European edition · Thursday, July 16, 2026

Food safety across Europe


HACCP guides

Legionella in HVAC systems: regulatory obligations

Discover the regulatory obligations to prevent legionella in HVAC systems. Complete guide and always up-to-date.


Legionella and HVAC systems: a risk not to be underestimated

Legionella is a bacterium that can proliferate in stagnant water or at high temperatures, such as in HVAC systems. These systems, including ventilation, air conditioning, and heating systems, represent a favorable environment for its growth. The presence of this microorganism can lead to serious health consequences, including legionnaires’ disease, a form of pneumonia that can be potentially fatal.

In Italy, the prevention of legionella is an increasingly important topic, both for health and regulatory reasons. Current regulations require those who manage HVAC systems to adopt specific measures to prevent the proliferation of the bacterium and ensure the safety of users.

Regulatory obligations for managing legionella

The Italian regulations regarding legionella are mainly based on D.Lgs. 192/2005 and D.Lgs. 152/2006, which regulate environmental protection and public health. These laws establish that every entity managing HVAC systems must adopt a legionella management plan, which includes preventive measures, periodic checks, and corrective actions.

Who is subject to regulatory obligations?

The following are subject to regulatory obligations:

  • HVAC system operators (e.g., maintenance companies, condominiums, offices, schools, hospitals);
  • Entities using HVAC systems for industrial or civil purposes;
  • Technical operators performing maintenance or installation work.

Measures to be adopted for legionella control

To ensure safety, operators must:

  • Implement a legionella management plan, which includes risk identification, preventive measures, and monitoring;
  • Conduct water analysis to check for the presence of the bacterium;
  • Keep water in motion to prevent biofilm formation;
  • Respect operating temperatures to reduce bacterial proliferation;
  • Perform cleaning and disinfection interventions when necessary.

The responsibility of the operator

The responsibility of the operator is a key aspect in the context of legionella management. In case of non-compliance, the entity may be held responsible for any damages caused by the bacterium. Additionally, failing to comply with regulatory obligations may result in administrative or criminal penalties.

Cases in which responsibility is recognized

Responsibility may be recognized in various cases, for example:

  • In case of contamination of a system due to lack of control;
  • In case of legionnaires’ disease confirmed in a managed environment;
  • In case of non-compliance with regulations by the entity in charge.

Prevention and training

Prevention is the best way to avoid legionella spread. To this end, it is essential that operators and managers are trained on how to manage risks related to the presence of the bacterium. Training must include:

  • Technical knowledge on HVAC systems;
  • Prevention and control measures;
  • Cleaning and disinfection procedures;
  • Analysis and monitoring procedures;
  • Emergency management procedures in case of contamination.

In addition, it is important that operators are able to identify risks and take timely corrective actions. Training must be continuous and updated based on new regulations and technologies.

Practical conclusion

Managing HVAC systems safely requires a rigorous attention to legionella prevention. Obligated entities must adopt structured measures, such as a management plan, periodic checks, and operator training. Respecting regulatory obligations is not only a legal duty but also an act of responsibility towards citizens’ health. Vigilance and prevention are the keys to avoiding incidents and ensuring environmental safety.

Frequently asked questions

Who is subject to regulatory obligations for legionella?
The entities subject to regulatory obligations are HVAC system operators, end users, and technical operators interacting with the systems.
What measures must operators adopt to prevent legionella?
Operators must implement a management plan, conduct water analysis, keep water in motion, and respect operating temperatures.
What happens in case of non-compliance with regulatory obligations?
In case of non-compliance, the entity may be held responsible for any damages caused and may face administrative or criminal penalties.
Why is operator training important?
Training is essential to ensure proper and safe management of the systems, preventing the spread of legionella.