Marine Domestic Water Systems: Potable & Sanitary

Every ship on an international voyage carries a society in miniature. Crew eat, sleep, shower, and operate industrial machinery within a steel hull for weeks at a time, and none of that is possible without a reliable supply of water that is safe to drink, safe to cook with, and available at every tap at adequate pressure. Marine domestic water systems are the engineering infrastructure behind that supply: the generators that make fresh water from the sea, the tanks that store it, the treatment trains that render it potable, the pressurized distribution loops that deliver it, and the calorifiers that heat it. The regulatory framework that governs every one of those elements runs from the International Labour Organization’s Maritime Labour Convention 2006 through the WHO’s Guide to Ship Sanitation and the International Health Regulations 2005 down to ISO 15748, class society rules, and flag state instructions. This article covers the full system, component by component and regulation by regulation.

Use the Shipboard Potable Water Calculator to size tank capacity against voyage duration and crew complement, and the System Fresh Water Demand Calculator to model daily consumption by service category.

Regulatory framework

Maritime Labour Convention 2006, Standard A3.2

The MLC 2006 entered force on 20 August 2013 and is ratified by states representing more than 91 percent of world gross tonnage. Title 3, Regulation 3.2, and its mandatory standard, Standard A3.2, establish the legal minimum for food and potable water on board. Paragraph 9 of Standard A3.2 states that “the competent authority shall require that frequent documented inspections be carried out on ships” and that “drinking water, including ice, shall meet standards for drinking-water quality equivalent to those contained in the latest edition of the WHO Guidelines for Drinking-water Quality.”

The practical meaning for system designers: MLC 2006 does not specify pipe diameters or UV dose rates. It defines the outcome, which is water that matches WHO quality parameters, and places the obligation to document compliance on the shipowner. Class society and flag state rules fill in the engineering detail.

WHO Guide to Ship Sanitation, 2011

The third edition of the WHO Guide to Ship Sanitation (ISBN 978-92-4-154669-0, published 2011) is the primary technical reference for ship water system design. Chapter 2 sets out the multiple-barrier approach: every ship water system should have independent barriers against contamination running from the shore supply source through the bunkering connection, the onboard storage, the treatment stage, and the distribution network to every outlet. A failure at one barrier should not cause illness if the other barriers are functioning.

The WHO Guide mandates a free chlorine residual of no less than 0.2 mg/L at every point of delivery, with an upper limit of 5.0 mg/L. It endorses UV disinfection as a second barrier but notes that UV provides no residual protection in the distribution network; chlorine or another residual disinfectant must also be present. The Guide describes Water Safety Plans (WSPs) adapted from WHO’s Guidelines for Drinking-water Quality as the recommended management framework, incorporating hazard analysis and critical control point principles.

International Health Regulations 2005 and the Ship Sanitation Certificate

The International Health Regulations 2005 (IHR 2005) replaced the earlier International Sanitary Regulations and came into force on 15 June 2007. Article 20 of the IHR 2005 requires ships on international voyages to hold a Ship Sanitation Control Exemption Certificate (SSCEC) or a Ship Sanitation Control Certificate (SSCC), issued by a competent authority after an inspection of the vessel. Both documents are valid for six months, with a one-month extension permitted when conditions remain compliant.

The WHO Handbook for Inspection of Ships and Issuance of Ship Sanitation Certificates (2011) lists 13 areas of inspection, of which “water” is one of the primary categories. Inspectors assess: bunkering connection design and backflow prevention; tank construction, lining condition, and access provisions; treatment equipment operation and logbook entries; free chlorine residual at representative outlets; records of water quality monitoring; and evidence of previous contamination events. Studies published in PMC (European Web-Based Platform for Recording IHR Ship Sanitation Certificates, 2018) identified lack of potable water quality monitoring reports as one of the three most frequent deficiencies across all inspections, found in 23 percent of vessels reviewed.

Plans for any construction or replacement of facilities for bunkering potable water must be submitted to the competent authority for review under IHR 2005, specifying distribution line locations, check valve or backflow preventer types, and tank connections.

ISO 15748 and class society rules

ISO 15748 comprises two parts. Part 1 (ISO 15748-1:2002) covers planning and design, specifying the minimum requirements that potable water systems on ships and marine structures must meet to protect water quality. Part 2 (ISO 15748-2:2002) provides the method of calculation for tank capacity, hydrophore sizing, pump selection, and calorifier capacity. Part 2 is under revision as ISO/CD 15748-2 as of 2024.

