An HSE visit doesn’t test your intentions. It tests whether the control you describe on paper is actually happening at the outlets, and whether the person standing in front of the inspector can prove it. Once that distinction lands, an inspection stops feeling mysterious.

Most duty holders picture it as a document review. It is broader than that. An inspector reads your risk assessment, then walks a plant room and a sample of outlets to see whether the temperatures, the flushing, the cleaning and the records line up with what the assessment claims. The space between the two is exactly what they are looking for. What follows is how a visit gets triggered, what gets checked, where teams come unstuck, and how to be ready before anyone knocks.

What brings an inspector to your door

An HSE Legionella inspection rarely arrives out of nowhere. It usually comes by one of a few routes: a planned or sector-themed inspection; a visit following a case or cluster of Legionnaires’ disease that public health has linked to a building; a response to a complaint from a tenant, an employee or a member of the public; or water systems coming up as one line on a broader health-and-safety visit.

A work-related case can also reach the regulator through RIDDOR, the reporting regime for certain work-connected diseases and dangerous occurrences [1]. And if you operate a cooling tower or evaporative condenser, that plant should already be notified to the local authority — an inspector will expect that registration to exist [2].

One nuance worth settling early: who actually turns up depends on the premises. HSE inspects some workplaces directly; for others, such as many offices, shops and hospitality sites, the enforcing authority is the local authority’s environmental health team. The badge differs, but the expectations are the same.

What the inspector is actually testing

Underneath every question is one test — is there a continuous line from the legal duty to physical reality? HSE frames the core duties as identifying and assessing sources of risk, managing the risk, preventing or controlling it, keeping records and meeting other duties [3]. ACoP L8 turns that into a management structure: a suitable risk assessment, a written scheme of control, a competent responsible person, implementation, monitoring, records and review [4]. HSG274 carries the technical detail behind each control measure [5].

An inspector checks whether those links hold. A risk assessment that names a dead leg is worthless if the dead leg is still there a year later and nobody acted on it. A monitoring schedule means nothing if the last three months of readings are blank. The recurring question is not “do you have a policy?” but “show me where this control happened, and who checked the result.”

What an inspector will ask to see

Assemble these before you ever need them. If you can hand each one over and explain it without digging, the visit gets short. Treat the list as a pack to keep current, not a folder to build the night before.

The assessment and the plan

  • The current Legionella risk assessment — dated, with a clear review date and a named competent author.
  • The written scheme of control: what is controlled, to what target, how often, and by whom.
  • The schematic or asset list the assessment rests on, matching the system that is actually installed.

The proof it is happening

  • Temperature monitoring records for sentinel outlets, hot and cold.
  • Flushing records for low-use outlets, with the use pattern that justifies the chosen frequency.
  • Tank inspections, cleaning and descaling records, and any sampling reports.
  • The open-actions log: what was found, who owns it, and the date it was closed out.

The people

  • The written appointment of the responsible person, with evidence they are trained for the role.
  • Something that shows the duty holder reviews the data rather than only storing it.

The contractor side

  • The service provider’s scope and competence — for example, membership of a recognised scheme such as the Legionella Control Association register [6] — plus the reports they have returned and your sign-off on each.

Where teams come unstuck

The failures inspectors find are seldom exotic. The risk assessment is years old and predates a refurbishment. A control scheme exists, but nobody can say what an acceptable result looks like for a given reading. Contractor reports arrive, get filed, and the remedial actions inside them are never carried out — so the report becomes evidence against you rather than for you. Records are present but undated, or signed by someone who left months ago. A single clean water sample gets waved around as proof, when sampling only ever describes the outlets sampled on the day; testing frequency follows the risk assessment, not a calendar habit [7].

The thread running through all of these is the same: tasks done, decisions undocumented. Your own internal audits are what catch them before HSE does — see The importance of regular audits to avoid enforcement for how to run that habit, and Essential records for Legionella compliance for the evidence trail that holds up.

If the inspector isn’t satisfied

The response scales with the risk and with your history. Broadly, it can range from informal verbal or written advice, to an improvement notice setting a deadline to put something right, to a prohibition notice that stops a dangerous activity until it is resolved, to prosecution where the failing is serious or persistent. Confirm the current options and the wording of any notice with the inspector or a competent adviser — the point here is the direction of travel, not legal certainty. A fault you found, logged and fixed reads very differently from the same fault discovered by an inspector with no record of anyone noticing. The line between those two outcomes is paperwork. Case study — a Legionella compliance prosecution in the UK shows where the worst end of that scale leads.

A note on using this

This describes how Legionella inspections commonly run and the duties HSE points to; it is not legal advice, and no two inspectors or sites are identical. What an inspector accepts as adequate depends on your building, the people who use it, and the control strategy set out in your own risk assessment. Treat anything specific here — frequencies, targets, the order of enforcement steps — as a prompt to confirm against current HSE material and a competent adviser, not as a fixed rule.

FAQ

Will I get warning before an HSE Legionella inspection?

Sometimes. Planned or themed inspections may be arranged in advance, while visits following a reported case or a complaint can be unannounced. Either way, readiness is the only reliable preparation — an estate that is only tidy when it has been warned is an estate that is not genuinely in control.

Does a clean water sample satisfy an inspector on its own?

No. A negative result describes the outlets sampled at one moment. It is supporting evidence, not proof that temperature, stagnation, cleaning and record-keeping are under control. Inspectors weigh the whole management chain, and the sampling frequency itself should be set by your risk assessment rather than a routine [7].

Who will the inspector want to speak to?

Usually the duty holder and the named responsible person. They expect whoever is accountable to explain, in their own words, why each control exists, what an acceptable result looks like, and what happens when a result falls outside it — not to read it back from a folder. Competent, confident answers count for a lot; see Training staff for Legionella compliance.

Do this before the next visit

Run a mock inspection. Pick one building, gather the evidence list above as if an inspector were already in reception, and time how long each item takes to find. Whatever you cannot produce and explain inside twenty minutes is precisely what an inspector will catch — so fix those gaps first, while the clock is yours.

Sources

[1] HSE, “RIDDOR - Reporting of Injuries, Diseases and Dangerous Occurrences Regulations”. https://www.hse.gov.uk/riddor/ [2] HSE, “Other duties: RIDDOR and notification of cooling towers or evaporative condensers”. https://www.hse.gov.uk/legionnaires/what-you-must-do/duties.htm [3] HSE, “Legionnaires’ disease - what you must do”. https://www.hse.gov.uk/legionnaires/what-you-must-do/index.htm [4] HSE, “Legionnaires’ disease. The control of legionella bacteria in water systems - Approved Code of Practice and guidance (L8)”. https://www.hse.gov.uk/pubns/books/l8.htm [5] HSE, “Legionnaires’ disease: Technical guidance (HSG274)”. https://www.hse.gov.uk/pubns/books/hsg274.htm [6] Legionella Control Association, “Code of Conduct for Service Providers”. https://www.legionellacontrol.org.uk/ [7] HSE, “Testing and monitoring your water system for legionella”. https://www.hse.gov.uk/legionnaires/testing-monitoring-water-system.htm