Why Legionella Risk Matters in Commercial Water Systems

On this page

In a commercial building, Legionella stops being a single-faucet concern and becomes a system-wide management duty. A house has one water heater and a handful of fixtures. A hotel, hospital, office tower, or senior-living facility has large storage volumes, long pipe runs, recirculation loops, dead legs, and often a cooling tower, all of which create the warm, slow-moving water where the bacteria thrive. That scale is why building owners and operators, not just occupants, carry responsibility for keeping the water safe. This guide explains where that responsibility begins and what a managed program looks like.

Legionella is the bacterium that causes Legionnaires’ disease, a serious form of pneumonia that people contract by breathing in contaminated water droplets rather than by drinking them. The home-scale picture, including who in a household is most at risk and the few practical steps a homeowner can take, is its own subject. See our guide on Legionella and home plumbing (159) for that side. The focus here is the commercial system and the management program a recognized standard expects.

The Growth Window: Why Warm, Stagnant Water Breeds Legionella

Legionella multiplies fastest in warm, still water, which is exactly the condition large building systems tend to create. The CDC identifies a growth range of roughly 77 to 113 degrees Fahrenheit (25 to 45 Celsius), and notes the bacteria can still grow at temperatures as low as 68 degrees Fahrenheit (20 Celsius). When stored or circulating hot water cools into that window, or when cold lines warm up sitting in a heated building, the system moves into the range the bacteria favor.

Temperature alone does not tell the whole story. The CDC names several conditions that work together to amplify growth:

  • Stagnation and water age. Water that sits still loses its disinfectant residual and drifts toward the warm growth range. The longer water sits in the pipes, the more opportunity Legionella has to multiply.
  • Biofilm. A slime layer that forms on continually wet pipe and tank surfaces. It shelters bacteria and consumes the chlorine or chloramine that would otherwise keep them in check.
  • Scale and sediment. Mineral buildup gives bacteria a surface to colonize and further depletes disinfectant.
  • Low or undetectable disinfectant. When the residual drops, the last line of defense against bacterial growth is gone.

These factors compound. A stagnant section of warm pipe coated in biofilm and sediment, with no measurable disinfectant left, is close to an ideal incubator. The cooling-tower descaling and corrosion controls that protect those systems sit in a related context, but the mechanics of recirculation loops belong elsewhere. See our guide on what a hot water recirculation system does in a building (226) for how those loops are designed to move.

What Makes Large Building Systems High-Risk

The features that define a commercial water system are the same features that raise Legionella risk. A bigger, more complex system holds more water in more places where it can sit warm and still.

Large storage volumes. A commercial water heating system holds far more water than a residential tank, and the larger the reservoir, the longer some of that water can sit before it turns over. How those systems are built is covered separately. See our guide on how commercial water heating systems work (225) and our guide on how a commercial boiler system provides hot water and heat (228) for the equipment side.

Long pipe runs and dead legs. A dead leg is a length of pipe where water stops moving: a capped stub left from a removed fixture, a riser to a wing that rarely gets used, or a branch serving a vacated tenant space. The CDC flags extensive dead legs, low disinfectant residuals, and tepid hot water as conditions that make a building more likely to support Legionella growth.

Recirculation loops that lose temperature. Commercial buildings use recirculation to deliver hot water quickly, but if a loop drops out of the safe range at its far reaches, those low-temperature zones become growth points.

Cooling towers and other aerosol sources. Cooling towers, decorative fountains, misters, and similar devices generate breathable mist. The CDC treats cooling towers as a high-risk device that warrants a water management program regardless of building type, and recommends running them, where possible, below the most favorable Legionella growth range.

The CDC points to specific building characteristics that signal elevated risk and may mean a building needs a formal program: a centralized hot water system serving multiple housing units (such as a hotel or high-rise apartment building), and a structure with more than ten stories counting basement levels. Height and complexity stretch the plumbing, multiply the dead legs, and widen the temperature swings across the system.

