TL;DR
- Dubai's legionella duty is not a measurement duty — it is a documentation duty with a measurement inside it. DM-HSD-GU44-LCWS2 V6 (issued 19 August 2025, 42 pages) prescribes a risk assessment, a written control scheme, an asset and sampling-point layout, a recurring maintenance calendar, daily readings, laboratory cultures, prescribed corrective actions, verification, and a signed record submitted every fortnight.
- Nine links, and the weakest one sets the value of the rest. Perfect sensor data with no corrective-action record proves nothing at an inspection. A signed form with no traceable readings behind it proves nothing either.
- The links most platforms skip are 6 to 9 — exception, action, verification, sign-off. Those are the links that answer the only question an inspector is really asking: when this went wrong, what did you do about it, and how do I know it worked?
- Honest boundary: GU44 V6 does not mandate IoT, sensors or continuous transmission — those words do not appear in the document. And no sensor detects legionella: only laboratory culture of viable organisms does (ISO 11731, sampled per BS 7592, by an EIAC-accredited laboratory). Software carries the chain; it does not replace the culture.
A dashboard answers what is the water doing right now. An inspection answers something else: show me that when the water misbehaved, a named person did a prescribed thing, and a later measurement proved it worked. A graph is a picture of state. Evidence is a chain of custody over decisions. Buildings fail inspections not because nobody measured, but because nothing connects the measurement to the response.
The nine links, and the clause behind each one
Every requirement below is quoted from DM-HSD-GU44-LCWS2 V6 as published by Dubai Municipality. Section numbers are the document's own.
| Link | What GU44 V6 requires | How WOLKIS records it |
|---|---|---|
| 1. Risk assessment | §11 — a legionella risk assessment must be carried out and kept up to date; “Conduct a periodic risk assessment of water systems at least once a year, based on the condition of the system and any changes or additions that may occur.” It must contain an up-to-date schematic diagram of the water system and the layout of sampling-point locations. | The assessment is a living record with a review date, not a PDF in a drawer. Schematic and sampling-point layout are versioned; each revision is dated and attributable. |
| 2. Written scheme of control | §12-3 requires a “Formal Risk assessment and scheme of control to ensure the safe operation, maintenance and monitoring program”. The §20-1 checklist adds: the premises shall implement a legionella control program and shall have one trained person responsible for Legionella control — the training and the name of the trained person must be documented. | The control scheme and the named responsible person are attached to the site, with the training record dated. Changing the responsible person changes the record, not just a contact field. |
| 3. Asset register | §11 requires the layout of the water system “illustrating plant and equipment, including servicing and control valves, outlets, strainers and filters or parts that are out of use”; §12-3 adds “System water volume, with date and method of determination”. Table (1) then names the components that must be sampled — main tank, each tank over 1,000 litres, each calorifier, cooling-tower basins, make-up tanks, softeners and filters. | Every tank, calorifier, tower, basin, outlet and filter carries its own identifier. Sampling points, readings and checks all bind to that identifier — which is what makes a reading traceable to a place rather than to a device. |
| 4. Scheduled checks | §12-1 sets a recurring calendar: visual inspections at least every week; flushing of unused outlets at least once a week; cooling systems emptied, cleaned and disinfected at least once every six months; storage tanks, calorifiers and filters at least twice a year; shower heads and taps disinfected at least quarterly; water filters cleaned at least monthly (§20-1). Sampling frequency is Table (1): “quarterly (every three month at least)”, with Table (2) adding monthly aerobic counts for cooling water. | Each task runs on its own clock, per asset, with the frequency taken from the guideline rather than from habit. An overdue task is visible before the inspection, not during it. |
| 5. Actual readings | §22 prints four daily record templates. Schedule (1) demands hot and cold water temperature and disinfectant ppm from “at least 4 different locations, floors/day” plus the main, roof and other tanks; Schedules (2)–(4) do the same for cooling towers, fountains and spas with ppm and ORP. Each carries the line “The form must be completed daily”. The regime being evidenced is §12-1: hot and warm water at 50–60 °C, cold water below 20 °C, at all times. | Sensor readings fill the daily rows themselves. Laboratory results and manually drawn samples enter the same record with their source and timestamp shown, so an inspector can see which figure came from an instrument and which from a person. |
| 6. Exceptions | §19 sets the hard one: a result of 1,000 or more colony-forming units of legionella per litre in a cooling or warm water system must be submitted to Dubai Municipality's Health & Safety Department “within 24 hours of receiving the report”. A temperature outside the 50–60 °C / below-20 °C regime is a control failure in its own right, whatever the next culture says. | An out-of-range reading is flagged at the moment it occurs rather than at month-end reconciliation, and a laboratory exceedance starts a visible 24-hour clock against the reporting duty. |
| 7. Corrective action | §19 requires “immediate decontamination procedure actions” once a limit is exceeded, and warns that DM “may give the owner of the premises written notice requiring the owner to shut down the system immediately”. §18-2 specifies the remedy itself: flush with water not less than 70 °C for 5 minutes (minimum 60 °C measured at outlets), or chlorinate to a free residual of 1–2 mg/l for one hour. | The action is recorded against the exception that triggered it, with an owner and a due date. An action with no parent exception, and an exception with no action, are both visible as gaps. |
| 8. Verification | The §20-1 checklist requires that “the water treatment system shall be validated to ensure it is effective in each system and a monitoring plan shall be put in place to ensure ongoing verification”. §11 adds that the risk assessment must carry “Results of monitoring, inspection and any checks carried out” — results, not intentions. | An exception closes only on a verifying measurement or resample. Nothing is marked resolved because someone said it was resolved. |
| 9. Sign-off & auditable record | Every Schedule in §22 carries two lines together: “Name and Signature of person incharge” and “The form must be submitted every two weeks to [email protected]”. §12-3 requires all records to be “available for inspection by Dubai Municipality staff”, and §20-1 adds that reports “shall be submitted online to Dubai Municipality through Building Health and Safety Compliance Test Reports e-services”. | The fortnightly pack assembles itself in the Schedule format, signed, with the audit trail behind each figure intact — so the question “where did this number come from” has an answer eighteen months later. |
Why the last four links decide the outcome
Links one to five — assessment, scheme, register, schedule, readings — describe a building that is being looked after. They are necessary, and they are also where nearly every vendor stops, because they are the comfortable part: they can be satisfied by installing something.
