A plain English guide for facilities and estates managers who need to know what they’re responsible for, not just what the engineer needs to do.
If you haven’t already, it’s worth starting with the complete guide to commercial hot water cylinders, this post pulls together the regulatory obligations that guide only touches on briefly.
Why This Is a Facilities Manager’s Problem, Not Just an Engineer’s
It’s tempting to treat hot water compliance as something the installer or the maintenance contractor sorts out, sign the paperwork and move on. That’s a mistake. The legal duty for legionella control and safe hot water storage sits with the person in control of the premises, not with whoever last serviced the cylinder. Sanctuary Housing Association found that out the hard way, fined £900,000 plus £11,480.60 in costs at Liverpool Crown Court in October 2024 for mismanaging legionella risk in a residential water system (HSE Media Centre). No one became ill in that case. The fine was for the failure to manage the risk properly, not for an outbreak. That distinction matters, HSE doesn’t wait for someone to get sick before enforcement action follows.
Legionella Control: The Core Obligation
Legionella is the single obligation that runs through everything else in this post. It sits under the Control of Substances Hazardous to Health Regulations 2002, with HSE’s Approved Code of Practice L8 and its supporting technical guidance, HSG274, setting out what’s expected in practice. The temperature requirement is specific and non negotiable: HSE guidance requires stored hot water to be kept at 60°C or above, and to reach outlets at 50°C, or 55°C in healthcare premises, within one minute (HSE, Hot and cold water systems). That’s not a target to aim for, it’s the benchmark an inspector or a court will measure a building against.
Legionnaires’ disease itself is genuinely rare, 472 cases were reported in England and Wales in 2024, a 22% decrease on 2023, with an incidence rate of 0.7 per 100,000 population (GOV.UK/UKHSA, Legionellosis in residents of England and Wales: 2024). Rare doesn’t mean low stakes though, the disease is a serious form of pneumonia and can be fatal, particularly in older or immunocompromised people, which is exactly why healthcare and care settings carry the stricter 55°C outlet requirement rather than the general 50°C figure.
In practice, legionella compliance means three things happening continuously, not once. A written risk assessment covering the whole water system, from the cylinder through to every outlet. A written scheme of control setting out how temperatures are monitored and maintained. And records, kept and available, showing that monitoring has actually happened. The Sanctuary Housing case turned partly on a failure of staff training and instruction alongside the technical failure, a reminder that compliance is as much about people knowing what to do as it is about the plant itself.
Building Regulations G3: Unvented Storage Systems
Most commercial cylinders above the smallest scale are unvented, fed directly from the mains rather than from a header tank, and that brings a specific set of Building Regulations obligations. Approved Document G3 requires any unvented hot water storage system over 15 litres to be installed, commissioned and notified by a competent, qualified person (GOV.UK, Approved Document G). There’s no meaningful commercial cylinder that falls below that threshold, so in practical terms every unvented system on a commercial site needs a G3 qualified installer and either self certification through a Competent Person Scheme or direct notification to Local Authority Building Control.
The reason the regulation exists is straightforward. Unvented cylinders store water under mains pressure, and if the safety devices, the combination valve, the expansion vessel, the temperature and pressure relief valve, fail or are incorrectly commissioned, the consequences can be severe. This isn’t red tape for its own sake, it’s a genuine safety requirement, and it’s why a facilities manager should always ask for and keep the commissioning certificate and Benchmark logbook for every cylinder on site, not just take the installer’s word that it’s been done properly.
At the larger end of the scale, the regulatory picture shifts again. Unvented hot water storage systems over 500 litres capacity are usually bespoke designs, and are not appropriate for a standard third party accredited product conformity certification scheme (GOV.UK/Defra, Approved Document G3 technical guidance). That means a hotel or hospital scale cylinder isn’t simply a bigger version of an off the shelf unit, it’s an engineered system that needs its own design sign off, and the compliance paperwork reflects that, a bespoke design certificate rather than a standard product certificate.
