Unannounced Inspection: Seven Findings and One Hour to Sort Them
Your county health inspector arrives unannounced at 10:00 a.m. Tuesday at your indoor facility: a 25-yard, six-lane lap pool of 135,000 gallons and a 6-person spa with a nominal setpoint of 104°F. Findings: (1) spa measured 105.4°F; (2) the automated controller log has no entries for the past four days - operators wrote readings "in the office later" and never did; (3) one of the two lifeguards on duty has a CPR card that expired three weeks ago; (4) the spa's emergency shut-off switch is behind a locked door and staff cannot locate the key; (5) there is no documentation on file for the spa's drain covers; (6) the pool gate's self-closing hinge closes the gate but does not latch from a 2-inch opening; (7) pool free chlorine is 1.2 ppm against a 1.5 ppm code minimum.
1. Sort the seven findings into those that stop swimming right now and those that can be corrected during the inspection, and justify each call.
Read the worked answer
Stop use now - do not negotiate these:
- Spa at 105.4°F (finding 1). The maximum is 104°F. Close the spa. Hyperthermia risk is real and acute, and the reading is only what the inspector measured - the setpoint may have drifted further.
- Emergency shut-off inaccessible (finding 4). The shut-off is the control that stops entrapment and suction injury. A switch behind a locked door with no key is functionally absent. Close the spa until staff can demonstrate the shut-off in under a few seconds, and keep the key on a tagged hook at the spa with the location in the EAP.
- No drain cover documentation (finding 5). Unverified is treated as non-compliant. You cannot show the covers are the correct, currently listed anti-entrapment covers in service life. Close the spa until you can produce make, model, installation date, and the compliance documentation - or replace the covers.
- Expired CPR certification (finding 3). Remove that guard from duty immediately; a lifeguard who cannot perform CPR is not a lifeguard. If that leaves the pool short of the required guard count, reduce bather load or close.
- Pool gate not self-latching (finding 6). A gate that closes but will not latch from a 2-inch opening is an open door to a child drowning. Repair or close the pool. This is often a sagging hinge, a swollen latch, or a mis-set closer - sometimes a 20-minute fix, but the pool is unsupervised until it is fixed and demonstrated.
Correct during the inspection, with documentation:
- Free chlorine 1.2 ppm (finding 7). Below the 1.5 ppm minimum. Raise it now with liquid hypochlorite, verify with a fresh test, and hold bathers until it is in range. Keep the pool out of use until the retest passes - do not simply add chlorine and let people in.
- Four days of missing logs (finding 2). A records violation, not an immediate hazard - but you cannot reconstruct four days of water chemistry, so you also cannot prove the pool was safe. Accept the citation, and note honestly in your response that the gap is a recordkeeping failure and that from today readings are recorded at the time they are taken.
Judgment note: when an inspector finds this many items, expect a follow-up visit. Fix the ones that can be fixed before the inspector leaves, photograph everything, and confirm in writing.
2. Build the corrective-action plan for the first hour, assigning roles, and state what you tell the inspector versus what you sort out internally.
Read the worked answer
First hour, by role:
| Minute | Action | Owner |
|---|---|---|
| 0–5 | Close and post the spa (temperature, shut-off, drain covers). Close or restrict the pool pending the gate and chlorine. | Facility manager, with the inspector present |
| 0–5 | Pull the expired-CPR guard off the stand; move the remaining guard to cover the highest-risk zone and reduce bather load to what one guard can legally supervise. | Head lifeguard |
| 5–15 | Locate or cut the key; post a spare shut-off key at the spa; demonstrate the shut-off operating for the inspector. | Maintenance |
| 5–15 | Adjust or repair the gate closer and latch; demonstrate latching from a 2-inch opening and from rest; document with a photo and a time. | Maintenance |
| 10–20 | Dose liquid hypochlorite to bring free chlorine above 1.5 ppm, retest, record. Do not admit bathers until the retest passes. | Certified operator |
| 20–45 | Pull the drain cover file: make, model, install date, service life, compliance documentation. If it does not exist, order replacement covers today and keep the spa closed. | Manager |
| 45–60 | Write the corrective-action log: each finding, immediate action, time, responsible person, and the date the permanent fix will be complete. | Manager |
What you tell the inspector: facts, plainly - the readings, the closure times, what you have fixed, what is still open, and a written commitment with dates for the rest. Do not argue about whether 105.4°F is "close enough" or offer explanations for the missing logs that sound like excuses. Credibility on the next visit is built in this hour.
What you sort out internally, after the inspector leaves: why the spa setpoint drifted, why the drain-cover documentation was never filed, why a certified lifeguard was scheduled past a card expiration, and why readings were "written later." That last one is the most damaging finding of the seven, because it means the other six could have existed for four days without anyone knowing.
3. Design the recordkeeping and staffing controls that would have caught findings 2 and 3 before the inspector did. Be specific about what is checked, by whom, and how often.
Read the worked answer
Finding 2 - the four-day log gap:
The failure is not laziness, it is a design flaw: "write it in the office later" guarantees the record is fiction. Controls that fix it:
- Read and record at the pool, at the time of the reading. Free and combined chlorine, pH, ORP or sanitizer, temperature, flow, filter pressure, and spa temperature - written on the deck sheet and initialed, then closed out at shift end. If the record is not contemporaneous, it has no evidentiary value.
- Automated controller alarms reviewed daily by name, with a sign-off. A controller that logs nothing for four days could have been alarming for four days.
- A daily opening checklist signed by the certified operator on duty, with an escalation rule: if any parameter is out of range, the pool does not open until it is corrected and re-tested.
- Weekly manager audit of the prior seven days of sheets - not a glance, a signature and a date. Monthly, the manager reviews the whole month.
- Retention per the code, typically a minimum of one to two years for pool records; keep them retrievable, because an inspector can ask for last August.
Finding 3 - an expired CPR card on the stand:
- A certification matrix on the wall: every staff member, every card (lifeguard, CPR/AED, first aid, operator certification), expiration date, and a 60-day and 30-day renewal flag. Cards expire on a known date; there is no excuse for discovering it under inspection.
- The opening supervisor verifies credentials against the matrix at the start of every shift, and signs. If a credential is expired, the person does not take a stand.
- Renewal is scheduled in advance by the facility, not left to the employee. Budget for it and put it on the calendar; a lapse is a management failure, not a staff failure.
- Maintain a relief list of at least two certified, currently trained substitutes so that losing one guard does not force the pool under the required ratio.
The connective tissue: both findings come from the same root cause - the facility runs on what people remember instead of on what the paperwork forces them to verify. The controls above convert memory into a check with a name and a date attached, which is what the code is actually asking for.