Mixed-Use Building With an Outsourced Spa and a Thin Policy
A property management firm operates a 12-story, 300,000 square foot mixed-use building: eight office floors, a two-floor day spa with two whirlpool tubs and a steam room, and a lobby fountain. The water management program team is the chief engineer, a contracted cooling-tower treatment vendor, and an administrative assistant who keeps the binder. The owner signed a one-page policy last year. The vendor emails monthly chemical readings. The spa is run by a separate tenant under its own pool permit. The binder has tower logs but no hazard analysis, no roles matrix, and no corrective-action records, and the last three months of spa logs are missing. A tenant asks who is accountable if a case occurs.
1. Identify the structural gaps in team composition, authority, and accountability, and propose a concrete fix.
Read the worked answer
Gaps
- No program owner with authority and budget. A vendor and an administrative assistant cannot make engineering or closure decisions.
- No defined scope. The spa is a separate tenant and is effectively outside the program boundary even though it shares the domestic water supply and building air.
- No cross-functional input. Infection prevention or a health and safety professional, housekeeping, and tenant representation are absent.
- Accountability is undocumented. Nothing states who decides, who escalates, and who signs off.
Fix
- Appoint a program coordinator with written authority, budget, and a deputy.
- Define the team with named roles: owner sponsor, coordinator, engineering, water-treatment contractor, spa tenant, and a health/safety advisor.
- Build a responsibility matrix for each control point: who monitors, who reviews, who authorizes corrective action, who notifies the health department.
- Write escalation triggers and response times for out-of-range results.
- Define the program boundary and interface agreement with the spa tenant.
Accountability cannot be delegated away by contract; the owner retains responsibility for the building systems it controls.
2. What documents must the program contain at minimum, and how should records be controlled? Address the missing spa logs and the email-only vendor reports.
Read the worked answer
Minimum content
- Program policy with scope and objectives.
- Water system description and process flow diagrams, including the spa and fountain.
- Hazard analysis and risk ranking by system and population.
- Control measures with limits, monitoring locations, methods, and frequencies.
- Corrective-action procedures and records.
- Verification and validation results, including environmental and clinical surveillance.
- Communication and notification procedures; training records; annual review.
Records control
- Legible, dated, signed, version-controlled, and retrievable; retained per jurisdiction or at least several years.
- Vendor emails are not a controlled record: require a standard report form or database entry with the same fields, submitted on a fixed schedule, with out-of-range flags.
Missing spa logs: treat this as a verification failure, not an administrative annoyance. Investigate whether monitoring was not performed or not recorded, verify the current spa condition directly, and document the corrective action. If you cannot show the control was applied, assume it was not.
3. How should the tenant-operated spa be integrated into the program without duplicating or displacing the pool permit?
Read the worked answer
Integration approach
- Decide the boundary explicitly. Either the building program covers spa water systems, or the lease and contract require the tenant to maintain an equivalent program with defined interfaces. Put the choice in writing.
- Map shared systems: domestic water supply, hot water recirculation, HVAC, and any shared drains or fountains. Assign responsibility for each.
- Keep the pool permit primary for code compliance and layer the water management program on top for hazard control; do not let one substitute for the other.
- Contract terms: right to audit, required reporting of positive results and illnesses within a set time, mandatory participation in the building team, corrective-action authority, and indemnity/insurance language reviewed by counsel.
- Communication protocol: joint review of any out-of-range result, shared timeline, and coordinated notification to the health department.
- Verification: the building coordinator reviews spa records monthly and audits annually.
The owner remains accountable for building-controlled systems and for ensuring the interface does not create a gap where no one monitors.