Every pool operator has heard the phrase recreational water illness (RWI). Fewer operators can list the pathogens behind it, describe how each one moves through a facility, or explain exactly which prevention steps actually break the chain of transmission. That gap between knowing the phrase and owning the discipline is where outbreaks start — and where the CPO exam separates memorizers from operators.

This post walks you through the RWI landscape the way it shows up on the PHTA Pool Operator Primer (POP), on the CPO certification exam, and in real facility operations. By the end, you will have a working knowledge of the pathogens, the prevention layers, the incident response steps the Model Aquatic Health Code (MAHC) requires, and the documentation that protects your facility when an inspector — or a lawyer — comes asking.

What Exactly Is an RWI?

An RWI is any illness transmitted through recreational water — typically a pool, spa, waterpark, or splash pad — where the water itself is the pathway. The CDC has tracked a steady increase in documented RWI outbreaks over the past two decades, and the pathogens responsible are diverse enough that no single sanitizer handles them all equally.

The pathogens every CPO candidate must be able to identify by name and behavior:

What matters for the exam — and for your facility — is not just the names. It is matching each pathogen to the layer of prevention that actually disrupts it. Crypto requires secondary disinfection or hyperchlorination. Legionella requires temperature management and biofilm control. Pseudomonas requires aggressive spa turnover and biofilm removal. The chemistry parameters that work for one do not always work for the others.

Why RWI Prevention Is Tested on the CPO Exam

Expect direct questions on RWI prevention when you sit for the PHTA CPO exam — a 50-question, open-book assessment that covers the full POP curriculum. The exam frames RWI prevention around three competencies:

  1. Identifying the primary pathogens and their transmission routes — Crypto (fecal-oral, chlorine-resistant), Legionella (aerosolized, biofilm-associated), Pseudomonas (skin contact, spa-associated).
  2. Applying the CDC MAHC fecal/vomit incident response procedure — including hyperchlorination concentrations, contact times, and pool closure windows.
  3. Connecting chemistry parameters (FC, CYA, pH) to disinfection efficacy, including the FC/CYA ratio that determines actual sanitizing power.

The live CPO class goes deeper than POP. POP teaches the principles — the live sessions give you the operational scenarios, the math behind dosing decisions, and the documentation patterns you will use when the fecal incident log entry is the only thing standing between your facility and a closure order. If you are preparing for the CPO exam, treat RWI prevention as a high-yield topic: the questions are specific, the regulations are concrete, and the answers are right there in your MAHC reference materials.

The Practical Prevention Checklist

This is the working list every operator should be able to walk through from memory — and document on paper when an inspector is in the pump room. It is layered on purpose: chemistry alone will not stop every RWI, and barriers alone will not stop a chloramine crisis.

  1. Maintain the FC/CYA ratio. Free chlorine (FC) must stay at 1–3 ppm for indoor pools and 2–4 ppm for outdoor pools, with cyanuric acid (CYA) held at 30–50 ppm outdoors. The ratio — not the absolute number — is what determines sanitizing power. Low FC with high CYA gives you a reading that looks correct but provides almost no actual disinfection.
  2. Hold pH between 7.4 and 7.6. Outside this band, chlorine loses efficacy rapidly. At pH 8.0, you have lost roughly 75% of your sanitizing power — meaning you are paying for chemical you cannot use. pH drift is the most common preventable cause of RWI risk in operations that look compliant on paper.
  3. Test at the right frequency. Minimum commercial standard: full chemistry check before opening, FC and pH every two hours during operation, full check after heavy bather load or weather events, CYA weekly, calcium hardness monthly. Treat the minimum as a floor, not a target — high-bather-load days demand more frequent readings.
  4. Manage bather load explicitly. Maximum bather load is not a suggestion. Overcrowding drives bather waste (sweat, urine, skin cells) past what the sanitization system can oxidize, and combined chlorine (CC) climbs — producing chloramines, the "pool smell" that is actually a public health signal.
  5. Operate secondary disinfection where required. UV systems and ozone systems break down chloramines and disrupt chlorine-resistant organisms in the recirculation loop. They are not optional at high-bather-load facilities and are explicitly required by MAHC for some aquatic venue types. If your facility has a secondary system, it must be online, documented, and maintained — not installed and ignored.
  6. Execute the MAHC fecal/vomit incident response. The CDC MAHC defines specific procedures based on whether the incident involves formed stool, diarrhea, or vomit. Formed stool requires removal and standard hyperchlorination. Diarrhea requires pool closure and hyperchlorination to CT inactivation values for Crypto (3 ppm × 3 minutes, or higher × longer). Vomit is treated as a contamination event with standard hyperchlorination. Know the procedure for all three before the call comes.
  7. Log every reading, every incident, every chemical addition. If it is not in the log, it did not happen. Operations logs are your first line of legal defense and your inspector's first request.

Primary Prevention: Chemistry as the Foundation

Primary prevention is the chemistry layer — the FC/CYA ratio, pH control, alkalinity buffering, and calcium hardness management that keep water in a continuous sanitizing state. None of these operate independently. A pool with perfect FC but pH 8.2 is functionally unsanitized. A pool with perfect pH but CYA at 120 ppm is functionally unsanitized. The exam will test you on the relationships, not just the numbers.

