New Jersey’s Legionella Law: The December 12 Implementation Checklist for Healthcare Facilities

New Jersey’s Legionella law has two deadlines, and the one most facilities are watching is the wrong one to relax about. The first — September 12, 2026 — required covered buildings to have a written Legionella water management program developed. That date has passed. The second is December 12, 2026, and it is not a paperwork deadline: by then, the program has to be implemented — running in the building, with the monitoring, records, and trained staff to prove it.

A plan in a binder satisfies September. December asks whether the plan is alive.

What the law is

The law is New Jersey’s Legionnaires’ disease act, P.L. 2024, c. 66 (enacted as Senate Bill S2188, signed September 12, 2024). It requires owners and operators of covered buildings and facilities to develop and implement a Legionella water management program aligned with ANSI/ASHRAE Standard 188. The building provisions sit in Title 26 of the New Jersey statutes (N.J.S.A. 26:1A-139 and 26:1A-140); companion sections of the same act set duties for public water systems and the Departments of Health and Environmental Protection.

The structure that matters for a facility operator:

• Developed by September 12, 2026 — the written program exists: program team, building water system description, control measures, monitoring procedures, corrective actions.
• Implemented by December 12, 2026 — the program is operational: baseline work done, monitoring logs running, staff trained, records being kept.

Meeting the first date does not satisfy the second. That sentence is the whole article.

Who is covered

The act names categories of buildings and facilities rather than every commercial property. For Healthcare Facility Hub readers, the covered list starts with:

• Hospitals
• Nursing homes and long-term care facilities
• Assisted living and other residential healthcare facilities
• Correctional facilities
• Hotels and similar lodging with 25 or more units
• Residential buildings of 10 or more stories, including buildings with centralized hot water systems
• Any covered building with aerosol-generating water equipment: cooling towers, evaporative condensers, whirlpool spas, pools, decorative fountains, misters, or humidifiers

Coverage turns on your building’s type and its water systems, so confirm your facility against the act’s definitions and the Department of Health’s implementing rules rather than assuming either way.

The CMS overlap — and what New Jersey adds

If your facility is CMS-certified, a documented Legionella water management program is not new to you: hospitals, critical access hospitals, and long-term care facilities have needed one under the CMS infection-control Conditions of Participation (42 CFR §482.42, §483.80, §485.635) since 2017. Our walk-through of the ASHRAE 188 requirements for healthcare facilities and our guide to Legionella water management for hospitals cover that ground.

New Jersey’s law adds four things the federal requirement does not:

1. A state implementation deadline — December 12, 2026, on the calendar, for every covered facility in the state.
2. State enforcement and civil penalties (below).
3. A five-year record-retention requirement covering the written program, the records documenting its implementation, and testing results.
4. Duties that trigger on results — reporting a positive Legionella water system test under Department of Health procedures, and testing or mitigating when the Department of Health or a local health officer requires it.

In other words: your CMS program is probably most of the substance. The New Jersey law is what turns it into a dated, inspectable, state-enforced obligation.

The December 12 checklist: implemented, not just written

Work this list against evidence, not intentions. For each item, the test is the same: could you hand a surveyor or an inspector the artifact today?

1. The program team is real and meeting.
Named people, named roles, a meeting cadence — and minutes or notes that show the team has actually reviewed the program since September. A team that exists only on page one of the plan is a September artifact.

2. The system description matches the building as it stands today.
Flow diagrams and the written description of your potable and non-potable water systems reflect the building now — including any renovation, wing closure, or equipment change since the plan was written. Water system work changes risk; our piece on preventing Legionella during hospital renovation and the water ICRA assessment cover how to fold construction into the program.

3. Control measures and control limits are set for each location.
Temperature, disinfectant residual, and the other control measures your program uses — each with a limit, a monitoring location, and a frequency. Limits you invented in September and never measured against do not count; see item 4.

4. Monitoring is actually running.
Logs with real entries, on the program’s schedule, from the program’s locations. This is the single clearest line between “developed” and “implemented”: a blank log template is a plan; a log with six weeks of readings is a program.

5. Validation testing is done or scheduled inside the deadline.
Your baseline Legionella testing — performed the way your program specifies, through a laboratory set up for Legionella culture work — with results filed. If results came back with detections, the file shows what happened next.

6. Corrective actions are written, and staff know them cold.
What happens, step by step, when a control limit is missed or a test comes back positive: who is called, what gets flushed, disinfected, or taken out of service, and how occupants are notified. The act ties penalties not only to having a program but to failing to report a positive test, failing to test or mitigate when required, and failing to give required notice — so the response path is part of compliance, not an appendix.

7. The required public notice is posted.
The act includes a notice duty for building occupants and users. Post it the way the statute and Department of Health procedures prescribe, and keep a photo or copy in the program file.

8. Records are on site and kept for five years.
The written program, implementation records, monitoring logs, and testing results — retained at least five years, retrievable without a treasure hunt. If the records live in three inboxes and a departed employee’s laptop, that is a finding waiting to happen.

9. Everyone with a task in the program has been trained on it.
Not a memo — training appropriate to the role, documented with names and dates. The December deadline assumes the people doing the monitoring know how, why, and what a bad number means.

One distinction worth a phone call

The same act sets minimum disinfectant residuals — at least 0.3 mg/L free chlorine, or 1.0 mg/L monochloramine, in all active parts of the system. Read the section carefully before you chase those numbers in your building: that requirement (N.J.S.A. 58:12A-12.11) binds public community water systems — your water supplier — not building owners. Your facility’s control limits come from your own ASHRAE 188 program. Knowing the difference is worth one call to your utility to confirm what residual they are delivering at your meter — and it keeps your team from auditing itself against the wrong standard.

What missing the deadline costs

The act’s penalty section (N.J.S.A. 26:1A-140) is specific: a civil penalty of not more than $2,000 for a first violation, not more than $5,000 for a second or subsequent violation, and not more than $10,000 for a violation that causes serious injury or death. The penalties attach to failures that include not implementing or demonstrating compliance with the required program, not reporting a positive test, not testing or mitigating when required, and not providing required notice. These are maximums assessed per violation, not automatic fines — but December 12 is the date the exposure starts.

The forty-day read

From the start of November, December 12 is about forty days out. That is enough time to implement a real program — monitoring cycles, baseline testing, training, and records can all be stood up in forty days. It is not enough time to write a program from zero and implement it well, which is why the law put three months between the two dates.

If your September deliverable was a genuine program, December is a turn-it-on exercise: work the checklist, keep the evidence, close the gaps. If September produced a binder, December is where that shows. Either way, the question the law asks on December 12 is not “do you have a plan?” It is “show me it running.”

This article is general information about a public law for facility operators, not legal advice. Confirm your facility’s obligations against the text of P.L. 2024, c. 66 and the New Jersey Department of Health’s implementing rules and procedures.

Sources: P.L. 2024, c. 66 (Chapter 66, corrected copy, New Jersey Legislature) — https://pub.njleg.gov/Bills/2024/PL24/66_.PDF · TTI Environmental, “Protecting Your Building from Waterborne Illnesses & Legionella Compliance: NJ Law 2188 & Water Management Plans” — https://ttienvinc.com/blog/protecting-your-building-from-waterborne-illnesses-nj-law-2188-water-management-plans/