Your Cooling Tower Isn't Registered With Your Local Authority. Here's What That Costs.

If you manage a building in the UK with a cooling tower or evaporative condenser, you have a legal duty to tell your local authority about it. This isn't new — the Notification of Cooling Towers and Evaporative Condensers Regulations 1992 (NCTEC) has been law for over three decades. But enforcement is tightening, and the consequences of getting it wrong are rising.

What the NCTEC Regulations Actually Require

The regulations are straightforward. Any premises with a cooling tower or evaporative condenser on site must notify the local authority in writing. This includes the location of the device, the number of units, and the person responsible for the premises. Critically, the notification must be made before the device is brought into operation, not after commissioning. This pre-operational requirement is often overlooked by facilities teams who assume registration can wait until the next quarterly compliance review. The local authority uses this data to maintain a public register, which the HSE can cross-reference during inspections or outbreak investigations.

You must also report any changes within one month. If you install a new cooling tower, remove an old one, or change the person responsible, the local authority needs to know within 30 days. This includes temporary decommissioning — a tower taken offline for maintenance but left in place still counts as a notifiable device. The definition of "person responsible" is deliberately broad: it covers the owner, the operator, and any managing agent with control over the premises. In multi-tenant buildings, this can create ambiguity, and the regulations place the onus on all parties to ensure the notification is accurate and current.

Failure to register is a criminal offence. The Health and Safety Executive (HSE) can prosecute without waiting for anyone to get ill. As we covered in our piece on the £900k legionella fine, exposure risk alone is enough for prosecution now. The practical implication is that a single unregistered cooling tower on a hotel roof or in a plant room creates a direct liability path for the operator, regardless of whether water samples later test negative. Registration is not a substitute for a written scheme of control, but it is the first legal checkpoint that regulators will verify.

Why Cooling Towers Get Special Attention

Cooling towers and evaporative condensers create ideal conditions for Legionella bacteria. They operate at temperatures where Legionella thrives — between 20°C and 45°C. They produce aerosolised water droplets that can be inhaled deep into the lungs. And they are often located on rooftops or in plant rooms where routine checks can be missed.

A single cooling tower can spread Legionella across a wide area. The 2012 outbreak in Edinburgh's south-west, traced to a cooling tower, infected 92 people and killed four. The HSE does not want a repeat.

This is precisely why the NCTEC Regulations single out cooling towers for mandatory local authority notification — a requirement that goes beyond general water hygiene duties under the Health and Safety at Work Act. The notification obligation creates a formal, auditable record of every evaporative cooling system in a local authority's jurisdiction. Without it, duty holders could inadvertently operate unregistered equipment that escapes routine inspection cycles. The regulation closes that gap by forcing operators to declare the system's location, type, and responsible person before it even goes into service. For building operators managing multiple sites — particularly in hospitality and real estate portfolios — this means centralising compliance data becomes non-negotiable. A missed notification for a single rooftop unit can trigger enforcement action, regardless of whether the system is actively causing harm. The HSE's logic is straightforward: you cannot inspect what you cannot find. By making registration a precondition of operation, the regulations shift the burden from reactive outbreak investigation to proactive asset visibility. For operators using platforms like HermanWa, this translates into automated notification triggers tied to asset registers — ensuring that every cooling tower, whether in a Dubai hotel or a London apartment block, is logged with the relevant authority before the cooling season begins.

Quarterly Legionella Testing for High-Risk Systems

The Approved Code of Practice (ACOP L8) and HSG274 Part 1 set out the testing regime for cooling towers. For high-risk systems — which includes most cooling towers in commercial buildings — quarterly legionella testing is the standard.

This means sending water samples to a UKAS-accredited laboratory every three months. The lab tests for Legionella pneumophila and other species. Results come back as colony-forming units per litre (CFU/L).

If your test returns above 100 CFU/L, you need to take action. Above 1,000 CFU/L, you should shut the system down and decontaminate immediately.

But testing alone is not enough. You also need weekly temperature checks, monthly visual inspections, and a written scheme of control that documents everything. The HSE expects to see this documentation if they visit.

The quarterly testing requirement is not merely a procedural checkbox; it is a regulatory linchpin that directly informs the risk assessment and the written scheme of control mandated under COSHH. A single elevated result can trigger a cascade of obligations: immediate review of biocide dosing, inspection of drift eliminators, and verification of temperature gradients across the system. Critically, the HSE interprets the 100 CFU/L threshold as an early warning, not a safe harbour. Any result above this level must be investigated and remediated, with the root cause documented in the site logbook. For operators managing multiple towers across a portfolio, the challenge lies in maintaining consistent sampling protocols — ensuring samples are taken from the same return line, at the same time of day, and under similar operating loads — to produce comparable data. Without this discipline, quarterly results become isolated snapshots rather than a trendable dataset. The HSE’s enforcement focus has sharpened on this point: they now routinely cross-reference laboratory results against temperature logs and biocide records during inspections. A gap between what the lab reports and what the weekly checks show is a red flag that can lead to enforcement notices or prosecution under the Health and Safety at Work Act.

What Changes When You Register

Once you notify the local authority, they will add your premises to their register. This register is public. Anyone can request to see it — including tenants, employees, and members of the public.

Being on the register means the local authority's environmental health team knows you exist. They may inspect your premises. They may ask to see your legionella control records. They may take their own water samples.

This is not a bad thing. A proactive local authority visit can catch problems before they become outbreaks. But it does mean you need your paperwork in order.

