Legionella prevention in solar hot water systems is usually framed as a conflict: renewable heat wants lower temperatures, water hygiene wants higher ones. In practice the conflict is mostly an artefact of poor architecture. Solar thermal does not have to be the stage that guarantees the final domestic hot water temperature, and once a project stops asking it to be, the design problem becomes manageable.

What causes real trouble on commercial projects is more specific. A solar preheat vessel holding several thousand litres of potable water at 35 to 45 °C through a cloudy week. An unbalanced recirculation loop that leaves the far wing of a hotel at 43 °C. A handover pack that never defined who monitors what after commissioning.

This guide covers centralised DHW with a solar contribution in hotels, hospitals, dormitories and sports facilities.

State the Conflict Correctly Before Designing Around It

Legionella multiplies in building water systems within a broad warm range that public health guidance commonly places at roughly 20 to 45 °C, with growth behaviour varying by system conditions. Above that range survival falls sharply; below it growth is suppressed.

A collector field produces heat at whatever temperature the irradiation, load and flow rate permit on a given day. It will frequently deliver water into that warm band. That is not a defect. It becomes a defect only when the system stores large volumes of potable water at those temperatures with no downstream control stage.

What the Main Frameworks Require, and Where They Diverge

International projects fail here more often than they fail on thermodynamics, because teams carry assumptions from one jurisdiction into a tender written under another.

Temperature-Led Control

Under UK and German practice the numbers are explicit enough that a solar design either accommodates them or does not. The German size classification is the more consequential one for solar, and it is routinely overlooked in export tenders. Whether the solar store contains potable water or a separate buffer medium can change which rule set applies to that vessel, which in turn changes the capital cost of the whole package.

Programme-Led Control

The North American approach places less weight on a single stored temperature and more on a documented programme with defined control limits, monitoring locations, corrective actions and records. For a solar supplier this changes what the project needs from you. It is less about a temperature promise and more about component data, integration schematics and commissioning evidence the design team can fold into the water management programme.

The German Revision Worth Tracking Right Now

A revised DVGW W 551-1 worksheet has been through public draft since July 2025, with a further draft version dated April 2026 currently listed in the DVGW rulebook and by the publisher. It remains a draft. Do not specify against it as though it were in force, and confirm its published status before relying on any part of it.

It matters commercially because several of its proposed positions bear directly on renewable heat integration. Working group participants summarising the draft have described the following.

For an EPC bidding German or German-influenced work this year, the practical position is to design to the current published rules while making sure the control and metering provision would not have to be ripped out if the revision is adopted broadly as drafted.

Three Solar Integration Patterns and Their Hygiene Consequences

Most disagreements in a design review trace back to the team never having named which pattern it is building.

Pattern 1: Solar Preheat Vessel Upstream of an Auxiliary Heater

Cold make-up water is heated by the solar system, then passes to a boiler, heat pump or electric heater that lifts it to the required supply temperature before distribution. This is the workhorse arrangement for retrofit and the natural fit where existing plant stays in service. Our note on solar preheating for boilers covers the energy side of the same hydraulics.

The hygiene consequence is specific. The preheat vessel contains potable water that will often sit in the growth range. Whether that is acceptable depends on volume, turnover rate, the applicable rule set and the risk assessment. Two levers are available: keep preheat volume small relative to daily throughput so turnover stays high, and provide a defined means of raising the vessel through the growth range where the water management strategy requires it.

Warning sign in a submitted design: a large preheat tank sized purely to maximise solar fraction, with no stated turnover figure and no thermal treatment provision.

Pattern 2: Solar Heating a Potable Storage Vessel Directly

The collector loop heats a store that is itself the DHW store, with auxiliary heating in the upper zone. Hydraulically simple, and workable where solar fraction is modest and auxiliary capacity is generous.

The risk is that the lower zone becomes a persistent warm layer, and that stratification which is thermally desirable turns into a hygiene liability. If this pattern is used, the auxiliary source has to be capable of bringing the whole vessel through the required temperature on a defined basis, not just the draw-off zone, and that control sequence has to be written into the specification rather than left to a controller default.

Pattern 3: Solar Buffer Plus Instantaneous DHW Production

Solar heat is stored in a non-potable buffer. Potable hot water is produced on demand through a plate heat exchanger or DHW station at the temperature the distribution regime requires.

This is the arrangement that dissolves most of the argument, and it is under-represented in commercial tenders outside German-speaking markets. Stored potable volume drops from thousands of litres to litres. The buffer runs at whatever temperature suits the solar loop, because it is not potable water.

The trade-offs of Pattern 3 should be stated to the client rather than glossed over. Instantaneous production needs sufficient capacity and buffer temperature to cover the peak draw, which matters for shower peaks in sports facilities and hotels. Heat exchanger fouling and scaling need attention in hard water. Capital cost and control complexity increase. And the recirculation loop still has to be held at temperature, which a heat exchanger alone does not solve.

Evaluate it whenever the project sits in a jurisdiction with strict stored-water rules, when the building is healthcare, or when the solar storage volume the load requires would push a potable store past a regulatory size threshold.

Two Different Stagnation Problems That Get Confused

Design reviews lose time here regularly, so it is worth separating.

A supplier who conflates the two, or an assessor who flags collector stagnation as a bacteriological risk, is signalling that the boundary between the solar loop and the potable system has not been drawn properly in the documentation.

Recirculation Is Where Solar DHW Projects Usually Fail Inspection

A store reading 60 °C proves almost nothing about the building. In a large hotel or hospital, water may pass through long branches before reaching the furthest outlet, and it is those branches that get sampled.

Flow and Return as a System-Health Indicator

A properly designed recirculation loop returns hot water continuously toward the plant, limiting the time water spends cooling in the network. The project should define and monitor both flow and return targets under the applicable regime.

