Legionella Cooling Tower Risk: Malaysian Guide
Cooling towers combine warm water, biofilm and aerosol generation, which is why they remain the classic Legionella source in Malaysian buildings. Here are the operational controls, shutdown procedures and leading indicators that keep the risk managed.

Legionella pneumophila multiplies fastest in water sitting somewhere between roughly 25 and 45 C, which is a fair description of the basin of almost every cooling tower in Malaysia for almost every hour of the year. That one fact is why legionella cooling tower risk belongs in the building safety file next to fire drills and lift servicing, and why "the water treatment contractor handles it" is a purchase order, not a control strategy. The organism is common in natural water and does no harm until a system warms it, feeds it and then throws it into the air as a fine mist that people can breathe.
Why cooling towers are the classic source
A cooling tower puts together the three conditions Legionella needs in one machine. It holds a large volume of warm water in the ideal growth band. It has enormous wetted surface area in the fill where biofilm can establish and shelter bacteria from biocide. And it deliberately generates aerosol, which is the only route that matters for infection: legionellosis is contracted by inhaling contaminated water droplets, not by drinking water, and it is generally not passed from person to person. The World Health Organization's legionellosis fact sheet sets out the disease picture and the higher risk carried by older occupants, smokers and people with weakened immunity.
Drift eliminators cut carryover but never eliminate it. Whatever leaves the tower travels on the prevailing wind, and in a dense Malaysian commercial district the receptors are close: fresh air intakes on a neighbouring podium, an open corridor, a car park level, a smoking shelter, the walkway the cleaning crew uses. If you are not clear on where the aerosol is generated and where it goes, start with how a cooling tower actually works, then walk the roof and look at what sits downwind.
What tips a tower from clean to colonised
Biofilm is the real adversary. A thin slime layer on the fill and basin walls protects bacteria from a biocide residual measured in the bulk water, so a system can show a textbook chlorine reading and still be seeding organisms from the surfaces. Scale and suspended sediment do the same job. Because a tower is an air washer, it scrubs dust, pollen, engine soot and organic matter out of the air and drops it into the sump, and the tropical combination of frequent rain, high ambient dew point and construction dust keeps that load high year round.
Water chemistry is where most of this is decided. Running high cycles of concentration to save water raises dissolved solids, encourages scale and makes biocide control harder, while running low cycles wastes water and chemicals. That trade-off, and how bleed-off and drift affect it, is covered in more detail in the piece on cooling tower water consumption. The point for risk management is that the same lever controls both your water bill and your microbiological stability, so it should be set deliberately and measured, not left wherever the conductivity controller happened to be commissioned five years ago.
The operational controls that actually reduce risk
Treatment first. An effective programme uses an oxidising biocide as the backbone with a non-oxidising product alternated to prevent resistance, plus dispersant to break up biofilm, and it is controlled by measured residual and oxidation reduction potential rather than by a dosing timetable. A pump that runs on schedule while the drum is empty is a very common finding.
Physical cleaning follows. Basins get drained, sediment removed, fill inspected for fouling and scale, distribution nozzles checked for blockage, and drift eliminators checked for damage and correct seating. Side stream filtration is worth its cost in dusty locations because it removes the nutrient bed that chemicals then have to work through.
Then the physical layout. Separation between tower discharge and any fresh air intake, window or occupied area is a design control that keeps paying without any consumable. If separation is poor and cannot be changed, that fact should be recorded in the risk assessment and compensated for with tighter treatment and monitoring, not quietly ignored.
Shutdowns and dead legs deserve their own procedure
The highest risk period is not peak load, it is the quiet one. Stagnant warm water with a decayed biocide residual is close to a laboratory culture condition. That covers long weekends and festive shutdowns, a standby tower left isolated for months, a decommissioned chiller whose condenser water branch was valved off but never physically cut and capped, and any capped spur where water sits.
Practical rules that hold up: rotate duty and standby towers so no cell sits idle for long, circulate and dose the system periodically during extended shutdowns rather than leaving it still, physically remove redundant pipework instead of valving it off, and clean and disinfect before returning any system to service after a long idle period rather than simply switching pumps on. Write the recommissioning steps down before you need them, because the day you need them is usually the day the building is reopening in a hurry.
Which leading indicators are worth monitoring?
Culture results are a lagging indicator. A Legionella sample takes days and often more than a week to come back, so by the time it lands the exposure has already happened or already stopped. Sampling still matters as verification, but risk is managed on the parameters you can see today: condenser water temperature trends, biocide residual and ORP, conductivity against target cycles, makeup and bleed volumes, filtration differential pressure, and tower run hours that reveal which cells are actually being exercised.
Most of that data already exists in the plant room and dies in a logbook. Continuous monitoring is what turns it into an early warning. CobiNeural tracks chilled water and water systems alongside energy and indoor air quality, either standalone or as an overlay on an existing BMS, PLC or SCADA, and sends WhatsApp or email alerts when a monitored value drifts outside its band. A condenser water temperature climbing above design, a makeup water pattern that suddenly changes, or a standby tower with zero run hours for six weeks are all visible long before a lab report exists.
Where does the duty sit under Malaysian law?
With the employer and the occupier. The Occupational Safety and Health Act 1994 places a general duty on employers to ensure, so far as practicable, the safety and health of employees at work, and a parallel duty toward persons other than employees who may be affected by the undertaking. That second duty is the one that captures contractors, visitors, tenants and neighbours standing downwind of your roof.
Rather than hunting for a prescribed sampling frequency, treat the obligation as outcome based and evidence it: a documented risk assessment, a written water management plan, competent people doing the work, and records that show controls were monitored and corrective action taken. ANSI/ASHRAE Standard 188 published by ASHRAE is the widely used framework for structuring that plan, and it maps cleanly onto Malaysian practice.
Air quality inside the building is the related obligation. The Industry Code of Practice on Indoor Air Quality 2010 approved under OSHA 1994 by DOSH sets acceptable indoor limits including a total bacterial count of 500 cfu/m3 and a total fungal count of 1000 cfu/m3, treats carbon dioxide above 1,000 ppm as an indicator of inadequate ventilation, and recommends 23 to 26 C with 40 to 70% relative humidity for comfort. Where tower drift can reach an intake, tower hygiene and indoor air quality stop being separate files.
If you want the plant data behind these controls visible daily instead of monthly, talk to us about a demo and we can walk through what your existing tower instrumentation could already be telling you.


