Most Legionella training is a slideshow. Once a year everyone clicks through the same e-learning module, collects a certificate, and goes back to work no more likely to flush the shower in the room nobody booked last fortnight. The certificate proves attendance. It does not prove that the right person will do the right thing on a wet Tuesday morning.

That gap matters, because control is not won in the plant room. It is won at the outlet, by whoever holds the temperature probe or decides a rarely-used tap can wait another week. Awareness training earns its keep only when it tells that specific person what to check, what a bad result looks like, and who to call when they see one.

So the useful question is not “has everyone done the course?” It is “does each role know exactly what their part of control is, and can they prove it?”

What “trained” is actually supposed to mean

UK guidance is blunt on the principle. Anyone involved in assessing or controlling the Legionella risk has to be competent, and the duty holder is responsible for making that happen [1]. The Approved Code of Practice, L8, sits behind it: the people carrying out control measures should be suitably informed, instructed and trained for the task in front of them [2]. None of that is satisfied by a generic video about bacteria.

Control is a team effort by design. CDC describes an organised water management programme as the main way to limit Legionella growth, and a programme is only as good as the people running it [3]. That is the real point of training: not awareness for its own sake, but competence spread across everyone whose decisions touch the water.

And competence is task-shaped. The caretaker who runs weekly flushing needs something different from the manager who signs off the risk assessment, who needs something different again from the contractor sampling the calorifier. A single all-staff session that tries to cover all of it usually serves none of them well. Split the training by what each role actually touches.

What each role on site actually needs to know

Treat this as a training spec, not a list to rush through. Group people by what they do, then train and record against the group that fits them.

Everyone on site (general awareness)

  • Explain, in one breath, why warm still water is the problem and how it reaches the lungs as spray.
  • Point out the everyday warning signs: a tap running warm when it should be cold, scale or slime on a shower head, a room or wing left out of use.
  • Name the one person they report those signs to, and make sure that route is real and answered.

Anyone who carries out a control task (caretakers, housekeeping, maintenance)

  • Show how to do their specific task, whether that is flushing, a temperature check or cleaning a shower head, to the method in the written scheme and the technical guidance it draws on [4].
  • Define what a good and a bad reading look like in the numbers their probe shows, not in theory.
  • Spell out what to record, where to record it, and what to do the moment a result falls outside the expected range.
  • Confirm they know the escalation route, and have them walk it once during training rather than reading about it.

The responsible person or appointed competent person

  • Read and interpret the monitoring record, not just file it, so a slow drift gets caught before it becomes a breach.
  • Decide when a result triggers remedial work and when it triggers a review of the risk assessment.
  • Brief and challenge contractors, rather than accept their reports unread.

The duty holder and senior managers

  • Understand the legal duty they hold and cannot delegate away, even when the tasks are outsourced.
  • Resource the programme honestly: housekeeping time for flushing, cover for checks, named in the budget rather than treated as a favour.
  • Review what the water safety group reports and act on it.

New starters, agency staff and contractors

  • Induct anyone before they touch the system, including short-term and agency staff, who are the people most often skipped.
  • Check a contractor’s competence against a recognised benchmark such as the Legionella Control Association’s Code of Conduct, instead of assuming the badge means trained [5].

Who owns these decisions, and who reviews the evidence, is a governance question in its own right. If that ownership is fuzzy, fix it first: Forming a Water Safety Group: roles and benefits covers forming the group that holds it.

Make the record prove competence, not attendance

A training record that lists names and dates is a register, not evidence of control. Make it show who was trained, on which task, by whom, how their understanding was checked, and when it is next due. If an audit asks “how do you know the person flushing recognises a failed flush?”, that record should answer the question on its own.

Keep it live. Refresh training at the interval your risk assessment sets, and, more to the point, whenever something changes: new plant, a new contractor, a near-miss, a person moving into a control role, or a use pattern shifting as a wing is mothballed or a floor reopens. A calendar reminder alone misses the changes that actually move the risk. Tie the record to the rest of your evidence, the logbook and the monitoring data, so that task, training and result sit together rather than in three separate folders.

Where training programmes quietly fail

The same failures recur, and they are rarely about the quality of the course. The licence gets bought for the manager who books it, while the housekeeper who flushes the rooms gets nothing. Attendance is logged but understanding never checked, so a confident click-through passes for competence. Agency and temporary staff are let loose on the system before anyone inducts them. The contractor is treated as the expert, so no one in-house keeps enough knowledge to question a thin report. And the most useful thing of all, what to do when a reading is wrong, gets left out, so people learn the task but never the decision.

A note on limits

None of this decides what “competent” means for your building. The right depth of training, who needs it and how often all flow from your risk assessment, your systems and the people using them. A certificate is evidence that someone sat a course, not proof that control happens at your outlets. Use the named guidance as the reference point, and let a competent, site-specific assessment set the specifics.

Where to start this week

Pick one role: the people who flush your low-use outlets. Write them a single page covering the three things they must do, the one reading that should worry them, and exactly who they call when it does. Train against that page, watch one of them do the task, and record that you checked. That beats another all-staff video, and it is the kind of habit a wider water-safety culture is built on, which Building a culture of water safety in your organisation takes further.

FAQ

Does everyone on site need Legionella training, or only the responsible person?

Everyone needs enough awareness to spot and report a problem. The people who carry out control tasks, and the responsible person above them, need task-specific competence on top of that. Match the depth to what each person actually does, rather than putting all staff through one identical course and calling it covered.

Is an online awareness course enough on its own?

For general awareness it can be a reasonable starting point, but it rarely teaches the site-specific method: your outlets, your readings, your escalation route. Pair any e-learning with hands-on instruction for anyone who flushes, checks temperatures or cleans fittings, and confirm they can do the task, not just describe it.

How often should Legionella training be refreshed?

At the interval your risk assessment sets, and sooner whenever something changes: new staff in control roles, a new contractor, an altered use pattern, or a near-miss. Treat those trigger events as more important than the date in the diary.

If we use a specialist contractor, do we still need trained staff?

Yes. Outsourcing the work does not outsource the duty. You still need enough in-house competence to brief the contractor, read their reports critically and act on what they find. The Legionella Control Association’s Code of Conduct is a useful benchmark when judging whether a provider is competent [5].

Sources

[1] HSE, “Legionnaires’ disease - what you must do”. https://www.hse.gov.uk/legionnaires/what-you-must-do/index.htm [2] HSE, “Legionnaires’ disease. The control of legionella bacteria in water systems - Approved Code of Practice and guidance (L8)”. https://www.hse.gov.uk/pubns/books/l8.htm [3] CDC, “Controlling Legionella”. https://www.cdc.gov/control-legionella/index.html [4] HSE, “Legionnaires’ disease: Technical guidance (HSG274)”. https://www.hse.gov.uk/pubns/books/hsg274.htm [5] Legionella Control Association, “Code of Conduct for Service Providers”. https://www.legionellacontrol.org.uk/