A temperature log tells you what the water did this morning. A sample tells you what one outlet held on one day. Neither tells you that the calorifier base is silting up, the galvanised riser is rusting from the inside, or the dead-leg you forgot about is now warm and scaled. Pipework ages whether or not anyone is watching.

That slow physical decline is a water-safety variable in its own right, and it rarely shows up in the readings most buildings rely on. Scale thickens, corrosion advances, sediment settles, and the worst of it concentrates exactly where you least want it: the warm, low-flow corners where bacteria are most at home.

This is about treating the condition of the system as something you inspect, record and watch trend over years, a standing input to the risk assessment, not a one-off note buried in an old survey [1][3].

What actually changes as a system ages

None of this happens overnight, which is precisely why it gets missed. Limescale builds on hot surfaces and roughens pipe walls, giving biofilm more to grip and insulating heat so a calorifier works harder to hold temperature. Corrosion pits and tubercles develop inside older metal pipe, shedding rust and creating sheltered pockets. Loose scale and sediment travel and settle in tank bases, calorifier feet and slow runs.

Roughened, fouled, sediment-lined surfaces do three unhelpful things at once: they shelter organisms from the heat and disinfectant meant to control them, they hold nutrients, and they make low-flow zones lower still. To be clear about the limits of this, none of these conditions measures Legionella, and a scaled or corroded pipe is not proof of contamination. They are risk indicators. They tell you where the system has drifted away from its original, cleaner design, and where an inspection or sample is most worth taking. For the biology behind that sheltering effect, see how biofilm develops in building water systems; for the material side, see pipe materials and long-term water quality. Statutory control still rests on temperature, turnover and cleanliness, with sampling to verify; condition assessment tells you where to point all of that first [4].

A field checklist for pipework condition

Use this on a walk-round, ideally alongside whoever holds the asset register. The aim is not a pass/fail verdict on the day. It is to capture the current physical state, compare it with last time, and flag anything that has moved in the wrong direction for the risk assessor to weigh. Record an observation against every line, even when it is “no change” [2].

Cold water storage and tanks

  • Lift the lid and look: sediment depth in the base, scale on walls, rust staining, debris or biofilm-like slime, and the state of the lid, screen and overflow.
  • Note water clarity drawn from the tank, gritty, cloudy or discoloured water is a recordable change, not a cosmetic one.
  • Check for warmth: a cold tank drifting up in temperature points to ageing insulation or a warm plant room as much as to flow.

Hot water generation and calorifiers

  • Where access allows, record evidence of scale on heated surfaces and sludge or debris at the calorifier base from the drain-off.
  • Watch the destratification clues: a cool base or a unit struggling to recover temperature can signal sediment, scaling or a tired heat source.
  • Log internal corrosion signs, discoloured drain water, flakes, tuberculation, especially on older steel or galvanised vessels and connections.

Distribution pipework

  • Identify the legacy and at-risk runs: galvanised steel, long horizontal runs, sections through warm voids, and anything older than the rest of the system.
  • Look at exposed pipe externally for leaks, weeping joints, green or rust staining and lagging that is missing, wet or displaced.
  • Map low-flow and blind sections, dead legs, capped spurs, rarely used branches, and note any that have grown since the last asset check.

Outlets and end-of-line zones

  • Inspect strainers, flow straighteners, spray heads and flexible hoses for scale, debris and discolouration when servicing them.
  • Note outlets that consistently run discoloured or gritty at first draw, a pattern worth tracing back upstream.

Records and trend

  • Date every observation and tie it to a fixed asset reference so the same point is compared over time.
  • Photograph the worse findings; a photo log of a tank base or calorifier drain over several years shows drift a tick-box never will.
  • Flag any item that has visibly deteriorated since the last round for the risk assessor, with a suggested action and a review date.

Turning observations into action

A condition note only earns its place if it changes something. Feed the findings into the written scheme and the risk assessment so deterioration triggers a decision, descale, drain and clean, remove a dead leg, replace a length of failing pipe, or simply increase how closely an asset is watched. Where a finding is significant, it is a prompt to review the risk assessment rather than wait for the next scheduled cycle [1][3]. If the finding is really about long retention rather than failing pipework, pair this checklist with the guide to water age and residence time.

This is also where emerging condition-monitoring data fits, carefully. Trend information, repeated drain-off observations, recurring discolouration at an outlet, slowly drifting tank temperatures, or non-invasive sensing of flow and pipe condition, can help you prioritise where to inspect next. Treat all of it as a trend indicator and a prompt to look, never as a verdict on water safety. No reading from a pipe wall confirms what is, or is not, growing inside it; that is what inspection, statutory control and sampling are for.

The lines people skip

Two failures recur. The first is the survey that ages out: a condition assessment done once at handover or after a refurbishment, then never repeated, so the record describes a system that no longer exists. Condition is a moving target, and a five-year-old survey of a warm, hard-water building is closer to history than to fact.

The second is recording the reading but not the vessel. Teams log water temperatures faithfully and never once open the tank or read the calorifier drain, so the one thing that changes slowest, and matters most over a building’s life, is the one thing nobody watches.

This is general guidance, not a substitute for a competent, site-specific assessment. What your pipework’s condition means for control depends on your materials, layout, water and use, and those judgements belong to a competent person reviewing your actual system. Nothing here is legal or design advice.

FAQ

Isn’t sampling enough to tell me the system is safe?

Sampling tells you what one outlet held on one day, and it is a verification tool, not a substitute for control. Condition assessment answers a different question: where has the physical system drifted in a way that makes a poor result more likely? The two work together, condition findings tell you where to look and sample; sampling and temperature control verify.

How often should pipework condition be assessed?

There is no single interval; your risk assessment sets it, weighted by the building’s age, materials, water hardness and history. The practical model is to fold visible condition checks into the inspections you already do, tank lids, calorifier drain-offs, outlet servicing, and to formally revisit the picture whenever the system, its use or its condition changes.

Does limescale on its own raise Legionella risk?

Scale is best read as a risk indicator rather than a cause in isolation. It roughens surfaces that biofilm can colonise, holds debris, and insulates heated surfaces so temperature is harder to maintain, all conditions that make control work harder. It does not measure or prove contamination, so a scaled finding is a reason to inspect, clean and watch, not to declare the system unsafe or safe.

Who should carry out a condition assessment?

Routine visual condition checks can sit with trained in-house staff using a structured checklist and photo record. Interpreting what those findings mean for the risk assessment, and deciding on remedial work to ageing or failing pipework, is a job for a competent person, and any intrusive inspection of tanks or calorifiers must run under the appropriate safe system of work.

What to do this week

Pick your oldest or hardest-water building and do one thing the temperature log never does: open the cold-water tank and read the calorifier drain-off. Photograph and date what you find against a fixed asset reference. That single record is the baseline a condition trend is built from, and the start of watching the slowest, most-overlooked water-safety variable you own.

Sources

  1. HSE, ACoP L8 (2013), “Review of control measures: monitoring and routine inspection”, p.18. https://www.hse.gov.uk/pubns/books/l8.htm
  2. HSE, HSG274 Part 2 (2024), “Operation and inspection of hot and cold water systems”, p.70. https://www.hse.gov.uk/pubns/books/hsg274.htm
  3. BSI, BS 8580-1:2019, clause 4 (factors to be considered in the risk assessment). https://www.bsigroup.com/
  4. HSE, “Hot and cold water systems”. https://www.hse.gov.uk/legionnaires/hot-and-cold.htm