DNV Rules for Classification, Part 5, Chapter 13 (Carriage of Potable Water) addresses vessels dedicated to potable water transport, covering tank vent design (sealed against seawater ingress), hydraulic valve placement (hydraulic fluid to be harmless to water quality in case of leakage), and cargo piping materials. For ordinary shipboard domestic systems, DNV rules are incorporated in Part 4, Chapter 6 (Piping Systems), which specifies materials, pressure ratings, and connection requirements applicable to all domestic service lines. Lloyd’s Register LR Rules for the Classification of Ships, Part 5, Machinery Installations, Chapter 14, covers domestic water systems similarly, requiring stainless steel or copper alloy pipe for potable water and prohibiting direct connections to non-potable service lines without an approved air gap or backflow prevention device.

Fresh water sources and generation

Shore bunkering

Shore bunkering at port is the most common fresh water source for smaller cargo vessels. The ship connects a dedicated potable water hose to the bunker manifold, takes a sample from the supply before transfer, verifies a quality certificate from the port authority or supplier, and monitors flow throughout the operation. Ports in some regions issue water quality certificates against WHO or local national drinking water standards; in others, the chief officer accepts the supply on the basis of visual inspection and odor only. The WHO Guide recommends that ships request certificates against WHO GDWQ parameters from every shore supply.

Bunker hoses must be dedicated to potable water service, labeled accordingly, and stored to prevent contamination. End caps protect the hose ends between uses. The connection point on the ship’s hull must incorporate a backflow preventer or be physically arranged as an air gap so that water already in the tank cannot siphon back into the shore supply.

Thermal evaporation

Thermal evaporators, commonly called fresh water generators (FWGs), exploit waste heat from the main engine jacket-water cooling circuit. In a single-stage flash or submerged-tube design, the jacket water runs at roughly 85 to 90 degrees Celsius. By routing it through a tube bundle inside a shell maintained at 0.3 to 0.4 bar absolute (achieved by a seawater-driven ejector), the evaporation temperature of the feedwater drops to around 35 to 40 degrees Celsius. Seawater fed into the shell evaporates, and the vapor condenses on a second tube bundle chilled by incoming seawater, producing distillate that is essentially free of dissolved solids.

Output from a typical 30 kW jacket-water heat source runs 20 to 25 tonnes per day. Alfa Laval’s JWP series and Wartsila’s freshwater generator range are representative commercial products. The distillate salinity is typically below 10 mg/L total dissolved solids (TDS) and commonly below 2 mg/L, far below the WHO GDWQ limit of 1,000 mg/L TDS. Because distillation removes almost all minerals, post-treatment remineralization is necessary before consumption.

The 20-nautical-mile coastal restriction is applied universally by flag states and industry practice: within that distance, biological oxygen demand in coastal waters is high enough that pathogenic organisms, industrial effluents, and agricultural runoff may enter the seawater intake. Thermal distillation at 35 to 40 degrees Celsius does not reliably kill all pathogens, and the resulting distillate could be unsafe even though it reads low on conductivity meters.

Reverse osmosis watermakers

Reverse osmosis (RO) forces seawater at high pressure across semi-permeable polyamide membranes, typically operating at 55 to 70 bar for seawater with a TDS of 32,000 to 38,000 mg/L. The membranes reject 98 to 99.5 percent of dissolved salts, producing a permeate with TDS typically below 500 mg/L and often below 200 mg/L. The co-product, a concentrated brine at roughly twice the feed salinity, is discharged overboard.

A standard marine RO train consists of: seawater strainer and cartridge pre-filter (typically 5-micron nominal) to protect membranes from particulates; high-pressure pump; membrane array; energy recovery device (pressure exchanger or Pelton wheel) that recovers 20 to 30 percent of the pressurization energy from the brine stream; and permeate storage. Wartsila and Eckelmann are established suppliers of marine-specification RO systems.

RO operates at ambient seawater temperature. It does not provide a temperature barrier to pathogens, so it is more commonly operated within the 20-mile zone than a thermal FWG, but only when the pre-filtration and post-disinfection treatment train is functioning correctly. Flag states differ: some permit RO operation up to territorial sea limits with enhanced post-treatment; others apply the same 20-mile rule regardless of generation method.

