ACOP L8 Compliance Checklist: A Complete Guide for Duty Holders (2026)
Managing Legionella risks is a legal responsibility for any organisation responsible for man-made water systems. Whether you manage offices, healthcare facilities, schools, hotels, leisure centres or industrial premises, failing to control Legionella bacteria can put people at risk and lead to enforcement action under health and safety law.
ACOP L8 provides practical advice for duty holders on identifying Legionella risks, implementing suitable control measures and maintaining ongoing compliance. Supported by the Health and Safety Executive’s (HSE) HSG274 technical guidance, it outlines the steps organisations should take to reduce the risk of Legionnaires’ disease and create a safe and healthy environment.
This guide explains the key ACOP L8 requirements, why they matter and how Velappity helps organisations achieve ACOP L8 compliance through digital inspections, record keeping and Legionella management.
If you’re looking to simplify your compliance processes, our Legionella Risk Assessment Software helps organisations manage inspections, documentation and recurring reviews from one platform.
What is ACOP L8?
ACOP L8 is the Approved Code of Practice published by HSE for the control of Legionella bacteria in water systems.
Published in 2013 as the eighth edition, ACOP L8 has special legal status. While it is not legislation itself, it supports existing health and safety law and is commonly used by courts when deciding whether duty holders have met their legal duties. Organisations may adopt alternative methods, but they must demonstrate compliance by achieving the same standard of protection.
The document is supported by HSG274, which provides technical guidance for different industries and types of water systems. Together they provide practical advice for controlling Legionella bacteria, reducing Legionella risks and achieving regulatory compliance.
Who needs to comply with ACOP L8?
ACOP L8 applies to duty holders responsible for premises containing water systems that could present a reasonable risk of Legionella bacteria growth.
This includes organisations responsible for:
- Offices
- Healthcare facilities
- Care homes
- Hotels
- Schools
- Universities
- Leisure centres
- Commercial buildings
- Industrial sites
The guidance applies to a wide range of water systems, including cold water systems, cooling towers, evaporative cooling systems, evaporative condensers, spa pools, spa pool systems and other risk systems capable of harbouring bacteria.
Where complex systems exist, additional technical guidance may be required to ensure every risk system has been assessed appropriately.
ACOP L8 compliance checklist at a glance
The table below summarises the core ACOP L8 requirements, why they are important and how Velappity helps organisations manage compliance more efficiently.
ACOP L8 requirement | Why it matters | How Velappity helps |
|---|---|---|
Complete a Legionella risk assessment | Identifies Legionella risks, assesses who may be affected and determines the control measures required. | Create and manage digital Legionella risk assessments, standardise inspections and securely store completed assessments. |
Maintain an asset register | Ensures every relevant water system and asset is identified, monitored and maintained. | Record assets, attach documentation, track inspection history and manage maintenance from one central asset register. |
Keep water system schematics updated | Helps engineers understand system layouts and identify potential risk areas during inspections. | Store schematics and supporting documents alongside site records for quick access. |
Review risk assessments regularly | Keeps assessments accurate following changes to buildings, occupancy or water systems. | Schedule recurring reviews and maintain a complete history of previous assessments. |
Appoint a responsible person | Creates accountability for Legionella management and ongoing compliance. | Assign responsibilities, manage permissions and track user activity through a complete audit trail. |
Prepare a written scheme of control | Documents how Legionella risks will be managed, monitored and controlled. | Store written schemes alongside risk assessments, inspections and supporting documentation. |
Implement control measures and monitoring | Confirms that suitable precautions remain effective over time. | Create digital inspection forms, automate recurring monitoring and assign corrective actions. |
Maintain a planned maintenance programme | Reduces the likelihood of missed servicing and helps prevent Legionella bacteria growth. | Schedule recurring maintenance, assign work and maintain complete maintenance histories. |
Complete water quality testing | Confirms that water quality and control measures remain effective. | Attach laboratory reports, certificates and testing results directly to inspection records. |
Maintain accurate record keeping | Demonstrates compliance and provides evidence during audits or investigations. | Store all compliance documentation securely within a single central platform. |
Authentication and sign-off | Provides accountability and a clear audit trail for completed inspections. | Automatically record user activity, timestamps and digital sign-offs for every completed task. |
Maintain training records | Demonstrates workforce competency and supports ongoing compliance. | Store training records, certificates and supporting documents alongside other compliance information. |
ACOP L8 requirement 1: complete a Legionella risk assessment
A suitable and sufficient Legionella risk assessment forms the foundation of ACOP L8 compliance. Before suitable control measures can be implemented, organisations must understand where Legionella bacteria could develop, who may be affected and how risks can be reduced.
