Ask most duty holders how they keep up with Legionella guidance and the honest answer is: they don’t, until something forces them to. They wait for a headline, a consultant’s email, or an enforcement notice on a building down the road. By then the change is old news, and the paperwork shows a gap nobody noticed.
Staying current is not a reading marathon. It is a triage habit — a short list of things to watch, a rule for deciding whether a change actually touches your site, and a note that you looked. Get those three right and you can ignore most of the noise without missing the signal.
The thing people get wrong about “updates”
People brace for a rewrite of ACoP L8 or HSG274. Those two are the stable spine of UK Legionella control, and they do not change often [1][2]. Build your whole routine around waiting for them and you will wait years while the things that genuinely move slip straight past you.
What moves more often sits one layer down. The British Standards your risk assessment and written scheme lean on each carry an edition year and are revised on their own cycles: the risk-assessment code of practice BS 8580-1, the sampling code BS 7592, and the water safety plan code BS 8680 [3][4][5]. A risk assessment that cites “BS 8580-1” with no date can quietly fall behind the current edition without anyone so much as touching a tap.
Sector guidance shifts too — HTM 04-01 for healthcare premises and HSG282 for spa-pool systems each have their own update history [6][7]. And UKHSA publishes Legionnaires’ disease surveillance, including an annual report for England and Wales, which is not law but tells you where cases are actually turning up and can reasonably prompt a second look at your own assumptions [8][9].
A watch-list you can actually maintain
Keep it to one page and give it a named owner. Group it so a quick scan tells you what to check and how often that source tends to move.
Core duties (rarely change, always relevant):
- HSE’s Legionnaires’ disease pages, including the “what you must do” summary [10]
- ACoP L8 and HSG274 as your control references [1][2]
Standards your paperwork depends on (revised independently — check editions):
- BS 8580-1, risk assessment for Legionella control [3]
- BS 7592, sampling for Legionella bacteria [4]
- BS 8680, water safety plans [5]
System- or sector-specific (watch only what you run):
- HTM 04-01 if you manage water in healthcare premises [6]
- HSG282 if you operate spa pools or similar aerosol-generating systems [7]
Intelligence, not instruction (context for your judgement):
- UKHSA Legionnaires’ disease data and the annual legionellosis report [8][9]
- The Legionella Control Association code of conduct, if you appoint service providers under it [11]
That is the whole tool. It fits on a side of A4, and its only job is to make sure nothing on it goes unwatched.
When something lands, ask three questions
Tag every change with a decision, not a vague sense of unease.
- Is it a new duty, or a clearer explanation of an old one? Re-worded web pages and refreshed leaflets usually clarify; they rarely change what you must actually do.
- Does it touch a standard or system your risk assessment relies on? If your assessment cites BS 7592 and a new edition lands, that is a direct hit. A revision to spa-pool guidance is irrelevant if you have no spa.
- Would acting on it change a control, a frequency, a record, or who is responsible on site? If yes, it is a scheme change and a competent person — usually the responsible person — should review it. If no, it becomes a logged “reviewed, no action”.
That last outcome matters more than people expect. “We reviewed the change and concluded it does not affect our controls, and here is why” is itself evidence of an active, managed system — far stronger than silence.
How this plays out in practice
A revised British Standard is the case worth rehearsing. Say BS 8580-1 moves to a new edition. The change does not flush a single outlet, but it can shift what a competent risk assessment is expected to cover. The right response is small and specific: have your assessor confirm whether the method still matches, update the citation and date in the assessment, and record the review.
Compare that with HSE tidying the wording on a web page. Read it, satisfy yourself nothing material moved, log it, and move on. The skill is resisting the urge to re-issue your whole scheme over an editorial tweak.
And when UKHSA reports a rise in cases in settings like yours, treat it as a prompt rather than a panic. Revisit the assumptions in your risk assessment and ask whether your monitoring still reflects how the building is really used. Changes like these feed naturally into the cycle that turns a static assessment into a living water safety plan — see From risk assessment to Water Safety Plan.
Spotting a change is not the same as interpreting it
Tracking guidance tells you the ground has moved; it does not tell you what to do about it. Whether a new standard edition, a refreshed code or a shift in the surveillance data changes anything on your site is a judgement for a competent person who knows your systems, your users and your control strategy. Use a watch-list to catch changes early and to prove you are paying attention — not as a substitute for that judgement, and never as a ruling on what any single change means for your building.
What to set up this week
Build the one-page watch-list above, name the person who owns it, and put a recurring review in the calendar — many sites fold it into an existing quarterly compliance check rather than inventing a new meeting. Each time, add one line to your logbook: the date, what you checked, and the decision, including the “no action” ones. Then link that log to your risk assessment, so the next person can see not just what your controls are, but that you have kept them current.
If you want a sense of what falling behind actually costs when it goes wrong, The cost of non-compliance sets out the legal and business exposure.
FAQ
How often should we check for changes to UK Legionella guidance?
There is no statutory interval. Tie a proper review to your existing risk assessment cycle and add a lighter scan in between — quarterly works for many sites — so checking becomes routine and recorded rather than reactive. The frequency that suits a small office and a large NHS estate will not be the same.
Do we have to act every time HSE refreshes a page?
No. Most refreshes clarify an existing duty rather than create a new one. Read it, decide whether it changes a control, a frequency, a record or a responsibility on your site, and log the decision either way. “Reviewed, no action” is a valid and useful entry.
Which documents are most likely to catch us out?
The supporting British Standards. ACoP L8 and HSG274 are stable, but BS 8580-1, BS 7592 and BS 8680 are revised on their own cycles, and a risk assessment that quotes an old edition can drift out of date without any visible change on site [3][4][5].
Sources
[1] HSE, “Legionnaires’ disease. The control of legionella bacteria in water systems - Approved Code of Practice and guidance (L8)”. https://www.hse.gov.uk/pubns/books/l8.htm [2] HSE, “Legionnaires’ disease: Technical guidance (HSG274)”. https://www.hse.gov.uk/pubns/books/hsg274.htm [3] BSI, “BS 8580-1:2019 - Risk assessments for Legionella control. Code of practice”. https://knowledge.bsigroup.com/products/water-quality-risk-assessments-for-legionella-control-code-of-practice-1 [4] BSI, “BS 7592:2022 - Sampling for Legionella bacteria in water systems. Code of practice”. https://knowledge.bsigroup.com/products/bs-7592-sampling-for-i-legionella-i-bacteria-in-water-systems-code-of-practice-1 [5] BSI, “BS 8680:2020 - Water quality. Water safety plans. Code of practice”. https://knowledge.bsigroup.com/products/water-quality-water-safety-plans-code-of-practice [6] NHS England, “Health Technical Memorandum 04-01: Safe water in healthcare premises”. https://www.england.nhs.uk/publication/safe-water-in-healthcare-premises-htm-04-01/ [7] HSE, “Control of legionella and other infectious agents in spa-pool systems (HSG282)”. https://www.hse.gov.uk/pubns/books/hsg282.htm [8] UKHSA, “Legionnaires’ disease: guidance, data and analysis”. https://www.gov.uk/government/collections/legionnaires-disease-guidance-data-and-analysis [9] UKHSA, “Legionellosis in residents of England and Wales: 2024”. https://www.gov.uk/government/statistics/legionellosis-in-residents-of-england-and-wales-2024/legionellosis-in-residents-of-england-and-wales-2024 [10] HSE, “Legionnaires’ disease - what you must do”. https://www.hse.gov.uk/legionnaires/what-you-must-do/index.htm [11] Legionella Control Association, “Code of Conduct for Service Providers”. https://www.legionellacontrol.org.uk/