What to do after a positive Legionella sample in a healthcare water system

A laboratory result is the trigger for a decision, not the decision itself. Protect people who may be exposed, work out whether the problem is local or systemic, investigate the controls, correct the cause and prove that control has been restored. This is England healthcare guidance, and the local water safety plan and clinical governance determine the actual response.

The first mistake is to treat the number as a complete risk assessment. The result matters, but so do the sampling method, outlet, water system, other samples, patient group and existing control measures. An isolated positive from a little-used outlet can suggest a local problem. Multiple positive or post-flush samples can suggest wider system contamination. Neither inference is certain without investigation. NHS England: HTM 04-01 Part B explains these distinctions in its Legionella sampling chapter.

The result is a trigger for a decision, not the decision itself

The immediate purpose is to protect people who may be exposed while competent teams establish what the result means. Tell the named responsible person and follow the organisation’s water safety plan. Bring in infection prevention and control and clinical leads when susceptible patients or exposed outlets are involved. Record exactly where and when the sample was taken, whether it was before or after flushing, the units and detection limit, the laboratory’s method and the date the result was received. Decide whether any outlet or service needs interim restriction, and do not wait for a routine water safety group meeting if the result suggests immediate patient risk.

This guide explains the decision pathway. It does not supply a universal numeric safe threshold for every room or a standard treatment recipe. HTM 04-01 Part B includes action-level tables and example flowcharts, and it says individual conditions determine which procedure is appropriate. The local water safety plan should assign roles, escalation and controls for the particular system and patient group. The technical response and the clinical decision must be recorded together.

Confirm the context before comparing the count

Start by validating the result. Identify the laboratory, accreditation, sample reference, organism reported, count and reporting units. Verify the sample point against the outlet inventory. A room label can be wrong, and a laboratory code may refer to a sample taken from a flexible hose, a thermostatic mixing valve or a storage vessel rather than the tap named in a maintenance system. Ask whether the sample was pre-flush or post-flush, whether the outlet had been disinfected recently and whether the water treatment system was operating normally at collection.

The HSE: testing and monitoring guidance says the sampling method should follow BS 7592 where monitoring is appropriate, and samples should be analysed by a UKAS-accredited laboratory participating in a proficiency scheme. HTM 04-01 Part B gives similar laboratory expectations for healthcare samples. A surprising result may need clarification with the sampler or laboratory. That is not a reason to dismiss it while a vulnerable patient continues to use the outlet. Preserve the original result and document any interpretation or repeat sample as a separate step.

Review the monitoring plan that led to the sample. Was it routine surveillance in a high-risk area, a follow-up to control failure, an investigation after a case, or a check after remedial work? The meaning of one count depends on that purpose. A positive follow-up after disinfection raises a different question from the first low-level positive at a rarely used outlet. Compare with earlier samples from the same outlet and nearby points, temperature or disinfectant records, outlet use and known plumbing changes. A single data point should not erase a trend.

HTM 04-01 Part B notes that modern laboratories can detect counts below older reporting limits. It says the primary concern is protecting susceptible patients, so any detection should be investigated and, if necessary, the system resampled in line with the monitoring strategy and risk assessment. A low number cannot simply be marked green everywhere. Equally, a positive sample does not automatically prove that the entire building is colonised. Patient risk and system evidence determine escalation.

Identify who and what may be exposed

Map the outlet to its water source and served population. Is it in haematology, oncology, transplant care, a neonatal area, accommodation for older people or another service with patients at increased susceptibility? Does it generate an aerosol through a shower, spray tap, therapy device or other use? Could staff or visitors use it? Is the water also feeding clinical equipment or a process that needs its own specialist control? The water safety group and infection prevention team should assess the actual route of exposure.

The HSE: managing Legionella in health and social care explains that care homes and healthcare premises often serve people at higher risk. Legionnaires’ disease can be contracted by breathing in contaminated water droplets. It directs providers to assess hot and cold water systems, identify who is at risk and maintain suitable controls. A generic building compliant indicator cannot show whether a particular oncology patient used a positive shower or whether a contaminated outlet is isolated from a clinical process.

