Why a £55 Cheap Legionella Assessment Probably Isn’t ACOP L8 Compliant

If a quote for a legionella risk assessment lands in your inbox at £55, the first question to ask is not whether it is good value. The first question is whether what arrives at the end of it will actually stand up under ACOP L8. In most cases, it will not. The cheap legionella assessment risks that come with these ultra-low-cost online services are not theoretical. They show up later, when an insurer asks for the report, when a tenant raises a concern, when an environmental health officer turns up, or when someone in the building becomes unwell.

The price point alone tells you what is happening. A genuine site-based survey, written up properly, takes hours of qualified time. £55 does not buy that. It buys a templated desktop document populated from a short questionnaire, often with no visit, no asset register, no schematic, and no real understanding of the building’s water systems. That document may look like a risk assessment. It is not the same thing as a compliant one.

This piece sets out what these cheap legionella assessment reports typically contain, what ACOP L8 and HSG274 actually expect, and where the gap creates real prosecution and civil liability exposure for dutyholders.

What You Actually Get for £55 and Why It Falls Short

The economics are straightforward. A competent assessor on site for two to three hours, plus travel, write-up, peer review and asset register work, costs the provider considerably more than £55 before any margin. So when the headline price is that low, something has been removed. Usually, it is the site visit. Sometimes it is the assessor’s competence. Often it is both.

What typically arrives is a generic document built from a short online form. The client fills in basic details about the building, the number of outlets, perhaps a rough description of the hot and cold water system, and uploads a photo or two. A template is then populated, risk scored using a fixed matrix, and emailed back as a PDF. The branding looks professional. The contents do not match the site.

Common features of these reports include:

• no asset register of water outlets, tanks, calorifiers or plant
• no schematic drawing of the hot and cold water system
• generic recommendations copied from a template library
• risk scores produced without the assessor seeing the building
• no temperature readings, no flushing observations, no dead-leg identification
• no review of existing records, logbooks or written scheme
• assessor competence that cannot be evidenced against the City and Guilds or WMSoc benchmarks referenced in HSG274

The result reads like a risk assessment but does not function as one. The dutyholder has paid for a document, not for an assessment. And the document is the part that gets scrutinised when something goes wrong, not the price paid for it.

What ACOP L8 and HSG274 Actually Require From a Risk Assessment

ACOP L8 is the Approved Code of Practice issued by HSE under the Health and Safety at Work etc. Act 1974 and the COSHH Regulations. It does not prescribe a single method, but it does set out what a suitable and sufficient risk assessment must achieve. HSG274 then provides the technical detail that competent assessors are expected to work to in practice.

Further guidance can be found in the legionella water system guidance HSG274.

An ACOP L8 compliant risk assessment must, at minimum, identify and evaluate the sources of risk in the actual water systems present, the conditions that could allow legionella to proliferate, the population who could be exposed, and the controls already in place. That requires the assessor to understand what is physically in the building.

HSG274 Part 2, which covers hot and cold water systems in most non-industrial buildings, expects the assessment to include:

• a description of the system, including incoming supply, storage, distribution and outlets
• an up-to-date schematic drawing
• an asset register of relevant plant and outlets
• identification of dead legs, low-use outlets, blended systems, and other risk factors
• temperature data from sentinel and representative points where the system is operational
• review of the written scheme of control, logbooks, monitoring records and remedial history
• clear, prioritised recommendations linked to the actual findings
• evidence that the assessor is competent to the standard set out in HSG274 Part 2

None of this can be produced credibly without seeing the building. A desktop document populated from a client questionnaire cannot identify a dead leg behind a boxed-in pipe, cannot record the temperature at the furthest outlet, and cannot confirm whether the cold water storage tank is insulated, lidded and free from sediment. Those are the conditions that drive legionella risk. If they are not assessed, the assessment is not suitable and sufficient. You can read more about how the regulations and approved code of practice fit together in our overview of legionella regulations and guidance.

The Hidden Risks of a Cheap Legionella Assessment

The headline risk is obvious: the report misses something that matters, and someone becomes unwell. That is the worst case, and it does happen. But there are several more common ways a cheap legionella assessment report creates problems long before anyone is ill.

