ASHRAE 188 establishes minimum requirements for managing Legionella risk in building water systems through documented Water Management Programs. As regulatory scrutiny intensifies and liability exposure grows, cooling tower compliance has become a critical responsibility for building owners.
This blog explains who must comply, what documentation is required, and how to maintain audit-ready records.
What Is ASHRAE 188? (ASHRAE Standard 188 Explained)
ASHRAE Standard 188, formally titled “Legionellosis: Risk Management for Building Water Systems,” establishes minimum requirements for developing and maintaining a Water Management Program to control Legionella growth in building water systems.
ASHRAE 188 is a standard rather than federal law, but it may be referenced or incorporated into applicable codes, regulations, accreditation requirements, or other requirements. For hospitals, current CMS infection prevention guidance says facilities should consider implementing a Water Management Program that considers the ASHRAE standard and CDC toolkit.
ASHRAE 188 sets the compliance requirements, while ASHRAE Guideline 12-2023 offers practical guidance for putting them into practice. Meeting ASHRAE 188 compliance also involves maintaining the program and keeping documentation up to date.
Why Was ASHRAE 188 Created?
ASHRAE 188 was developed in response to rising Legionnaires’ disease outbreaks linked to building water systems, particularly cooling towers and complex potable water systems. The standard shifts focus from reactive testing to proactive risk management, standardizing how facilities identify and control conditions where Legionella can multiply.
This focus has become increasingly relevant as CDC data shows a significant rise in Legionellosis cases over the past two decades. As awareness grows, cooling tower regulations are increasingly using ASHRAE 188 as a benchmark for Legionella risk management.
Who Needs to Comply With ASHRAE 188?
ASHRAE 188 applies to human-occupied commercial, institutional, multiunit residential, and industrial buildings within the standard’s scope, based on their building water systems and characteristics. Whether a Water Management Program is required depends on the specific building and water systems covered by the standard.
ASHRAE 188 is a standard rather than federal law. Its requirements become legally enforceable when they are adopted or incorporated into applicable codes, regulations, or other requirements. Healthcare facilities may also have separate water management obligations under CMS infection prevention requirements.
Data centers and industrial plants with cooling towers should assess whether ASHRAE 188 applies to their building water systems and whether additional state or local cooling tower requirements apply.
ASHRAE 188 is not limited to healthcare facilities. Commercial buildings may also be subject to state or local requirements. For example, in New York, cooling tower regulations incorporate ASHRAE 188-2015 for the cooling tower maintenance program and plan, while the current edition of the standard is ASHRAE 188-2021.
New York also has additional requirements covering cooling tower registration, inspections, Legionella and bacteriological testing, reporting, annual certification, maintenance planning, and recordkeeping. Facilities should use ASHRAE 188-2021 alongside all applicable state and local requirements to ensure their cooling tower program addresses the requirements relevant to their jurisdiction.
What Is a Water Management Program (WMP)?
A Water Management Program (WMP) is a documented plan for identifying conditions that may support Legionella growth and establishing controls across a building’s water systems.
Under ASHRAE 188, the program includes several core elements:
- forming a program team
- documenting system descriptions and flow diagrams
- assessing hazards
- setting control measures with monitoring frequencies and limits
- defining corrective actions
- maintaining verification and documentation records
Since building water systems and operating conditions can change, a WMP should be reviewed and updated regularly. It is an ongoing program rather than a one-time document.
Key Elements of a Compliant Water Management Program
Here are the key elements of a compliant Water Management Program:
- Program team: Designated individuals responsible for WMP development, implementation, and oversight
- System description: Flow diagrams and documentation of all water system components
- Hazard analysis: Identification of areas where Legionella could grow or spread
- Control measures: Specific actions, monitoring frequencies, and control limits for each hazard
- Corrective actions: Defined responses when control limits are exceeded
- Documentation: Records of monitoring, corrective actions, verification, and validation activities
How ASHRAE 188 Helps Prevent Legionella
ASHRAE 188 uses a proactive, HACCP-style hazard analysis approach to identify conditions that can support Legionella growth. In cooling towers, these conditions may include:
- Aerosolization: Can disperse contaminated water droplets into the surrounding air.
