If your head office or an international client asks for a WHO-style water safety plan and you already run a UK ACoP L8 regime, the real question is not which is better. It is what a water safety plan adds to a system you have already built, and whether you are now running two of everything.
The short answer: the two frameworks share a spine and differ in reach. Both start from “understand your system, find the hazards, control them, prove the controls work”. The UK route gets there through a legal duty and a Legionella-focused written scheme. The WHO route gets there through a broader, building-wide plan that treats Legionella as one waterborne hazard among several. An estate meeting ACoP L8 is most of the way to a credible water safety plan already, but not all the way.
The two things being compared
The UK route starts with statutory duties under the Health and Safety at Work etc. Act and COSHH. ACoP L8 has special legal status under that framework, names a duty holder and a responsible person, and expects a suitable and sufficient Legionella risk assessment feeding a written scheme of control [2]. HSG274 then gives the supporting technical detail, temperature regimes, monitoring, sampling, system-specific control for hot and cold water, cooling towers and other systems [3].
The WHO model is guidance, not law. The water safety plan (WSP) concept comes from the WHO Guidelines for Drinking-water Quality and was extended to premises in Water Safety in Buildings, which applies the same risk-management logic from the point water enters a building to the point it is used [1]. A WSP assembles a team, describes the whole system, identifies hazards and hazardous events, assesses and prioritises risks, sets control measures with monitoring, then verifies the plan works and reviews it. Crucially, it is multi-hazard by design, Legionella, other microbial risks, chemical and physical contamination, scalding, and it is the framework NHS England’s HTM 04-01 builds on with its water safety group and water safety plan in healthcare premises [4].
So one is a UK legal-duty framework, supported by an Approved Code of Practice and HSE technical guidance; the other is a voluntary, whole-building, multi-hazard planning method. They are not rivals. They overlap heavily, and where they differ, the difference is usually scope rather than contradiction.
Where they agree, where they diverge
The table below maps the two against the dimensions that actually decide how much extra work a WSP means for an L8-compliant site.
| Dimension | WHO Water Safety in Buildings / WSP | UK ACoP L8 & HSG274 |
|---|---|---|
| Legal status | Guidance; voluntary unless adopted by a client, group policy or national law [1] | Legal duties come from HSWA/COSHH; ACoP L8 has special legal status and HSG274 is HSE technical guidance [2][3] |
| Hazard scope | Multi-hazard across the whole building water system, microbial, chemical, physical [1] | Legionella-led, with related waterborne organisms addressed in HSG274 detail [3] |
| Driving logic | Proactive, system-wide planning from incoming supply to point of use [1] | Risk-assessment led, then prescriptive task control (temperatures, monitoring) [3] |
| Ownership model | A multidisciplinary water safety team owns the plan [1]; mirrored by the water safety group in HTM 04-01 [4] | Named duty holder and responsible person carry the legal accountability [2] |
| Control measures | Identified per hazardous event, with operational monitoring at each control point [1] | Set in a written scheme of control with defined parameters and frequencies [2][3] |
| Verification | Explicit verification and validation step that the whole plan works [1] | Auditing, review and record-keeping confirm the scheme is effective [2] |
| Review trigger | Periodic review plus revision after incidents or system change [1] | Review when there is reason to believe the assessment is no longer valid, or on significant change [2] |
Read across the rows and the pattern is clear. Hazard analysis, named ownership, control-and-monitor, verify, review, both frameworks have all five. The divergence is concentrated in two columns: hazard scope and driving logic. The UK regime is deeper on Legionella and carries the force of law. The WHO model is broader across the building and more explicit about treating the plan as one coherent whole rather than a set of discrete tasks.
Which to lead with, and when
For a UK site, the answer is not “pick one”. The legal duties under HSWA and COSHH, interpreted through ACoP L8 and supported by HSG274, remain the baseline. A WSP does not displace them [2][3]. The practical move is to keep your L8 risk assessment and written scheme as the compliance backbone, then frame them as components inside a building-wide water safety plan when a WHO-aligned or corporate global standard is required.
