A Legionella fine is calculated, not plucked from the air. A court in England and Wales works through the Sentencing Council’s definitive guideline: it fixes how culpable the organisation was, sets a harm category, reads a starting point against the defendant’s turnover band, then adjusts up or down. Fine size scales with turnover. That is the single reason a large business faces six- or seven-figure penalties for a failing that would cost a small landlord a few thousand.
If you sit on a board or run finance, this is the mechanism you actually need — not a vague “fines can be large”. Knowing the four moving parts tells you roughly which column your organisation is read from, and where mitigation can still shift you.
Step one: culpability and harm set the offence category
The guideline opens by placing the offence in a category built from two axes.
Culpability runs from low to very high. Low is a minor failing, or one largely outside your control. Very high is a deliberate or flagrant disregard for the law. Most Legionella cases turn on the middle ground: did the organisation fall far short of the standard a reasonable duty holder would meet, leaving a known risk unmanaged (high), or was there a genuine system in place with a contained lapse (medium)? The Health and Safety at Work etc. Act duty is to assess and control the risk so far as is reasonably practicable, and the Approved Code of Practice L8 is the yardstick a court measures you against [1][2].
Harm is scored as a category, and this is where Legionella bites. The court does not need anyone to have fallen ill. It weighs the seriousness of the harm that was risked against how likely that harm was. Legionnaires’ disease is a potentially fatal pneumonia [3], so the seriousness of harm risked sits high even where no infection occurred. Two further questions can move the harm category up: whether a number of people were exposed to the risk — one contaminated shower block or cooling tower can expose hundreds — and whether the offence was a significant cause of actual harm. An uncontrolled aerosol source feeding occupied space scores badly on every count.
That combination — culpability level set against harm category — produces the offence category that step two then prices.
Why the same breach costs a corner shop and a corporation differently
Step two reads a starting point for that category against the defendant’s turnover band. The same culpability-and-harm category produces very different numbers depending on the size of the organisation, because the fine is meant to be felt by the people who run and own it.
| Turnover band | Annual turnover (per the guideline) | How the fine scales (illustrative, not the guideline’s own figures) |
|---|---|---|
| Micro | Not more than £2m | The lowest band; a serious case still has to be more than a cost of doing business, so think thousands rising into tens of thousands |
| Small | £2m–£10m | Tens of thousands, reaching six figures where culpability and harm are both high |
| Medium | £10m–£50m | Six figures becomes the realistic centre of gravity for a serious case |
| Large | £50m and over | Hundreds of thousands to seven figures at the high-harm, high-culpability end |
| ”Very large” | Turnover greatly exceeding £50m | The court can move outside the large range to keep the fine proportionate, so multi-million is possible |
The orders of magnitude in that last column are illustrative. They show how the bands scale relative to one another, not the guideline’s published starting points, which a judge reads from the tables and then adjusts. The structural point is the one to carry into a board meeting: your exposure is anchored to your turnover, not to the size of the leak. A flagrant failing in a £5m company and the same failing in a £500m group sit in the same offence category and then travel down two very different columns.
The “very large” rule matters most to groups. If applying the large band would not produce a fine proportionate to the organisation’s means, the court is entitled to go above it. That is how the most serious health and safety sentencing reaches multi-million-pound territory.
What moves you within the band
Once the court has a starting point, several things move you up or down inside — and occasionally beyond — the range.
Aggravating factors push you up: a poor compliance history, ignored warnings, cost-cutting that created the risk, a vulnerable group exposed. Mitigating factors pull you down: a genuine and evidenced management system, prompt remediation, self-reporting, cooperation, no previous breaches. This is where your paper trail earns its keep. Dated monitoring, a current risk assessment and closed-out remedial actions are often the difference between a court reading your culpability as high rather than medium — a whole band — because they show a managed system instead of a neglected one [2].
Two further adjustments follow. The court tests the proposed fine against the organisation’s wider financial circumstances and ability to pay, and applies proportionality and totality so the penalty bites without being ruinous beyond its purpose. Then a guilty plea attracts a reduction, the earliest plea earning the most. None of these is a loophole; together they explain why two organisations in the same band and category can still walk out with very different fines.
Where the fine sits among the other bills
The court fine is one line, and rarely the only one. HSE can recover its own time separately through Fee for Intervention, which runs on a different track to sentencing — HSE Fee for Intervention and Legionella: what a material breach costs you per hour sets out that cost. The fine also sits inside the broader stack of enforcement, civil claims, downtime and reputational damage covered in The cost of non-compliance: legal and business impacts, and it is one rung on the enforcement ladder described in Penalties for failing Legionella compliance in the UK.
One escalation changes the maths entirely. Where a death occurs and the case is charged as corporate manslaughter, sentencing moves to a separate and harsher part of the same definitive guideline, with starting points well above the health and safety offence ranges — the threshold for that is unpacked in Corporate manslaughter and Legionella: when an outbreak becomes a case against the organisation.
This is general information, not legal advice
The mechanism here is the Sentencing Council’s framework as courts in England and Wales apply it; Scotland sentences through its own system. Nothing on this page is legal advice, and no article can tell you what your organisation would actually be fined — that turns on the specific facts, the figures in the current guideline tables, and the judgement of the court on the day. Treat the magnitudes above as illustrative, confirm the live guideline before you rely on any number, and take proper legal advice if you are facing an active case. What your building needs to control the underlying risk is a question for a competent, site-specific risk assessment, not a web page.
Common questions
Does the fine come out of turnover or profit?
Turnover sets the band; profitability comes in later. The court bands you by annual turnover, then checks the proposed fine against your wider financial position and ability to pay before settling the figure. A high-turnover, thin-margin business can make that second-stage argument, but it still starts in the band its turnover dictates.
Can we be fined heavily if nobody caught Legionnaires’ disease?
Yes. Harm is scored on the harm that was risked and its likelihood, not only on harm that happened. Because the disease can be fatal and a single source can expose many people, a serious uncontrolled risk can land a high harm category with no one ill.
Does a guilty plea really cut the fine?
Yes, and timing decides how much. The guideline allows a reduction for a guilty plea, with the largest discount for the earliest plea. It is applied after the court has set the figure from culpability, harm, turnover band and the aggravating and mitigating factors.
Work out your own exposure
Do two things this week. First, find your organisation’s annual turnover and place it in a band — that tells you which column a court would read you from. Second, be honest about culpability: pull your current risk assessment, your written scheme of control and the last quarter of monitoring records, and ask whether they would read to a court as a managed system or a neglected one. The distance between those two answers is the band your mitigation can still move, and closing it is worth far more than any figure you could look up.
Sources
[1] HSE, “Legionnaires’ disease - what you must do”. https://www.hse.gov.uk/legionnaires/what-you-must-do/index.htm [2] HSE, “Legionnaires’ disease. The control of legionella bacteria in water systems - Approved Code of Practice and guidance (L8)”. https://www.hse.gov.uk/pubns/books/l8.htm [3] NHS, “Legionnaires’ disease”. https://www.nhs.uk/conditions/legionnaires-disease/