Trace the plumbing. Which branch, loop, calorifier, storage tank, return line and mixing device serve the sample point? What other outlets share that path? A positive pre-flush sample often points toward local conditions, while post-flush or multiple positives may indicate a wider control problem. HTM 04-01 warns that a single sample can be ambiguous. Do not assume that a sample from a blended outlet or shower describes the whole system. A competent water specialist should plan any additional samples at points that can distinguish local outlet contamination from systemic risk.

Review any live patient safety concern with clinical and microbiology teams. If a case or outbreak is suspected, follow the provider’s incident and public health pathways promptly. A positive environmental result alone is not proof of a patient infection. Nor does the absence of a known case make a control failure harmless. Keep the sample response linked to relevant incident records without placing identifiable clinical information in the general water system log.

Take interim action that matches the risk

The responsible person, water safety group or its urgent delegated members should decide what to restrict while the scope is investigated. Actions might include taking an outlet out of use, preventing aerosol-generating activity, arranging a safe alternative water supply or considering a properly selected point-of-use filter. The right combination depends on clinical use, patient susceptibility, available alternatives and the water system. Record the reason for each measure, who approved it, when it began and how staff will know it is still in force.

NHS England’s Part B action guidance gives different responses according to counts, pattern of samples and high-risk areas. Some example pathways call for isolation or measures to prevent exposure at an affected outlet while remedial action is undertaken. They also call for investigation and follow-up sampling. The diagrams are examples that can be adapted to individual conditions. A public article should not turn one branch of a complex flowchart into a blanket rule for every healthcare outlet.

An outlet closed to users still needs a water-system management decision. Simply taping it off and allowing stagnant water to sit in connected pipework can worsen the underlying control problem. The water specialist should decide whether controlled flushing, isolation, removal, treatment or another arrangement is needed, and should protect workers who perform that task. Staff need clear instruction on which outlets are affected and on any alternative for drinking, washing or clinical work. The water safety plan should cover safe water supply when normal service is disrupted.

Do not introduce a new device casually. A point-of-use filter can be an interim exposure control in selected situations, but it needs correct specification, installation, maintenance and replacement. A filter does not correct poor temperatures, stagnation or a colonised system. Changing a thermostatic mixing valve or removing a shower head also interacts with scalding risk and the clinical use of the outlet. Seek water safety and clinical advice before trading one risk for another.

Convene the right people and assign the response

HTM 04-01 Part B describes the water safety group as a multidisciplinary body that develops and manages the water safety plan and advises on remedial action when contaminated water systems or outlets increase risk to susceptible patients. In practice, an urgent incident team may act under delegated authority before the full group meets. The plan should state who can make immediate outlet and service decisions, who interprets microbiology, who directs the plumber or treatment contractor and who informs clinical departments.

At the first review, produce a short factual brief: result, sample type, affected system, patients and uses, existing controls, other positive samples, any known clinical concern, immediate restrictions and proposed investigation. Avoid forwarding an unexplained laboratory PDF to dozens of managers and assuming someone will act. Give one person responsibility for the event timeline and one route for questions from clinical staff. A department must know whether a sink or shower is available today, not simply that the water safety group has been informed.

The healthcare provider remains responsible for safe premises and patient care even when sampling and treatment are contracted. CQC: Regulation 15 guidance applies to regulated services in England and covers safe, suitable, maintained premises and equipment. The provider should have access to contractor reports, understand any limitations and decide whether the work actually addresses its risk. A contractor’s completed field is not the clinical release decision.

Document external notifications based on the actual facts and current rules. A water sample result, a suspected healthcare-associated infection, a confirmed case and a worker exposure are different events with different routes. Involve the provider’s infection prevention, public health and legal leads when notification may be required. This page does not imply that every positive environmental sample must be reported to one regulator under one rule.