Post-RO treatment: pH correction and remineralization

RO permeate at TDS below 200 mg/L has a pH typically between 5.5 and 6.5, driven by absorbed atmospheric CO2 dissolving to form carbonic acid. That acidity, combined with near-zero hardness, makes it corrosive to copper, stainless steel, and galvanized pipe systems. The WHO Guide to Ship Sanitation specifically identifies aggressive low-TDS water as a pipe corrosion risk.

Remineralization is achieved by passing the permeate through a contact filter packed with calcite (calcium carbonate) or a calcite-dolomite blend. The acid dissolves the mineral medium, raising pH to between 7.0 and 7.5 and introducing 50 to 100 mg/L of calcium carbonate hardness (as CaCO3), which the WHO GDWQ identifies as the minimum for taste acceptability. Some operators dose with sodium bicarbonate solution instead, which is faster to commission but adds sodium to the permeate.

After pH correction, chlorination or UV disinfection follows before water enters the ship’s distribution circuit. At that point the water is fully potable.

Storage tanks

Materials and construction

ISO 15748-1 and class society rules together define acceptable tank materials. For new construction, 316L austenitic stainless steel is the dominant choice: the 2 to 3 percent molybdenum content provides chloride corrosion resistance, and the “L” (low carbon) grade minimizes sensitization risk at welds. Tank interiors are typically passivated with citric or nitric acid after fabrication to establish the chromium-oxide passive layer.

Older vessels built before stainless steel became cost-competitive often have mild-steel tanks with interior coatings. The coating must be approved for potable water contact under NSF/ANSI/CAN Standard 61 (Drinking Water System Components), which governs leachate from materials in contact with drinking water. 100-percent-solids epoxy systems meeting NSF 61 are common; solvent-based epoxies are not NSF 61 compliant for potable service. A two-coat system applied to a near-white-metal blasted surface (SSPC-SP10) at a minimum dry film thickness of 250 microns is the typical specification.

GRP (glass-reinforced plastic) tanks appear in smaller installations, particularly on yachts and offshore supply vessels. They’re light and corrosion-immune but require food-grade resin systems and are harder to inspect internally.

Tank sizing

ISO 15748-2 establishes the calculation method. The minimum capacity depends on three inputs: daily per-person consumption by service category, the number of persons on board, and the interval in days between bunkering opportunities plus a design safety margin. Typical design allowances per person per day for cargo ships run 80 to 120 liters for drinking and cooking, 30 to 50 liters for sanitary use, and 20 to 30 liters for laundry, giving a combined domestic figure of 130 to 200 liters per person per day. Cruise ships run 250 to 400 liters per person per day because passenger shower expectations, pool systems, and laundry loads are proportionally higher.

For a general cargo ship with 20 crew, a 30-day worst-case voyage interval, and a 150 L/person/day consumption rate, the minimum tank volume is:

A 15 to 25 percent safety margin is then added, giving a design tank capacity of approximately 105 to 113 m³. The Shipboard Potable Water Calculator automates this sizing with IMO and ISO-aligned defaults.

Tank configuration and layout

Multiple-tank arrangements are universal on vessels above 3,000 GT: if one tank is taken out of service for cleaning or repair, the others keep the system running. Tanks are typically located at or below the waterline amidships, where structural loading is manageable and the location is accessible for maintenance without excessive temperature extremes. Placement directly adjacent to fuel oil double-bottom tanks is avoided wherever possible, because chronic heat transfer encourages bacterial proliferation even in treated water.

Ventilation is mandatory. Vent pipes must be carried to a height that prevents seawater ingress during ship rolling, and the open end must be screened against insects and birds. A 1.5 mm mesh stainless-steel screen is standard. If the vent is led to a location where spray or green water could enter, an approved breather cap with a water trap is fitted.

Each tank needs a manhole of at least 500 mm diameter for internal inspection and cleaning. Sloped floors at a gradient of 1:100 toward a sump drain allow full drainage during cleaning. Internal ladders or steps comply with confined space entry requirements.

Tank marking and labeling

IHR 2005 inspectors consistently check that tanks and pipework are clearly marked. Tank manholes must be labeled “POTABLE WATER ONLY.” Distribution pipework is painted or banded in accordance with the vessel’s pipe identification standard; the ISO 14726 convention for potable water is light green, though some flag states require sky blue banding. Regardless of color convention used, the labeling must be consistent throughout the vessel and documented in the system manual.

