An HSE visit rarely opens with drama. It usually opens with a sentence: “Talk me through how you control Legionella here.” How the next few minutes go — whether you reach the right document quickly, whether the records back up what you just said — sets the tone for everything that follows. And here is the useful part: every gap an inspector can find, you can find first.
So read this not as a list of things to fear, but as a rehearsal you could run yourself any Tuesday. An HSE inspection tests one thing in several ways. Can you show that you understand your water system, control the foreseeable risk, and prove both with evidence that holds together [3]?
Why the inspector is at your door
Inspections are not all the same, and the reason for the visit shapes the room. A planned, proactive inspection in a higher-risk sector is a calmer conversation than a visit triggered by a complaint, a member of staff raising concerns, or a confirmed case of Legionnaires’ disease linked to your premises. Some duties also pull HSE toward you in the first place: a diagnosed case can be reportable under RIDDOR, and a cooling tower or evaporative condenser must be notified to the local authority [4]. If any of that applies and the paperwork is missing, the absence is itself the first finding.
Whatever the trigger, the benchmark is constant. Inspectors measure your arrangements against the Approved Code of Practice, L8, and the technical detail in HSG274 [1] [2]. L8 carries a particular legal weight: follow it and you are generally doing enough, depart from it and you have to show your alternative is at least as effective.
The order they actually work in
Inspectors tend to move from the top of the management chain downward, because that is where control fails first. Expect roughly this sequence.
They start with the Legionella risk assessment — does one exist, is it current, and does it describe this building rather than a generic template with your address pasted on top? Then the responsible person: a named individual with the authority and competence to act, who can explain the system without reading from a script. Then the written scheme of control — the document that states what is done, how often, by whom, and what “in range” actually means. Only then do they turn to the evidence: temperature records, flushing logs, tank inspections, cleaning and descaling, and sampling where the assessment calls for it.
The last step is the one people underestimate. Inspectors do not just check that records exist; they check that someone reads them. A temperature log full of flawless readings that nobody has ever signed off, with no out-of-range entry in two years, tells an experienced inspector that the figures are being copied rather than taken.
Find the gap before the inspector does
The fastest way to prepare is to walk your own evidence backwards, exactly the way an inspector would: start from what they would see, ask why it looks that way, confirm it, then fix it. That backward read is the heart of a good internal audit — the importance of regular audits to avoid enforcement covers the wider routine.
| What the inspector sees | Likely root cause | The check that confirms it | The fix |
|---|---|---|---|
| A risk assessment dated years ago, no review note | Nobody owns the trigger for review | Is there a named review date and a record of what has changed since? | Re-assess after any change to plant, use or people; diarise the next review |
| Temperature records always in range, never an exception | Readings copied, or only easy outlets checked | Cross-check sentinel and far outlets; has a single failure ever been logged? | Monitor genuine sentinel outlets and record and act on every out-of-range result |
| A flushing schedule for low-use outlets with quiet gaps | No escalation when a flush is missed | Does a missed task trigger anything at all? | Define escalation; review the use pattern of any chronically missed outlet |
| Remedial actions from the last report still open | Actions logged but not tracked to closure | Is there one live list with an owner and a date per item? | Assign, date and close each out, recording the decision |
| The contractor does the work but you cannot explain it | Oversight outsourced along with the task | Can the responsible person say what each control achieves? | Keep the duty in-house; verify the contractor’s competence |
If the same weakness shows up in more than one row — say missed tasks and open remedial actions both trace back to “nobody owns follow-up” — treat it as a system failure, not a handful of separate defects. Inspectors do, and so should you.
When a finding becomes enforcement
Most visits end with advice or a short list of things to put right. When control is genuinely deficient, HSE can require improvements within a stated timescale, and where risk is serious it can stop an activity until it is made safe [3]. An improvement notice is not the end of the world, but it is on the record, it has a deadline, and it shifts you from managing risk to answering for it.
What tips a borderline situation into a notice is rarely one bad reading. It is the pattern: no current assessment, controls that drift, results that go out of range with nobody recorded as acting, remedial actions left open from the previous report. The correction is unglamorous and entirely within reach — keep the assessment live, monitor the right outlets, and close the loop on every exception in writing. Where contractors carry out the tasks, treat contractor oversight as your job, not theirs: checking that a provider meets a recognised standard, such as the Legionella Control Association code of conduct, is part of proving you stayed in control [5].
A word on sampling, because it surfaces in nearly every visit. A clean Legionella sample is useful evidence for the conditions sampled at that moment, and nothing more. HSE is clear that how often you sample follows the system and the risk assessment rather than a calendar habit [6] — so a thick file of negative results does not, by itself, prove control.
One honest qualifier
What an inspector accepts as adequate is judged against your building, your users and your own risk assessment, not against any checklist in an article. Use the points above to interrogate your own evidence; do not read them as legal advice, and do not treat them as a forecast of how a particular visit will go. If you are already facing enforcement, get competent advice specific to your site.
Do this before your next visit
Block out an hour and run the table above against your own records, starting with the date on the risk assessment. You are hunting for the one gap you cannot currently explain — the missed flush with no escalation, the remedial action still open from last spring, the outlet nobody actually monitors. Fix that one thing, write down why the control exists and what happens when it fails, and you have done the most valuable thing any inspection ever prompts: found the drift before it found you.
FAQ
Will HSE warn us before a Legionella inspection?
Sometimes, sometimes not. Planned inspections may come with notice; visits prompted by a complaint or a reported case often do not. Either way the evidence an inspector wants — a current risk assessment, a written scheme and records showing the controls work — is identical, so the only dependable preparation is keeping it ready all year.
Which document do inspectors ask for first?
Usually the Legionella risk assessment, because everything else hangs off it. If it is missing, out of date, or clearly a template that does not match your building, the rest of the visit is spent on the back foot. Make sure yours describes your actual system and shows when it was last reviewed [1].
Does a recent clean water sample mean we will pass?
No. Sampling supports verification or investigation, but it does not replace control of temperature, stagnation, cleanliness and record-keeping, and HSE sets sampling frequency by the system and risk assessment rather than as routine reassurance [6].
Sources
[1] HSE, “Legionnaires’ disease. The control of legionella bacteria in water systems - Approved Code of Practice and guidance (L8)”. https://www.hse.gov.uk/pubns/books/l8.htm [2] HSE, “Legionnaires’ disease: Technical guidance (HSG274)”. https://www.hse.gov.uk/pubns/books/hsg274.htm [3] HSE, “Legionnaires’ disease - what you must do”. https://www.hse.gov.uk/legionnaires/what-you-must-do/index.htm [4] HSE, “Other duties: RIDDOR and notification of cooling towers or evaporative condensers”. https://www.hse.gov.uk/legionnaires/what-you-must-do/duties.htm [5] Legionella Control Association, “Code of Conduct for Service Providers”. https://www.legionellacontrol.org.uk/ [6] HSE, “Testing and monitoring your water system for legionella”. https://www.hse.gov.uk/legionnaires/testing-monitoring-water-system.htm