Investigate why the controls failed

Review the written control scheme and recent evidence. Temperature control, biocide level where used, water turnover, flushing, cleaning, disinfection, maintenance and sampling all matter. A contractor may provide monthly readings that look complete while a dead leg, infrequently used outlet or failed circulation loop persists. Look for missing checks, repeated near-limit readings and discrepancies between the schematic and the installed pipework. Ask whether a refurbishment or service change created a branch that no longer flows as expected.

The HSE healthcare page describes temperature control, cleaning, inspection and checks determined by the risk assessment. HTM 04-01 Part B directs the water safety plan to include system description, hazards, controls, corrective actions, monitoring, verification and review. The investigation should use that structure. If the result is local, examine outlet use, scale, corrosion, mixing valves, flexible hoses, warm cold-water pipes and any local dead end. If evidence points to a system issue, inspect storage, distribution, return temperatures, treatment and connected outlets. Do not clean one tap and close the event if samples elsewhere show a wider problem.

Be careful with sampling after treatment. A sample taken immediately after disinfection may not show whether control will last. HTM 04-01’s example action charts discuss retesting after remedial action and later checks for sustained effectiveness, but the interval depends on the chosen procedure and risk. The responsible person and competent specialist should define both an immediate confirmation and a longer-term monitoring plan where appropriate. Retain the methods and timing so future reviewers can interpret a negative result properly.

The investigation should also examine governance. Who received the earlier temperature alarm? Was it acknowledged and corrected? Did an outlet become infrequently used after a ward changed function? Did a project handover update the water schematic and water safety plan? Were contractors told which patient areas were high risk? A positive result often exposes a control-system gap. Fixing the outlet without fixing how the gap arose can lead to another positive result elsewhere.

Separate technical correction from clinical return to use

A remedial work order should state the cause being addressed, the outlets and system sections affected, precautions for patients and workers, exact work performed and how success will be checked. Depending on the situation, competent specialists may clean or replace an outlet, remove a dead leg, repair circulation, correct temperature control, disinfect part or all of a system, or revise the water safety plan. None is a universal first step. Work on hot water also needs scalding controls, especially for vulnerable people.

The technical reviewer should compare post-work evidence with the event’s acceptance criteria. Was the source of contamination understood? Have relevant temperatures or treatment levels returned to the approved control range? Were samples taken at points and times that test the original concern? Have neighbouring outlets or the broader system been checked if the pattern suggested systemic contamination? Are controls stable rather than briefly improved after treatment? A negative sample at a different outlet cannot prove the positive outlet is safe.

The clinical team then decides whether the affected outlet or service can resume its intended use. That decision may consider patient group, microbiology advice, any temporary filters, completion of cleaning, remaining restrictions and the monitoring plan. Record the technical conclusion and clinical acceptance separately. If the situation remains uncertain, maintain restrictions and set a review point. An action marked complete should not silently reopen a shower used by highly susceptible patients.

If a positive result follows earlier remedial work, escalate rather than repeat the same treatment without reassessment. Compare sampling locations, method and timing. Reconsider system design, hidden stagnation, biofilm, treatment limitations and the competence of the investigation. The water safety group should decide whether the written scheme and risk assessment need revision. A sequence of negative then positive samples is a trend that requires explanation, not an administrative failure to upload a certificate.

Keep one traceable event record

A usable event record links the laboratory result to the physical water system and to the decisions made. Record the outlet identifier, room, water source, sample type, laboratory count and units, detection limit, collection and receipt dates, patient risk group, responsible person and clinical contacts. Add the immediate restriction, scope investigation, additional samples, control review, remedial work, post-work evidence, release decisions and scheduled follow-up. Preserve the original laboratory report and versions of the water schematic used at the time.

