The Regulation includes several tightly framed obligations and deadlines that present compliance pitfalls. The following are concrete operational “gotchas” extracted from the text, with citations and the mechanisms by which non-compliance is likely to arise.
Timing and short response windows
-
24-hour reporting for reportable test results (s 18(1)): Occupiers must provide reportable laboratory results to the local government authority within 24 hours of receipt. Reportable thresholds are ≥1,000 CFU/mL for Legionella or ≥5,000,000 CFU/mL heterotrophic counts (s 18(2)). The short window requires systems to monitor incoming lab communications and to have an immediate notification process. Failure carries a maximum penalty of 20 penalty units.
-
7-day notification updates (ss 8(2), 13(2), 20(2), 30(2), 42(2)): Occupiers must notify local government authorities of changes in approved-form information within 7 days. Numerous activities have the same 7-day change-notice requirement, generating administrative burden for entities that change operators, contacts or systems frequently.
Rapid inspection and document-production demands
- 4-hour availability of records on request (s 19(1)(b)-(2)): Occupiers must supply required documents electronically or on paper within 4 hours of an authorised officer’s request. The list of required documents is extensive (s 19(3)): latest risk assessment, audit documentation for last 5 years, monthly testing reports for 5 years, operating and maintenance manuals and maintenance and service records. Entities that keep paper-only archives off-site or use third-party storage may find this requirement difficult without pre-planned retrieval systems.
Record retention mismatches
- Different retention durations across regimes: Sterilisation records must be kept for at least 12 months if sterilised on site (s 37(3-4)), pool testing results kept for 6 months (Schedule 1 s 11), private water supplier records must be kept for 24 months (s 54), and registers held by local governments interact with these retention duties (ss 25, 31, 43). A compliance program must therefore track multiple retention timelines to avoid accidental destruction within the legally prescribed period.
Certification and accreditation dependencies
- NATA accreditation requirement (s 21): Legionella and heterotrophic colony count tests must be carried out in NATA-accredited laboratories. If local accredited capacity is limited or if an operator relies on a non-accredited laboratory, tests will not meet the Regulation’s requirements and may risk enforcement. Also, s 15 prevents persons with recent lab engagement from being approved auditors, which may limit the auditor market in small regions.
Competent person and auditor constraints
- Approved auditors exclusion list (s 15(2)): The Secretary may not approve the occupier, the person who undertook the risk assessment, persons who installed/operated/maintained the system in the previous 5 years, laboratory operators who carried out testing in the prior 5 years, or persons employed/engaged by those listed to be auditors. This reduces potential conflicts of interest but can make sourcing approved auditors difficult in areas with limited competent practitioners.
Technical standard updates and external references
- Standards “as in force for the time being” (s 3(3)): The Regulation imports AS/NZS standards and other documents as they vary over time. Operators must monitor changes to those standards (for example, AS 5369:2023, AS 23907:2023 inserted in 2025) because compliance obligations can change without direct amendment to the Regulation text.
Specific prescriptive technical requirements
-
Hot water outlet temperature (s 5(4)(b)): Maintenance must ensure outlets deliver water at not less than 60°C once standing water has been expelled. This is a precise measurement and may require temperature mapping and routine validation to demonstrate compliance.
-
Cooling water disinfection thresholds (s 9(3)(b)): A disinfection procedure must be in operation at all times designed to keep Legionella <10 CFU/mL and heterotrophic colony count <100,000 CFU/mL. These are stringent operational targets and may necessitate continuous disinfection regimes, monitoring and controls.
Display and sign dimensions for cooling towers (s 10): Unique identification numbers designated by local government must be displayed on signs of at least A5 size (148mm × 210mm), clearly visible and durable. Failures to affix or meet visibility standards attract a maximum penalty of 20 penalty units.
Pool chemical and measurement specifics (Schedule 1): Pool operators must maintain precise pH, free chlorine/bromine and combined chlorine thresholds and testing frequencies (Schedule 1 ss 3-7). For example, indoor pools have higher free available chlorine minimums (2.0-3.0 mg/L depending on pH) and total chlorine cannot exceed 10.0 mg/L (Schedule 1 s 4(1)-(4)). Operators using cyanuric acid are restricted to outdoor pools and must monitor concentration weekly and keep it ≤50 mg/L (Schedule 1 s 10).
Sharp and single-use materials standard (s 31A, s 36, s 38): The Regulation requires an “appropriate sharps container” that complies with AS 23907:2023 for Part 4 premises (s 31A) and multiple single-use needle and applicator rules with 20 penalty unit maxima for contravention (s 38). For practitioners in mobile or small premises, supply chain and inventory controls are essential.
Fees and recovery
- Improvement notice and prohibition order fees and re-inspection hourly charges (Schedule 5 and s 124-125): These fees are not trivial and are indexed across years in Schedule 5; re-inspection fees are payable per hour with a minimum half-hour. Failure to pay within 60 days is an offence (s 124(3)). Entities must budget for potential enforcement-related fees.
Falsification and criminal risk
- Falsifying tests is an offence (s 22): Persons who knowingly provide false or misleading test results are guilty of an offence with up to 20 penalty units. This criminalises intentional deception in reporting and places compliance on both laboratories and those presenting results.
Discretion and uncertainty
- Secretary/Chief Health Officer discretionary powers to approve, revoke, exempt or require actions (e.g. ss 7(2)(b), 15, 16, 28, 55): These discretionary powers create regulatory uncertainty for regulated parties relying on approvals or exemptions. The Regulation provides process notes (for example, written notices), but operational outcomes will depend on administrative decision-making.
These “gotchas” are concrete, sourced operational traps: short reporting windows, strict inspection response timings, multi-duration recordkeeping, reliance on third-party accreditation and external standards, limited auditor pools, and monetary/penal exposures tied to defined thresholds. Entities should build documented procedures, data flows and contractual relationships (with NATA labs, competent persons and approved auditors) to manage the compliance risks identified above.