UK law explained
Is a legionella risk assessment a legal requirement?
Yes. Employers, people in control of premises and landlords all have a legal duty to assess and control the risk from legionella. The law does not require a certificate, a fixed renewal date or, for simple domestic systems, a professional assessor.
Last reviewed October 2026 against HSE guidance.
Get the free landlord legionella risk assessment template
Editable Word document for a simple rental property. The download link is on the next page.
We do not sell your details. If you ask for a quote we pass your enquiry to a UK legionella assessor. Privacy.
The laws that apply
| Law or document | What it does |
|---|---|
| Health and Safety at Work etc Act 1974 (HSWA) | Sets the general duty to protect employees and others. HSE says its duties extend to risks from legionella. Section 3(2) applies it to landlords. |
| Management of Health and Safety at Work Regulations 1999 | Provides the broad framework for assessing and controlling health and safety risks at work. |
| Control of Substances Hazardous to Health Regulations 2002 (COSHH) | Covers biological agents, including legionella. Requires you to assess, prevent or control the risk. |
| Approved Code of Practice L8 | HSE's practical guidance on meeting those duties for legionella. It has special legal status: if you follow it you will normally be doing enough to comply. |
| HSG274 technical guidance | Detailed guidance in three parts. Part 2 covers hot and cold water systems. |
What duty holders must do
HSE sets out the duties for employers and anyone in control of premises, including landlords. You must:
- identify and assess sources of risk
- manage any risks
- prevent or control any risks
- keep and maintain the correct records
- carry out any other duties you may have
The risk assessment is step one. For workplaces it should be carried out by, or with help from, someone competent, and it leads to a written scheme for controlling the risk and a named person responsible for it.
What the law does not require
- A certificate. HSE says health and safety law does not require landlords to obtain or produce a ‘legionella test certificate’.
- A fixed renewal date. HSE says the law does not prescribe that the risk assessment be reviewed on an annual or biennial basis.
- Routine water testing in homes. HSE says testing is not usually required for domestic hot and cold water systems.
- A professional for every property. HSE says most landlords can assess the risk themselves.
- Written records for everyone. Recording the findings is a statutory duty for employers with 5 or more employees. Landlords are not necessarily required to record them.
Differences across the UK
| Nation | Position |
|---|---|
| England and Wales | HSWA, COSHH and L8 apply. No fixed review interval. |
| Scotland | The same health and safety law applies. For private lets, the Repairing Standard guidance adds that the assessment must be done before the property is first let and reviewed at least every two years. Details. |
| Northern Ireland | Equivalent Northern Ireland health and safety legislation applies, and HSENI has approved L8 for use there. |
Enforcement and penalties
HSE and local authorities enforce health and safety law in workplaces. Where an employer fails to manage legionella risk, inspectors can issue improvement or prohibition notices and can prosecute.
For rented homes, HSE says it does not proactively inspect domestic premises or ask landlords for evidence of an assessment. If a tenant contracts Legionnaires' disease from the water system, the landlord may be liable to prosecution and would have to show that they had assessed and controlled the risk.
Questions people ask
Is a legionella risk assessment a legal requirement for landlords?
There is a legal duty to assess the risk. HSE says the assessment does not need to be in-depth or detailed for domestic rental properties, and that most landlords can do it themselves.
Is a legionella risk assessment a legal requirement for businesses?
Yes. Employers and those in control of premises must assess the risk, control it, and keep records. Recording the findings is a statutory duty if you have 5 or more employees.
What is L8?
L8 is HSE's Approved Code of Practice, 'Legionnaires' disease: The control of legionella bacteria in water systems'. An 'L8 risk assessment' is simply a legionella risk assessment carried out in line with it.
What is HSG274?
HSG274 is HSE's technical guidance on legionella. It has three parts: evaporative cooling systems, hot and cold water systems, and other risk systems such as spa pools.
Sources
- HSE: Legionnaires' disease, what you must do
- HSE: Legionella and landlords' responsibilities
- HSE: Approved Code of Practice L8, The control of legionella bacteria in water systems
- HSE: HSG274 Legionnaires' disease, technical guidance (Part 2 covers hot and cold water)
- Scottish Government: Repairing Standard statutory guidance for private landlords, Annex D
Checked against these sources in October 2026. This page is general information, not legal advice.
Start with the free template
An editable Word template for a simple rental property, based on the points HSE asks landlords to consider.
Get the free template →