Two bodies share it. The Health and Safety Executive enforces at some premises; your local authority’s environmental health team enforces at others. Which one can knock on your door depends not on Legionella at all, but on what your building is mainly used for [1].
That surprises people. The assumption is that water hygiene is an HSE matter end to end. For a great many businesses it is not — and if you are bracing for the wrong regulator, you can spend years polishing a relationship with an office that has no jurisdiction over you while the one that does is a stranger.
Here is the practical map, the reasoning behind it, and the questions duty holders actually ask.
Why Legionella enforcement is split in the first place
There is no separate “Legionella regulator”. Control of legionella sits under the general duties of the Health and Safety at Work etc. Act, supported by the Approved Code of Practice L8 and the technical guidance HSG274 [2][3]. Enforcement of those duties is then divided between HSE and local authorities according to a premises’ main activity, under the Health and Safety (Enforcing Authority) Regulations [1].
The rough principle: HSE takes the higher-hazard and industrial end plus certain public-sector estates; local authorities take the commercial, retail, leisure and hospitality end where the public are customers rather than workers. Same law, same L8, two different front doors.
Which premises does HSE enforce, and which does the local authority?
The table below shows the usual allocation by main activity. It is the general pattern, not a line-by-line legal index, and edge cases exist — so treat it as a starting point and confirm your own premises against the Enforcing Authority Regulations.
| Premises / main activity | Usual enforcing authority | Why |
|---|---|---|
| Factories, manufacturing, engineering works | HSE | Higher-hazard industrial work |
| Construction sites | HSE | Construction activity sits with HSE |
| NHS hospitals, GP surgeries, dental practices | HSE | Healthcare delivery premises |
| Schools, colleges, universities | HSE | Education premises generally |
| Offices and call centres | Local authority | Commercial office activity |
| Shops, retail and wholesale, warehousing | Local authority | Retail and distribution |
| Hotels, B&Bs, restaurants, pubs, catering | Local authority | Hospitality and consumer services |
| Leisure centres, gyms, spas (private) | Local authority | Consumer leisure services |
| Care homes (private) and residential care | Local authority | Residential consumer care |
| Local-authority-run premises | HSE | A council cannot enforce against itself |
Read the table by what the building is, not by what plant it contains. A spa pool in a private hotel and the same spa pool inside an NHS hospital point at different regulators, because the host premises differ [1].
How do I find out which authority covers my premises?
Start with your dominant activity, not the water system. If the public come to you as customers — to shop, eat, stay or use leisure facilities — the odds favour your local authority’s environmental health department. If you are an industrial, construction, healthcare or education site, the odds favour HSE [1].
Mixed-use sites are where it gets fiddly. A unit that is part workshop, part trade counter can fall either way depending on which activity dominates. If you genuinely cannot tell, the pragmatic call is to ring your local council’s environmental health team and ask; if it is an HSE matter they will say so, and you will have your answer documented.
Does the local authority really inspect for Legionella?
Yes. Where a premises is allocated to the local authority, its environmental health officers carry broadly the same statutory inspection and enforcement powers an HSE inspector would — entry, requesting your risk assessment and records, and serving improvement or prohibition notices where they find a failure to control a foreseeable risk [4]. In my experience duty holders underestimate this precisely because “the council” sounds softer than “the HSE”. It is the same toolkit.
What an officer looks for is the same on either side of the split: a current, competent risk assessment, a written scheme of control, and records that prove the scheme is actually being followed — temperature readings, flushing of little-used outlets, cleaning and disinfection, and the status of outstanding remedial actions [4][3].
Who enforces Legionella for landlords and rented housing?
This is the most-confused corner of the whole question. A landlord of residential property has a duty to assess and control Legionella risk for tenants, and HSE publishes the guidance landlords are expected to follow [5]. But the enforcement of housing conditions in domestic rented homes generally runs through the local authority’s housing team under the Housing Health and Safety Rating System, rather than through HSE [5].
So a landlord can be looking at two routes at once: the underlying health-and-safety duty that HSE describes, and a council housing assessment that can compel action if a property is unsafe. Confirm the precise route for your tenure and area before assuming either one does not apply to you.
What about cooling towers and evaporative condensers?
If you operate a cooling tower or evaporative condenser, you have a notification duty: these devices must be registered with the relevant local authority, separately from whoever enforces day-to-day health and safety at the site [6]. That notification destination is the council even where HSE is your main enforcing authority, so do not assume one registration covers everything. Keep the notification current when devices are added, moved or decommissioned.
Can my enforcing authority change?
It can, if your main activity changes. Convert a warehouse into light manufacturing, or a shop unit into a workshop, and the allocation can shift with it [1]. The duty to control Legionella does not move or pause during that change — only the office that would enforce it. After any significant change of use, it is worth re-checking who your regulator now is at the same time you commission the reassessment that the change should trigger anyway.
Does it matter which one enforces — are their powers different?
For your obligations, no. Both measure you against the same Act and the same ACoP L8, and a clean water sample is no defence to either; control of temperature, stagnation and cleanliness is what counts, not a single negative result [3][2]. Where it matters is logistics: different contact points, different inspectors, and a different notice-issuing body if things go wrong. Knowing the right one in advance means you are not introducing yourself to your regulator on the day of a problem. The mechanics of an actual visit are covered in HSE audits and inspections, and what happens when a notice lands in Enforcement action: when the HSE comes knocking.
What a general guide cannot settle for you
The allocation in the table holds for most premises most of the time, but the Enforcing Authority Regulations contain exceptions, and a borderline or mixed-use site can sit outside the obvious pattern. This is a map for orienting yourself, not a legal ruling on your specific building — and nothing here replaces a competent, site-specific risk assessment, which is what determines your actual controls and their frequencies whichever regulator oversees you. If your allocation is genuinely unclear, get it confirmed in writing rather than guessing.
The one thing to do today: name your enforcing authority and write it into your water-safety file alongside your risk assessment, your scheme of control and your cooling-tower notification reference if you have one. If those records still live in a desk drawer or a spreadsheet that only one person can find, that is the moment to move them into a single digital logbook — so that when whichever authority does call, the evidence is in one place and a gap shows up to you before it shows up to them.
Sources
[1] HSE, “Legionnaires’ disease - what you must do”. https://www.hse.gov.uk/legionnaires/what-you-must-do/index.htm [2] HSE, “Legionnaires’ disease. The control of legionella bacteria in water systems - ACoP and guidance (L8)”. https://www.hse.gov.uk/pubns/books/l8.htm [3] HSE, “Legionnaires’ disease: Technical guidance (HSG274)”. https://www.hse.gov.uk/pubns/books/hsg274.htm [4] HSE, “Testing and monitoring your water system for legionella”. https://www.hse.gov.uk/legionnaires/testing-monitoring-water-system.htm [5] HSE, “Legionella and landlords’ responsibilities”. https://www.hse.gov.uk/legionnaires/legionella-landlords-responsibilities.htm [6] HSE, “Other duties: RIDDOR and notification of cooling towers or evaporative condensers”. https://www.hse.gov.uk/legionnaires/what-you-must-do/duties.htm