Water treatment

Filtration

Raw bunker water or FWG/RO permeate entering storage may contain particulates, biological material, or residual sediment. A coarse strainer (typically 100-micron mesh) at the bunker inlet protects downstream equipment. Within the treatment train itself, multi-media filters using layers of anthracite, sand, and garnet remove suspended solids down to 5 to 10 microns. Activated carbon filters, whether granular (GAC) or block cartridge (CTO), remove free chlorine that would otherwise degrade UV lamp efficiency, reduce chlorination byproducts (trihalomethanes and haloacetic acids), and improve taste and odor.

Filter media replacement or regeneration follows manufacturer schedules, typically every 6 to 12 months for carbon cartridges and annually for media beds with backwash capability. An exhausted carbon bed can release previously adsorbed organics back into the water stream, a condition called breakthrough, so scheduled replacement rather than condition-based replacement is the safer strategy in a marine context where laboratory testing is infrequent.

Chlorination

Chlorine is the oldest and still the most widely used shipboard disinfectant, because it provides a measurable residual throughout the distribution system. Sodium hypochlorite solution (5 to 15 percent NaOCl) is dosed by a peristaltic or diaphragm chemical dosing pump controlled by an inline free-chlorine analyzer. The WHO Guide to Ship Sanitation specifies a free chlorine residual of no less than 0.2 mg/L and no more than 5.0 mg/L at any point in the distribution system.

Chlorine efficacy depends on pH. At pH 7.0, approximately 79 percent of the available chlorine exists as hypochlorous acid (HOCl), which is 80 times more germicidal than the hypochlorite ion (OCl⁻). At pH 8.0, only 24 percent is HOCl. This is why the WHO Guide recommends maintaining distribution pH below 7.8. For RO permeate that has been remineralized to pH 7.0 to 7.5, chlorination is highly effective. For untreated hard bunkered water at pH 8.0 to 8.5, the same dosage rate achieves substantially less microbial kill.

Chlorination produces trihalomethanes (THMs) when chlorine reacts with organic carbon in the water. WHO GDWQ limits for chloroform, the dominant THM species, is 0.3 mg/L. On vessels that rely heavily on shore bunkering with high organic-carbon raw water, THM formation potential should be assessed and carbon filtration used before chlorination.

UV disinfection

UV disinfection at 254 nm (the germicidal wavelength corresponding to peak DNA absorption) inactivates bacteria, viruses, and protozoa including Cryptosporidium parvum and Giardia lamblia, which are chlorine-resistant. The mechanism is photochemical damage to nucleic acids, preventing replication. No chemical byproducts form.

NSF/ANSI Standard 55 Class A systems require a validated UV dose of 40 mJ/cm² under worst-case conditions (aged lamps, fouled quartz sleeves, maximum rated flow). That dose is the industry standard for marine potable water UV units. Flow restrictors prevent excess flow rates that would reduce the actual dose delivered below the validated minimum. An inline UV intensity sensor with a calibrated alarm alerts the operator when the lamp degrades below the threshold dose.

Marine UV lamps typically have a rated service life of 8,000 to 12,000 hours. Quartz sleeves must be cleaned periodically because mineral scale, biofilm, and iron deposits reduce UV transmission. Wipers (manual or motorized) clean the sleeve without draining and opening the unit. Sleeve cleaning intervals depend on feed water quality: hard water with high iron content may require cleaning every four to six weeks.

UV provides no residual protection downstream. A chlorine residual is still required in the distribution network. The typical treatment train on a modern vessel sequences: storage tank, coarse filter, activated carbon filter, UV reactor, chlorine dosing point, hydrophore system, and distribution network.

Silver ionization

Some vessels use copper-silver ionization as either a primary or supplemental disinfectant, particularly for Legionella control in hot water systems. Electrolytic cells generate copper ions at 0.2 to 0.4 mg/L and silver ions at 0.02 to 0.04 mg/L. Silver ions disrupt bacterial cell membranes and enzyme systems; copper has a secondary biocidal effect. WHO guidelines (Silver as a Drinking-water Disinfectant, 2018) note that 0.1 mg/L silver can be tolerated, placing the upper operational limit at 0.1 mg/L for distribution systems.

