Water Safety Compliance Testing: What You Need to Know

Water testing is one of the most misunderstood parts of compliance. Some teams over-test and still miss control failures. Others avoid testing entirely and hope temperature checks are enough.
This post sets out what “testing” really means, when it’s expected, and how to keep your programme defensible. It’s practical guidance, not legal advice.
Key takeaways
  • Water safety compliance testing requirements are risk-based. How often you test depends on your system and the outcome of your risk assessment, not a blanket schedule.
  • Hot and cold water systems are usually managed through control and monitoring, not routine microbiological sampling. Testing may be needed when control measures are not being met.
  • If you do test for legionella, sampling should follow BS 7592, biocide should be neutralised where possible, and the lab should be UKAS-accredited and part of a proficiency scheme.
  • Temperature remains the simplest “early warning” check: keep cold water below 20°C where possible; store hot water at ≥60°C; deliver 50°C within 1 minute at outlets (55°C in healthcare).
  • Testing only helps if you can show what happened next: results linked to decisions, remedials, and re-checks.

What counts as “testing” in water safety compliance?

In day-to-day terms, water safety testing usually falls into two buckets:
Operational checks and monitoring
Temperatures, flushing, inspections, condition checks, and confirming that control measures are being delivered.
Microbiological testing (sampling)
Collecting water samples and sending them for legionella analysis, usually as part of monitoring, where it’s appropriate.
The management framework sits within ACOP L8 and the supporting technical guidance HSG274. If you want the “why” behind the routines, start with those two documents.

How often do you need to test?

The regularity of checks depends on your system and the outcome of your risk assessment.
Where systems are open to the elements, such as cooling towers, evaporative condensers and spa pools, routine testing should be done at least quarterly.
For hot and cold water systems (generally enclosed), microbiological monitoring is not usually required because significant contamination is less likely than in cooling towers. Testing for legionella may be needed where there is doubt about the control regime’s effectiveness, or where recommended temperatures/disinfection concentrations are not being consistently achieved.
The practical takeaway: don’t start with “how often should we sample?”. Start with “what does the risk assessment say about this system, and are controls being consistently achieved?”.

The “testing requirements” most teams miss: temperature control

Even if you never take a legionella sample in a given year, you still need proof that your controls are working.
HSE’s temperature control benchmarks are widely used because they’re simple to verify:
  • Cold water kept below 20°C where possible
  • Hot water stored at 60°C or higher
  • Hot water is distributed so it reaches 50°C within 1 minute at outlets (55°C in healthcare)
If you cannot consistently hit those, your risk profile changes and testing may become relevant. That is exactly the scenario in which Legionella testing may be necessary for hot and cold systems. 

When Legionella testing makes sense

Sampling has a place, but it is not a substitute for control.
HSE gives two clear examples of when Legionella testing may be necessary in hot and cold water systems:
  • Doubt about the control regime’s effectiveness
  • Recommended temperatures or disinfection concentrations are not being consistently achieved
In plain English: if you can’t demonstrate stable control, sampling can help you understand what’s happening in the system and what you need to fix next.

If you do sample: what “good” looks like

Sampling that doesn’t stand up to scrutiny usually fails on method, lab quality, or documentation. Here are the essentials:
  • The sampling method should follow British Standard BS 7592
  • If a biocide is used, it should be neutralised where possible
  • Samples should be tested by a UKAS-accredited laboratory that takes part in a water microbiology proficiency testing scheme
  • The laboratory should apply a minimum theoretical mathematical detection limit of no more than 100 Legionella bacteria per litre for culture-based methods
If you want independent confirmation that the UKHSA scheme is part of accredited proficiency testing, UKAS publishes schedules for its accredited proficiency testing providers, including UKHSA’s Food and Environmental Proficiency Testing Unit.

Interpreting results: the only question that matters

A number on a report is not the outcome. The outcome is your response. Consider what the results mean in the context of your water system, and the actions you take depend on your risk assessment. 
That means:
  • A result without a system context is meaningless
  • The same count can trigger different actions in different systems
  • You need the audit trail: decision, remedial work, and verification
If your organisation struggles here, it’s usually because results sit with the contractor, while remedials sit with a different team, and nothing is stitched together.

Appointing someone to test: what you still own

Testing may be carried out by a service provider or by the operator, if trained and properly supervised.
Either way, you still need:
  • Clear scope: which systems, which outlets, which frequency, which method
  • A chain of custody and documented sampling plan
  • A defined escalation route when results, temperatures, or site conditions fall outside your control parameters

A simple checklist for water safety compliance testing requirements

Use this as a quick sense-check before you commission (or renew) any sampling programme:
  • Do we have a current risk assessment and control scheme for this system?
  • Are temperature controls consistently achieved, with evidence?
  • If we’re sampling, is it justified by risk or control performance, not habit?
  • Is sampling aligned to BS 7592, with biocide neutralisation where possible?
  • Are samples analysed by a UKAS-accredited lab in a recognised proficiency scheme?
  • Can we show what we did after the result, and the re-check that closed it out?

Keeping it manageable across your housing stock

The hard part is not knowing what “good” looks like. It’s running it across hundreds or thousands of properties, with voids, access issues, and multiple contractors.
If you’re building consistency across your programme, it helps to anchor water testing and monitoring within a wider water quality approach, so evidence, actions, and next-due dates don’t live in separate places. Software can help. Check out True Compliance’s water quality compliance page to learn more.
Table of Contents
Landlord Electrical Safety Responsibilities Under the 2020 Regulations
If you’re looking to learn more about landlord electrical safety responsibilities in the UK, it’s worth clearing one thing up early: the 2020 Electrical Safety...
How the Fire Safety Act 2021 Affects Building Owners and Managers
If you’re working towards Fire Safety Act 2021 compliance in the UK, there is an easy detail to miss: the Act doesn’t actually replace existing...
Gas Safety Certificates (CP12) - What UK Landlords Must Know in 2025
In 2026, most landlords still say “gas safety certificate” or “CP12”. The legal requirement is the same thing in practice: a clear record that a...