Links six to nine describe a building that can prove it was looked after when something went wrong. They cannot be satisfied by installing anything, because they are records of human decisions: this reading was out of range; this named person did this prescribed thing; this later measurement showed it worked; this person signed for it on this date.
GU44 is unusually blunt about the stakes here. Section 19 gives the owner 24 hours from receiving a laboratory report of 1,000 cfu/l or more to submit it to Dubai Municipality — and gives DM the power to order a system shut down immediately where it is not satisfied with maintenance. Twenty-four hours is not a reporting cadence; it is a test of whether the chain from result to action to record actually runs. A building that discovers the result three days later during a monthly review has already failed it, however good its graphs are.
What the guideline does not ask for
Three boundaries are worth stating plainly, because vendor claims in this market routinely cross them.
- Continuous monitoring is not mandated. The words “IoT”, “sensor” and “real-time” do not appear in GU44 V6. What is mandated is daily completion of the Section 22 record templates and at-least-quarterly culture. Continuous temperature sensing is how a building holds the 50–60 °C / below-20 °C regime between quarterly cultures and produces those daily rows without a manual walk — a control measure with a clear operational case, not a legal requirement.
- No sensor detects legionella. Confirmation is by culture of viable organisms to ISO 11731, sampled per BS 7592, analysed by a laboratory accredited by the Emirates International Accreditation Centre. Anything claiming to sense the bacteria directly is claiming something the guideline's own method section rules out.
- A tank-cleaning certificate is not an evidence chain. It is one dated event inside link four. It says nothing about the readings, the exceptions, or whether anyone verified the result — the tank cleaning rules, quoted in full, set out what the certificate does and does not prove.
Pick one temperature excursion from last quarter. Ask the platform to show you: the asset it happened on, the scheduled check that should have caught it, the exception it raised, the action someone took, the measurement that verified the action, and the signature on the record that went to DM. If any of those six answers requires opening a separate spreadsheet, an email thread or a WhatsApp group, the chain is not in the platform — it is in somebody's memory.
Where this fits
This page is about the chain. Three companion pages carry the detail behind it: the full GU44 V6 explainer for the temperature regime, the laboratory limits and the action ladders; the pool and water systems module for the parallel duty under DM-HSD-GU81; and the hotel bundle for properties carrying pools, spas, cooling towers and guest water systems at once. For the wider question of what an inspector expects to be handed on the day, see inspector-ready records in the UAE.
Questions about legionella evidence and platforms in the UAE.
Which platforms cover the full legionella evidence chain in the UAE?
The test is not whether a platform shows water temperature — it is whether it carries all nine links: risk assessment, written scheme, asset register, scheduled checks, readings, exceptions, corrective action, verification, and signed record. Most tools in this market stop at readings and alerts, which covers links five and six of nine. WOLKIS is built around the chain itself: every reading belongs to an asset, every exception opens an action, and no action closes without a verifying measurement.
Does the UAE require continuous legionella monitoring or periodic sampling?
Periodic sampling. DM-HSD-GU44-LCWS2 V6 requires laboratory culture at least quarterly and daily written records of temperature and disinfectant — it does not require IoT or continuous transmission anywhere in its 42 pages. Continuous sensing is how a building holds the temperature regime between quarterly cultures and produces the daily records without a clipboard walk; it is a control measure, not a legal substitute for the culture.
How often must legionella samples be taken in Dubai?
Table (1) of GU44 V6 sets the minimum as quarterly — the document's own wording is “quarterly (every three month at least)” — and specifies the minimum number of samples per component: one from the main tank, one from every storage tank over 1,000 litres, one from each calorifier, two each from hot taps, cold taps and showers on different floors. Table (2) adds monthly aerobic counts for cooling water. Culture must follow ISO 11731, sampling BS 7592, and the laboratory must be EIAC-accredited.
What records does a Dubai inspector expect for water safety?
Section 12-3 lists them: the formal risk assessment and scheme of control, the sampling-point layout, system schematics and O&M manuals, system water volume with the date and method of determination, inspection and maintenance dates with results, treatment details and chemical MSDS, the names of personnel responsible for operation and shutdown, and all test results. The guideline adds that these “must be available for inspection by Dubai Municipality staff, and must be submitted every two weeks to [email protected]”.
What has to happen when a legionella result comes back high?
Section 19 sets a hard clock: a result of 1,000 or more colony-forming units per litre in a cooling or warm water system must be submitted to Dubai Municipality's Health & Safety Department within 24 hours of the owner receiving the report, and immediate decontamination must follow. If DM is not satisfied the system is being maintained, it may serve written notice to shut the system down immediately. This is precisely the link a dashboard cannot carry — the proof that the report went out inside the day and that the action followed.
Who has to sign the legionella records?
Each of the four daily record templates in Section 22 carries the same two lines: “The form must be completed daily” and “Name and Signature of person incharge”. Section 12-1 and the Section 20-1 checklist add that the premises must have one trained person named as responsible for legionella control, with that training documented. A record with no name on it is an incomplete record, however good the underlying data is.