- Warm temperatures: Water between 20°C and 45°C can support bacterial growth.
- Stagnation: Limited water movement can allow bacteria to multiply.
- Biofilm buildup: Organic material can provide an environment for Legionella to grow.
A Water Management Program reduces these risks by controlling water treatment chemicals, bleed-off rates, and temperature. Regular monitoring checks whether these controls are working as intended and helps identify conditions that may require corrective action.
The need for water sampling depends on the facility’s WMP and applicable regulations. ASHRAE 188 does not require routine Legionella testing in every situation; however sampling may be used when the WMP or regulations call for it. When testing is performed, the results can help identify problems and guide corrective action.
These results add to the information gathered through routine monitoring but do not replace the controls themselves. This is why facilities should record monitoring results and document corrective actions when readings fall outside established limits. Together, these records show how the facility monitors its controls and responds when conditions require attention.
Documentation Building Owners Must Maintain
Building owners should maintain the complete WMP, along with monitoring logs, corrective action records, verification and validation results, and cooling tower inspection reports. Keeping these records together makes it easier to track how control measures are being monitored and addressed over time.
Records should follow the retention schedule outlined in the WMP and any applicable jurisdictional requirements so documentation remains available for audits and regulatory reviews.
The cooling tower inspection report adds another layer of evidence by showing that visual and operational assessments align with the control measures outlined in the WMP.
When inspection findings, monitoring results, or corrective actions are missing, gaps can become apparent during an audit. Keeping complete and organized records is thus an essential part of maintaining ASHRAE 188 compliance.
Cooling Tower Inspection: How Often and What It Covers
A cooling tower inspection should follow the monitoring schedule set out in the Water Management Program. In practice, this may include seasonal inspections based on operating cycles, along with additional checks after system changes or maintenance work. The schedule should also align with the control measures and verification activities outlined in the WMP.
The scope of a cooling tower inspection should follow the facility’s Water Management Program and applicable state or local requirements. Common inspection elements may include:
- Visual condition of the cooling tower
- Water treatment control verification
- Signs of biofilm or scale buildup
- Drift eliminator integrity
- Basin cleanliness
Pro tip: To keep inspections consistent across sites, facilities should use a cooling tower inspection checklist as a standard reference.
What Happens If You Don’t Comply With ASHRAE 188?
Gaps in Legionella risk management can increase liability exposure during an outbreak and, where applicable requirements have been adopted, may also lead to regulatory or accreditation consequences.
The financial impact can also extend to outbreak response costs, operational shutdowns, and reputational damage that may continue after remediation. Maintaining proper records under ASHRAE 188 also helps demonstrate that recognized risk management practices were put in place and followed.
Local cooling tower regulations, including those in New York, may add requirements and penalties beyond the standard itself. This makes cooling tower compliance dependent on both ASHRAE 188 and applicable local rules, while ASHRAE 188 compliance provides a documented baseline for risk management.
ASHRAE 188 vs. Related Standards & Guidelines
Several standards, guidelines, and public health resources address Legionella risk, but they differ in purpose, scope, and how they are applied. The table below highlights the key differences:
| Framework | Type | Primary Focus | Who Enforces / References |
| ASHRAE Standard 188 | Standard | WMP requirements for Legionella risk | Adopted codes and regulations; referenced by CMS and other authorities |
| ASHRAE Guideline 12 | Guidance | WMP implementation best practices | Voluntary reference |
| CDC Toolkit | Guidance | Developing and implementing a WMP | Public health agencies, facilities |
| OSHA | Guidance / workplace safety requirements | Worker exposure prevention | General Duty Clause may apply |
For practical compliance planning: treat ASHRAE Standard 188 as the primary framework where it has been adopted, and use Guideline 12, CDC resources, and applicable OSHA guidance to support program implementation and worker protection.
