Every water-saving feature you add to a building quietly adjusts one of the three things Legionella control depends on: how hot or cold the water stays, how often it actually moves, and how much sits in storage. Sustainability and water safety pull on the same three levers — and they usually pull in opposite directions.
That is the whole tension, and it is manageable. The point is not to water down the green spec to satisfy a risk assessor. It is to spot which control measures the spec has just made harder, and to design those controls back in before handover — not after a sample comes back positive in the first occupied summer.
The three levers green design pulls on
Strip Legionella control back to its mechanics and you get three things. Keep hot water hot and cold water cold, because temperature is the lever you can most reliably pull [1]. Keep water moving, because water that gets used regularly does not sit long enough for biofilm to build and bacteria to bloom. And keep stored volume sensible, because tanks and vessels are where water warms, settles and stagnates.
Legionella multiplies fastest in the tepid band between properly cold and properly hot — broadly the 20-45°C range [2]. Below that it sits dormant; well above it the bacteria are progressively killed. Almost every water-efficiency or low-carbon measure nudges water towards that band, slows its turnover, or both: low-flow fittings reduce what passes through an outlet, heat pumps and solar preheat run cooler vessels, harvested-water stores hold ambient-temperature water, and agile occupancy leaves whole zones idle. None of those is a bad idea. Each one just lands on a Legionella lever, which means each one needs a deliberate control sitting next to it.
What each water-saving feature does to your water
The useful way to plan a low-water building is feature by feature: name the saving, name the lever it pulls the wrong way, and name the control that keeps both. Read the table as a design checklist rather than a verdict — none of these features is off-limits, they just come with a string attached.
| Water-saving feature | What it is there to save | The Legionella lever it pulls the wrong way | Keeping both |
|---|---|---|---|
| Flow restrictors, aerating taps, low-flow showers | Mains water and the energy to heat it | Less water turns over at the outlet, and aerating heads create a finer breathable spray | Fit them on outlets that genuinely get used; remove redundant outlets rather than throttling them; flush the low-use ones on a set schedule |
| Solar thermal or heat-pump preheat and buffer vessels | Energy and carbon on hot water | Preheat and buffer tanks can dwell for long periods in the tepid growth band | Confirm the final delivered water reaches and holds its design temperature; treat preheat vessels as part of the assessed system, not invisible plant |
| Rainwater harvesting and greywater recycling | Mains demand for WCs and irrigation | Stored non-potable water sits at ambient temperature, and some uses spray it | Assess each as a separate system; label every outlet clearly; keep aerosol-producing uses away from where people gather |
| Right-sized storage with long, slim pipe runs | Standing volume, heat loss, embodied carbon | Cold water warms through thin insulation; value-engineered layouts leave dead legs | Design out dead legs at the drawing stage; route cold pipework away from heat sources; insulate to the actual ambient temperature |
| Agile floors and demand-led occupancy | Energy and floor space | Whole zones and their outlets go unused for days or weeks | Tie flushing to real occupancy data; commission a turnover plan, not a fixed calendar |
Renewable hot water and the tepid buffer tank
The hot water side is where good carbon decisions most often collide with good water-safety ones. A heat pump is efficient precisely because it works at lower flow temperatures, and solar thermal feeds a preheat vessel that warms gradually through the day. Both can leave a body of water sitting in the growth band for hours.
This is not an argument against either technology. It is an argument for treating preheat and buffer vessels as assessed parts of the system, with their own temperature checks, rather than as background plant nobody opens. What matters is what the water does between the renewable source and the tap: it can be left to dwell tepid, or it can be brought up to and held at a controlled delivery temperature before it reaches anyone. Designing for the second is the whole game. The temperature figures belong to your risk assessment and your designer — Hot water temperature guidelines to prevent Legionella covers the hot-water side in detail.
Rainwater and greywater: a second system, not a footnote
Harvested rainwater and recycled greywater are some of the strongest water-efficiency wins available, and they are also a distinct water system with its own risk profile. HSE’s guidance on the systems most likely to create risk points at anything that holds water and can generate a breathable spray [3], and greywater stores plus spray irrigation tick both boxes.