Registration shifts your compliance posture from reactive to verifiable. The local authority now holds a formal record of your cooling tower's location, age, and operational status. This triggers a statutory expectation that you maintain a written scheme of control under the Health and Safety Executive's Approved Code of Practice L8. If your records are incomplete — missing risk assessments, absent weekly temperature logs, or outdated schematics — the environmental health officer can issue a formal notice requiring remediation. Failure to comply can escalate to a prohibition notice or prosecution under the Health and Safety at Work Act.

Critically, the public register also creates a transparency obligation. A tenant or neighbouring business can cross-reference your registration against any reported illness clusters. In practice, this means your legionella control documentation must be audit-ready at all times, not just during an inspection cycle. Operators who treat registration as a one-off administrative step often overlook the ongoing duty to update the register if the tower is decommissioned, replaced, or relocated. The NCTEC regulations require you to notify the local authority of any material change within 28 days. Failure to do so can result in the register showing an inaccurate asset, which itself becomes a compliance risk during any future incident investigation.

Common Mistakes Facilities Managers Make

The most common error is assuming registration is a one-time task. It is not. Every change to the system — new unit, removal, change of responsible person — must be reported within one month. Many facilities managers forget this when a contractor replaces a cooling tower or when the building management company changes. This oversight can lead to a gap in the local authority’s records, potentially triggering enforcement action if an inspection reveals an unregistered unit. The one-month window is not a suggestion; it is a statutory requirement under the Notification of Cooling Towers and Evaporative Condensers Regulations (NCTEC). Facilities managers should embed this notification trigger into their contractor handover checklists and change-of-control protocols.

Another mistake is confusing registration with compliance. Registration tells the local authority you have a cooling tower. It does not prove you are managing the legionella risk. You still need the full written scheme of control, regular testing, and maintenance records. Registration is a notification duty under public health law, whereas compliance is an ongoing duty under the Health and Safety at Work Act and the Approved Code of Practice L8. A registered tower that lacks a current risk assessment or fails to meet temperature and biocide dosing thresholds is still a non-compliant installation. Local authorities share registration data with environmental health officers, meaning a registered site can become a target for inspection if the authority suspects poor management.

A third error is assuming small systems are exempt. The regulations apply to all cooling towers and evaporative condensers, regardless of size. A small evaporative condenser on a retail unit's air conditioning system needs registration just as much as a large industrial cooling tower. The legislation does not set a minimum water volume, heat rejection capacity, or building type threshold. Facilities managers in smaller commercial premises — such as restaurants, gyms, or standalone retail units — frequently overlook this, assuming their system is too minor to warrant notification. This assumption is legally unsound and can result in a notice of non-compliance. The duty falls on the person who has control of the premises, not on the size of the equipment.

How This Connects to Your Broader Compliance

Cooling tower management sits alongside other building compliance duties. If you are managing a commercial building in the UK, you are already dealing with EPC requirements under MEES, fire compartmentation for insurance, and possibly SECR reporting for energy use. Adding legionella control to the list can feel overwhelming.

But the systems are connected. A well-maintained cooling tower uses less energy. A building management system that tracks water temperature and biocide dosing can alert you to problems before they become compliance failures. And a single platform that logs all your compliance data — cooling tower registration, legionella test results, maintenance records — saves you the headache of chasing paperwork across multiple contractors.

The NCTEC regulations do not operate in isolation. They intersect directly with the Health and Safety Executive’s Approved Code of Practice L8, which mandates a written scheme of control for any water system that may create a risk of legionella exposure. Local authority notification under NCTEC is the administrative trigger that ensures your tower is on the regulator’s radar, but the substantive duty remains the same: demonstrate that you are actively managing water temperature, biocide levels, and system cleanliness. Failure to register can lead to enforcement action, but failure to maintain the tower can lead to prosecution under the Health and Safety at Work Act. The two are legally distinct yet practically inseparable.

We wrote about MEES swallowing commercial portfolios and fire compartmentation demands from insurers. Cooling tower compliance is another layer of the same picture.

What This Looks Like in Practice

Start with a simple audit. Walk your plant rooms and rooftops. Identify every cooling tower and evaporative condenser. Check whether each one is registered with the local authority. If not, notify them in writing today. This is not a one-off exercise. Under the NCTEC Regulations, registration must be maintained and updated whenever equipment is modified, decommissioned, or replaced. A single unregistered unit on a site can trigger enforcement action, even if the rest of your portfolio is compliant.

Then review your legionella control scheme. Do you have quarterly test results for every high-risk system? Are your weekly temperature checks documented? Is your written scheme of control up to date and signed off by a competent person? The local authority will expect to see a clear audit trail linking each cooling tower to its specific risk assessment, monitoring schedule, and remedial actions. Gaps in documentation are treated as evidence of inadequate control, not administrative oversight.

If any of this is missing, prioritise it. The HSE is not waiting for an outbreak to prosecute. And your local authority now has the tools and the mandate to check. They can issue compliance notices, require immediate shutdowns, and refer cases for criminal prosecution without waiting for a confirmed Legionella case. The regulatory burden has shifted from reactive investigation to proactive verification.

For facilities managers juggling multiple buildings across different local authorities, a centralised system that tracks registration dates, test results, and maintenance schedules makes the difference between compliance and a knock on the door. Each local authority may interpret notification requirements slightly differently, and manual tracking across dozens of sites introduces risk of missed deadlines or inconsistent records. A platform that consolidates registration status, flags upcoming renewals, and stores supporting documentation in one place reduces that exposure significantly. See how Herman handles this — one place for your cooling tower data, your energy monitoring, and your compliance records.

— The HermanWa Team