Silver ionization is not a substitute for chlorination in WHO or IHR 2005 regulatory terms. It is accepted as a secondary disinfection method, particularly effective against biofilm-forming organisms in hot water loops, and is used in conjunction with chlorination on cruise ships where Legionella risk management is a formal requirement.

Pressure systems: the hydrophore

How the hydrophore works

A hydrophore is a closed pressure vessel, typically 100 to 2,000 liters depending on ship size, half-filled with water and half with compressed air from the ship’s service air system. A pressure switch set to cut in at 2.5 to 3.0 bar and cut out at 4.0 to 5.0 bar controls a centrifugal or peripheral-vortex feed pump. When demand draws water from the vessel, pressure drops; at the cut-in point the pump starts, refills the vessel, and stops at cut-out pressure.

The compressed-air cushion serves two functions. First, it acts as an accumulator: for small demand pulses such as a tap opening briefly, the vessel delivers from the stored pressurized water without starting the pump. Second, it smooths the pressure swing between cut-in and cut-out, avoiding water hammer. The air volume ratio is set so that the pressure difference between cut-in and cut-out represents approximately 30 to 40 percent of the vessel volume available for water delivery.

Bladder-type hydrophores

Older systems maintain the water/air interface by direct contact, which allows the air to dissolve into the water over time, reducing the cushion volume and requiring periodic re-pressurization. Bladder-type hydrophores separate the air from the water with a flexible butyl or EPDM rubber bladder inside the pressure vessel. This eliminates dissolved-air loss and prevents waterlogging. For potable water service, food-grade EPDM bladders are specified because standard EPDM compounds contain carbon black and processing aids that can leach into water.

Hydrophore vessel pressure ratings of 6 to 10 bar are standard for domestic service. The vessel must be certified as a pressure vessel under the relevant classification society rules (DNV, LR, BV, etc.) with an appropriate pressure vessel certification stamp. ASME U-stamp or PED (Pressure Equipment Directive) marking are common on commercial units. Annual survey by the attending class surveyor typically involves pressure testing and inspection of the safety valve.

Variable-speed booster pump systems

Modern vessels increasingly replace or supplement hydrophore tanks with variable-speed drive (VSD) centrifugal booster pumps. A pressure transducer provides continuous feedback to the VSD controller, which modulates motor speed to hold a constant delivery pressure, typically 3.0 to 3.5 bar, regardless of flow demand. This eliminates the pressure cycling inherent in a hydrophore system, reduces pump starts, and saves energy because pump power is proportional to the cube of speed.

A VSD system still needs a small accumulator vessel, typically 50 to 100 liters, to absorb pressure spikes during fast valve closures and to bridge the pump response lag. The system is more complex than a hydrophore and requires VSD drive maintenance, but the energy savings and stable pressure delivery are significant advantages on larger vessels.

Distribution pipework

Materials

ISO 15748-1 specifies that potable water pipework must be made of materials that do not leach substances harmful to health at concentrations above WHO GDWQ limits, must not support biological growth, and must withstand the operating pressure and temperature of the system. In practice this means:

316L stainless steel pipe is the dominant choice for new construction above 25 mm nominal bore. Threaded connections are discouraged above DN50 because thread cutting removes the passive layer; orbital-welded or press-fit fittings are preferred.

Copper and copper alloy pipe (deoxidized copper, phosphorus-deoxidized) remains common on older vessels and in small-bore runs. Copper is inherently biostatic; low-level copper ions (0.01 to 0.05 mg/L) leach from the pipe wall and inhibit biofilm formation. It is not suitable for contact with RO permeate at pH below 7.0, because the aggressive water corrodes the copper and introduces metallic copper above WHO GDWQ limits (2.0 mg/L).

Cross-linked polyethylene (PEX) and chlorinated PVC (CPVC) are approved for cold water distribution on many vessels, particularly in accommodation areas below 40 degrees Celsius. PEX is lightweight, flexible, and resists scale buildup but is not suitable for continuous temperatures above 60 degrees Celsius, which restricts it to cold and pre-mixed tempered water lines.

