Cooling towers are the most heavily regulated assets in HVAC, because the failure mode is Legionnaires’ disease. This guide maps the compliance regime: the AS/NZS 3666 maintenance framework, how NSW, Victoria, Queensland and the other jurisdictions regulate registration, risk management and testing, what a compliant monthly service involves, and the records that protect building owners.
A cooling tower is a machine for evaporating warm water into the air — which makes a neglected one a machine for aerosolising Legionella bacteria across a neighbourhood. Outbreaks of Legionnaires’ disease traced to towers have repeatedly killed people in Australian cities, and each one tightened the law. The result is a compliance regime with no HVAC parallel: registration of every tower with the regulator, mandated maintenance and monthly microbial testing, notifiable results, audits and real penalties.
The legal weight lands on the building owner/occupier, but the work lands on HVAC and water-treatment contractors — which makes cooling towers simultaneously the highest-risk and most contract-secure recurring work in the industry.
AS/NZS 3666.2 prescribes the operating and maintenance regime for air-handling and water systems, including towers: regular inspection and cleaning, effective water treatment (biocide, corrosion and scale control), drift eliminator condition, and — the headline — routine microbiological monitoring. AS/NZS 3666.3 offers the performance-based alternative for cooling water systems: a risk-management approach where the control program is built around the system’s assessed risk and verified by monthly testing of Legionella and heterotrophic colony counts.
The states adopt these standards into public-health law with their own registration, plan and reporting layers on top — which is where the regimes diverge.
| Jurisdiction | Core regime |
|---|---|
| NSW | Public Health Act/Regulation: towers registered with local council, independently certified Risk Management Plans, monthly Legionella + heterotrophic testing, notifiable high counts (reportable Legionella ≥1,000 cfu/mL; HCC ≥5,000,000 cfu/mL), annual certification of RMP compliance |
| Victoria | Public Health & Wellbeing framework: cooling tower systems registered with the department, mandatory Risk Management Plans with annual audits, prescribed water treatment and monthly testing regime |
| Queensland | Public Health Act: notification/registration of towers, compliance with prescribed maintenance (3666-aligned), Legionella testing and reporting obligations |
| Other states/territories | 3666-aligned maintenance duties under public-health or building law; registration and testing detail varies — check the local regulator |
The pattern is consistent even where the detail differs: register the system, hold a current risk plan, treat and test monthly, act on exceedances immediately, keep records, and be ready for audit. NSW and Victoria are the strictest and the template the others trend toward.
Around the monthly cycle sit the longer-interval items: scheduled cleaning (typically at least six-monthly for many systems, or per the risk plan), annual plan reviews/audits, and shutdown/start-up disinfection procedures — a tower restarted after idle periods without treatment is a classic outbreak scenario.
Exceedances trigger defined response ladders — immediate re-dose/disinfect and re-test at action levels, and at reportable levels (in NSW, Legionella ≥1,000 cfu/mL or HCC ≥5,000,000 cfu/mL) notification obligations and regulator involvement. The compliance discipline that matters: the response must be documented as thoroughly as the test — what was found, what was done, when, by whom, and the clearing re-test. In an outbreak investigation, that trail is the difference between a contractor who did their job and one who can’t prove it.
Every layer of the regime produces mandatory records: registration certificates, the risk management plan and its audits, monthly service and laboratory results, corrective-action logs, cleaning and disinfection reports. Regulators can demand them; auditors check them annually in the strict states; and they interlock with the building’s wider essential-safety-measures evidence. For multi-tower portfolios, per-asset digital records aren’t a nicety — reconstructing a paper trail across towers, labs and contractors after an incident is close to impossible.
traqR runs cooling tower contracts the way the regulators think: each tower a QR-coded asset carrying its registration details and risk-plan dates; monthly visits generated automatically with the full checklist; field capture of inspections, chemistry, samples and photos per tower; lab results and corrective actions recorded against the asset; escalation defects tracked to close-out; and exportable per-tower histories that hand the owner their audit pack — and hand you the renewal.
In most jurisdictions, yes — NSW requires registration with the local council, Victoria with the health department, Queensland has notification requirements, and other states run equivalent schemes. Registration is the entry point of the compliance regime; verify the current process with your regulator.
Monthly is the standard across the strict regimes (NSW and Victoria mandate monthly Legionella and heterotrophic testing), alongside the routine water-treatment and inspection cycle under AS/NZS 3666 and the system’s risk management plan.
In NSW, Legionella at or above 1,000 cfu/mL (or heterotrophic counts at or above 5,000,000 cfu/mL) is reportable, with defined disinfection and re-test responses. Other jurisdictions run similar action/notification ladders — always work to the current local thresholds.
Legally, the building owner/occupier — registration, the risk plan and the maintenance duty attach to them. In practice the work is delivered by HVAC and water-treatment contractors, whose records become the owner’s compliance evidence.
traqR does quoting, scheduling, invoicing, timesheets and compliance — built for Australian trades. Try it free for 14 days, no credit card required.