£900k Legionella Fine Shows HSE No Longer Waits for Illness. Exposure Risk Alone Is Prosecution.

Sanctuary Housing was fined £900,000 at Liverpool Crown Court in October 2024 after legionella was detected at a sheltered housing scheme in Wirral. The Health and Safety Executive (HSE) found poorly managed legionella risk with inadequately trained staff. The prosecution did not require anyone to have fallen ill. Exposure to risk alone was sufficient.

If you manage a building with a hot water system, cooling tower, or any stored water — hotel, office, residential block, or sheltered housing — this prosecution matters to you. Here is what happened, why it happened, and what you need to check before your next HSE visit.

What the HSE Found at Sanctuary Housing

The HSE inspected a Sanctuary Housing scheme in Wirral and found legionella bacteria in the water system. The investigation uncovered:

• No suitable and sufficient legionella risk assessment
• Inadequately trained staff responsible for water safety
• Poorly managed control measures, including temperature monitoring and disinfection
• Failure to implement the written scheme for controlling legionella

The HSE did not need to prove anyone contracted Legionnaires' disease. Under the Health and Safety at Work etc. Act 1974 and the Control of Substances Hazardous to Health Regulations (COSHH), the duty holder must manage the risk of exposure. The court agreed that Sanctuary Housing had failed in that duty. What makes this case particularly instructive is the systemic nature of the failures. The absence of a suitable risk assessment is not a clerical oversight; it is the foundational failure that cascades into every subsequent control measure. Without a valid assessment, the written scheme becomes a theoretical document rather than a living protocol. The inadequately trained staff further compound the problem — even if temperature monitoring logs were completed, the data would lack the interpretive context needed to identify emerging risks. The HSE’s findings reveal a breakdown in the management chain: the duty holder delegated responsibility without ensuring competence, and the written scheme existed on paper but was never operationalised through routine verification. For operators managing multi-site portfolios, this case underscores that compliance is not achieved by appointing a responsible person alone. It requires documented competency, auditable records of temperature and disinfection checks, and a risk assessment that is reviewed whenever the system or its use changes. The fine of £900,000 plus costs sends a clear signal. The HSE is actively prosecuting water safety failures, and the penalties are rising.

Legionella Risk Is Not Optional — It Is a Legal Duty

Under COSHH, every employer or person in control of a premises must:

• Identify and assess sources of risk from legionella
• Prepare a written scheme for controlling the risk
• Implement, manage, and monitor the control measures
• Keep records of all checks and remedial actions
• Appoint a competent person to manage water safety

This applies to all non-domestic premises in the UK, including hotels, offices, residential blocks, and sheltered housing. The duty holder is usually the building owner, the facilities manager, or the managing agent.

The HSE's Approved Code of Practice L8 and the HSG274 technical guidance set out the detailed requirements. If you have not reviewed these documents in the last 12 months, you are behind.

The Sanctuary Housing case demonstrates precisely how the HSE interprets these duties in practice. The fine of GBP 900,000 was not for a single failure, but for systemic gaps across multiple sites over an extended period. Prosecutors highlighted that the written scheme was either absent or not followed, temperature monitoring logs were incomplete, and no competent person had been formally appointed to oversee water safety. Under L8, a "competent person" must have sufficient training, knowledge, and authority to implement control measures — not merely a named individual on paper. The HSE also scrutinised whether risk assessments were reviewed after any changes to the water system, such as new pipework or alterations to storage tanks. In Sanctuary's case, these reviews were either overdue or never conducted. For operators managing multiple properties, the lesson is clear: compliance is not a one-off exercise. It requires a live, auditable system that tracks every outlet, every temperature check, and every remedial action. Without this, a single missed flush on a dead-leg outlet can become evidence of a systemic failure in court.

What This Means for Building Managers in the GCC

Legionella is not just a UK problem. In the GCC, the risk is different but real. High ambient temperatures, stored water in rooftop tanks, and complex cooling tower systems create conditions where legionella can thrive if not properly managed.

Dubai Municipality now requires mandatory legionella testing for all commercial buildings. We covered this in detail in our earlier post: Legionella Testing Goes Mandatory for All Dubai Commercial Buildings. The regulation applies to hotels, offices, shopping malls, and residential towers. Testing frequency depends on the risk level, but quarterly sampling is common.

In Abu Dhabi, the Department of Municipalities and Transport (DMT) enforces similar requirements under the Abu Dhabi Public Health Standards. In Qatar, KAHRAMAA and the Ministry of Public Health set the rules for water safety in buildings.

