HSG282 Explained: Legionella and Hot Tub Safety for Businesses
Most legionella guidance was written for building water systems. HSG282 exists because of something quite different: domestic hot tubs being used commercially.
A hot tub designed for a family of four, used by that family, is a manageable risk. The same unit dropped onto the decking of a holiday lodge, used by a different group every three days, none of whom know each other, is a completely different proposition. The equipment did not change. The pattern of use did, and the guidance followed.
That distinction runs through everything below.
What HSG282 actually is
The full title is The control of legionella and other infectious agents in spa-pool systems, published by the Health and Safety Executive.
It sits underneath the law rather than replacing it. The duties come from the Health and Safety at Work etc. Act 1974 and the Control of Substances Hazardous to Health Regulations 2002. ACOP L8 sets the general legionella duty. HSG282 is the practical guidance for one specific, unusually demanding application of it.
If you operate a spa pool commercially, it is the document an inspector will expect you to have worked from.
Who it catches
Leisure centres, hotels, spas and health clubs are obvious. The ones that catch people out are:
Holiday lets, lodges and glamping sites. A domestic style tub provided in the course of a business. This is the scenario the guidance was really written for.
Display units in showrooms. If it holds warm water it is a spa pool system, whether or not anyone has ever sat in it. A Legionnaires’ outbreak in Stoke-on-Trent in 2012 was traced to a display hot tub on a shop floor.
Hydrotherapy and birthing pools in clinical settings, where the bathers are often least able to fight off an infection.
Hire and portable units, where responsibility for cleaning between hires needs to be assigned in writing rather than assumed.
The test is not what the manufacturer called it. It is whether water is warm, aerated, and provided in connection with a business.
Not something you want to get wrong — you can find health and safety consultants and contact them directly.
The real problem is pollution, not plumbing
Ordinary water systems are controlled largely by temperature. Keep hot water hot, cold water cold, and legionella struggles. You cannot do that with a spa pool, because the entire point is water held at a temperature legionella is perfectly happy in.
So control shifts onto continuous disinfection. And the thing that defeats continuous disinfection is bather pollution.
Every person entering the tub brings something with them. Skin cells, sweat, sun cream, cosmetics, shampoo residue from a shower they took an hour ago. All of it consumes disinfectant. In a small volume of water with a high bather load, the demand is relentless.
Here is the honest part. You cannot control the bathers. In hospitality you have no realistic way of making guests shower properly first. You cannot stop somebody rinsing conditioner out of their hair in your tub. You cannot stop somebody letting the dog in. You will not be there.
What you can control is the environment around it.
The controls nobody puts in the risk assessment
Do not site a tub under trees. It looks lovely in June. In October the leaves come down, they go in the water, and organic debris is exactly what these organisms feed on. Legionella and pseudomonas are naturally occurring. Put decaying vegetation into a warm bath and you have built them a home.
Think about the route to the tub. Guests walk out of a lodge, across grass, over mud, in bare feet, and step straight in. Everything on their feet goes into the water and straight into your disinfectant demand.
The fix is engineering, not signage. Make the path a hard, cleanable, disinfectable surface. Keep it swept and washed down. A practical approach used in the holiday sector is to run some of the chlorinated changeover water over the path so it is disinfected rather than just rinsed. It costs nothing, it uses water you are discharging anyway, and it noticeably improves your readings.
Cover it when not in use, and make sure the cover itself is cleaned. A filthy cover dripping into the water on removal undoes the work.
Look at what is upwind and overhead. Bird activity, bins, barbecues, dust from a track. All of it lands in an open tub.
None of this appears in most risk assessments, and all of it shows up in the microbiology.
What your testing is actually for
This is the single biggest area of confusion, and it is worth being blunt about.
Operators regularly ask what the point of sampling is when the water is being dumped tomorrow anyway. It is a fair question with a specific answer.
You are not testing the water. You are testing the regime.
The water in that tub should be clean and properly disinfected at all times. Not clean on average, not clean at the start of the week. Always. So a sample is not a quality check on a batch you are about to throw away. It is evidence about whether your cleaning, disinfection and changeover regime is working. A bad result is not a bad batch of water. It is a fault in the system that produced it, and that fault was there before the sample and will still be there afterwards.
Once you see it that way, the individual tests make more sense.
