Short answer: no, ACoP L8 is not law in the way an Act or a regulation is. But it is not ordinary guidance you can wave away either. It is an Approved Code of Practice, and that gives it a special evidential status in court that sits a notch below statute and well above advice [1].
That middle position trips people up. A duty holder reads “you do not have to follow it” and relaxes. The next sentence is the one that matters: if you do not follow it and someone is harmed, you may have to prove you controlled the risk just as effectively by other means. Get that wrong and the Code can be used against you.
This piece answers the questions duty holders actually search for, in plain terms.
What does “Approved Code of Practice” actually mean?
An ACoP is a document approved by the Health and Safety Executive, with the consent of the Secretary of State, that gives practical advice on how to comply with health and safety law. L8 does this for the control of legionella bacteria in water systems [1].
The key word is “approved”. That approval is what separates an ACoP from a trade body’s best-practice note. The underlying duties — to assess and control risk — come from the Health and Safety at Work etc. Act 1974 and the Control of Substances Hazardous to Health Regulations. L8 tells you what “doing enough” normally looks like in the eyes of the regulator [3].
Is following ACoP L8 a legal requirement?
Following L8 is not strictly compulsory. Controlling the legionella risk is. Those are two different sentences and the gap between them is where most confusion lives.
You can comply with the law by following L8, or by doing something else that controls the risk to an equivalent standard. What you cannot do is ignore the risk. If you depart from the Code, the obligation to demonstrate equivalence falls on you, not on the regulator to disprove it [1].
In my view, for the overwhelming majority of sites, following the Code is simply the cheapest way to be safe — both physically and legally. Inventing your own scheme only makes sense where you can evidence it works as well, and that evidence is rarely free.
What does “failure to follow an ACoP” mean in practice?
This is the heart of it. An ACoP has a particular legal effect: in a prosecution, if you did not follow the relevant provisions of the Code, that fact can be taken as evidence that you failed to comply with the law — unless you can show you met the requirement in some other equally effective way [1].
People sometimes call this a reverse burden of proof. The everyday meaning is blunt. Without the Code on your side, you walk into court already on the back foot, needing to prove your alternative was good enough. With contemporaneous records showing you followed it, you walk in with the regulator’s own benchmark behind you.
That is why your evidence trail matters as much as your plumbing. A monitoring regime that happened but was never recorded is, in legal terms, very close to one that never happened.
How is ACoP L8 different from HSG274?
L8 and HSG274 are written to sit together, but they are not the same kind of document.
L8 is the Approved Code of Practice: short, principle-led, and carrying the evidential weight described above. HSG274 is technical guidance — the detailed how-to covering hot and cold water systems, cooling towers, and other plant [2]. HSG274 does not carry the ACoP’s special status in court, though departing from sound technical guidance without good reason still looks poor.
Myth vs reality: the legal status of L8
A few beliefs do real damage on site. Here is the reality against each.
| Common belief | The reality |
|---|---|
| ”L8 is just guidance, so it’s optional.” | It is an Approved Code with special legal status; ignore it and the burden shifts to you to prove equivalence [1]. |
| ”L8 is the law itself.” | The law is the HSW Act and COSHH; L8 is the approved route to complying with them [3]. |
| ”Follow HSG274 and you’ve met the legal test.” | HSG274 is technical guidance; the duty and the ACoP’s evidential weight come from L8 and the underlying law [1][2]. |
| ”Small or low-risk premises are exempt.” | The duty to assess and control applies broadly; the assessment may simply conclude risk is low [4]. |
| ”A risk assessment on file is compliance.” | The assessment is the start; controlling the risk and recording that you did is the duty [4]. |
The myths persist because the word “guidance” appears on the cover and because nobody reads the legal-status paragraph at the front. The fix is to treat L8 as the standard a court would measure you against, and document accordingly.
Who has to comply with ACoP L8?
The duties fall on the duty holder — typically the employer, or whoever is in control of the premises or the water system. That includes landlords, facilities and estates managers, and contractors operating systems on someone’s behalf [4].
Being a small business or a single-let landlord does not remove the duty; it changes its proportionality. A low-risk domestic rental may need little more than a simple, recorded assessment and basic upkeep, whereas a healthcare site carries far heavier expectations [4].
What happens if you don’t follow ACoP L8?
There is no fine “for breaching L8” as such. Enforcement bites through the underlying law. If the HSE finds inadequate control, it can issue improvement or prohibition notices, and serious failings can lead to prosecution under the HSW Act and COSHH [3].
In any such action, your handling of L8 becomes the reference point — what the Code expected, and whether you did it or proved a credible equivalent [1]. Outcomes depend entirely on the facts of the case, so treat any specific penalty figures you read elsewhere with caution and confirm against current HSE material.
Does ACoP L8 set the exact temperatures and frequencies?
This catches people out. The specific control parameters — water temperatures, flushing regimes, monitoring intervals — largely live in the technical guidance and, ultimately, in your own risk assessment, not as rigid commandments in L8 itself [2].
The general expectations are well known: keep hot water hot, keep cold water cold, keep water moving, and verify it. But the precise figures and how often you check them follow from the system in front of you and what your competent risk assessor concludes [2]. State them as your assessment sets them, not as universal law, and confirm any number against current HSE guidance before relying on it.
If ACoP L8 is “only” a code, why take it so seriously?
Because the consequences are real and the legal arithmetic favours following it. A code that shifts the burden of proof onto you when you depart from it is not a soft document. It is the practical yardstick the regulator and a court will reach for first [1].
The pragmatic call is to follow the Code, record that you followed it, and justify in writing any place you deliberately did something different. That combination is what turns a pile of activity into a defensible position.
This is general information, not legal advice. ACoP L8’s status and what counts as adequate control will turn on your specific systems and the facts of your case, so apply it through a competent, site-specific risk assessment carried out by someone with the right knowledge of your premises.
If you only do one thing today, find the legal-status paragraph at the front of L8 and read it slowly — then check whether your current records would actually prove you followed the Code, or merely that you meant to. Where that evidence lives in a drawer of paper sheets or a fragile spreadsheet, moving temperature logs and task sign-offs into a dated digital logbook is the single change that makes “we did follow it” something you can show, not just say.
Sources
[1] HSE, “Legionnaires’ disease. The control of legionella bacteria in water systems - ACoP and guidance (L8)”. https://www.hse.gov.uk/pubns/books/l8.htm [2] HSE, “Legionnaires’ disease: Technical guidance (HSG274)”. https://www.hse.gov.uk/pubns/books/hsg274.htm [3] HSE, “Legionnaires’ disease - what you must do”. https://www.hse.gov.uk/legionnaires/what-you-must-do/index.htm [4] HSE, “Legionella and landlords’ responsibilities”. https://www.hse.gov.uk/legionnaires/legionella-landlords-responsibilities.htm