Return temperature is the most useful single diagnostic in the plant room. Water leaving at the required temperature but returning well below expectation points to excessive heat loss, insufficient circulation rate, poor balancing or a hydraulic fault, and it usually shows up before outlet sampling does.

Hydraulic Balancing Is Part of the Hygiene Strategy

A multi-branch loop does not self-balance. Branches near the pump take excess flow; distant branches are starved and drift down into the growth range. Balancing valves, a documented balancing procedure and recorded commissioning results belong in the hygiene documentation, not only in the mechanical package.

The takeaway for an EPC is uncomfortable but useful: on a commercial DHW system, Legionella control is a commissioning deliverable as much as a controls setting.

Where the Return Enters the Store

Recirculation return injected at the wrong height destroys stratification, which degrades solar performance and can create a persistent tepid mid-zone. There is no single connection point correct for every solar DHW project, and a supplier who offers one has not read the schematic. The arrangement has to keep the loop within its regime without creating an uncontrolled warm zone in the store or defeating the collector return temperature. Resolve it in the hydraulic schematic review, before equipment is ordered.

Scald Protection Without Creating a New Warm-Water Zone

Hygiene favours hotter water; occupant safety requires safe outlet temperatures. The resolution is not to lower the whole network.

Thermostatic mixing valves close to the point of use allow the upstream system to run within its temperature regime while the outlet stays safe. The failure mode is a long run of mixed-temperature pipe downstream of the valve, which recreates exactly the warm low-flow volume the temperature regime was designed to eliminate. Keep the mixed length short, and put the valves in the inspection and maintenance schedule rather than treating them as fittings.

Note also that pushing hot water above roughly 65 °C to buy margin is generally counterproductive, since it drives heat into adjacent cold water pipework and creates a cold-side problem in place of a hot-side one.

Monitoring, Handover and Who Owns the Regime

A compliant drawing is not a controlled system. The monitoring strategy should identify representative points, typically at storage, the final heater outlet, the principal circulation return, sentinel outlets, representative remote branches and the hot side of relevant mixing valves, with locations and frequencies taken from the applicable programme rather than from habit.

Where a BMS is present, trend data is considerably more informative than a spot reading. Repeated overnight drops, a return temperature drifting down over months, lengthening recovery times after peak draw, or a step change after occupancy patterns shift are all visible in trends and invisible in a monthly log sheet. Alarms on control limits are worth configuring. None of it replaces inspection, cleaning or maintenance.

The commercially significant part is the handover. Temperature records, inspections, flushing of low-use outlets, maintenance and corrective actions have to be documented by someone with defined responsibility. A solar DHW system nobody owns after practical completion will drift, and the drift gets discovered during an incident investigation rather than during a routine check.

Risk Profiles Differ More Than the Equipment Does

The same collectors serve all of these buildings. The water risk does not transfer with them.

Healthcare deserves separate treatment rather than an adapted hotel specification. Where occupants may be more susceptible, the architecture choice, the temperature regime, the inspection scope and the monitoring density all tighten, and German practice as described in the current draft reinforces that healthcare facilities warrant comprehensive rather than routine investigation. A hotel-derived specification will not survive review. If you are working from a hotel reference project, our hotel solar hot water notes are a starting point for the energy side only, not a template for a hospital water safety plan.

Design Review Checklist Before Approving a Solar DHW Package

1. Which framework governs, and which edition? Confirm jurisdiction, building classification, and whether a programme-led or temperature-led approach applies.

2. Which integration pattern is this? Name it explicitly. Preheat, direct potable store, or buffer plus instantaneous production.

3. How much potable water sits below the required temperature, and for how long? Volume and turnover, not just temperature.

4. Can the auxiliary source hold the regime on the worst solar week of the year? Annual solar fraction is not an answer to this question.

5. Is the recirculation loop balanced, and are commissioning results recorded? Plant room readings alone do not demonstrate control.

6. Where does the recirculation return enter the store, and what does that do to stratification?

7. Have dead legs, capped branches and low-use outlets been surveyed against actual occupancy patterns?

8. What exactly is the thermal control sequence, and is it a daily heating requirement or a disinfection cycle? The two are different and should not be merged in a controller.

9. Are TMV locations and downstream pipe lengths defined, with maintenance included?

10. Are monitoring points on the drawings, with responsibility assigned for the operational phase?

If items 2, 3 and 4 cannot be answered from the submitted documents, the package is not ready for approval regardless of how good the collector data sheet looks.

What a Collector Manufacturer Can and Cannot Be Responsible For

Worth being blunt about, because ambiguity here creates problems late in a project.

A collector manufacturer can supply verified product specifications and certification scope for the destination market, integration schematics showing how the collector loop connects to preheat vessels, buffers, heat exchangers and existing plant, sizing of collector area and solar store against a real load profile, and the technical documentation a water safety plan or tender submission needs to reference.

A collector manufacturer cannot own the building's Legionella control strategy. That sits with the MEP designer, the responsible person under the applicable regime, and the operator, informed by a risk assessment for that specific building.

The Question to Put on the Design Review Agenda

Not "can the solar tank reach 60 °C".

Ask instead: which stage of this system guarantees the required DHW temperature, how much potable water sits below that temperature and for how long, does the recirculation loop hold its regime at the furthest branch, and who is responsible for demonstrating all of it twelve months after handover.

A solar design that answers those four questions on paper will survive review. One that leads with solar fraction usually will not.

For project-specific assessment the useful inputs are building type and occupancy pattern, project location, daily and peak hot-water demand, required supply temperature, intended storage configuration, existing or planned auxiliary heat source, and the DHW recirculation layout. With those, solar integration can be evaluated against the building's water hygiene requirements rather than in isolation from them.

Frequently Asked Questions