Total viable count. A general measure of how much bacterial life the water is supporting. Not a specific pathogen, but a good indicator of whether your disinfection is keeping on top of the load. A rising TVC is an early warning that something is drifting.
Coliforms and E. coli. Indicators of faecal contamination. Their presence points at bather hygiene and at whether your disinfection is coping with the input.
Pseudomonas aeruginosa. The one that tends to worry experienced operators most. It is associated with biofilm, it tolerates disinfectant better than many organisms, and finding it usually means something in the system is harbouring growth rather than that a single bather brought it in. It also causes the folliculitis commonly known as hot tub rash, which is the complaint you will hear about long before anybody mentions Legionnaires’ disease. The same organism causes serious problems in a very different setting too, healthcare water systems, which is covered in our guide to HTM 04-01 and pseudomonas in augmented care.
Pseudomonas species more broadly, and legionella itself, depending on your scheme.
The point is not to collect certificates. It is to have agreed, written actions for what happens when each of these comes back out of range, and to actually take them.
Modern tubs, and their trade-offs
Newer commercial units come with better filtration and automated dosing, and they genuinely do help. Continuous, controlled dosing beats somebody remembering to throw chemicals in.
There is a catch that does not appear in the sales literature. Circulating water through additional pipework, filters and treatment loops means circulating it away from the heat source. Heat loss goes up, and so does the cost of holding temperature. For a site running several tubs, that is a real operating expense, and the temptation is to reduce circulation to save money. Reducing circulation is exactly the wrong response, because you are then leaving water sitting in pipework at a temperature that suits the bacteria.
If you are specifying new units, ask about insulation and heat retention on the circulation loop as seriously as you ask about the dosing system.
Water changeover and where the water goes
Dilution is one of your main controls. Fresh water replacing polluted water is doing real work, and skipping changeovers to save on heating is one of the most common corner-cuts in the sector.
Then there is the question of disposal, which people forget is a legal issue in its own right.
Do not discharge chlorinated water straight to ground or to a watercourse. It is harmful to aquatic life and to soil, and depending on where it ends up you may need consent from your environmental regulator. Discharging to foul sewer may require a trade effluent consent from your water company.
The usual approaches are to hold the water in a tank and let the chlorine dissipate before discharge, typically around twenty four hours, or to neutralise it chemically with sodium thiosulphate and confirm the residual has gone before it goes anywhere.
On a holiday park with several tubs changing over regularly, this is not a footnote. It is a volume of treated water that needs somewhere to go, and it needs designing in rather than improvised.
What a compliant regime looks like
HSG282 expects a documented system:
- A risk assessment for that specific installation, reviewed when anything changes
- A written scheme of control stating what is done, how often, by whom, and the acceptable ranges
- A named responsible person with real competence and real authority
- Daily checks on disinfectant residual and pH, recorded at the time
- Filtration maintenance and a defined dilution and changeover regime
- Cleaning and disinfection covering the balance tank and pipework, not just what you can see
- Microbiological sampling with written actions on out of range results
- Records a third party could pick up and follow
The specific parameters for residuals, pH bands, dilution rates and sampling frequencies are set out in the guidance and vary by system type. Work from the current version of HSG282, not from what the last operator did.
Why it matters
Legionnaires’ disease is a pneumonia. It hospitalises people and it kills a meaningful proportion of those who get it, and the people most at risk are older or immunosuppressed, which describes a good number of spa users.
Spa pool cases are also unusually traceable. Environmental sampling can often link an infection back to a specific tub, which means the enforcement and the publicity land on one operator rather than dissipating.
Related reading
If you look after water systems beyond spa pools, our guides to HTM 04-01 and pseudomonas in augmented care and legionella and landlord responsibilities cover the other end of the risk spectrum. For what one should cost, see our legionella risk assessment cost guide.
Getting the right help
Spa pool competence is not the same as swimming pool competence. The bather load, turnover and disinfectant demand are on a different scale, and the environmental and discharge considerations are their own discipline.
You can find water hygiene and legionella specialists on My Safety Consultant, including our featured consultants, where you can check their qualifications, professional memberships and company accreditations before you get in touch. You contact them directly. We take no commission and we do not sell your enquiry on.
This guide is a plain English summary and is not a substitute for the current version of HSG282 or for competent advice on your specific installation.
Not sure where to start?
Our featured health and safety consultants are listed with their full range of services and can be contacted directly. We take no commission and we never sell your enquiry.
Browse verified health and safety consultants →