The Legionella Problem Isn't Regulation. It's Verification.

I spent almost 20 years in built environment work. I know how New York City can do better against Legionella.

New York City is currently fighting a Legionnaires' outbreak — a potentially deadly illness spread by droplets of warm water. In practice, that usually means one thing: water cooling towers on the rooftops of large buildings.

New York has one of the most rigorous cooling tower regulation regimes in the country. That's largely thanks to a swift, understandable policy response to a deadly outbreak in 2015 that reshaped how the city thinks about building-level public health risk. And yet, for the second summer in a row, the Big Apple is facing another outbreak.

That raises an uncomfortable question: what's actually going wrong?

More Rules Haven't Meant More Safety

Over the years, the city has responded the way most regulators respond to a crisis — by adding more. More testing requirements. More maintenance mandates. More inspections. Each addition made sense in isolation, and each was a reasonable reaction to a real risk.

But here's what almost two decades in this industry has taught me: you can mandate testing, maintenance, and inspections all you want. If there's no way to verify that any of it actually happened, compliance doesn't reliably follow. The paperwork can exist. The protection it's supposed to represent may not.

The city is currently on a path of issuing increasingly stringent regulations in response to each new outbreak. I'd argue that's the wrong lever to keep pulling. Instead of tightening the rules further, the city should focus on deploying technology that makes it easier to both perform compliance and prove it happened.

The Self-Reporting Problem

Here's a concrete example of where the current system breaks down. One of the tests the city mandates for property owners is a monthly water sample from each cooling tower — and it's self-reported. There's no unified system tying that report to a verified action.

According to an investigation by The City Reporter this month, compliance has been limited. Their reporting found that in the Manhattan cluster where the current outbreak occurred, at least 20% of properties hadn't submitted the mandated monthly water test.

That's not a paperwork problem. That's a visibility problem. When a report is self-submitted with no independent verification behind it, a missing or falsified report and a properly-maintained tower with a late filing look identical from the city's side — until people start getting sick.

An Interim Fix, Not a Moonshot

Robotics, drones, and camera-vision systems may eventually reduce this risk further, but those are multi-year plays requiring real capital investment and equipment retrofits most property owners aren't positioned to make on short notice.

What's needed right now is something simpler: an interim measure that doesn't require a major equipment overhaul and can be deployed immediately, using established technology most operators are already familiar with.

The real question isn't "how do we add more oversight?" It's: how can the city use tools that already exist to make sure the needed maintenance, testing, and inspections actually happen — with instant visibility the moment they don't?

We've seen this pattern solved before. It's how our hospital clients manage compliance for their own critical, life-safety equipment. Here's how it works:

• A scheduled reminder system. A phone app sends notifications reminding property managers to test their water cooling towers on a predetermined schedule — no more relying on someone remembering a date on a spreadsheet.

• A QR code mounted at the tower itself. Scanning it brings up clear instructions for gathering a sample correctly and performing the required maintenance — reducing the chance that a test is done incorrectly or a step gets skipped.

• Every scan is geolocated and timestamped. This is the piece that actually closes the verification gap. A scan proves someone was physically at that tower, at that time — it's no longer just a claim on a form, it's a record anchored to a real moment and a real location.

• Everything logs to one unified system. Instead of scattered spreadsheets, PDFs, and self-reported forms in inconsistent formats, the city (and the property owner) gets standardized, centralized records.

• Instant visibility into non-compliance. If a tower misses its scheduled test, that's flagged immediately — not discovered months later during an audit, or worse, during an outbreak investigation.

Why This Matters

The lesson from repeated Legionella outbreaks isn't that New York's regulations are unnecessary. It's that regulations alone were never going to be sufficient. A rule that only checks whether a form was submitted can be satisfied by a form that isn't true.

The fix isn't more paperwork, more inspectors, or bigger fines for the properties that get caught after the fact. It's making honest, verified compliance the easiest path for property managers to take — not the hardest.

When public health and life safety are on the line, that shift, from documentation to verification, is what actually saves lives.