---
title: "How long to keep Legionella records in the UK"
source_url: https://legionella.io/articles/how-long-to-keep-legionella-records-in-the-uk/
canonical_url: https://legionella.io/articles/how-long-to-keep-legionella-records-in-the-uk/
pillar: "Digital Logbooks & Record Keeping"
summary: "How long must UK duty holders keep Legionella records? A retention schedule by record type, why two years rarely covers you, and how to set a disposal rule."
primary_keyword: "Legionella record retention"
date_published: 2025-06-08
date_reviewed: 2026-06-26
author: "Legionella.io editorial team (REMOTE TECH LTD)"
reviewed_against: "HSE L8 and HSG274 guidance"
region: "United Kingdom"
license: "(c) REMOTE TECH LTD. Quote freely with attribution and a link to source_url."
---

# How long to keep Legionella records in the UK

There is no single retention period that covers every Legionella record in the UK. How long you keep something depends on what it proves. The working standard most duty holders follow comes from the L8 Approved Code of Practice: keep a record while it is current, and keep your monitoring evidence for several years beyond that [1].

Get that split right and Legionella record retention stops being a nervous guess about when it is safe to throw a binder away.

## Retention is an evidence question, not a filing question

Records are the only thing that proves control actually happened. When an outlet runs warm one week and someone asks "was this checked last month?", the log is the answer — or the silence. L8 expects duty holders to keep records of the precautions taken, the monitoring carried out, and the management arrangements behind them [1]. HSG274 carries the technical detail those records sit on top of [2].

So the retention period flows from one honest question: how far back might someone legitimately need to look? Three people might. An auditor wants continuity — proof the scheme ran without gaps. A new estates manager inheriting the building wants history they can trust. An investigator after a suspected case wants the trail going back years, not months. Each of those horizons is different, which is why a flat "keep everything for X years" never quite fits.

## How long to keep each type of record

The figures below combine the retention guidance in L8 with practical judgement about how long each record stays useful. Treat them as a floor, not a ceiling.

| Record | Suggested minimum retention | Why this long |
| --- | --- | --- |
| Legionella risk assessment | While current, plus the superseded version for at least two years | It is the basis for every control decision; the previous version shows what changed and when |
| Written scheme of control | While current, plus the prior version for around two years | An inspector checks your monitoring against the scheme that was in force at the time |
| Monitoring records — temperatures, flushing, tank checks, inspections, cleaning, disinfection | At least five years | This is the bulk of your evidence; a multi-year run shows trends and continuity, which a single month cannot |
| Sampling and laboratory reports | Kept with the monitoring they relate to, at least five years | One result means little; the series shows whether action actually followed a positive |
| Remedial and corrective actions | At least five years, filed against the record that triggered them | Proves the loop was closed, not just that a problem was noticed |
| Training and competence records | While relevant, plus a period after a person leaves the role | Shows the people doing the work were competent at the time, not just today |
| Contractor and service-provider records | The contract term plus a few years | Supports accountability if outsourced work is later questioned |
| RIDDOR and incident records | Long term | Claims and investigations can surface years after the event [4] |

These are defaults, not legal deadlines. The exact period for your building should come from your own risk assessment and any sector or insurer requirements, and you should check the numbers against the current wording of L8 before you set a disposal schedule [1]. One rule overrides all of them: never destroy a record that relates to a known case, complaint or claim, whatever its age.

## When the minimum two years isn't enough

The L8 minimums are a sensible floor, but three situations routinely justify keeping records much longer.

A suspected case or cluster is the obvious one. If a Legionnaires' case is linked to your building, an investigation may reach back through your whole control history, and a legionellosis case can itself be reportable under RIDDOR — at which point the report becomes another record to retain [4]. A complete five-year trail is worth far more in that moment than a tidy cupboard.

Civil claims are the quieter one. A personal-injury claim can surface long after the exposure that caused it, so many organisations keep their water-safety records well past the L8 minimum as a matter of policy rather than wait to find out whether they will need them. This is a decision for your legal and insurance advisers, not something to read off a guidance note.

