Hospital Water Supply, Cross-Connection and Legionella Risk in a New Wing
A 250-bed private hospital is adding a four-storey wing. The existing supply is a 60 m3 roof tank fed from the city main through a float valve. When main pressure falls to 35 kPa at peak hours, the booster pump set downstream of the tank draws the tank down and the low-level cut-out does not work, so the tank empties. To cover the shortfall, maintenance staff have connected the irrigation well to the domestic line with a hose and a gate valve whenever the tank runs low. The chilled-water make-up line and the hydrotherapy unit share the same hose bibb. Hot water is stored at 45 degrees Celsius in a calorifier serving the ICU and the new wing showers. Water samples from two shower heads have grown Legionella. The design brief asks for storage sized for a 24-hour supply at 600 litres per bed per day, and for the corrections needed.
1. Size the domestic storage and pumping arrangement for the stated basis, and state what the existing 60 m3 tank represents.
Read the worked answer
Demand. 250 beds x 600 L/bed-day = 150,000 L/day = 150 m3/day.
Storage. A 24-hour supply requires 150 m3 of domestic storage. The existing 60 m3 is 40% of one day, and because the city main pressure collapses to 35 kPa at peak, the reserve cannot be counted on to replenish within the day.
Recommended arrangement.
- Two tanks totalling at least 150 m3 (for example 2 x 80 m3) so that one can be drained, inspected and chlorinated while the hospital stays in service.
- A separate fire reserve in accordance with the fire code, not counted against the 150 m3 domestic figure.
- A break tank of at least 15-30 minutes of peak demand immediately upstream of the booster set, with an air gap between the fill inlet and the overflow level.
- Downstream of that break tank, a booster pump set with duty and standby pumps, a correctly functioning low-level cut-out, and a high-level alarm - the failed cut-out is a defect in its own right, not an inconvenience.
Checks before finalizing. Confirm the bed count for the new wing, confirm whether ICU, surgical and laboratory areas require higher allowances than the 600 L/bed-day average, and verify the tank location for structural loading and access. An average figure must not be used as a substitute for a peak-hour check of the booster and distribution sizing.
2. Identify the cross-connections in the described system, explain the mechanism by which contamination can occur, and specify the required controls.
Read the worked answer
The cross-connections.
- The irrigation well connected to the domestic line by hose and gate valve - a direct, unprotected connection between a non-potable source and potable piping.
- The chilled-water make-up line sharing a hose bibb with the hydrotherapy unit - potential contamination from pooled water and a known biofilm reservoir back into the make-up water.
- Any submerged inlet in the roof tank fed by the float valve, which can siphon non-potable water back into the main.
The mechanism. When main pressure drops to 35 kPa and the booster pump runs, the domestic line downstream of the tank can go negative. At that moment any open or leaky connection draws non-potable water into the potable system - back-siphonage - and it reaches every outlet on the line, including ICU hand basins. That the well is bacteriological quality unknown and the hydrotherapy area harbors Pseudomonas and Legionella makes this a direct patient-safety exposure, not a theoretical one.
Controls.
- Remove the hose-and-valve connection immediately; it is not a permissible arrangement even with a check valve.
- Provide an air gap (the preferred protection) or a reduced-pressure-zone backflow preventer at the main, at the well, at the boiler and chilled-water make-up connections, and at irrigation.
- Vacuum breakers on all hose bibbs, no submerged inlets, and physical separation of potable and non-potable pipework with distinct colour coding and labelling.
- Lock and tag the irrigation system, test backflow assemblies annually, keep records, and make cross-connection control a written hospital procedure with an accountable person.
3. Explain why the 45 degrees Celsius calorifier is implicated in the Legionella findings and set out the corrective water-safety measures, including the extra constraints in an ICU setting.
Read the worked answer
Why 45 degrees Celsius is the problem. Legionella proliferates between about 20 and 45 degrees Celsius, with optimal growth around 35-40 degrees Celsius. A calorifier held at 45 degrees Celsius is therefore an incubator, not a control point, and it feeds showers in the wing where aerosol generation is highest. The two positive shower heads are consistent with an amplification site in the calorifier and distribution loop rather than with the incoming supply.
Corrective measures.
- Store hot water at 60 degrees Celsius or above and maintain the return loop at 51 degrees Celsius or above, so the whole circuit is outside the growth range.
- Deliver at least 50 degrees Celsius at the most remote outlet, with thermostatic mixing valves at the point of use in patient areas to prevent scalding rather than lowering storage temperature.
- Flush low-use outlets weekly, remove dead legs and unused spurs, and discard rubber hoses and scaled shower heads that harbor biofilm.
- Maintain a disinfectant residual throughout the building, for example chlorine at 1-2 mg/L free residual at outlets, or chlorine dioxide where the system is compatible; monitor routinely.
- Conduct a formal water-safety risk assessment, sample for Legionella at sentinel outlets (calorifier outlet, return, distal showers, ICU), and keep records.
ICU constraints. Immunosuppressed patients have a much lower infectious dose, so the tolerance is effectively zero. Restrict showers in affected areas until results clear, provide sterile or filtered water for high-risk uses, and do not accept a single negative sampling round as closure; the control has to be verified over time.