A simple status sequence can help teams: result received, exposure assessed, interim measures active, scope investigation under way, remedial action in progress, technical evidence reviewed, clinical use approved, and longer-term follow-up pending or complete. Each transition needs an owner and time. Do not collapse outlet fixed, system controlled and patient area reopened into one green status. A general document store may hold the evidence, but people still need to interpret it.

HTM 04-01 Part B recommends electronic data management for large, complex systems so water safety groups can see chemical and microbiological trends. It also calls for records of responsible people, significant risk assessment findings, procedures and monitoring results. That is a reason to preserve structured data and a decision history, not an endorsement of any particular commercial platform. If sensitive patient or outbreak information is relevant, link to the controlled clinical record rather than copying it into a facilities folder.

The event record should feed the next review of the water safety plan. Update outlet use and high-risk area lists, sampling locations, control limits, escalation routes and contractor instructions where the investigation showed a gap. Check that staff who use the area can see the current restriction and know whom to call. An annual risk assessment file that never reflects a positive result will not provide useful assurance.

Worked example: one positive shower in a high-risk unit

A routine sample from a shower in a unit serving highly susceptible patients returns a low positive Legionella count. The team does not dismiss it because it is below an older laboratory reporting threshold. It verifies the sampling method and whether the result came from the first draw or after flushing. The responsible person, infection prevention lead and unit manager assess whether patients may be exposed. They restrict the shower pending a decision and arrange a suitable alternative. The water specialist reviews usage, temperatures, the shower assembly and nearby outlets.

A follow-up sampling plan tests whether contamination is confined to the outlet or present on the branch. The team discovers that the shower has been used infrequently since a room-use change and that its hose has visible scale. It agrees targeted remedial work and checks the branch control records. After the work, the specialist obtains the agreed follow-up evidence. Infection prevention and the unit manager accept return to use under the local plan, with further monitoring scheduled. The record shows the original result, decision times, work, samples and release.

This example does not set a safe numerical threshold or prescribe a single filter or flushing interval. A different patient population, sample pattern or plumbing arrangement could require a wider restriction and investigation. The point is the reasoning chain: protect, locate, test the scope, correct the cause and verify that control persists.

Worked example: positives across several outlets

A set of samples from different outlets on the same hot-water loop is positive, including post-flush samples. That pattern raises concern about control beyond a single fitting. The water safety response team maps the loop, identifies the clinical services served and assesses exposure. The responsible person reviews circulation, return temperatures, treatment and recent maintenance. Interim controls cover all outlets that may be affected, not just the first laboratory line item. The clinical leads agree alternative arrangements while the system is investigated.

The competent water specialist finds a circulation fault and a pipework section with poor turnover after refurbishment. A plan addresses the hydraulic problem and includes treatment, appropriate follow-up samples and monitoring to confirm sustained control. The provider records which outlets can return to use and which remain restricted. The water safety group also revises project handover requirements so future plumbing changes update the schematic and control scheme. A full-system diagnosis gives more useful information than repeating disinfection without correcting circulation.

The closure questions

Before closing the event, can the team identify the exact sample point, method, count and population exposed? Has it explained whether contamination appears local or systemic? Were interim measures appropriate for susceptible patients and clearly communicated? Has the responsible person recorded the control review and cause? Do remedial work records match the affected system? Are follow-up results taken at the right locations and times, and is there a plan to confirm sustained control? Has the clinical lead accepted the outlet or service for normal use? Have the water safety plan and monitoring regime been changed where the event showed a weakness?

An unanswered question may require the event to remain open. A negative follow-up result is evidence, but its meaning depends on what was sampled, when and why. The strongest close-out record shows that the provider understands its water system and has restored control for the people who use it.

Questions people ask

Sources

• NHS England: HTM 04-01 safe water in healthcare premises
• NHS England: HTM 04-01 Part B operational management
• HSE: testing and monitoring a water system
• HSE: managing Legionella in health and social care
• CQC: Regulation 15 premises and equipment

Related: Legionella compliance software, Complys for hospitals, and more compliance guides.