How to Improve ASHRAE 188 Compliance
Follow this decision framework to build or strengthen your compliance program:
- Assess applicability: Confirm whether ASHRAE 188 applies based on building type, water systems, and jurisdictional requirements
- Build the WMP team: Assign a program leader and cross-functional team members
- Map water systems: Create current flow diagrams for all potable and nonpotable systems
- Conduct hazard analysis: Identify areas where Legionella could grow or spread
- Set control measures: Define monitoring frequencies, control limits, and corrective actions
- Monitor and document: Execute monitoring per the WMP and maintain complete records
- Verify: Review monitoring results and conduct verification activities, including testing when required by the WMP or applicable regulations.
Common cooling tower compliance gaps include outdated WMPs, missing flow diagrams, incomplete monitoring logs, weak corrective action records, and relying on Legionella testing instead of maintaining a complete program.
A practical step is to conduct an annual internal audit against the WMP. This can help identify documentation gaps before an external review and keep ASHRAE 188 compliance on track through consistent program management.
When to Bring in a Cooling Tower Compliance Partner
A compliance partner can be useful when you do not have an in-house program team, manage multiple facilities, or operate a healthcare or other high-risk building. External support can also help when WMP responsibilities are spread across different teams or locations.
A cooling tower compliance specialist can help develop and review the WMP, conduct inspections, track control measures, and maintain clear records for audits. Bringing in outside expertise can also give building owners an independent review of their program and highlight gaps before they become compliance issues.
Frequently Asked Questions
Is ASHRAE 188 a law?
ASHRAE 188 is a standard rather than a federal law, but its requirements can become enforceable when adopted or incorporated into applicable building codes, regulations, or other requirements. For example, healthcare facilities may also have separate water management obligations under CMS infection prevention requirements.
This distinction is especially relevant in New York State. New York’s cooling tower regulations incorporate ASHRAE 188-2015 for maintenance programs and plans, while the current edition of the standard is ASHRAE 188-2021. The regulations also include additional requirements, so facilities in New York should consider both when managing cooling tower programs.
What buildings are required to have a Water Management Program?
Buildings with cooling towers, complex water systems, healthcare occupancies, and those serving vulnerable populations typically require a WMP.
Applicability depends on building type, water system complexity, and jurisdictional adoption of ASHRAE 188 or equivalent cooling tower regulations.
How is ASHRAE 188 different from a Legionella test?
ASHRAE 188 calls for a proactive management program that brings together hazard analysis, control measures, monitoring, and documentation.
As part of this process, testing may be used to evaluate water conditions or verify that controls are working as intended when required by the WMP, facility circumstances, or applicable regulations. Since testing addresses only one part of the process, Legionella testing alone does not satisfy the broader requirements of a Water Management Program.
Who is responsible for ASHRAE 188 compliance?
Responsibility for an ASHRAE 188 Water Management Program starts with the building owner or designated representative, who oversees the program and assigns responsibilities to qualified personnel. The Program Team then develops, implements, and maintains the WMP based on the building’s systems, operations, and applicable requirements.
How often should a Water Management Program be reviewed?
The WMP should be reviewed on the schedule the program defines and whenever the water system changes, after corrective actions, or when problems occur.
ASHRAE 188-2021 requires annual review at minimum. However facilities should verify current standard language and any jurisdictional requirements that may specify different intervals.
What documents prove ASHRAE 188 compliance?
Several records work together to demonstrate ASHRAE 188 compliance, including the WMP, monitoring logs, corrective action records, verification and validation results, and cooling tower inspection reports.
Auditors look for complete, organized documentation that matches the control measures and monitoring frequencies established in the WMP. Keeping these records current also makes it easier to show how the program is being managed over time.
Final Thoughts
ASHRAE 188 provides a practical framework for managing Legionella risk through a documented Water Management Program. Staying compliant means keeping the program active through regular monitoring, inspections, documentation, and periodic review.
As building systems and operating conditions change, reviewing the WMP can help identify gaps early and keep cooling tower compliance on track.
For facilities that need additional support, Pinnacle Cooling Tower Service can take some of that work off your plate. Our New Jersey-based specialists help with cooling tower maintenance programs, compliance support, inspections, and documentation, helping facilities keep their cooling tower programs aligned with applicable requirements.