The principle is the same everywhere: identify the risk, control it, and prove you have done so. Yet the UK fine against Sanctuary Housing underscores a critical gap that GCC building managers must address — the difference between having a written policy and demonstrating an operational control regime. In the GCC, the regulatory frameworks are relatively new, and enforcement is still maturing. This means that a compliance mindset focused solely on passing an annual test is insufficient. The HSE prosecution in the UK was not triggered by a single test failure; it was the result of systemic failures in temperature monitoring, lack of risk assessment reviews, and inadequate record-keeping over time. For GCC operators, the lesson is that regulators are increasingly looking for continuous evidence of control, not just a certificate of compliance. This includes logged temperature checks at sentinel outlets, documented flushing schedules for low-use outlets, and a clear chain of responsibility from the facilities manager to the board. The Sanctuary Housing case also highlights the legal exposure of senior management. Under GCC health and safety laws, building owners and operators can face personal liability for negligence. As local authorities in Dubai, Abu Dhabi, and Doha refine their inspection protocols, the bar for what constitutes "adequate control" will rise. Building managers should therefore treat the UK fine as a preview of the enforcement trajectory in the region, and invest in digital systems that provide auditable, real-time proof of water safety management — not just paper records that can be challenged in court.

Three Things to Check This Week

If you manage a building, here are three practical checks you can do today:

1. Is your legionella risk assessment current?
A risk assessment is not a one-time document. It must be reviewed regularly and updated whenever the water system changes — new pipework, new outlets, changes in use, or after any positive sample. If your assessment is more than two years old, it is likely out of date. The HSE’s prosecution of Sanctuary Housing underscores that a static assessment is a compliance failure. In practice, a current assessment must also demonstrate that you have considered all foreseeable risks, including dead-legs in seldom-used wings, temperature stratification in storage tanks, and the impact of seasonal occupancy changes. Without a documented review cycle, your assessment is merely a paper exercise — and the HSE will treat it as such.

2. Do you have a written scheme?
The risk assessment must lead to a written scheme that specifies how you will control the risk. This includes temperature monitoring schedules, flushing regimes, disinfection procedures, and who is responsible for each task. If you cannot find the written scheme, you do not have one. The Sanctuary Housing case revealed that even where a scheme existed, it was not followed consistently. A robust written scheme must be site-specific, not a generic template. It should assign clear accountability for each control measure, define acceptable temperature ranges for sentinel outlets, and include a corrective action protocol for when readings fall outside those ranges. Without this level of detail, your scheme is a checklist, not a control plan.

3. Are your staff competent?
The HSE found that Sanctuary Housing's staff were inadequately trained. Competence means more than a one-day course. The person responsible for water safety must understand the system, the risks, and the control measures. They must also have the authority to act when something goes wrong. In practice, competence requires documented evidence of ongoing training, a clear understanding of the written scheme, and the ability to interpret monitoring data to spot emerging risks. If your designated responsible person cannot explain why a temperature reading of 45°C at a shower outlet is a concern, or does not know how to initiate a flush of a low-use zone, then your competence framework has a gap. The HSE will find it.

If you answered no to any of these, you have a gap. The HSE will find it.

How HermanWa Helps You Stay Compliant

Managing legionella risk is a data problem. You need to know water temperatures at sentinel outlets, flush frequencies, disinfection dates, and test results. You need to prove to regulators that you have done the work. The Sanctuary Housing case underscores a critical point: the HSE does not merely expect a risk assessment to exist; it expects demonstrable, continuous control. A static PDF on a server is not evidence of compliance. The fine of £900,000 reflects the cost of failing to close the loop between a documented scheme and daily operational reality.

HermanWa monitors your building's water systems in real time. It tracks temperature readings at key points, logs flushing events, and alerts you when a reading falls outside the safe range. It keeps a permanent record of every check, so you have the evidence ready for any inspection. Crucially, the platform does not just store data — it structures it against your written control scheme. When a temperature deviation occurs, the system flags it immediately, allowing your team to investigate and remediate before a routine check becomes a breach. This transforms reactive record-keeping into proactive risk management.

You can ask Herman in plain English: "Show me the last three months of hot water temperatures at outlet 12" or "When was the last legionella test on the cooling tower?" Herman answers from your building's data. This eliminates the manual trawl through spreadsheets and binders that often delays corrective action. For a duty holder, the ability to produce a complete audit trail in seconds — rather than days — is the difference between demonstrating a robust management system and exposing gaps that a prosecutor will exploit.

This is not about replacing your water safety team. It is about giving them the tools to do the job properly and proving compliance without a paper chase. By automating the surveillance of critical control points and maintaining an immutable log of interventions, HermanWa helps ensure that your organisation meets the legal standard of "reasonably practicable" control — the very standard the HSE held Sanctuary Housing to have failed.

If you want to see how Herman handles water safety compliance, talk to the HermanWa team.

— The HermanWa Team