Is legionella testing a legal requirement?

No: for most water systems in the UK, legionella testing in the laboratory sense is not a legal requirement. There is no statute and no HSE rule that obliges a duty holder to send water samples to a laboratory on a routine basis. What the law does require is broader and more demanding than that: you must assess the risk from legionella in your water system, put controls in place, monitor that they are working, and keep the records to prove it. Sampling is one tool inside that framework, used in defined situations, not a universal obligation.

What the law actually requires

The duty chain runs like this. The Health and Safety at Work etc. Act 1974 requires employers and those in control of premises to protect people from risks, so far as is reasonably practicable. The COSHH Regulations apply that duty to biological agents, which includes legionella. ACOP L8, the Approved Code of Practice, translates the duty into practical terms for water systems, and HSG274 provides the technical detail. ACOP L8 carries special legal status: a court can treat a failure to follow it as evidence of a breach unless you can show you met the duty another way.

What that framework demands, in order, is: a legionella risk assessment; a written scheme of control where the assessment identifies a risk to control; appointment of a competent responsible person; implementation of the controls; monitoring that they work; and records of all of it, kept for at least five years. Laboratory testing appears in this framework as a verification tool, not a standing requirement.

When sampling is effectively required

There are situations where sampling stops being optional:

• Cooling towers and evaporative condensers, sampled at least quarterly by default under HSG274 Part 1, alongside dip-slide monitoring.
• Spa pools and hot tubs in commercial use, sampled at least monthly under HSG274 Part 3.
• Healthcare premises, where HTM 04-01 sets a sampling programme as part of the water safety plan.
• Systems where temperature control is not practical, where the written scheme relies on chemical or other treatment and sampling verifies it works.
• Wherever the risk assessment says so. This is the catch-all that matters: if your assessment identifies a risk that can only be checked by sampling, then sampling becomes part of your scheme of control, and failing to do it is failing to follow your own scheme.

Why the myth persists

The “annual legionella test” myth has three sources. First, contractors sell testing, and a legal-sounding requirement sells more of it; HSE has repeatedly warned landlords against being told they must pay for routine sampling they do not need. Second, people conflate testing with monitoring: the monthly temperature checks and weekly flushes that are expected get mentally bundled into “testing”, and the laboratory gets bundled in with them. Third, the legionella certificate myth creates an expectation of a document you renew each year, when in fact no such certificate exists in law.

What an inspector actually asks for

When the HSE or a local authority inspector looks at legionella control, the laboratory reports are not the first thing they reach for. They ask for the risk assessment, the written scheme of control, and the monitoring records: the temperatures, the flushes, the tank and calorifier inspections, week by week. Those records, kept for at least five years in a log book, are the evidence the duty was managed. A clean laboratory result attached to an empty monitoring log impresses nobody, because it shows a moment, not management.

The practical bottom line: put your effort where the duty sits. Assess the risk, control it with temperature and flushing where you can, monitor and record it with the temperature checker and a log book, and let the risk assessment tell you when sampling is genuinely needed. The distinction between the monitoring the law expects and the testing it sometimes needs is explored further in legionella monitoring versus testing.