Higher-Stakes Buildings: Healthcare, Senior Living, and Hotels

Some buildings carry elevated stakes because of who is inside them, not just how the plumbing is built. The same exposure that a healthy adult shrugs off can cause severe illness in a vulnerable person, so occupancy raises the consequences of a control failure.

The CDC identifies categories of buildings where a water management program is especially important:

  • Healthcare facilities where patients stay overnight, or buildings that house or treat people with chronic or acute medical problems or weakened immune systems.
  • Senior housing, such as a retirement home or assisted-living facility, that primarily houses people older than 65.
  • Hotels and large multi-unit residential buildings with centralized hot water, where one system serves many occupants who have no control over it.

The reason these settings sit at the top of the list is the overlap of two risk factors. The people most likely to develop Legionnaires’ disease, including older adults, current and former smokers, and those with weakened immune systems or chronic lung disease, are concentrated in exactly the buildings whose large, complex water systems are hardest to keep out of the growth range. A hospital combines the most vulnerable population with some of the most extensive plumbing. That combination is why the management duty is taken most seriously there.

The Temperature Tension: Hot Enough to Suppress, Tempered to Prevent Scald

The central conflict in commercial Legionella control is that the temperature which suppresses the bacteria is hot enough to scald. You cannot solve one hazard by ignoring the other, so the system has to do both at once.

The CDC guidance for building water systems points to storing hot water at or above 140 degrees Fahrenheit to limit Legionella growth, and keeping hot water at the point of use at or above 120 degrees Fahrenheit. OSHA’s workplace guidance is consistent, recommending that domestic hot water be stored at a minimum of 60 degrees Celsius (140 Fahrenheit) and delivered at a minimum of 50 degrees Celsius. The problem is that water held that hot causes rapid burns.

The resolution is engineering, not a thermostat compromise. The system stores and circulates water hot enough to discourage bacteria, then tempers it down with thermostatic mixing valves before it reaches a tap or shower, so the delivered water lands at a safe temperature. Lowering the stored temperature to solve the scald problem reintroduces the bacterial one, which is why the answer is a device rather than a lower setpoint. The fixture-level scald-safety side of this tradeoff, including delivery-temperature limits, lives in residential scope. See our guide on what the right water heater temperature setting is (054) and our guide on how to prevent scalding from hot water at home (157).

What a Water Management Program Covers

A water management program is a written, ongoing plan to keep a building’s water systems out of the conditions that let Legionella grow. For larger and higher-risk commercial buildings, this is the recognized framework, and it is the layer that a single temperature setting cannot replace.

The standard most often cited is ANSI/ASHRAE Standard 188, Legionellosis: Risk Management for Building Water Systems. It sets minimum risk-management requirements for most building types and explicitly excludes single-family residential homes. The standard requires a building owner to designate a team responsible for developing and carrying out the plan, and to address the building’s potable and non-potable water systems based on its risk factors and aerosol-generating equipment.

The CDC’s toolkit breaks a program into a repeatable set of elements:

  1. Establish a program team with the skills to build and run it.
  2. Describe the building water systems with flow diagrams and a written description.
  3. Identify hazardous areas where Legionella could grow and spread.
  4. Decide on control measures and limits, and the control points where they are applied, such as temperature and disinfectant targets.
  5. Plan monitoring for where and how to check those control measures.
  6. Set corrective actions to take when a control measure falls outside its limits.
  7. Verify and validate that the program is being carried out as designed and that it actually controls the hazardous conditions, then document the work and communicate it.

In practice, this translates to controlling temperature across the whole system, keeping water moving to eliminate stagnation, flushing low-use outlets and segments so fresh water replaces aged water, maintaining disinfectant residual, and managing scale and biofilm. After a period of reduced occupancy or a building shutdown, the CDC advises flushing all points of use so the piping is filled with fresh water before normal use resumes, which is a common trigger for an outbreak when skipped.

When to Bring In a Specialist for Testing and Remediation

Designing the program, testing the water, and remediating a contaminated system are jobs for qualified professionals, not building maintenance staff. This is the clear line between operational awareness and licensed work.