The first is false reassurance. A dutyholder receives a PDF marked “low risk” and assumes the compliance position is settled. They do not commission the monitoring, training or remedial work that a competent assessment would have flagged. The system continues to operate with unmanaged risk, often for years, until something triggers a closer look.

The second is undocumented gaps. Because the desktop report does not include an asset register or schematic, there is no baseline for future monitoring. Whoever is asked to run the monthly temperature checks does not know which outlets are sentinels, which are infrequently used, or where the calorifier drain valve is. The control regime drifts because it was never properly defined.

The third is recommendations that cannot be acted on. Template reports tend to produce generic action lists: review the written scheme, train responsible persons, monitor temperatures monthly. These read like advice but contain no site-specific detail. A facilities manager trying to close the actions out has nothing concrete to work from.

The fourth, and most commercially serious, is that the report does not survive scrutiny. The moment an insurer, a buyer’s solicitor, an HSE inspector or a coroner asks to see the assessment, its weaknesses become visible. At that point the cost saved on the original report is irrelevant. The cost of explaining why it was relied on is the figure that matters.

Desktop Assessments Versus a Genuine Site Survey

There is a legitimate place for a legionella desktop assessment, but it is narrower than the cheap-end of the market suggests. A desktop review can be appropriate where a competent assessor is reviewing existing, reliable documentation for a building they already know, or where a portfolio is being triaged to prioritise full site visits. It is not appropriate as a first-time assessment of a building no one has seen.

HSG274 is clear that the assessor needs to understand the system. That understanding cannot be assembled from a customer-completed form. The questions a competent assessor asks on site are not the questions a layperson knows to answer on a web form. A facilities manager filling in an online questionnaire will not flag the unvented cylinder feeding a rarely-used shower in a basement plant room. The assessor walking the building will.

A proper site survey typically involves:

• physical inspection of incoming supply, storage tanks, calorifiers, pumps and distribution
• identification and labelling of sentinel outlets
• temperature readings at representative points
• inspection of tank condition, lids, insulation, overflow screens and stored water clarity
• identification of dead legs, blended outlets, infrequently used assets and cross-connections
• review of existing logbooks, monitoring records and the written scheme
• discussion with the responsible person about how the system is actually operated and maintained

This is the work that produces a document an insurer or inspector can rely on. It is also the work that gets cut to hit a £55 price point.

Why Low-Cost Assessments Fail When HSE, Insurers or Tenants Ask Questions

Risk assessments are not produced for their own sake. They exist to be relied on by the dutyholder and, when required, presented to others. The three audiences who most commonly ask to see one are HSE, insurers, and tenants or their representatives. None of them are reading the PDF for its appearance.

An HSE inspector visiting after a complaint, a notifiable case, or a routine inspection will check whether the assessment is suitable and sufficient under ACOP L8. They will look for the asset register, the schematic, evidence of site inspection, assessor competence, and whether the recommendations have been implemented. A desktop template produced without a site visit will not survive that check. It does not matter how recent it is.

Insurers, particularly on commercial property and HMO portfolios, increasingly request the risk assessment as part of policy renewal or claim handling. A weak assessment can be grounds for restricting cover, increasing premiums, or in some cases declining a claim on the basis that the insured had not taken reasonable steps to manage a known risk. The argument that “we had an assessment” carries no weight if the assessment itself is defective.

Tenants, residents’ associations and their solicitors are also more aware of legionella risk than they were a decade ago. In residential lettings, particularly HMOs and student accommodation, a request for the risk assessment is now a routine part of due diligence. A landlord producing a £55 desktop document tends to invite more questions, not fewer.

The pattern is consistent. Cheap legionella assessments work fine until someone with a reason to look closely actually looks. After that, they create more problems than they solve.

Prosecution, Civil Claims and the Real Cost of Getting It Wrong

Legionella prosecutions in the UK are not common, but they are serious when they occur. HSE has brought cases against dutyholders under Section 3 of the Health and Safety at Work etc. Act 1974, the Management of Health and Safety at Work Regulations 1999, and the COSHH Regulations. Fines in recent years have run into hundreds of thousands of pounds, with custodial sentences imposed where individual directors or responsible persons have been found culpable.