Vent Pipe Regulations and Vented Systems
Vented cylinders, fed from a cold water storage tank via a vent pipe that allows expansion to escape to atmosphere, carry a lighter regulatory touch than unvented systems, but they’re not exempt from scrutiny. The vent pipe itself needs to be correctly routed and terminated to avoid the risk of scalding or discharge in an unsafe location, and the cold water storage tank feeding the system needs to be included in the legionella risk assessment just as much as the cylinder itself, tanks are a common source of stagnant water and sediment build up if they’re not covered, insulated and inspected properly. Fewer new commercial installations use vented systems today, most modern specifications favour unvented for the pressure and flow benefits, but plenty of older buildings still run on them, and the compliance obligations don’t disappear just because the technology is dated.
Healthcare: An Extra Layer of Obligation
Healthcare premises carry requirements beyond the general commercial rulebook. HTM 04-01, the Health Technical Memorandum for water systems, sets specific obligations around legionella control, temperature management, and system design that go further than ACOP L8 alone, reflecting the higher risk profile of a building full of patients who may be more vulnerable to infection than the general population. The NHS estate in England used 11.3 billion kWh of energy in 2024/25, with total running costs of £14.0 billion (NHS England Digital, ERIC 2024/25), and water system compliance sits inside that budget as a continuous, resourced obligation, not a one off installation requirement. A GP surgery or health centre without the scale of an NHS trust’s estates team still carries the same HTM 04-01 obligations proportionate to its size, and it’s worth knowing that before assuming general commercial guidance covers a healthcare building adequately.
Maintenance and Servicing Requirements
Compliance doesn’t end at commissioning. Unvented cylinders need an annual service by a G3 qualified engineer to remain compliant and to keep the manufacturer’s warranty valid, covering the safety devices, the expansion vessel pre charge pressure, and a check that the system is still achieving the required storage and outlet temperatures. Legionella risk assessments need reviewing periodically, more frequently if the building’s use changes, if monitoring shows a problem, or if there’s a suspected case, and the written scheme of control needs to be a living document, not something filed away after the first assessment and forgotten.
This is increasingly relevant as more buildings adopt heat pumps alongside or instead of gas boilers. UK heat pump sales hit a record 125,037 units in 2025, up 27% on 2024, with domestic hot water heat pump sales alone growing 36% year on year (Heat Pump Association), and every one of those systems still needs to meet the same legionella temperature requirements as a boiler fed cylinder, regardless of how the water gets heated. Only 13% of new build homes completed in the UK in 2024 were finished with heat pumps as the primary heating and hot water source, with gas boiler fittings still outnumbering heat pump connections by more than 15 to 1 (CIPHE), so most facilities managers are still dealing predominantly with gas fed systems today, but that’s changing, and the compliance obligations travel with the water, not with the heat source.
What This Means in Practice for a Facilities Manager
Keep the paperwork. Commissioning certificates, Benchmark logbooks, annual service records, legionella risk assessments and written schemes of control should all be on file and current, not reconstructed after an inspector asks for them. Know your thresholds, 15 litres for G3 qualified installation, 500 litres for bespoke design territory, and the specific 55°C outlet requirement if the building falls under healthcare guidance. Don’t assume a contractor’s word is enough, ask for the certificate.
Business electricity rates in the UK average 27.0 to 30.0p per kWh, while business gas rates sit at 9.0 to 9.5p per kWh (MoneySuperMarket, Bionic panel data, June 2026), and a poorly maintained system, whether that’s failing legionella control or simply running inefficiently because servicing has lapsed, costs money on top of the compliance risk. England and Wales’ non domestic building stock covered by government energy data runs to 1,755,000 buildings (GOV.UK/DESNZ, ND-NEED 2024), and the obligations covered in this post apply, in some form, to a very large proportion of them.
The Bottom Line
None of this is complicated once you know what applies to your building, but it does need to be actively managed, not assumed to be someone else’s job. Compliance failures get discovered either by an inspector, or by an outbreak, and only one of those is a good way to find out something’s gone wrong. Keep the records, know the thresholds, and treat legionella control as an ongoing responsibility rather than a box ticked once at installation.
