Reading time: 6 minutes
Key learnings
- Building hygiene is an operating condition produced by air, water, surfaces, maintenance and response workflows, not by appearance alone.
- Occupancy sensors, carbon dioxide readings and task logs are useful proxies, but none proves that a space is hygienically safe.
- Automation becomes valuable only when a responsible person can interpret the signal, act in time and verify the result.
Cleanliness Is an Appearance. Hygiene Is a System.
A visitor usually encounters hygiene as a visible condition: a dry washroom floor, clear air, an empty waste bin or a surface without marks. The building produces that moment through less visible relationships. Ventilation supplies and removes air. Plumbing keeps water moving at controlled temperatures. Cleaning teams follow routes, use chemicals correctly and record completed work. Sensors, controls and work order systems decide what becomes visible to an operator.
The distinction between cleaning and disinfection is useful. Guidance for community facilities from the US Centers for Disease Control and Prevention explains that cleaning removes dirt and reduces germs, while disinfection kills harmful germs that remain. It also advises regular cleaning of high-touch surfaces and greater attention where traffic is high, or illness has occurred. A digital record can show that a task was logged. It cannot show whether the correct surface, method, product, or contact time was used.
Occupancy Changes More Than Demand
Traditional schedules assume that use is reasonably predictable. Real buildings rarely behave that way. A delayed flight can fill one concourse while another remains quiet. A conference break can compress hundreds of washroom visits into minutes. A museum gallery may be empty in the morning and crowded in the afternoon. The same room can therefore move through different air, surface, water and waste conditions within one operating day.
Occupancy data can help systems respond. The US Department of Energy’s SENSOR programme distinguishes simple presence detection from the more accurate occupant counts needed to control ventilation. This matters because a light may need to know only whether somebody is present, while a ventilation system needs a credible estimate of how many people are producing heat, moisture and exhaled carbon dioxide.
Low occupancy creates a different problem. CDC guidance on reopening buildings after reduced operation warns that stagnant water can lose disinfectant residual and move into temperature ranges that support Legionella growth. Hygiene planning must therefore recognise two opposite pressures: crowded spaces can overwhelm service capacity, while quiet pipes and unused outlets can allow water quality to deteriorate.
A Sensor Measures a Proxy, Not the Outcome
Every sensor answers a narrow question. A people counter estimates movement through a boundary. A door contact reports whether a door opened. A beacon may register that an assigned device entered a zone. A carbon dioxide sensor measures a gas associated with human breathing. None of these readings is a direct surface sample, fungal count, odour assessment or user experience measure.
The US Environmental Protection Agency notes that indoor carbon dioxide can provide information about ventilation but must be interpreted carefully. A low reading does not rule out pollutants from materials, moisture, equipment or outdoor air. The operational question is therefore not whether the sensor is accurate in isolation. It is whether the measured variable is a reliable proxy for the decision the building is about to make.
This changes how dashboards should be read. A green status can mean that a threshold was not crossed, that a device has not reported an error, or that a task was closed. It does not automatically mean that the underlying hygiene condition is acceptable. Verification must match the hazard: visual inspection for a cleaning result, microbiological sampling where biological contamination is suspected, and water temperature or disinfectant checks within a water management programme.
Air, Water and Surfaces Need Different Evidence
For air, the World Health Organization defines ventilation as bringing clean air into a space while removing stale air. Air quality still depends on outdoor conditions, filtration, distribution, source control and maintenance. Increasing airflow is not a universal cure if the contaminant source sits inside equipment, moisture is uncontrolled, or air does not reach the occupied zone.
The growing focus on airborne infection has also expanded the design brief. ASHRAE Standard 241 establishes minimum requirements intended to reduce exposure to infectious aerosols in new and existing buildings and major renovations. It places air cleaning and system operation within a risk control framework, but implementation still depends on the condition, capacity, and maintenance of the actual building.
Water follows another logic. Flow, temperature, stagnation, storage, aerosols, and biofilm matter at different points in the network. Surfaces require decisions about touch frequency, visible soil, material compatibility, cleaning technique, and whether disinfection is justified. Combining these conditions into one hygiene score may be convenient, but it can hide which system needs attention and which evidence is missing.
A Control Loop Is Also a Chain of Responsibility
A useful control loop has six parts: detect a condition, interpret its meaning, assign responsibility, act within an appropriate time, verify the result, and learn from recurrence. If any link is absent, the system may produce more records without producing a better building. An alert without an owner becomes noise. A work order without physical access becomes a delay. A completed task without verification becomes an assumption.
Responsibility cannot be outsourced as easily as the task. In the United Kingdom, Health and Safety Executive guidance on Legionella requires the person in control of premises to appoint someone competent to manage identified risk. It also states that employing a water treatment contractor does not remove the responsible person’s duty to ensure the work meets the required standard. The legal detail varies by jurisdiction, but the operational lesson travels: ownership of the decision must remain visible.
Automation Adds Maintenance, Not Certainty
Connected hygiene systems create their own maintenance burden. Sensors drift, batteries fail, devices lose network access, and changes to room layouts can make an old threshold misleading. US Occupational Safety and Health Administration guidance describes proper building operation and routine maintenance as critical to healthy indoor air quality. The same principle applies to the digital layer: a control strategy is only as dependable as the equipment, data and people maintaining it.
The technology brief should therefore define failure behaviour as carefully as normal operation. Operators need to know when data is missing, whether a manual route still exists, how long records are retained and who can challenge an automated priority. Designers and technology providers must also separate useful operational visibility from unnecessary surveillance. More detailed data can improve response, but it also creates questions about access, purpose, and trust.
Seven Questions Before Connecting the System
- What precise condition is the building trying to manage: use, air quality, water quality, visible cleanliness, or biological contamination?
- Does the proposed sensor measure that condition directly, or is it a proxy that requires interpretation
- Who receives the signal, and do they have the authority, training, and physical access to respond?
- How quickly must action occur before the information loses operational value?
- What evidence will confirm that the intervention changed the condition rather than only closing a task?
- What happens when the device, network, contractor, or automated rule is unavailable?
- Which records are necessary for learning and accountability, and which data should not be collected?
The Last Step Is Knowing What the Building Proved
The calm appearance of a building after a crowd has passed is the end of a chain, not proof that every link worked. Air may have been refreshed while a moisture source remained. A cleaning visit may have been recorded while a surface was missed. A water-saving fixture may reduce demand without changing the queue or cleaning routine. Each system can perform its assigned function while leaving another aspect of hygiene unresolved.
Future-ready buildings will not be distinguished by the number of sensors they contain. They will be distinguished by whether each measurement is connected to a clear question, a responsible person, and a credible form of verification. The essential capability is not knowing everything about the building. It is knowing exactly what the building has proven.
