Legionella and Building Water Systems: The Health Hazard Most Small Businesses Never Inspect

Most small business owners can rattle off the hazards they think about every week — a wet floor, a frayed extension cord, a forklift blind spot. Almost none of them think about the water sitting in their building's plumbing, cooling tower, or decorative fountain as a health hazard. That gap in attention is exactly why Legionella bacteria, the organism behind Legionnaires' disease, keeps showing up in outbreak investigations tied to hotels, office buildings, manufacturing plants, and even small retail centers with an ornamental water feature out front.

Legionella isn't covered by a dedicated OSHA standard the way lead or noise are. Instead, OSHA reaches these hazards through the General Duty Clause, Section 5(a)(1) of the OSH Act, which requires employers to furnish a workplace free from recognized hazards likely to cause death or serious physical harm. The CDC and OSHA have both published enough guidance on building water system management that Legionella now qualifies as a "recognized hazard" in any facility with cooling towers, hot tubs, decorative fountains, or plumbing with inconsistent use. If someone gets sick and an inspector can show stagnant or warm water and no water management plan, you're exposed to a citation even without a numbered standard to point to.

Where Legionella actually grows

Legionella bacteria occur naturally in freshwater but become dangerous when they find a man-made environment that lets them multiply: water between 77 and 108 degrees Fahrenheit, stagnation, and a biofilm or scale layer to hide in. Cooling towers are the classic culprit because they aerosolize water directly into the air, and workers or bystanders can inhale contaminated mist from a rooftop unit without ever touching the equipment. But the risk list is longer than most owners assume. Hot water tanks set too low, decorative fountains and water walls in a lobby, eyewash stations and safety showers that go untested for months, ice machines, and plumbing in a building that sat partially vacant or under renovation can all become reservoirs. Any business with a seasonal facility, a slow-season closure, or infrequently used showers and locker rooms should treat those systems as elevated risk the moment they come back online.

Building a water management program

The centerpiece of managing this hazard is a written water management program, modeled on the framework in ASHRAE Standard 188 and CDC's toolkit for building owners. It doesn't need to be complicated for a small facility, but it needs to exist and be followed. Start by mapping every water system in the building — where water enters, where it's heated, stored, or aerosolized, and where it exits. From that map, identify the control points where growth is most likely: cooling tower basins, hot water tanks, any dead-leg piping that no longer connects to active fixtures, and rarely used outlets. For each point, set a monitoring routine covering temperature, disinfectant residual if you chemically treat the water, and visual inspection for scale or biofilm. Cooling towers should be inspected and treated on a documented schedule, hot water should be maintained above 140 degrees at the heater and delivered above 122 degrees at the tap where scalding risk allows, and any fixture unused for more than a week should be flushed before anyone drinks from or showers under it again.

Reopening after a shutdown

This is the scenario that catches small businesses off guard. If your facility closed for a renovation, a slow season, or any extended stretch with water sitting still in the pipes, that stagnant period is exactly when Legionella can establish itself. Before reopening any area with showers, decorative water features, or an idle cooling tower, flush every outlet with hot water for several minutes, run the cooling tower through a disinfection cycle, and confirm hot water heaters are back at proper temperature. Skipping this step because you're eager to reopen is how outbreaks tied to reopened hotels and gyms have made headlines before, and small facilities aren't exempt from the same physics.

Training your team to recognize the signs

Legionnaires' disease presents like a severe pneumonia — high fever, cough, shortness of breath, muscle aches — and it's easy to mistake for the flu, especially since symptoms can take up to two weeks to appear after exposure. Anyone managing your water systems, from a maintenance tech to whoever handles the lobby fountain, should know the basic warning signs of a system going out of control: cloudy water, a sudden change in the smell of hot water, visible slime or scale, or a spike in normal temperature readings. If an employee or customer is diagnosed and any link to your building surfaces, notify your local health department immediately — most jurisdictions require it, and a fast response is your best defense against both an outbreak and a subsequent citation.

Making this manageable

None of this requires a full-time water safety officer at a small business. What it requires is picking one person — a facilities manager, an office manager, or an owner if that's who wears every hat — and giving them a simple written checklist: monthly cooling tower checks, quarterly flushing of low-use fixtures, temperature logs for hot water systems, and a clear reopening procedure after any extended closure. Keep those logs. They're the difference between a business that can demonstrate a good-faith water management program and one that finds out the hard way what "recognized hazard" means under Section 5(a)(1).