For outdoor pools, the CYA component is especially load-bearing. UV light destroys free chlorine rapidly — without CYA, an outdoor pool can lose most of its FC in a single sunny afternoon. With CYA, the chlorine is protected. But push CYA above 100 ppm and you have created a different problem: chlorine bound up in CYA complexes and unable to do its job. The 30–50 ppm outdoor range and 100 ppm commercial ceiling exist for that exact reason.

Combined chlorine (CC) is the second-most-tested indicator. CC above 0.4 ppm means chloramines are accumulating — the pool is telling you that organic load has outpaced oxidation. The professional response is breakpoint chlorination: raise FC to roughly 10 times the CC reading, hold it for the required contact time, and let the chloramines burn off. Walk-away "shock and dump" dosing does not produce breakpoint conditions and does not solve the underlying problem.

Secondary Prevention: UV, Ozone, and Biofilm Control

Secondary disinfection is the second layer, applied in the recirculation loop to handle what primary chlorine cannot reach. UV systems neutralize chlorine-resistant organisms (Crypto, certain bacteria) by damaging their DNA as water flows past the lamp. Ozone systems oxidize contaminants more aggressively than chlorine and break down chloramines. Both technologies supplement chlorine — they do not replace it.

Biofilm is the silent failure mode that primary and secondary disinfection can both miss. Biofilm is a slimy layer of bacteria and extracellular matrix that colonizes pipe walls, filters, heater surfaces, and spa jets. Once established, biofilm shields pathogens from sanitizers — including chlorine-resistant organisms like Legionella and Pseudomonas. Biofilm control means flow management (no dead legs in plumbing), periodic line shocking, and aggressive cleaning of filters and heater internals on the manufacturer schedule.

If your spa has recurring Pseudomonas issues despite passing every chemistry reading, biofilm is the leading suspect. The fix is not more chlorine — it is dismantling, cleaning, and shocking the system.

Incident Response: The MAHC Fecal/Vomit Procedure

The CDC Model Aquatic Health Code defines a tiered response to fecal and vomit contamination. Every operator must know which procedure applies to which event, and must be able to execute it without consulting the manual.

Formed stool. Close the affected area to bathers, remove the stool, then hyperchlorinate to 2 ppm FC and hold for 25 minutes — or achieve equivalent CT inactivation at higher concentration. Document the event, the actions, and the chemistry readings.

Diarrhea. This is treated as a possible Crypto event. Close the pool, hyperchlorinate to achieve the CT inactivation value for Cryptosporidium — 3 ppm × 3 minutes is the baseline, extended to higher concentrations and longer contact times depending on CYA. The pool remains closed until the inactivation target is reached and documented. Repeat-incidence diarrhea at a facility should trigger a Crypto-specific response and review of bather screening practices.

Vomit. Treat as a contamination event. Hyperchlorinate to 2 ppm FC and hold for 25 minutes, or equivalent CT inactivation. Document, balance chemistry back to operating range, reopen.

What most facilities actually do during a real incident — panicking, dumping chlorine, reopening when the FC reading comes back down — does not match MAHC. The discrepancy is where legal exposure begins. The CPO exam is structured to ensure you know the difference before it matters.

Operator Documentation & Staff Training

Documentation is not paperwork. It is the evidence that your operations matched your written procedures on the day a bather got sick, the day an inspector arrived, or the day an insurance claim was filed. Operations log entries should capture, at minimum:

Staff training cadence matters just as much. CPO certification establishes the foundational competency for the operator on record, but the certification does not propagate to every lifeguard, swim instructor, or weekend shift supervisor. Internal training should be scheduled quarterly at minimum, with documented attendance and a competency check. Topics that should be on every retraining agenda include: incident recognition, fecal/vomit response, secondary system operation, bather-load calculations, and the chemistry parameters they affect.

What MAHC requires versus what most facilities actually do is a gap that inspectors know exists. The gap is not in the regulations — the regulations are clear. The gap is in the consistent execution of those regulations across shifts, seasons, and staff turnover.

Closing the Gap Between MAHC and Daily Operations

The operators who close RWI risk are not the ones with the strongest test-taking skills. They are the ones who build habits — chemistry checks at consistent intervals, incident logs that match reality, staff training that sticks across seasons. The CPO certification gives you the framework. The facility's procedures, documentation, and culture give you the execution.

If you are studying for the CPO exam, treat this topic as core curriculum: the pathogens, the MAHC fecal/vomit procedures, the FC/CYA ratio, and the secondary disinfection rationale are all directly tested. If you operate a facility, audit your last six months of operations logs and your last two MAHC fecal/vomit event records — the gaps you find are the gaps you close before an inspector finds them first.

Continue reading: Pool Chemical Safety — Foundations (Part 1) →

If you have not yet earned your CPO certification — or your facility needs more than one operator on staff — THE Pool Trainers covers RWI prevention, MAHC compliance, and the full exam competencies in the next live class session at $425. View the class schedule and enroll →