The risk assessment should identify every water system that could present a reasonable risk, assess the likelihood of Legionella bacteria growth and determine whether existing control measures remain adequate. It should also consider factors such as water temperatures, stagnation, aerosol generation and vulnerable building occupants.
For organisations employing five or more people, the findings should be documented and retained as part of their compliance records. The assessment should also be reviewed whenever there are significant changes to the building, occupancy, water systems or management arrangements.
Without a current Legionella risk assessment, it is difficult to demonstrate that appropriate precautions have been implemented, making it one of the most important requirements within ACOP L8.
How Velappity helps
Velappity allows organisations to create and manage custom digital Legionella risk assessment forms, ensuring inspections follow a consistent process across every site. Completed assessments are securely stored, can be reviewed at any time and provide a clear audit trail for ongoing compliance.
ACOP L8 requirement 2: maintain an asset register
An accurate asset register helps organisations identify every water system and component requiring inspection, monitoring or maintenance.
The register should include assets such as storage tanks, calorifiers, pipework, outlets, cooling towers, evaporative cooling systems, pumps and any other equipment identified during the Legionella risk assessment. Maintaining accurate records helps ensure no critical assets are overlooked during planned inspections or maintenance activities.
Keeping the register up to date also supports future reviews by ensuring new assets are added and redundant equipment is removed from the compliance programme.
How Velappity helps
Velappity’s Assets
feature enables organisations to maintain a central asset register containing inspection histories, maintenance records, photographs and asset-specific information. This provides a complete overview of every asset involved in Legionella management.
ACOP L8 requirement 3: maintain water system schematics
Water system schematics provide a visual representation of how water moves throughout a building and play an important role in effective Legionella management.
Current schematics help engineers, contractors and responsible persons understand pipework layouts, storage tanks, outlets and other critical assets. They also make it easier to identify dead legs, areas of low water usage and sections of pipework that may require additional monitoring.
Keeping schematics updated following alterations or refurbishment work helps ensure inspections remain accurate and no parts of the system are unintentionally excluded from ongoing management.
How Velappity helps
Velappity allows organisations to upload water system schematics, drawings, photographs and supporting documents directly against individual sites or assets, making important information immediately available to engineers, contractors and auditors.
ACOP L8 requirement 4: review risk assessments regularly
Completing a Legionella risk assessment once does not achieve ongoing ACOP L8 compliance.
Risk assessments should be reviewed regularly to ensure they continue to reflect the condition of the building, the water systems and the people using them. Reviews should also take place whenever significant changes occur, including refurbishment projects, changes in occupancy, alterations to water systems or following incidents that could affect Legionella risks.
Regular reviews allow organisations to identify new hazards, confirm that existing control measures remain effective and update the written scheme where necessary.
How Velappity helps
Velappity supports recurring reviews by allowing organisations to schedule periodic reassessments, assign review tasks and maintain a complete history of previous assessments. This helps ensure Legionella risk assessments remain current while providing evidence that compliance activities have been completed consistently over time.
ACOP L8 requirement 5: appoint a responsible person
One of the core requirements of ACOP L8 is appointing a responsible person with sufficient authority and competence to oversee Legionella management.
The responsible person is responsible for ensuring the written scheme is followed, inspections are completed, monitoring activities are carried out and any corrective actions are addressed promptly. They should understand the specific Legionella risks associated with the premises and have the authority to coordinate contractors, maintenance teams and internal stakeholders.
Depending on the size and complexity of the organisation, additional competent persons may also be appointed to provide specialist support. While operational responsibilities can be delegated, the duty holder remains legally responsible for ensuring suitable arrangements are in place to control Legionella risks.
Clearly defining responsibilities helps reduce the risk of missed inspections, inconsistent monitoring and gaps in compliance.
How Velappity helps
Velappity enables organisations to assign inspections and recurring compliance tasks to specific users. User permissions, activity logs and timestamps provide a clear audit trail, helping duty holders demonstrate accountability across every stage of their Legionella management programme.
ACOP L8 requirement 6: prepare a written scheme of control
Following completion of the Legionella risk assessment, organisations should prepare a written scheme of control explaining how identified risks will be managed.