The practical move is to stop treating these as an add-on to the potable system and assess them in their own right. Where the water goes matters as much as how it is stored: filling a cistern is low-interest; misting a planted atrium or running irrigation near a building entrance is not. Clear labelling, sensible separation, and keeping spray-producing uses away from occupied areas do most of the work.
The trade-off nobody draws on the plans: low occupancy
The quietest risk in a green building is the one the energy strategy creates. Agile working, demand-led ventilation and zoned shutdowns all save energy by leaving parts of the building unused — and an unused zone is a set of outlets nobody is flushing. A low-flow tap that is also a low-use tap is the worst of both: little turnover, and a fine spray waiting for the day someone finally opens it.
Stagnation is the root cause behind a surprising share of real failures, which is why it earns its own treatment in Neglected water systems: the danger of stagnation. Where occupancy varies, the highest-value habit is to drive flushing from actual use data rather than a printed rota, so effort lands exactly where water has gone still.
Keep the risk assessment in the design loop
These features are chosen by architects, M&E consultants and sustainability advisers, often long before a water-safety specialist is in the room. That is the gap to close. Water safety needs to be a named input to the design decisions, not a compliance task bolted on at handover.
None of this should push anyone off a water-efficiency target or a green rating scheme such as BREEAM. The savings are real and worth having. But the control measures, the temperature figures and how often you monitor all depend on the actual building, its users and its systems — they come from a competent, site-specific risk assessment, not a generic green-building template. Monitoring and sampling frequency in particular follows the system and the assessment rather than a fixed calendar [4], so a low-water design does not inherit a standard schedule by default.
What to do this week
Pull the sustainability spec and the current risk assessment out together, and go through them side by side. List every water-saving feature in the building or the design — every restrictor, every preheat vessel, every harvested-water outlet, every zone that runs on demand. For each one, write down which lever it pulls (temperature, turnover or storage) and whether a control already offsets it. The entries with no offsetting control are your shortlist.
Then flag the preheat vessels and any rainwater or greywater systems for assessment in their own right, and check that your flushing programme is tied to how the building is actually used rather than to a default rota. If you are building the broader management framework rather than patching one site, Developing a comprehensive Water Safety Plan covers how a water safety plan ties these decisions together.
FAQ
Do low-flow taps and showers increase Legionella risk?
Not on their own. The fitting is rarely the problem; the use pattern is. A low-flow outlet used often turns its water over and stays low-risk. The same fitting on an outlet nobody touches combines poor turnover with a fine aerosol when it is finally opened — and droplets are how Legionella reaches the lungs [5]. Flush the genuinely low-use outlets, and remove redundant ones rather than just throttling them.
Can rainwater harvesting or greywater recycling create a Legionella risk?
They can, and they are best treated as a separate system rather than an extension of the mains. Stored non-potable water sits at ambient temperature, and uses that spray it — irrigation in particular — produce the breathable aerosol that matters [3]. Assess each system in its own right, label the outlets, and keep spray-producing uses away from where people gather.
Does a green rating or water-efficiency target conflict with Legionella compliance?
There is no built-in conflict, because the two pull on different things — one on consumption, the other on temperature, movement and cleanliness. The friction appears only when a water-saving feature is specified without a matching control. Bring a competent water-safety view into the design early and you can hit the efficiency target and keep the system safe.
Sources
[1] HSE, “Hot and cold water systems”. https://www.hse.gov.uk/legionnaires/hot-and-cold.htm [2] HSE, “Legionnaires’ disease. The control of legionella bacteria in water systems — Approved Code of Practice and guidance (L8)”. https://www.hse.gov.uk/pubns/books/l8.htm [3] HSE, “Systems most likely to create legionella risk”. https://www.hse.gov.uk/legionnaires/risk-systems.htm [4] HSE, “Legionnaires’ disease: Technical guidance (HSG274)”. https://www.hse.gov.uk/pubns/books/hsg274.htm [5] CDC, “How Legionella Spreads”. https://www.cdc.gov/legionella/causes/index.html