The defence in almost every prosecution turns on whether the dutyholder took reasonable steps. A risk assessment is the foundational evidence of that. If the assessment relied on is a templated desktop document that did not identify the conditions which led to the outbreak or exposure, the defence is significantly weaker. Courts and HSE both look at whether the assessment was suitable and sufficient, not at how much was paid for it.

Civil claims follow a similar pattern. Where a resident, employee, visitor or guest develops legionnaires’ disease and traces it to a building’s water system, the claim proceeds on the basis of negligence and breach of statutory duty. The dutyholder’s risk assessment is disclosed. If it is thin, the claim becomes harder to defend. Settlement values for serious legionnaires’ cases regularly exceed six figures, and fatal cases considerably more.

There is also the operational cost that does not appear in court reports. Premises closures during outbreak investigation, hotel guests relocated, schools shut, care homes inspected, contracts lost, and reputational damage that lingers long after the incident. Set against any of this, the difference between a £55 desktop report and a properly conducted survey is not material. It only looks material before something goes wrong.

How to Tell a Compliant Assessment From a Tick-Box Exercise

You do not need to be a water hygiene specialist to spot the difference. The clearest indicators are practical and visible in the report itself.

A compliant assessment will normally include:

• a named, competent assessor with evidenced training to the standard referenced in HSG274 Part 2
• a record of the site visit, including date, areas inspected, and people met
• a current schematic of the hot and cold water system, even if hand-drawn and annotated
• an asset register listing tanks, calorifiers, pumps, sentinel outlets and any other relevant plant
• temperature readings taken at the time of the visit, with locations identified
• a clear description of the system in plain language, not a generic template paragraph
• findings and recommendations that reference specific assets, locations or observations
• a risk rating that is explained, not just produced by a matrix
• review and update arrangements that reflect the building’s actual use

A tick-box report tends to have generic sections that could apply to any building, no asset-level detail, no temperature data, no schematic, and recommendations that read like a copy of HSG274 contents pages. If the report could be lifted, the building name changed, and used for a different site without anyone noticing, it is not a site-specific assessment.

There are also softer indicators. A competent provider will ask questions before quoting, want to know the building type, occupancy, system age, and existing documentation. They will quote based on what is needed, not from a fixed online tariff. They will be willing to explain their assessor’s qualifications and how the work will be done. Providers offering a one-size-fits-all £55 product rarely engage on any of this.

When Spending More Is the Cheaper Option

The phrase “false economy” gets used loosely. In legionella compliance, it is literal. The cost of a properly conducted assessment for a typical small commercial property or HMO usually sits in the low to mid hundreds, depending on size, system complexity and how much existing documentation can be relied on. Larger or more complex sites cost more, but the work is still proportionate.

Set that figure against what a cheap legionella assessment report fails to deliver. A competent assessment identifies the controls that need to be in place, the monitoring regime that fits the building, the remedial work that is genuinely necessary and the work that is not. It avoids the cost of acting on generic template recommendations that do not apply, and it avoids the much larger cost of missing the controls that do.

For dutyholders managing portfolios, the maths is starker. A landlord with twenty HMOs paying £55 per property for desktop reports has spent £1,100 on documents that do not stand up. The same budget, applied to a smaller number of properly assessed properties on a rolling programme, produces evidence that actually works. The portfolio gets covered over time, and the position is defensible at every stage.

There is also the time cost. A dutyholder relying on a defective assessment ends up commissioning a second one, often urgently, when an insurer or buyer queries the first. The second assessment is rarely cheaper, and the time pressure removes any negotiating position. Doing it once, properly, is almost always the lower total cost.

None of this is an argument for the most expensive provider. It is an argument for a provider whose price reflects the work that ACOP L8 and HSG274 actually require. If the quote is significantly below the cost of doing the work properly, the work is not being done properly. That is the position the dutyholder needs to start from.

If you are responsible for a building and need to know whether your current legionella risk assessment will actually stand up under ACOP L8, Acorn Safety Services (Legionella) can review what you have, identify any gaps against HSG274, and carry out a properly evidenced site-based assessment where one is needed. Contact us to talk through the specifics of your site and existing records, or get a quote for a compliant assessment based on what the building actually needs.