What happens in an HSE legionella inspection?

An HSE legionella inspection is, above all, a records inspection. The first request is almost always the same: show me the monitoring records for at least the last 12 months, the risk assessment, the written scheme of control, and who your responsible person is. The physical tour comes after, and it largely confirms what the paperwork already told the inspector.

That ordering is worth understanding, because it tells you what the visit is really testing. Anyone can make a water system look right on the day. The 12 months of dated, gap-free records are what demonstrate the system is controlled every day, which is the duty the law actually imposes. This page walks through who comes, what happens, and how the visit ends.

Who inspects, and what brings them

Enforcement is split by sector. The HSE inspects higher-risk workplaces: factories, hospitals, care homes, schools in some cases, and anywhere with cooling towers. Local authority environmental health officers cover lower-risk premises such as offices, shops, hotels and most rented housing. Both use the same framework: the Health and Safety at Work etc. Act 1974, COSHH, ACOP L8 and HSG274.

Three things trigger a visit. Routine programmes, where your sector is on the inspectorate's list. Complaints, from staff, tenants or the public. And incidents: a case of Legionnaires' disease reportable under RIDDOR, or an outbreak traced towards your premises. The trigger shapes the tone but not the content; the records request is the same either way.

The shape of the visit

1. Arrival and identification. The inspector shows identification and explains the purpose and scope of the visit. Check the ID; genuine inspectors expect to be asked.
2. Opening questions. Who is the duty holder? Who is the responsible person? Where is the risk assessment? These are factual questions, and hesitating over them is itself informative to an inspector.
3. The records review. This is the core. Expect to produce at least 12 months of monitoring: temperature checks against the usual benchmarks (hot at 50°C or more at outlets, 55°C in healthcare, cold below 20°C, storage at 60°C), flushing logs for little-used outlets, tank and calorifier inspections, contractor certificates and any sampling results. The inspector is reading for continuity: missed weeks, unactioned out-of-range readings, and gaps that coincide with the responsible person's absence all stand out.
4. The physical walk. A tour of the system: calorifier and storage temperatures, cold water tanks, TMVs, sentinel outlets, any dead legs. Spot temperature checks compare what the log says with what the system does.
5. Closing discussion. The inspector summarises what was found and what happens next. Ask questions here, and make your own note of everything said.

The documents to have ready

• The current risk assessment, with its review date.
• The written scheme of control.
• The responsible person's appointment letter and training records, plus the deputy's.
• The log book: at least 12 months of monitoring entries, with five years available if asked.
• Contractor reports and certificates: sampling results, disinfection records, servicing.
• Remedial action records: what was fixed, when, and by whom.

How the visit ends

Three outcomes cover almost every inspection. A satisfactory visit ends with a letter confirming no further action. Where there are failings short of a material breach, you get advice and a letter listing what to improve; not formal enforcement, but it goes on file and a return visit will check it. Where the inspector finds a material breach, a contravention serious enough to require formal action, the response escalates: an improvement or prohibition notice, and a Fee for Intervention invoice recovering the inspectorate's time at an hourly rate. Serious, repeated or ignored breaches end in prosecution. The full ladder is mapped in what happens when enforcement action starts.

Preparing, honestly

Preparation is not rehearsal; it is making the routine true. Run the compliance checklist quarterly so gaps surface on your schedule, not the inspector's. Close out old actions. Make sure the deputy has actually done the job once. And one rule above all: never backfill records. Inspectors and courts read fabricated logs for a living; a genuine gap with a recorded explanation is a failing, but a forged entry is dishonesty, and it converts a manageable problem into a personal one. If your records have holes, start keeping them properly today and let the file show the honest date the regime began.