How to Reduce Biological Risk in the Systems You Service

Why this matters

Most shops respond to a biological concern with the last step first: a shock dose, a residual, a clean report. It works for a while and then the problem returns, because the conditions that grew it are still there and a chemical does not remove a dead leg or cool a riser. The controls below are listed in the order of what you lose by skipping each one, and the order is the deliverable. Do them in a different sequence and you can spend a season of recurring labor on a system that was always going to come back.

Before you start: the four hazards this work creates

• Chemicals from different classes must never meet. An oxidising product (hypochlorite, bromine, chlorine dioxide, peracetic) mixed with an acid releases chlorine gas; the same oxidiser mixed with an ammonia or amine product releases chloramine. Both are inhalation hazards that will put someone down in a plant room before they can reach the door. Store and feed them separately, never share a pump, a jug or a funnel, and take the glove class and the respiratory control from each product's safety data sheet under 29 CFR 1910.1200(g) rather than guessing. Eye and face protection plus the SDS-named glove is the splash control; it is not the inhalation control.
• Diluting an acid: acid into water, never water into acid. The heat of dilution can boil the surface and throw it.
• Flushing a line that has been standing throws an aerosol. Remove the aerator, open slowly at low flow, and where the aerosol cannot be avoided use respiratory protection selected and fit-tested under a written program per 29 CFR 1910.134.
• Any temporary connection for feeding or flushing is a cross-connection until proven otherwise. A chemically treated system connected to potable water is classified as a high hazard by the model plumbing codes and requires a reduced-pressure principle backflow assembly, tested. This is the one item on the list that can hurt people who are nowhere near the building; treat it as a public-health event, not a plumbing detail, and confirm the required assembly and test with the authority having jurisdiction.

Step 1: Map where water sits, and for how long

This is the most expensive step to skip, because every control after it is aimed by this map. Skip it and you buy chemical for the whole system to treat two branches, you flush outlets that already turn over, and you leave untouched the run nobody knew existed above a ceiling.

Walk the system with the drawings and then without them. For each branch, get two numbers: the volume it holds (length times the pipe's volume per foot; three-quarter inch type L copper holds about 0.025 gallons per foot) and the volume drawn through it per day. Divide the first by the second. That is residence time in days, and it is the ranking key for everything below. Add every water-holding device that is not on the plumbing drawings: ice makers, humidifiers, decorative features, emergency showers, eyewash stations, misters, unused hose bibbs.

Step 2: Physically remove the reservoirs you can remove

Skipping this converts a one-time task into a permanent recurring one. A capped branch is controlled forever with no labor; the same branch left in place needs a flush every week for the life of the building and is still standing water for the other six days.

Cut back to the active main, not to a valve. A closed valve on a dead leg leaves the leg full. Before cutting: isolate and drain the section and open a downstream point to atmosphere so nothing is trapped, and confirm with the occupant which fixtures go out of service and for how long, because taking water down in an occupied building is itself a consequence you are creating. Never apply a torch to a closed section of pipe that still holds water; the trapped volume expands and the joint or the pipe lets go. If you are heating joints, ventilate and keep your head out of the plume: brazing and soldering fume is an inhalation route, and heating a galvanized fitting releases zinc oxide fume, so that work needs local exhaust or a respirator selected under the 1910.134 program, not a dust mask.

Step 3: Hold the temperature ends apart

Skipping this puts the whole system in the growth window and no flush schedule can rescue it, because you are then flushing warm water with warm water. Hot has to stay hot to the far end and cold has to stay cold at the top of the riser.

On the hot side, measure at the storage outlet, at the recirculation return, and at the furthest fixture that has no mixing valve. On the cold side, measure the incoming main and the top-floor riser standing. If the cold riser has gained more than a few degrees, the fix is insulation and separation from whatever is heating it in the shaft, which is usually an uninsulated heating main sharing the chase.

Raising stored hot water temperature is a legitimate control and it creates a scald hazard in the same breath: water near 140 F burns adult skin in seconds. Raise storage only where approved thermostatic mixing valves control delivered temperature (ASSE 1017 for a master valve, ASSE 1070 at the point of use), and verify delivered temperature at the furthest fixture before you leave the site.

Step 4: Restore turnover on what is left, and log it

Skipping this means the map is right, the pipe is right, the temperatures are right, and the water still sits. Flushing is the control that handles what you could not cut out.