Pipe sizing and velocity

Flow velocity in potable water distribution should be kept below 2.0 m/s to limit erosion corrosion in copper pipe and below 3.0 m/s in stainless steel. Minimum velocities above 0.3 m/s are maintained in all branches to prevent sedimentation. Dead-legs, which are pipe branches that terminate without a flush point, are eliminated or minimized at design stage because stagnant water at ambient temperature provides an ideal environment for bacterial growth. Where dead-legs are unavoidable, a screw-down flush valve at the terminal end allows weekly flushing in accordance with Legionella management protocols.

Cross-connection and backflow prevention

A cross-connection between the potable water system and any other shipboard water system, including seawater fire-fighting lines, ballast water, technical fresh water, or engine cooling water, is a direct contamination path. SOLAS and class rules prohibit direct connections. The two approved protective arrangements are:

Air gap: a physical separation between the discharge point of the potable supply and the inlet of the non-potable system, sized at a minimum of twice the supply pipe diameter and never less than 25 mm. Air gaps cannot be defeated by back-pressure.

Backflow preventer: a reduced-pressure zone (RPZ) device or double-check valve assembly. RPZ assemblies are preferred because they discharge water to atmosphere if the downstream pressure exceeds the upstream pressure, preventing backflow under all conditions. Double-check valves alone fail if both seats become fouled; RPZ assemblies fail safe.

Hose connections between the potable system and fire-fighting or deck wash systems must incorporate quick-release fittings on the non-potable side only, making the connection visible and intentional. Permanent cross-connections, even with isolating valves, are not acceptable.

Hot water systems and calorifiers

Steam-heated calorifiers

The most common hot water generator on ocean-going cargo ships is the steam-heated calorifier: an insulated cylindrical pressure vessel, 300 to 10,000 liters depending on vessel size, with an internal steam coil or jacket. Steam from the auxiliary boiler enters at the coil inlet, condenses as it transfers heat to the water, and the condensate returns to the boiler feedwater circuit. The vessel’s heating capacity is sized to bring the water from cold feed temperature to 60 degrees Celsius within two to four hours.

Calorifier vessels are pressure-rated to the maximum working pressure (MWP) of the system, typically 4 to 6 bar, and fitted with a safety valve set at MWP, a pressure gauge, a temperature gauge, an inspection manhole, and inlet/outlet isolation valves. Class society surveyors inspect calorifier pressure vessels at each annual survey and hydraulic test at five-year intervals.

Engine cooling water heat recovery

Main engine jacket water exits the engine at 70 to 85 degrees Celsius and is cooled by seawater or central cooling fresh water before recirculation. This waste heat is a free energy source for domestic hot water. A plate heat exchanger with the jacket water on one side and the domestic fresh water on the other can typically deliver 20 to 60 kW of heating capacity continuously during sea passages, substantially reducing or eliminating boiler fuel consumption for domestic hot water.

The constraint is isolation. The engine jacket water circuit is separate from the domestic water circuit; any tube failure in the heat exchanger would introduce glycol coolant or corrosion inhibitors into the domestic supply. The heat exchanger must therefore incorporate leak detection, and the domestic side should be maintained at higher pressure than the engine side to ensure that any leakage is from domestic into cooling rather than from cooling into domestic.

Legionella control: temperature management

Legionella pneumophila, the bacterium responsible for Legionnaires’ disease, colonizes water systems where the temperature sits between 20 and 45 degrees Celsius. Below 20 degrees it is dormant; above 60 degrees it dies within two minutes. At 70 degrees it is killed almost immediately.

The WHO Guide to Ship Sanitation and UK HSE guidance on managing Legionella in hot and cold water systems are consistent: hot water must be stored at or above 60 degrees Celsius, and the distribution circuit must deliver water at a minimum of 50 degrees Celsius at the showerhead or tap. Cold water is maintained below 20 degrees Celsius wherever possible.

Ship systems face specific Legionella risk factors that shore-based buildings don’t always share: prolonged port stays without hot water demand flatten the temperature distribution across the hot water loop; pre-warm climates elevate cold water temperatures in the sea passage; and short crew rotations can leave sections of accommodation unused and effectively stagnant.

Practical control measures align with the temperature rule and add:

Continuous circulation loops in the hot water distribution pipework, maintained by a circulating pump, so water throughout the loop reaches 50 degrees Celsius or above at all times. Return temperatures below 50 degrees indicate either inadequate calorifier output, poor insulation, or a section of the loop where circulation is impeded.

Weekly flushing of all showerheads and infrequently used taps at full hot flow for at least two minutes. This removes stagnant water and re-establishes the temperature gradient.