Lead with the WSP framework when you are reporting up to a multinational group, satisfying an international accreditation, or managing a building where Legionella is genuinely not the only water risk worth planning for, a large healthcare estate is the clearest case, which is why HTM 04-01 already wraps the L8 duty inside a water safety group and plan [4].
Lead with the L8 documentation when an HSE inspector, an enforcing authority or a UK insurer is the audience. They are looking for the UK compliance artefacts, the assessment, the scheme, the records, not a WHO document.
What a WSP actually adds for an L8-compliant estate
If you already meet ACoP L8, a water safety plan typically adds four things rather than replacing what you have. A genuinely whole-system description, from the incoming main onward, rather than a Legionella-asset register. Coverage of non-Legionella hazards your L8 assessment was never scoped to address. A standing multidisciplinary team that meets and owns the plan, instead of accountability resting on one or two named individuals. And an explicit verification step that asks whether the whole plan is working, not just whether each task was done.
None of that conflicts with UK law. Most of it is good practice the better UK estates already do informally. The WSP simply names it, structures it and makes it auditable against an international reference.
This comparison is a structural map, not a compliance verdict. Neither framework tells you what is safe in your specific building, that judgement belongs to a competent person carrying out a site-specific water risk assessment, who can decide which hazards, control points and monitoring your systems actually need. Treat WHO guidance and ACoP L8 as inputs to that assessment, not substitutes for it, and take legal or clinical questions to the appropriate professional.
FAQ
Does adopting a WHO water safety plan replace my ACoP L8 duties?
No. ACoP L8 has special legal status and HSG274 is recognised HSE technical guidance, but the legal duties themselves sit in HSWA and COSHH [2][3]. Those UK duties remain the enforceable baseline regardless of any voluntary framework you adopt. A water safety plan is best treated as the wider structure your L8 risk assessment and written scheme of control sit inside, not a replacement for them.
Is a WHO water safety plan legally required in the UK?
Not in general. The WHO model is guidance, and a WSP becomes mandatory for you only where a client contract, a corporate group policy or an accreditation imposes it [1]. The notable UK exception is healthcare, where NHS England’s HTM 04-01 effectively requires the water safety group and water safety plan approach for in-scope premises [4].
What does a water safety plan add that an ACoP L8 regime doesn’t already cover?
Mostly breadth. An L8 regime is Legionella-led and task-focused; a WSP describes the whole building water system end to end, addresses non-Legionella hazards, puts a standing multidisciplinary team in charge, and adds an explicit step to verify the plan works as a whole [1]. Much of this is good practice already, but the WSP makes it structured and auditable.
How does the WHO model handle hazards other than Legionella?
It treats Legionella as one of several waterborne hazards. The WSP method asks you to identify every hazardous event across the system, microbial, chemical and physical, and set a control measure for each [1]. That is wider than a Legionella risk assessment, which is scoped to that organism, so a WSP usually surfaces risks your L8 work was never asked to consider.
Where to start
Take your current L8 risk assessment and written scheme of control and lay them against the seven dimensions in the table above. The rows where you have strong evidence, hazard analysis, control measures, records, are your existing compliance. The rows where you are thinner, whole-system description, non-Legionella hazards, a standing water safety team, formal verification, are precisely what a water safety plan would add. Map that gap before you commit to running anything in parallel, and you will usually find you are extending one system rather than building a second.
Sources
- World Health Organization, “Water Safety in Buildings”. https://www.who.int/publications/i/item/9789241548106
- HSE, ACoP L8 (2013), “Carrying out a risk assessment”, p.12. https://www.hse.gov.uk/pubns/books/l8.htm
- HSE, HSG274 Part 2 (2024), “Operation and inspection of hot and cold water systems”, p.70. https://www.hse.gov.uk/pubns/books/hsg274.htm
- NHS England, “Health Technical Memorandum 04-01: Safe water in healthcare premises”. https://www.england.nhs.uk/publication/safe-water-in-healthcare-premises-htm-04-01/