Two related objectives with different controls
A drinking water treatment plant converts source water into water intended for consumption through processes appropriate to its origin and quality. These may include solids separation, filtration, disinfection and other treatments, but plants do not all use the same products or equipment. Assessment must start with the actual process and its authorised operating conditions.
Water safety protects users; occupational safety and health protects the people operating, inspecting, cleaning and maintaining the facility. A compliant water analysis does not show that entering a reservoir is safe, and an injury-free intervention does not establish that the water is suitable for consumption. These are different forms of evidence that need coordination.
This article covers plants, reservoirs and interfaces with distribution networks or building plumbing where work may affect water quality. It also addresses cross-contamination. Its purpose is to organise controls and responsibilities, without replacing engineering design, occupational assessment, sanitary control or the operating instructions for an individual facility and its particular treatment process.
Responsibilities and regulatory framework
In Spain, Royal Decree 3/2023 regulates technical and sanitary criteria for drinking water and assigns functions to operators, owners and authorities within their respective areas. Occupational prevention follows Act 31/1995 and its implementing provisions. Industrial, environmental and territorial requirements for the particular facility also need examination rather than assuming one rule covers the entire installation.
Identify who directs operations, authorises work, assesses risks and communicates sanitary incidents. Employees and contractors need the training and qualifications required for their tasks, taking account of applicable specific requirements and transitional schedules. Authorisation to collect samples does not establish competence to carry out electrical work or enter confined spaces.
An organisational tool is a responsibility matrix with deputies and decision limits. Changes to products, equipment or connections should involve operations, prevention and water-quality personnel before commissioning. Chemical storage requires determining the applicable APQ instructions; a generic checklist cannot cover every substance, quantity and installation condition without checking its actual scope.
Task mapping and occupational assessment
Assessment should follow chemical deliveries, storage, dosing, sampling, monitoring, cleaning, maintenance and waste management. For each task, describe normal conditions, foreseeable deviations and infrequent operations. Opening equipment or replacing a component can create an exposure that is absent while the system operates closed, so routine production measurements may not describe the maintenance task.
Hazards may include corrosive or toxic substances, electricity, pressure, moving parts, wet surfaces, changes in level and physical effort. Biological exposure depends on the actual water and process; a drinking water plant should not automatically be equated with a wastewater treatment facility. Nor does the word tank automatically make every enclosure a confined space.
A proposed task record links location, authorised personnel, controls, documentation and stopping criteria. Participation by the people doing the work helps reveal awkward access, difficult readings and improvised operations. Measures should eliminate or reduce risk through design and organisation; personal protective equipment should not become the only answer to a structural problem that could be corrected upstream.
Chemicals, storage and dosing
Substance selection must consider suitability for water treatment and risks to personnel. A product authorised for one application is not automatically suitable for another. Verify identity, delivery documentation, the safety data sheet and conditions of use. A commercial product name is not a substitute for checking that the specific formulation and intended application meet the relevant requirements.
Receipt and connection arrangements must prevent wrong-product and wrong-discharge-point errors. As a preventive proposal, every line and container should be unambiguously identifiable and modifications controlled. Chemical compatibility, containment and ventilation depend on assessment and applicable requirements. Do not improvise mixing, neutralisation or transfer operations when the authorised procedure is unavailable or unclear.
Closed systems and automated dosing may reduce contact when properly designed and maintained, but they also require failure controls and checks before intervention. Gloves and other protection must be selected for the substance and task; no material is universally suitable. This article does not specify concentrations, doses or preparation sequences, which belong in authorised site-specific procedures.
Cross-connections and backflow prevention
A cross-connection creates an actual or potential link between drinking water plumbing and a source capable of contaminating it. If pressure conditions allow reverse flow, non-potable water or other substances can enter the drinking water circuit. The problem can arise through permanent or temporary connections, including hoses and auxiliary equipment added during maintenance.
Prevention requires understanding the networks and controlling their interfaces. Competent personnel must specify separation, protective devices and verification according to the hazard and applicable rules. The presence of a valve does not demonstrate control unless its function, suitability and maintenance have been checked for the particular connection and conditions.
As an example record, record a temporary repair connection with its owner, purpose, duration and removal condition. Before handing back the installation, verify that its configuration matches the authorised arrangement. The review must include changes made by contractors. Current drawings and consistent identification support that check, but they do not replace inspection of the actual installation or validation of its protective system.
Maintenance, energy and enclosure access
Plan interventions around electrical, hydraulic, pneumatic and mechanical energy, as well as water or chemical inflows. Stopping equipment from a screen is not equivalent to isolating it. The procedure should establish the safe condition, its verification and control of unexpected starting by another person or by automatic systems that remain capable of issuing commands.