Thermal disinfection shock treatment: raising the calorifier temperature to 70 degrees Celsius and flushing the entire distribution loop at that temperature for 30 minutes, carried out during annual maintenance or following a positive Legionella test.

Dead leg elimination: branches to vacant cabins, out-of-service laundry equipment, or decommissioned fixtures should be capped at the nearest active tee, not left as stagnant extensions.

The System Calorifier Hot Water Heater Calculator supports calorifier sizing against peak demand, standing losses, and minimum outlet temperature requirements.

Water quality monitoring

Online monitoring

Continuous online sensors mounted at strategic points in the distribution system provide real-time data that supports both operational management and compliance documentation. The minimum sensor suite for a vessel operating under MLC 2006 and IHR 2005 includes:

Free chlorine analyzer (electrochemical, amperometric detection): monitoring at the post-dosing point and at the furthest distribution point. Alarm set points at 0.2 mg/L low and 5.0 mg/L high per WHO Guide.

pH electrode: monitoring at the post-treatment point, with alarm outside the 6.5 to 7.8 window specified in WHO GDWQ.

Turbidity sensor (nephelometric): post-filtration. WHO GDWQ limit is 1 NTU for effective disinfection; values above 4 NTU prevent UV from achieving the required dose.

UV intensity sensor in the UV reactor, displaying real-time delivered dose in mJ/cm² with alarm below the validated dose.

Temperature: calorifier outlet and hot water return circuit.

Logs from online analyzers are retained as part of the potable water management records required under MLC 2006 Standard A3.2 and IHR 2005 inspection documentation.

Sampling and laboratory analysis

Online sensors detect operational parameters but can’t identify specific pathogens or measure low-concentration chemical contaminants. Periodic sampling for laboratory analysis fills that gap. The WHO Guide recommends:

Monthly microbiological sampling from at least three representative outlets: storage tank drain, post-treatment point, and a distal distribution tap. Parameters include total coliform, Escherichia coli (E. coli), and Legionella spp. E. coli in any sample is a direct indicator of fecal contamination and requires immediate investigation and system disinfection.

Every six months or after any suspected contamination event: chemical analysis against WHO GDWQ parameters including heavy metals (lead, copper, nickel, chromium from pipe system), nitrate, nitrite, THMs, and pH.

Annually: full WHO GDWQ panel covering approximately 80 chemical and microbiological parameters.

Samples are taken in sterile containers, chilled to 4 degrees Celsius, and analyzed within 24 hours. For vessels on long ocean passages, onboard rapid test kits (H2S medium for coliforms, Legiolert for Legionella) provide interim results, with confirmatory laboratory analysis at the next port.

The ship’s potable water management log

IHR 2005 inspectors cite the absence of water monitoring records as the single most common deficiency in the potable water inspection area. The management log should record, at minimum:

• Daily: online sensor readings at all monitoring points, dosing pump operation, alarms, and responses
• Each bunkering operation: source, quantity, quality certificate reference, pre-transfer sample result
• Treatment maintenance: filter replacements, UV lamp hours, sleeve cleanings, calorifier temperatures, dosing chemical inventory
• Monthly: microbiological sample results
• Incident records: any system anomaly, positive sample result, or crew illness complaint with investigation outcome

The log is a document subject to inspection by port state control, SSC inspectors, and flag state surveyors.

Bunkering operations

Pre-transfer procedures

Shore water quality varies sharply between ports. The WHO Guide to Ship Sanitation states explicitly that the first line of defense against waterborne disease is to load ships with water that conforms to WHO GDWQ or stricter applicable national standards. In practice, ports in developed countries supply treated municipal water with verified quality certificates; ports in some developing-country settings supply water of unknown or variable quality.

Before any transfer begins: check the potential tank volume available against the intended bunker quantity; inspect the bunker hose for cleanliness and physical condition; collect a sample from the shore supply line before connecting; and request the quality certificate. If the certificate doesn’t cover E. coli and total coliform (the minimum microbiological parameters), request a verbal confirmation from the port water authority and note it in the log.

Connecting the hose is the highest-risk point for cross-contamination. The connection point must be clearly labeled POTABLE WATER ONLY. Verify that the valve connecting to the non-potable system is closed and locked. If the ship’s connection uses a standard Storz coupling shared with other services, a check valve in the potable line is mandatory.

