Short answer: no, routine water sampling for Legionella is not, by itself, a legal requirement for most premises. What the law requires is that you assess and control the risk. Testing is one tool that sometimes supports that — it is rarely the thing the law actually asks for.
This trips up a lot of duty holders, because contractors quote for “Legionella testing” and the word makes it sound mandatory. For a typical hot and cold water system kept under proper temperature control, taking water samples is usually the exception, not the routine [1].
So the better question is the one this page answers: when is testing genuinely expected, and when is it just an expensive comfort blanket?
Myth versus reality
| The common belief | What actually applies |
|---|---|
| ”The law says I must sample my water for Legionella.” | The law says you must assess and control the risk. No regulation mandates routine sampling for ordinary hot and cold systems [3]. |
| ”An annual Legionella test keeps me compliant.” | A lab certificate proves nothing about your control scheme. Compliance is your risk assessment, your written scheme and your monitoring records [1][2]. |
| ”Sampling is the main way to monitor a system.” | For hot and cold water, temperature monitoring is the primary check. Sampling is reserved for specific triggers [4]. |
| ”All water systems are treated the same.” | Cooling towers, spa pools and some healthcare premises carry sampling expectations that an office tap does not [5][6]. |
| ”A clear sample means I’m safe.” | A negative result is a snapshot of one outlet at one moment. It can lull you into ignoring a failing control regime. |
What does UK law actually require?
The duty comes from general health-and-safety law — the Health and Safety at Work etc. Act 1974 and the COSHH Regulations — with the Approved Code of Practice L8 setting out how to comply [2]. None of these names a sampling frequency or demands a lab test. They require a suitable assessment of the risk, a written scheme to control it, and evidence that the scheme is being carried out and reviewed [1].
In plain terms: the inspector wants to see that you understand your system, are managing it, and can prove it. A box of test certificates is not that proof.
Is routine Legionella testing mandatory for hot and cold water systems?
No. For domestic-type hot and cold water services kept under good temperature control — hot water stored hot and distributed hot, cold water kept cold — HSE’s position is that routine microbiological sampling is not normally required [1][4]. Your primary monitoring is temperature checks at sentinel outlets, flushing of little-used outlets, and the other tasks your written scheme sets.
The pragmatic call: spend the money on monitoring and remediation, not on chasing clear sample results that tell you little.
When is Legionella sampling actually expected?
Sampling moves from optional to expected in specific situations. HSG274 points to circumstances such as where you cannot reliably maintain control parameters, where the risk assessment specifically calls for it, where you are commissioning or recommissioning a system, or where there is reason to suspect a problem — for example after a system has been off, or where control measures appear to be failing [4]. It is also used to validate that a remedial clean or disinfection has worked.
If you are running outside your control scheme, sampling helps you see what is happening. If you are inside it, sampling rarely adds much.
Do cooling towers and evaporative condensers need testing?
These are a different category. Cooling towers and evaporative condensers create aerosol and carry a higher risk, so regular Legionella sampling is a normal part of their monitoring regime, alongside chemical and microbiological dip-slide checks [5]. They must also be notified to the local authority. If you have one, treat routine sampling as part of the job rather than an optional extra.
What about spa pools and hot tubs?
Spa pools — whether commercial or in lettings and leisure settings — are high-risk because they aerosolise warm water continuously. HSG282 sets out a regime that includes regular microbiological sampling for Legionella as well as routine water-quality testing [6]. For these systems, “is testing required?” effectively becomes “yes, build it into your schedule.”
Are healthcare premises different?
Yes. NHS and other healthcare buildings work to Health Technical Memorandum 04-01, which sets a more demanding standard than L8 because patients can be far more vulnerable to infection. HTM 04-01 includes specific sampling expectations, particularly for augmented-care areas [7]. If you manage healthcare water systems, your sampling obligations are set by that memorandum, not by the general “it’s not usually required” rule.
Does my landlord have to test the water in my rental?
For ordinary residential lettings, no. A landlord’s duty is to assess and manage the Legionella risk, which for most homes means a straightforward assessment and simple control measures — not periodic water sampling [3]. Routine testing of domestic rental properties is generally unnecessary, and any firm insisting every let needs an annual lab test is overselling.
If I do sample, does it matter how it’s taken?
It matters a great deal. A sample taken badly tells you nothing reliable. The recognised methodology in the UK is BS 7592, which covers where, when and how to take a representative sample and get it to an accredited laboratory under the right conditions. Use a competent person and a UKAS-accredited lab, or the result is not worth recording.
A caveat worth taking seriously
Everything above is general guidance. Whether your particular site needs sampling — and how often — is a decision for your site-specific risk assessment, carried out by someone competent who has actually looked at your system. A small office with well-controlled water and a hospital dialysis unit sit at opposite ends of the same question. I cannot give you the answer for your building from here; your assessment can.
If you only do one thing
Stop treating a test certificate as your compliance and start treating your monitoring records as your compliance. Pull out your latest risk assessment and check whether it actually specifies sampling for your system. If it does, confirm it is being done to BS 7592 by an accredited lab. If it does not, redirect that budget to temperature monitoring and remediation — and make sure every check is logged somewhere you can produce on demand. Moving those temperature readings and flushing records off paper and into a digital logbook is what turns “we do the checks” into evidence an inspector will accept.
Sources
[1] HSE, “Testing and monitoring your water system for legionella”. https://www.hse.gov.uk/legionnaires/testing-monitoring-water-system.htm [2] HSE, “Legionnaires’ disease. The control of legionella bacteria in water systems - ACoP and guidance (L8)”. https://www.hse.gov.uk/pubns/books/l8.htm [3] HSE, “Legionella and landlords’ responsibilities”. https://www.hse.gov.uk/legionnaires/legionella-landlords-responsibilities.htm [4] HSE, “Legionnaires’ disease: Technical guidance (HSG274)”. https://www.hse.gov.uk/pubns/books/hsg274.htm [5] HSE, “Systems most likely to create legionella risk”. https://www.hse.gov.uk/legionnaires/risk-systems.htm [6] HSE, “Control of legionella and other infectious agents in spa-pool systems (HSG282)”. https://www.hse.gov.uk/pubns/books/hsg282.htm [7] NHS England, “Health Technical Memorandum 04-01: Safe water in healthcare premises”. https://www.england.nhs.uk/publication/safe-water-in-healthcare-premises-htm-04-01/