Set the list from step 1: any outlet whose residence time exceeds one day, or that shows zero use in a week's occupancy log. Give each one a duration long enough to move the branch volume plus the run it feeds, not a fixed two minutes chosen because it sounds thorough. Log per outlet with an initial. An unlogged flush is indistinguishable from a skipped one, and in the second year that distinction is the whole record.

Step 5: Close the aerosol route

Skipping this leaves the exposure path open even when counts are moderate, and exposure is what makes counts matter. Check that the tower has intact drift eliminators seated with no bypass gaps, that decorative features and misters are on the plan at all, and that showers and spray fixtures in low-use areas are on the flush list rather than treated as ordinary taps.

Step 6: Add chemical control, matched to the system

Do this last, not first. Done first, it is the most expensive error on this list in a different way from step 1: it works well enough for one season to convince everyone the first five steps were unnecessary, and it masks the conditions while they continue.

Match the product to the system and the metallurgy, take the dose, the contact time and the residual band from the supplier for that product and that system, and keep oxidising and non-oxidising products physically separated at all times. Non-oxidising biocides are often skin and respiratory sensitisers, which means a person can work with one for years and then react to a small exposure, so the glove class and the respiratory control come off that product's SDS specifically rather than from what you wear for the oxidiser.

Step 7: Re-check after every change and every occupancy change

Skipping this loses the only evidence that any of the previous six worked. Re-measure the same points, the same way, after the piping change, after the setpoint change, and after a floor changes tenant, because occupancy is what sets residence time and it moves without anyone telling you.

Worked example: a small medical office building

Twenty-two outlets. A four-week use log shows 6 outlets with zero use and 4 more with one or two uses, so 10 of the 22, about 45 percent, clear the low-use gate. Loop return measures 108 F at the mechanical room against a 140 F storage outlet. The 4th floor cold riser reads 81 F standing against a 63 F incoming main.

Run the steps in order. Step 1 gives the list of 10. Step 2 finds that 3 of the 6 zero-use outlets serve a converted storage room and a decommissioned lab bench, and they get cut back to the active main and capped. That drops the recurring list from 10 to 7. At 2 minutes an outlet, weekly, the flush burden goes from 20 minutes a week to 14, which is about 1.4 hours a month down to about 1.0 hour a month, a 30 percent cut in recurring labor bought once.

Step 3 addresses the 108 F return, which is the finding that matters most in this building because it puts the entire far half of the hot system inside the growth window rather than one branch. The loop was found running with a seized check valve letting flow short-circuit; correcting it brought the return to 124 F on the re-check. The cold riser at 81 F got insulated where it shares the chase with an uninsulated heating main.

Step 4 sets the flush duration by branch volume rather than by habit. The longest remaining branch holds 2.2 gallons and feeds a fixture at roughly 1.5 gallons per minute, so a 2-minute flush moves about 3 gallons, which clears the branch with margin. A shorter branch holding 0.4 gallons does not need the same 2 minutes, and the log records the duration actually used.

Only then does step 6 come up, and in this building the answer was that no additional chemical control was warranted on the domestic system at all once the loop was corrected and the dead legs were gone. That is the outcome the order produces and the reversed order never reaches: a shop that shocked the system in week one would have reported a clean result, billed the recurring flush on all 10 outlets, and left the seized check valve in place.

The failure mode is stopping after step 2 because the capped branches feel like the work. The 108 F return was worth more than all three caps, and it was found by a thermometer, not a saw.

How to verify the work held

• Re-read the same points after a full week of normal occupancy, not the day you finished. A loop reads well immediately after you have been running water through it.
• Check the flush log for gaps before you check the temperatures. A gap tells you the schedule is unrealistic for whoever owns it, and a schedule nobody can execute is worse than a longer interval that gets done.
• Confirm the capped branches are actually cut, not valved. Walk them.
• Verify the mixing valves are working at the far fixtures any time storage temperature was raised, by measuring delivered temperature at the fixture and not by trusting the valve's presence.
• Re-run the residence-time arithmetic when a tenant changes, because occupancy is the input that moves on its own.

References

• CDC guidance on controlling Legionella growth in building water systems
• ANSI/ASHRAE Standard 188, Legionellosis: Risk Management for Building Water Systems (pin the edition your client references)
• 29 CFR 1910.1200(g) for safety data sheet availability, and 29 CFR 1910.134 for respiratory protection program requirements
• Model plumbing code and local authority requirements for backflow prevention on connections to chemically treated systems
• See related: Why Warm, Stagnant Water Is a Biological Problem; What a Water Management Plan Is For