During transfer

Monitor the flow rate and pressure on both ship and shore sides. A sudden pressure drop on the shore side may indicate the supply authority has switched feed mains, which could change the water quality. Record readings every 30 minutes in the water management log. Take a sample mid-transfer from the ship’s receiving line.

When the tank is full, secure the ship-side valve before disconnecting the hose. Allow the hose pressure to equalize through the vent point rather than pulling the hose under pressure, which could introduce external contamination.

Post-transfer treatment

Water received from shore is not guaranteed to be at the system’s target chlorine residual. After bunkering, verify the free chlorine in the newly received water and dose to bring it to 0.5 mg/L minimum. If the pre-transfer sample showed elevated turbidity or questionable quality, run the received water through the treatment train (filtration and UV) before distributing it into the ship’s network.

System design comparison: typical vessel types

Cruise ship Legionella risk is classified as high not because the systems are inherently worse, but because a vessel carrying 3,000 people with a high proportion of elderly passengers creates conditions where a single outbreak can cause multiple fatalities and generate a public health investigation. The CDC Vessel Sanitation Program (VSP) operates public inspection scoring for cruise ships calling at US ports; VSP scores and reports are publicly available and affect commercial reputation.

Maintenance schedule

Daily

Operators check free chlorine at the post-dosing sensor and at the furthest outlet, verify dosing pump operation and chemical levels, record calorifier temperature at the outlet and at the hot water circuit return, note hydrophore pressure and pump start/stop cycles, and log any alarms. This takes less than 20 minutes but is the foundation of the compliance record.

Weekly

Flush all infrequently used outlets for a minimum of two minutes at full hot flow to clear stagnant sections. Check UV sensor reading against baseline and clean sleeves if transmission has dropped by more than 10 percent from the clean-sleeve value. Calibrate the free chlorine analyzer against a DPD reagent test kit reading. Record all results.

Monthly

Replace activated carbon cartridge filters if flow resistance has increased or taste/odor complaints have been received. Take microbiological samples from three distribution points and dispatch to the laboratory or analyze with onboard test kits. Check tank vents and screens for blockages. Service the hydrophore safety valve by lifting the test lever.

Annual

Drain and inspect each potable water tank. Remove scale and biofilm deposits by mechanical scrubbing; disinfect the clean tank with a chlorine solution at 50 mg/L contact dose for four hours; flush and refill with treated water. Replace UV lamps at or before 8,000 hours regardless of apparent lamp output. Calibrate all online sensors against certified reference standards. Inspect hydrophore vessel and pressure vessel certification. Full WHO GDWQ panel water analysis. Review and update the Water Safety Plan.

Limitations of this article

This article covers shipboard domestic potable water systems for conventional ocean-going vessels. It does not address:

Potable water carriage tankers (specialized vessels described in DNV Pt.5 Ch.13, with cargo pump systems and detailed tank segregation requirements distinct from the domestic systems covered here).

Swimming pool and spa water on cruise ships, which operate under separate treatment and monitoring standards derived from CDC VSP Construction Guidelines and local health authority requirements.

Gray water and sewage treatment, which interface with the domestic system at drain outlets and are covered in a separate article on Marine Sewage and Grey Water Treatment Systems.

Freshwater generation principles, which are covered in more depth in the companion article on Marine Fresh Water Generator systems.

MLC 2006 food and catering requirements, which share the Standard A3.2 framework with water but involve separate equipment, covered in the Marine Galley Equipment and Provisions article.

MARPOL discharge requirements affecting the discharge of sewage and gray water, addressed in MARPOL Annex IV.

Regulatory figures cited here, including WHO GDWQ limits, are from the editions current at time of writing (2026). WHO reviews its Guidelines for Drinking-water Quality periodically; the shipowner’s Water Safety Plan should reference the current edition of GDWQ and update treatment targets when new editions are issued.

See also

• Shipboard Potable Water Calculator
• System Fresh Water Demand Calculator
• System Calorifier Hot Water Heater Calculator
• System Potable FW Tank SS304 Calculator
• UV Potable Water Calculator
• Marine Fresh Water Generator
• Marine Sewage and Grey Water Treatment Systems
• Marine Galley Equipment and Provisions
• MLC 2006
• MARPOL Annex IV
• Marine Ballast Water Management Systems