Then there is handover. When a building is sold, leased or transferred to a new managing agent, the incoming duty holder needs the full control history — and a gap in the record looks far worse in due diligence than an honest note explaining one. Pass on the trail, and keep your own copy.

## Where paper quietly loses the trail

Retention is exactly where paper logbooks tend to fail, and they fail silently. A binder fills up, gets archived to a plant room shelf, and then disappears in an office move or a refurbishment. The five-year temperature history L8 expects is only ever as good as the cupboard it lives in. Few duty holders discover the gap until an auditor or investigator asks for it.

Going digital changes the failure mode rather than removing it. The risk shifts from physical loss to two new questions: does the system genuinely preserve the full trail — who did the task, when, on which asset, the result, whether it was in range, and what happened when it was not — and can you still read it after a contract ends or a platform is replaced? Export and continuity matter as much as the dashboard. If you are weighing the move, [Paper vs digital logbooks](https://legionella.io/articles/paper-vs-digital-logbooks-making-the-switch/) covers the switch, and [Essential records for Legionella compliance](https://legionella.io/articles/essential-records-for-legionella-compliance/) sets out what the trail has to contain in the first place.

## What to do this week

Pick your oldest live record type — almost always the temperature logs — and test one thing: can you produce a continuous five-year history on demand? If you can, you are in better shape than most. If there is a gap, write down where it starts and why, so the record of the gap is itself honest evidence.

Then do the small piece of housekeeping that prevents the next gap. Add a one-line retention rule against each record type in your written scheme, and set a disposal review date instead of either hoarding everything forever or binning it the moment two years pass. That single habit means the next person to hold the duty inherits a clear rule, not a guess.

## FAQ

### Is there a legal minimum retention period for Legionella records in the UK?

There is no single statutory number that applies to every record. The practical standard comes from the L8 Approved Code of Practice, which sets the expectation that records are kept while they remain current and that monitoring, inspection and test evidence is kept for several years afterwards [1]. Following ACoP guidance is the recognised way for a duty holder to show they have met the underlying legal duties [3].

### Can we go fully paperless and delete the paper originals?

Yes, provided the digital version genuinely preserves the same information and stays retrievable for the full retention period. The format is not what matters to L8 — the completeness and availability of the evidence is [1]. Before you destroy paper originals, confirm the digital trail captures who, when, which asset, the result and the follow-up, and that you can export it independently of any single supplier.

### How long should we keep records after we sell or hand over a building?

Hand the full control history to the incoming duty holder, then keep your own copy for as long as your insurer and internal policy require. Incidents and claims linked to your period of responsibility can emerge after you have left the building, so the trail still protects you once it is no longer your day-to-day concern [4].

## Related reading

- [Essential records for Legionella compliance](https://legionella.io/articles/essential-records-for-legionella-compliance/)
- [Paper vs digital logbooks: making the switch](https://legionella.io/articles/paper-vs-digital-logbooks-making-the-switch/)
- [Legionella logbooks: an introduction to record keeping](https://legionella.io/articles/legionella-logbooks-an-introduction-to-record-keeping/)
- [How often should you flush and test for Legionella?](https://legionella.io/articles/how-often-should-you-flush-and-test-for-legionella/)

## Sources

[1] HSE, "Legionnaires' disease. The control of legionella bacteria in water systems - Approved Code of Practice and guidance (L8)". https://www.hse.gov.uk/pubns/books/l8.htm
[2] HSE, "Legionnaires' disease: Technical guidance (HSG274)". https://www.hse.gov.uk/pubns/books/hsg274.htm
[3] HSE, "Legionnaires' disease - what you must do". https://www.hse.gov.uk/legionnaires/what-you-must-do/index.htm
[4] HSE, "RIDDOR - Reporting of Injuries, Diseases and Dangerous Occurrences Regulations". https://www.hse.gov.uk/riddor/