The written scheme should document the control measures used throughout the premises, inspection frequencies, monitoring procedures, maintenance activities, responsibilities and the actions to be taken if monitoring identifies an issue. It should also identify the water systems covered by the scheme and reference any supporting procedures or documentation.
Rather than being a document created solely for compliance purposes, the written scheme should act as a practical guide for everyone responsible for managing Legionella risks. It should be reviewed whenever significant changes are made to water systems, building usage or management arrangements.
How Velappity helps
Velappity allows organisations to securely store written schemes alongside Legionella risk assessments, inspection records, asset information and supporting documentation. Keeping everything in one location makes information easier to manage, update and access during audits.
ACOP L8 requirement 7: implement control measures and monitoring procedures
After identifying Legionella risks, organisations must implement suitable control measures and regularly monitor their effectiveness.
The exact precautions will depend on the type of building and water systems involved but commonly include:
- Temperature monitoring
- Regular flushing of infrequently used outlets
- Cleaning and disinfection
- Water treatment
- Inspection of storage tanks
- Removal of dead legs and redundant pipework
- Planned servicing and maintenance
- Monitoring cooling towers, evaporative cooling systems and spa pools where applicable
Consistent monitoring helps confirm that these control measures continue to reduce the risk of Legionella bacteria growth and enables organisations to identify issues before they become significant compliance failures.
How Velappity helps
Velappity provides custom digital inspection forms, recurring inspection schedules and automated task management to support routine monitoring. Inspection findings can be recorded digitally, as well as compliance monitoring regimes created for assets.
ACOP L8 requirement 8: maintain a planned maintenance programme
Routine maintenance is essential for keeping water systems operating safely and reducing conditions that encourage Legionella bacteria growth.
A planned maintenance programme should include scheduled servicing, inspections, cleaning, disinfection and remedial works identified during the Legionella risk assessment or within the written scheme. Following a structured maintenance programme helps organisations demonstrate that suitable precautions are being maintained consistently rather than relying on reactive repairs.
Planned maintenance also improves record keeping by ensuring completed work is documented and available for future audits or reviews.
How Velappity helps
Velappity enables organisations to create recurring maintenance schedules, assign work to internal teams or contractors, monitor completion status and retain a complete digital history of every maintenance activity carried out across their sites.
ACOP L8 requirement 9: complete water quality testing
Where appropriate, organisations should complete water quality testing to verify that existing control measures remain effective.
Depending on the type of water system, this may involve microbiological sampling, laboratory analysis or additional testing recommended within the Legionella risk assessment. Results should be reviewed alongside routine inspections to identify trends, recurring issues or early signs that control measures require adjustment.
Water quality testing does not replace routine monitoring but provides additional evidence that the measures implemented to control Legionella bacteria continue to perform as intended.
How Velappity helps
Velappity allows organisations to upload laboratory reports, water quality test results and supporting certificates directly against individual clients or sites. This creates a complete compliance record that can be accessed quickly during audits or investigations.
ACOP L8 requirement 10: maintain accurate record keeping
Maintaining accurate records is one of the most important aspects of ACOP L8 compliance. Good documentation demonstrates that inspections, monitoring and maintenance activities have been completed and provides evidence that organisations are actively managing Legionella risks.
Records should typically include:
- Legionella risk assessments
- Written schemes of control
- Asset registers
- Temperature monitoring records
- Inspection reports
- Water quality testing results
- Maintenance activities
- Corrective actions.
- Training records
Keeping this information organised makes future reviews significantly easier and helps demonstrate compliance if requested by enforcing authorities.
How Velappity helps
Velappity securely stores all compliance documentation within a single platform, reducing reliance on spreadsheets, paper records and disconnected systems. Users can quickly retrieve historical inspections, maintenance records and supporting documents whenever required.
ACOP L8 requirement 11: Authentication and Sign-off
Inspection records should clearly identify who completed the work, when it was carried out and whether any follow-up actions were required.
Authenticated records provide accountability, reduce the likelihood of incomplete documentation and create a reliable audit trail across every stage of the Legionella management process. This information becomes particularly valuable during compliance audits, internal reviews and external inspections.
How Velappity helps
Velappity automatically records user activity, timestamps completed inspections and maintains a full digital audit trail for every compliance task completed within the platform.
