proof. This is the single idea the US programme model formalises that UK routine often skips.
Close the loop. Treat every out-of-range reading, missed flush and system change as a prompt to review — and record the decision, not only the fix. That continuous-improvement habit is what turns a year of tasks into a system that actually gets safer.
What this doesn’t mean
Two cautions, because “best practice from abroad” invites two predictable mistakes.
First, an overseas framework relaxes no UK duty whatsoever. You are still judged against L8 and HSG274; adopting a water safety plan strengthens how you meet that duty, it does not replace it. Importing a foreign threshold to override UK guidance would be a step backwards, not a clever shortcut.
Second, a water safety plan with no competent risk assessment beneath it is just a thicker folder. The management layer only adds value on top of sound technical control — temperature, stagnation, cleanliness and treatment still have to be right. None of this is legal, medical or engineering advice for your building. The figures, frequencies and remedial actions that apply to your site come from a competent, site-specific assessment, not from another country’s playbook.
FAQ
Does following an international water management standard keep me compliant in the UK?
No. UK duty holders are assessed against ACoP L8 and HSG274, whatever else they adopt [1] [2]. An international water management programme or water safety plan can make your compliance stronger and far easier to defend, but it sits on top of UK law rather than substituting for it.
Is a water safety plan actually required, or just good practice?
For most premises it is recommended good practice rather than a standalone legal requirement, and BS 8680 gives a UK code of practice for building one [5]. Healthcare goes further: NHS guidance in HTM 04-01 expects a water safety plan and a water safety group as standard [6]. Either way, a competent risk assessment stays the statutory core.
If I could only import one idea, which gives the biggest return?
Named ownership with a real review loop — the water safety group. Most UK sites already do the individual tasks; what they lack is a forum that looks at the evidence as a whole and decides what to change. That one habit catches the slow drift that task-by-task monitoring tends to miss.
Sources
[1] HSE, “Legionnaires’ disease. The control of legionella bacteria in water systems - Approved Code of Practice and guidance (L8)”. https://www.hse.gov.uk/pubns/books/l8.htm [2] HSE, “Legionnaires’ disease: Technical guidance (HSG274)”. https://www.hse.gov.uk/pubns/books/hsg274.htm [3] CDC, “Controlling Legionella”. https://www.cdc.gov/control-legionella/index.html [4] WHO, “Water safety in buildings”. https://iris.who.int/server/api/core/bitstreams/2c302ce4-bca9-42bc-97b4-ddbe95f0c7f2/content [5] BSI, “BS 8680:2020 - Water quality. Water safety plans. Code of practice”. https://knowledge.bsigroup.com/products/water-quality-water-safety-plans-code-of-practice [6] NHS England, “Health Technical Memorandum 04-01: Safe water in healthcare premises”. https://www.england.nhs.uk/publication/safe-water-in-healthcare-premises-htm-04-01/