Identifying Legionella requires laboratory water sampling and trained interpretation, and remediation methods such as hyperchlorination or thermal disinfection involve hazards of their own when done wrong. The CDC’s program model assigns control-measure design, monitoring, and corrective action to a qualified team. OSHA notes there is no Legionella-specific standard, but employers remain responsible under the General Duty Clause for a workplace free of recognized hazards, and OSHA directs employers toward hazard assessment, water sampling and analysis, and professional control measures. In practice that means working with a water-management specialist, an industrial hygienist, and a licensed plumber rather than attempting disinfection in-house.

You should bring in a specialist when your building falls into a higher-risk category and has no written water management program, when routine monitoring shows temperatures or disinfectant levels outside the planned limits, after a suspected or confirmed case of Legionnaires’ disease is linked to the building, and before reopening a system that has sat with low or no use. There are no homeowner-style steps for system disinfection here. The right move at that point is a call to a qualified professional, not a procedure.

Frequently Asked Questions

At what temperature does Legionella grow?
The CDC identifies a growth range of roughly 77 to 113 degrees Fahrenheit (25 to 45 Celsius), and notes the bacteria can still grow at temperatures as low as 68 degrees Fahrenheit (20 Celsius). Warm, stagnant water inside that window, especially with biofilm, scale, and low disinfectant, is where it multiplies.

Does my building need a water management program?
The CDC points to higher-risk buildings such as healthcare facilities with overnight patients, housing that primarily serves people older than 65, hotels and other multi-unit buildings with centralized hot water, and structures over ten stories. Buildings with cooling towers, hot tubs, or decorative fountains are flagged regardless of type. A qualified professional can assess your specific building.

Why not just lower the stored water temperature to avoid scalding?
Lowering stored temperature to avoid burns moves the water into the Legionella growth range. The CDC points to storing water at or above 140 degrees Fahrenheit and tempering it down at the fixture with thermostatic mixing valves, so the water is both hot enough to suppress bacteria and safe at the tap.

Can building staff test for and disinfect Legionella themselves?
No. Testing requires laboratory water sampling and trained interpretation, and disinfection methods carry their own hazards. The CDC and ASHRAE program models assign this work to a qualified team, and the right step is to engage a water-management specialist, industrial hygienist, and licensed plumber.

Is Legionella a risk from drinking the water?
The main risk is inhaling contaminated mist, not swallowing water. That is why aerosol-generating equipment like cooling towers, showers, and decorative fountains is a focus of building water safety, and why the disease does not spread from person to person.

This article is general information, not professional advice. Legionella control and remediation are health-and-safety matters that should be handled by qualified water-management specialists, industrial hygienists, and licensed plumbers, and you should follow your applicable state and local requirements.

Sources

  • CDC, Public Health Strategies for Legionella Control: https://www.cdc.gov/control-legionella/php/public-health-strategy/index.html
  • CDC, Identify Buildings With Increased Legionella Risk (Water Management Program worksheet): https://www.cdc.gov/control-legionella/php/toolkit/wmp-worksheet.html
  • CDC, Steps to Develop a Water Management Program: https://www.cdc.gov/control-legionella/php/wmp/wmp-steps.html
  • CDC, Reducing the Risk of Legionella in Building Water Systems (Reopening Buildings Guidance): https://www.cdc.gov/control-legionella/php/guidance/building-water-system.html
  • CDC, Controlling Legionella in Cooling Towers: https://www.cdc.gov/control-legionella/php/toolkit/cooling-towers-module.html
  • ANSI/ASHRAE Standard 188-2021, Legionellosis: Risk Management for Building Water Systems: https://www.ashrae.org/technical-resources/bookstore/ansi-ashrae-standard-188-2021-legionellosis-risk-management-for-building-water-systems
  • OSHA, Legionellosis (Legionnaires’ Disease and Pontiac Fever) Control and Prevention: https://www.osha.gov/legionnaires-disease/control-prevention

Leave a comment

Your email address will not be published. Required fields are marked *