ACOP L8 Requirement 12: Maintain Training Records
Everyone involved in controlling Legionella should receive training appropriate to their responsibilities.
Training records help demonstrate that employees, contractors and responsible persons understand the procedures they are expected to follow and have the competence required to carry out inspections, monitoring and maintenance activities correctly.
Keeping training records current also helps organisations identify refresher training requirements and maintain competency as personnel or responsibilities change.
How Velappity helps
Velappity enables organisations to store training records, certificates and supporting documentation alongside other compliance information, creating a central repository for workforce competency records. The training records section of Velappity provides an overview of all your team’s training, including status and expiry date.
Common Reasons Organisations Fall Short of ACOP L8 Compliance
Many organisations do not fall out of compliance because of a single major failure. Instead, small issues build over time until they create significant risks.
Common compliance failures include:
- Outdated Legionella risk assessments
- Missing or incomplete asset registers
- Written schemes that are no longer current
- Missed inspections or temperature checks
- Inconsistent monitoring
- Poor record keeping
- Unclear responsibilities
- Missed maintenance activities
- Failure to review risk assessments following building alterations or changes to water systems
A structured compliance programme supported by regular reviews, scheduled inspections and centralised documentation helps reduce these risks while making ongoing compliance easier to demonstrate.
Why Choose Velappity for ACOP L8 Compliance?
Managing Legionella compliance across multiple buildings can quickly become complex when inspections, maintenance records and compliance documents are spread across different systems.
Velappity provides a central platform for managing every stage of the compliance process, helping organisations:
- Complete digital Legionella risk assessments
- Maintain comprehensive asset registers
- Store water system schematics and supporting documents
- Schedule recurring inspections and maintenance
- Record monitoring activities
- Manage corrective actions
- Maintain written schemes of control
- Store training records
- Create complete audit trails
- Improve record keeping across every site
By bringing these activities together in one place, organisations can improve consistency, reduce administrative effort and maintain greater confidence in their Legionella compliance programme.
Frequently Asked Questions
Is ACOP L8 a legal requirement?
ACOP L8 is an Approved Code of Practice published by the Health and Safety Executive. While it is not legislation itself, it has special legal status and provides practical guidance on complying with legal duties relating to Legionella control.
Who is responsible for ACOP L8 compliance?
The duty holder is legally responsible for controlling Legionella risks. They may appoint a responsible person and other competent persons to manage day-to-day activities, but overall legal responsibility remains with the duty holder.
How often should a Legionella risk assessment be reviewed?
Risk assessments should be reviewed regularly and whenever significant changes are made to the building, occupancy, water systems or management arrangements.
What should a written scheme of control include?
A written scheme should document the control measures, inspection frequencies, monitoring procedures, maintenance programme, responsibilities and corrective actions required to manage Legionella risks.
How long should Legionella records be retained?
Record retention requirements vary depending on the type of record, but organisations should retain documentation in line with ACOP L8 and HSG274 guidance to demonstrate ongoing compliance.
What happens if an organisation fails to comply with ACOP L8?
Failure to adequately control Legionella risks may result in enforcement action by the Health and Safety Executive or local authority. More importantly, poor Legionella management can increase the risk of Legionnaires’ disease, potentially affecting employees, contractors, visitors and members of the public.
Download Your Free ACOP L8 Compliance Checklist
Achieving ACOP L8 compliance requires ongoing commitment rather than a one-off assessment. Regular inspections, monitoring, maintenance and accurate record keeping all contribute to reducing Legionella risks and demonstrating compliance.
Download our free ACOP L8 Compliance Checklist to review your current processes, identify potential gaps and support a consistent approach to Legionella management.
If you’re looking to digitise your Legionella compliance processes, discover how Velappity helps organisations manage inspections, assets, maintenance and compliance documentation from one central platform.
Note: This Health and Safety KPI Template is provided as an example and may not cover every metric, legal requirement or organisation-specific health and safety need. Always follow current health and safety legislation, your organisation’s procedures and any industry-specific guidance when measuring and monitoring health and safety performance.
Still Managing Legionella Compliance Manually?
Move your Legionella compliance processes online with Velappity and keep inspection records organised, standardise processes across your organisation and simplify compliance.
Record Legionella inspections, manage assets, track maintenance activities and corrective actions and maintain accurate compliance records to support effective Legionella risk management and ACOP L8 compliance.
Get instant access to our free ACOP L8 Compliance Checklist.
