CQC Audit Checklist: Mandatory Evidence for Drinking Water Systems
CQC audits increasingly scrutinise water safety governance, not just for showers, taps and TMVs — but also water coolers, drinking fountains, bottle-fillers and hydration points.
Any drinking water outlet on your estate is considered part of the water distribution system, meaning it must meet the same HTM 04-01 management obligations as clinical outlets.
For Estates and FM teams, the biggest issue we see isn’t contamination itself — it’s missing evidence, undocumented assets, and gaps in governance.
This guide outlines the mandatory documents, logs and proofs you need to present during a CQC audit to stay compliant and avoid enforcement action.
1. Asset Register for Every Drinking Water Point
CQC expects a complete and current asset inventory, including:
- Plumbed-in water coolers
- Bottled coolers (if used)
- Drinking fountains
- Bottle-fill stations
- Integrated hydration units
- Hot/cold dispensers connected to mains
- Any other water-dispensing appliance
What the register must include:
✔ Asset ID
✔ Make/model
✔ Location
✔ Risk zone classification (low/medium/high risk)
✔ Installer/commissioning dates
✔ Backflow protection type
✔ Filter type & change frequency (if relevant)
✔ Responsible person/department
Common failure: “We didn’t know it was there” — especially with units ordered directly by departments.
2. Commissioning Certificates for Each Unit
This is one of the most frequently missing compliance documents.
You must be able to prove:
- Correct installation
- Disinfection prior to use
- Backflow device installation
- Flow and pressure checks
- Water quality parameters
- Pipework configuration (no dead-legs)
- Materials compliance (e.g., WRAS)
Without commissioning evidence, the unit is automatically non-compliant.
3. Backflow Protection Documentation
Every drinking water appliance that connects to the mains must be protected with the correct backflow device.
CQC expects:
✔ Device type
✔ WRAS approval evidence
✔ Location
✔ Annual inspection record
✔ Evidence of repair/replacement if failed
Most non-healthcare installers get this wrong — one of the highest-risk non-compliances.
4. Maintenance & Service Logs
CQC and Water Safety Groups must see a full maintenance history, including:
- Routine inspections
- Filter changes (coolers)
- Cleaning and sanitisation
- Internal disinfection processes
- Engineer competency evidence
- Corrective actions taken
Logs should be:
- Time-stamped
- Signed off
- Stored centrally
- Auditable
Paper logs are acceptable, but digital logs are preferred for evidential integrity.
5. Filter Control and Traceability (Water Coolers Only)
Filters present a major risk if unmanaged.
You must provide:
✔ Filter batch numbers
✔ Expiry dates
✔ Installation date
✔ Replacement date
✔ Disposal method
✔ Engineer name and competency
✔ Manufacturer specification
Common CQC fail: “Filters not replaced within recommended period.”
6. Location Risk Assessments for Each Unit
Placement must be justified based on clinical risk, as per HTM 04-01.
You must be able to show:
- Why the unit is placed there
- Whether the area is low/medium/high-risk
- Evidence the Water Safety Group reviewed the location
- Controls in place (e.g., splash mitigation, shielding, restricted access)
Frequent audit issue: Coolers located near clinical areas without IPC approval.
7. Water Safety Policy & Plan Including Drinking Water Points
Your Water Safety Plan must explicitly include:
- Water coolers
- Drinking fountains
- Bottle-fillers
- All associated maintenance and flushing regimes
If these devices are missing from your WSP, CQC classify them as unmanaged risk sources.
8. Legionella Control Measures
Evidence needed:
- Temperature checks (where relevant)
- Flushing logs for low-use outlets
- Sampling results (if indicated)
- Corrective action documentation
- Trend analysis data
Although routine sampling of coolers isn’t typically required, risk-based sampling must be documented where performed.
9. Engineer Competency Records
You must demonstrate that any technician working on drinking water systems is:
- Trained in water hygiene
- Competent with HTM 04-01 standards
- Approved by the Water Safety Group
- Following safe systems of work
- Logged in your contractor competency register
CQC frequently asks:
“Who installed this unit, and what was their competency?”
If you can’t prove it — it’s a non-compliance.
10. Evidence of Corrective Actions Taken
Every site will have issues — CQC knows this.
What matters is how you respond.
You must show:
✔ Risk → Action → Closeout trail
✔ Digital or paper evidence
✔ Escalation to IPC where relevant
✔ Communication with the Water Safety Group
✔ Updated risk assessment post-action
CQC particularly looks for repeat failures, which indicate governance breakdown.
11. Decommissioning or Removal Records
If a cooler, fountain or dispenser has been moved, replaced or taken out of use, you must provide:
- Formal decommissioning certificate
- Safe disinfection/removal method
- Updated asset register
- Updated Water Safety Plan
“Ghost assets” (still on paper but removed from site) often trigger red flags during inspections.
- The Fastest
- Way to Become
- CQC Audit-Ready
WaterFilterInstallers.com provides:
✔ Full estate-wide audits
✔ Complete asset register creation
✔ Commissioning certification for each unit
✔ HTM-compliant installation and remediation
✔ Filter tracking & digital service logs
✔ Backflow protection verification
✔ Competent engineer documentation
✔ Risk assessment and Water Safety Plan updates
We give you every document CQC will ask for, packaged in a single compliance folder — making your next audit straightforward and defensible.
Final Word
Most CQC failures around drinking water systems aren’t due to contamination —
they’re due to missing paperwork, unmanaged assets and poor documentation.
With proper evidence and a compliant installer/maintenance provider, drinking water systems can be fully risk-controlled, audit-ready and aligned with HTM 04-01.