CQC Regulation 12 and Water Safety: What Inspectors Actually Check in Care Homes

Dupal UK — Compliance Team

2 hours ago

4 min read

Registered managers sometimes treat CQC compliance and Legionella compliance as two separate boxes to tick. They're not. CQC doesn't publish its own water safety standard — it assesses whether you're managing the risk properly as part of a much broader duty, and if you're already following ACOP L8 and HSG274 properly, most of what an inspector wants is something you should already have.

Where water safety actually sits in CQC's framework

The relevant requirement is Regulation 12 — safe care and treatment — under the Health and Social Care Act 2008 (Regulated Activities) Regulations 2014. It's a broad duty: providers must assess the risks to the health and safety of people using the service and do everything reasonably practicable to mitigate them. Legionella and wider water safety sit inside that duty, alongside dozens of other risks — falls, medication, infection control generally. Regulation 15 (premises and equipment) sits alongside it, covering whether the physical systems themselves are safe and properly maintained.

In practice, this means CQC isn't inventing a new technical standard for water safety. It's checking whether you're meeting the standard that already exists — ACOP L8 and HSG274 — and whether you can prove it.

What CQC actually asks to see

Before a service even registers, CQC expects a current Legionella risk assessment as supporting evidence, and someone named as responsible for managing the risk. From there, inspectors look for:

A system map — hot and cold water systems, outlets, tanks, mixing valves and water-using equipment, not just a general assurance that “someone handles this”
Risk identification specific to your building — stagnant water, low-use outlets, temperature dead spots, corroded pipework
Testing and monitoring records — temperature checks, water sampling results where relevant, tank and pipe inspections, descaling and replacement schedules
Evidence of control measures actually being carried out — flushing logs, cleaning records, maintenance history, not just the written scheme itself
Review frequency — at minimum annually, with additional reviews triggered by a change to the system, a new resident with different vulnerability, building work, or a suspected case
Staff competence — training records showing staff can recognise a problem (a cold radiator, an unused shower, a smell) and know who to tell

The Responsible Person question, again

This connects directly to the role covered in our companion article: CQC expects the Responsible Person appointment to be evidenced, not just implied by a job title. A registered manager who can't immediately say who holds that responsibility, and produce their training record, has a gap an inspector will find quickly.

A practical checklist

Is your Legionella risk assessment current, and does it reference this specific building rather than being a generic template?
Can you produce 12 months of monitoring and flushing records on request, not just describe the process verbally?
Is your Responsible Person named, trained, and able to explain their role if asked directly?
If anything has changed — an extension, a refurbishment, an extended void period, a resident with a relevant vulnerability — has the risk assessment been reviewed since?
Could staff on shift explain what to do if a shower hasn't been used in a while, or if water runs cold from the hot tap?

This is where a visible, colour-coded replacement scheme earns its keep in an inspection specifically: an inspector can see, outlet by outlet, that the control measure is live — rather than you needing to locate the right page in a maintenance folder while they wait.

Key takeaways

CQC assesses water safety through Regulation 12 (safe care and treatment) and Regulation 15 (premises and equipment) — it isn't a separate water-specific rule
The underlying technical standard is still ACOP L8 and HSG274; CQC checks whether you're meeting it and can prove it
Inspectors want to see records and evidence, not just a written scheme
The Responsible Person appointment needs to be real and evidenced, not assumed

FAQ

Does CQC test the water itself during an inspection?

Not routinely. Inspectors review your risk assessment, monitoring records and evidence of control measures; they don't typically carry out their own water sampling. That's a reason the quality of your own documentation matters so much.

Is a Legionella risk assessment enough on its own?

No — it's the starting point. CQC also wants to see that the actions it identifies are actually being carried out and recorded, and that the assessment is reviewed regularly rather than filed once and forgotten.

What triggers an extra review outside the annual cycle?

A change to the water system, a change in how the building is used, an extended period where part of the building wasn't occupied, a new resident with a relevant vulnerability, or any suspected case connected to the water supply.