Where legionella testing requirements come from, and why there is no national answer

This query has roughly doubled in six months, and it is asked by people in an awkward position: somebody has told them they need legionella testing, and they cannot find the rule that says so.

There is a reason they cannot find it. There is no single national requirement to test for legionella in the United States. What exists is a set of separate sources, any of which can reach a particular building, none of which reaches all of them. Pages that answer this query with one confident rule are almost always describing one of these sources without naming it, and the reader goes away with a number that may not apply to them at all.

The sources, and who each one reaches

Conditions attached to federal funding

Healthcare facilities that participate in federal programs operate under conditions of participation, and water management has been part of the survey process for hospitals and long-term care for several years. This is the source that reaches the most buildings with the most force, and it is also the one most often described on the internet as though it applied to offices and hotels. It does not. What it asks of a healthcare facility is in water management programs for healthcare facilities.

State and local rules, especially on cooling towers

Several jurisdictions regulate cooling towers directly, with registration, a written maintenance program and sampling at a stated frequency. New York State is the best known and the most prescriptive, and a handful of cities have followed with rules of their own. These are real, enforceable requirements with real penalties, and they are entirely local: a tower on one side of a state line can be regulated and its twin on the other side not. What a tower program looks like is in cooling tower legionella testing requirements.

Accreditation and certification bodies

Hospital accreditors, and some building certification schemes, expect a water management program and will ask to see it. This does not always feel like a legal requirement, and it is not one. It is a condition of something the organization wants to keep, which in practice is more immediate than a statute.

Insurers, lenders and contracts

The quietest source and the one that surprises people most. A policy renewal, a lease clause, a facilities contract or a lender’s condition can all require a written program and periodic sampling. Nobody thinks to look here, because it does not sound like compliance. It usually arrives as a questionnaire, and the questionnaire is the requirement.

Guidance that is not a requirement at all

Public health agencies publish guidance and toolkits, and standards bodies publish standards. Neither is binding on a building by itself. Both are frequently quoted as though they were, usually by someone selling something. Guidance becomes a requirement only when one of the sources above adopts it, and asking which one is the fastest way to find out whether you are being told a rule or a recommendation.

The question to ask, and who to ask it of

When somebody tells you that you need testing, the useful reply is a single question: which of those sources is this coming from, and can I see it? A requirement has a written home. If the person cannot name it, they are quoting guidance, describing another jurisdiction, or selling.

The answer usually lives with a small number of people: whoever handles regulatory matters for the organization, whoever renews the insurance, whoever holds the accreditation file, and, for a tower, the local health department, which will generally tell you plainly whether a tower at that address is registrable.

Why the answer changes what you buy

The source does not just decide whether you test. It decides the frequency, whether a written program is required alongside the sampling, whether records have to be retained and for how long, and what happens when a result comes back high. Two buildings sampling at the same interval for different reasons are buying different things, and only one of them may be buying what it actually needs.

This is also why sampling first is the expensive way round. Without a program, a result has nothing to be compared against and no agreed response attached to it, which means the most likely outcome of a surprising number is an argument about what to do next. The structure that avoids that is in what ASHRAE 188 asks of a building, and the builder on this site assembles it into a draft.

What this page deliberately does not do

It states no frequency, no temperature and no threshold, and it will not tell you that your building is or is not covered. Those depend on facts about your building and your jurisdiction that a web page does not have, and a confident answer here would be worth exactly nothing at the moment somebody relied on it.