For reservoirs, galleries and chambers, determine whether confined-space characteristics and other hazards such as falls or flooding are present. Prioritise avoiding entry when the task can be completed from outside. Necessary entry requires specific assessment, authorisation, suitable resources, competent personnel, supervision and a planned emergency response appropriate to the actual enclosure.
As an organisational criterion, link the permit to the actual equipment and task, rather than a generic area for an entire month. Coordinate shift changes and simultaneous work. Nobody should enter to attempt an improvised rescue of an affected person. Rescue resources and competence must be arranged before the task, rather than sought only after an incident has occurred.
Sampling, monitoring and change management
Sampling needs accessible points and conditions that avoid falls, splashes and unnecessary exposure. The person collecting a sample should understand its identity, labelling and the response to an abnormal finding. Analytical traceability and task safety need joint review; an inspection frequency should not lead staff to improvise access to an unsafe location simply to complete a scheduled record.
Instruments and alarms require maintenance and checks appropriate to their function. A stable reading does not demonstrate that a sensor works correctly. Assign responsibility for investigating faults, acknowledging alarms and escalating deviations. Disabling a repetitive alarm without finding its cause can remove an important preventive barrier while leaving the underlying fault unresolved.
Review changes to products, setpoints, control software, pipework and sampling locations. A proposed change record includes the reason, risk analysis, testing, training and return authorisation. A remote adjustment is still an operational change when it affects equipment or quality. Validated automation can support control, but it does not remove operator responsibilities or necessary physical checks.
Detection and response to leaks or contamination
A chemical leak and suspected water contamination may coexist, but they require distinct responses. The first may directly threaten personnel and the surrounding area; the second requires protecting users and determining which supply is affected. Communication channels should connect operations, prevention, the health authority and emergency services where appropriate, with responsibilities understood before the incident.
When an anomaly is detected, raise the alarm, protect people and activate the authorised procedure. Investigation, circuit isolation and operating interventions belong to competent personnel who understand the system. Do not improvise opening, flushing or neutralisation that could spread contamination or expose responders. Clear-looking water does not establish safety, and visual inspection cannot replace the required checks.
Royal Decree 3/2023 recognises incidents without analytical results in certain exceptional situations. It provides for investigation, communication, corrective measures and verification, with distinctions by incident type. There is therefore no universal rule to wait for an analysis before protecting people. Information to users and affected operators must follow sanitary decisions and applicable obligations.
Authorised restoration and continuity
Restoring pressure or starting a pump does not establish that a safe service has been restored. Following an incident, check installation integrity, the failure cause, circuit configuration and sanitary conditions. Coordinate cleaning, repair and sampling so that the recovery process does not reintroduce hazards or contaminate areas previously unaffected by the event.
Under Royal Decree 3/2023, corrective measures and verification results are communicated to the health authority, which assesses closure of the incident through the applicable procedure. Subsequent communication to users and operators forms part of recovery. A single favourable reading should not be presented as automatically authorising full return to normal service or lifting all restrictions.
As a proposed approach, organise continuity through previously assessed alternatives and a record of restrictions by area or use. Any alternative supply must meet its own sanitary and logistical requirements. Emergency and self-protection planning should follow the legal scope applicable to the facility, using exercises and coordination that do not compromise the distributed water or the safety of personnel involved.
Indicators, records and learning
Useful documentation makes it possible to reconstruct what happened, which risk was assessed and what evidence justified a decision. Distinguish water-quality records, occupational assessments, maintenance, authorisations and incidents while preserving their relationships. Combining them into a single compliance indicator can hide a significant deficiency in one area even when the overall score appears favourable.
Proposed indicators include outstanding temporary connections, overdue equipment checks, recurring alarms, verified corrective actions and competent personnel for critical tasks. Define the source, owner and denominator when using percentages. The number of uploaded documents does not demonstrate that protective devices work or that the causes of an incident have actually been corrected.
A review exercise could begin with an unplanned connection detected before contamination occurred: examine how it appeared, who should have authorised it and what change will prevent recurrence. This is a preventive example, not a real case or an effectiveness estimate. A digital system can help link evidence and responsibilities, provided information is validated and competent human decision-making remains clear.
Frequently asked questions
Does a compliant water analysis prove the plant is safe to work in?
No. Water quality and occupational hazards require different assessments. A compliant result does not authorise tank entry or intervention on energised equipment.
What is a cross-connection?
It is an actual or potential connection between drinking water and a source capable of contaminating it. Backflow prevention requires design, suitable protective devices and verification by competent personnel.
Is boiling water a universal response to contamination?
No. Restrictions and measures depend on the contaminant and sanitary instructions. Household recipes should not be presented as a solution to unknown chemical contamination.
When can the supply be restored?
After correcting the cause, completing technical and sanitary checks and following the competent authority’s procedure and decisions. Restoring pressure alone is insufficient.
