What is a water safety plan?

A water safety plan is a documented, whole-system approach to managing the health risks that a building's water can carry. It maps every waterborne hazard, names who is responsible for each part of the system, sets out how temperatures and cleanliness are monitored, and defines what happens when a result comes back out of range. It is a living management framework, not a one-off report that gets filed and forgotten.

The idea comes from the World Health Organization, which developed water safety plans to manage drinking-water risk from source to tap rather than relying on testing the final product. In buildings the same thinking is applied to the water people drink, wash in and breathe as an aerosol. The important difference from an ordinary legionella assessment is scope: a water safety plan looks wider than legionella and covers the full range of organisms found in building water systems, including pseudomonas and non-tuberculous mycobacteria, which is why it has become the expected standard in hospitals and other healthcare premises.

What a water safety plan contains

A water safety plan brings several strands of water management together into one accountable document. A typical plan sets out:

• A description and schematic of the whole water system, from the incoming main to every outlet.
• A hazard analysis for each part of the system: where organisms could grow, where aerosols are produced, and who could be exposed.
• The control measures that manage the risk, including temperature regimes, flushing, cleaning and disinfection, and any water treatment.
• A monitoring and verification schedule: what is checked, how often, by whom, and the action levels that trigger a response.
• Roles and responsibilities, from the duty holder down to the person taking temperatures.
• An incident and contingency plan for a positive sample, an outbreak, or a system failure.

A water safety plan contains risk assessments, but it is more than the sum of them. It is the governing layer that ties assessment, control, monitoring and response into one system that a named group is accountable for keeping current.

The water safety group: who owns the plan

A water safety plan is only as good as the group that maintains it. In healthcare, HTM 04-01 describes a multidisciplinary water safety group that meets regularly and owns the plan. A typical group includes:

• Estates and facilities, the people who run and maintain the physical system.
• Infection prevention and control, often with a consultant microbiologist, who connects water results to patient risk.
• The Responsible Person (Water), the named individual accountable for day-to-day management.
• An Authorising Engineer (Water), an independent specialist who audits the arrangements and advises the duty holder.
• Clinical and nursing representation, especially where augmented care patients are treated.
• The duty holder or a senior manager who can commit resources.

Outside healthcare the job titles differ, but the principle holds. A plan owned by one person in a filing cabinet is not a water safety plan. It needs a group with the authority to act on what the monitoring reveals.

When you need a water safety plan, and when you do not

This is where a lot of online advice overreaches. Not every building needs a formal water safety plan, and telling a small office that it does is as unhelpful as telling a hospital it can get by with a single assessment.

A full water safety plan is expected, and in practice required, in healthcare. HTM 04-01 applies to NHS trusts, and the Care Quality Commission expects care homes and other regulated providers to work to the same standard. Beyond healthcare, a water safety plan is the proportionate approach for large or complex estates: universities and student accommodation, local authority housing and leisure sites, prisons, and any campus with many buildings, multiple systems and vulnerable users.

For a single, straightforward building, the law does not ask for a full water safety plan. It asks for a suitable and sufficient legionella risk assessment and a written scheme of control to manage what the assessment finds. If you are unsure which applies to your premises, our guide on whether you need a legionella risk assessment is the place to start.

Water safety plan versus written scheme of control

It is worth being precise here, because the two documents are often confused. A written scheme of control sits under the Approved Code of Practice L8 and the HSG274 technical guidance. It is legionella-specific: it describes one water system, the control measures for that system, such as storing hot water at 60°C and keeping cold water below 20°C, and the monitoring that proves those controls are working. Most non-healthcare duty holders need one as part of their legionella compliance, and it becomes a legal expectation once a risk assessment identifies a foreseeable risk.

A water safety plan is broader on two axes. It covers every waterborne pathogen, not legionella alone, and it governs the whole estate rather than a single system. A written scheme of control can, and usually does, sit inside a water safety plan as the legionella component. Think of the plan as the governance framework and the scheme as one of the operational documents beneath it.

Where the water safety plan sits in the guidance

A water safety plan draws on several layers of guidance rather than one. The overarching legal duty comes from the Health and Safety at Work etc. Act 1974 and, for a biological agent, the COSHH Regulations: an employer must assess and control the risk. ACOP L8 and HSG274 set out how to do that for legionella. In healthcare, HTM 04-01 adds the water safety plan and water safety group as the framework that ties everything together, and the World Health Organization model is the international template the approach is built on. Whichever layer applies to you, the record-keeping is the same discipline: assess the risk, write down the controls, monitor them, and evidence that the group is acting on what it finds. Our free legionella risk assessment template and log book cover the recording side of that work.