How Cryptosporidium and other waterborne parasites reach food through water, ice and produce, plus practical controls, boil-water alert steps and staff rules.
Cryptosporidium is a chlorine-resistant water parasite that causes prolonged watery diarrhoea and can spread through contaminated water, ice, and produce washed in unsafe water. In a food business, control it by using potable water for washing, ice, and drinks, responding correctly to boil-water alerts, and keeping infected staff away from food. This guide explains the hazard, where it hides, and the practical controls that keep waterborne parasites out of your food. Key takeaways: Cryptosporidium is highly resistant to normal chlorine levels, so a clear, treated water supply is not automatically parasite-free.. The biggest food-business risks are unsafe water used for washing produce, making ice, filling drink dispensers, and rinsing equipment.. During a boil-water alert, bring water to a rolling boil (or use safe bottled/treated water) for drinking, ice, salad washing, and any water added to food.. Staff with diarrhoea must not handle food and should stay off food work until at least 48 hours symptom-free, and longer where a doctor or regulator advises.. Heat kills the parasite: thorough cooking to 75°C core is effective, but many salads, garnishes and cold items rely entirely on clean water and clean hands.. Waterborne parasite controls at a glance: Situation, Practical control. Normal town water supply — Use potable water; maintain plumbing, back-flow protection, filters and ice machines. Private supply (tank, bore, dam) — Treat as higher risk; arrange treatment/testing and confirm rules with council/regulator. Making ice — Potable water only; freezing does not kill the parasite; use a dedicated scoop. Washing raw produce — Clean running potable water reduces risk but does not sterilise. Boil-water alert in force — Rolling boil then cool, or use safe bottled water, for all consumption and prep. Staff illness — Exclude while ill; return only after 48 hours symptom-free (or longer if advised). What Cryptosporidium is and why it matters Cryptosporidium is a microscopic parasite that infects the gut and is shed in the faeces of infected people and animals. It spreads through the faecal-oral route, usually when tiny amounts of contaminated water or food are swallowed. The parasite exists as a tough, egg-like stage (an oocyst) with a protective wall that lets it survive for long periods in water and, critically, resist the chlorine levels normally used to disinfect drinking water and pools. That resistance is what makes it different from most bacteria: a supply can look clear, taste normal and be adequately chlorinated, yet still carry infective oocysts if the source water was contaminated and treatment did not physically remove them. Related waterborne parasites such as Giardia behave similarly. For a food business the concern is simple: any water that touches ready-to-eat food, or the food itself, can become a vehicle for infection. Very low numbers of oocysts can cause illness, so small contamination events matter.. Symptoms include watery diarrhoea, stomach cramps, nausea and low-grade fever, often lasting one to two weeks.. Illness can be severe and prolonged in young children, the elderly, pregnant women and people with weakened immune systems.. Infected people keep shedding the parasite for some time after symptoms stop, which is why staff exclusion rules matter.. How waterborne parasites reach food In a food business, parasites rarely arrive as a dramatic event. They slip in through everyday uses of water that people assume is safe. The classic routes are washing salad leaves, herbs and other raw produce in contaminated water; making or handling ice; filling drink dispensers, coffee machines and post-mix systems; and rinsing chopping boards, utensils and food-contact surfaces. Water used to make up cold drinks, reconstitute foods, or add to sauces and dressings that are not later cooked is another path. Because many of these foods are eaten raw or cold, there is no cooking step to destroy the parasite, so the water quality is the only barrier. Cross-contamination from an infected food handler's unwashed hands is an equally important route, since even perfect water cannot protect food touched by contaminated hands. Washing produce, salad and herbs in non-potable or alert-affected water.. Ice made from unsafe water and added to drinks or used to display seafood.. Post-mix, soda, coffee and water-dispensing equipment plumbed to a compromised supply.. Water added to uncooked foods: dressings, purees, smoothies, reconstituted products.. Hands, cloths and equipment rinsed in contaminated water then touching ready-to-eat food.. Potable water: the foundation control The single most important control is ensuring the water used in your business is potable, meaning safe to drink. Businesses on a reticulated town supply generally receive treated, monitored water, but you remain responsible for what happens after it enters your premises: back-flow protection, clean and well-maintained plumbing, regular servicing of filters and ice machines, and prompt attention to any advice from your water utility. Businesses using rainwater tanks, bores, dams or other private supplies carry a much higher risk, because these sources can be contaminated by animal faeces, runoff and flooding, and they are not centrally treated or monitored. If you rely on a private or non-town supply, you should have a documented treatment and testing arrangement and confirm the specific requirements with your state or territory regulator and local council, as rules for private water supplies vary. Confirm whether your supply is town water or a private source, and treat private sources as higher risk.. Maintain back-flow prevention so dirty water cannot siphon back into clean lines.. Service ice machines, filters, and dispensers on a schedule and keep records.. For private supplies, arrange appropriate treatment and testing and confirm requirements with your regulator and council.. Ice is food: treat it the same as water Ice is often overlooked, but under the Food Standards Code ice is treated as a food and must be made from potable water and handled hygienically. Contaminated ice is a genuine route for waterborne parasites because it goes straight into drinks and onto seafood displays without any cooking step. The parasite is not reliably destroyed by freezing, so making ice from unsafe water does not make it safe. Keep ice machines clean and serviced, use a dedicated, clean ice scoop stored outside the ice (never a glass, and never bare hands), and keep the scoop and bin lid protected from splashes and dirty hands. During a boil-water alert, stop using ice made from tap water, discard existing machine-made ice, and switch to ice made from boiled or safe bottled water or commercially bagged ice until the alert is lifted. Ice must be made from potable water and handled like any other ready-to-eat food.. Freezing does not reliably kill Cryptosporidium, so unsafe water makes unsafe ice.. Use a dedicated scoop stored outside the ice; never scoop with a glass or hands.. During an alert, discard tap-water ice and switch to ice from safe water or bagged ice.. Washing produce and the limits of a rinse Washing fresh produce in clean, potable running water removes soil and reduces surface contamination, and it is a sensible step for salads, leafy greens, herbs and fruit eaten raw. But be realistic about what a rinse achieves: washing lowers risk, it does not sterilise, and it cannot compensate for contaminated wash water. If the water itself carries parasites, washing simply spreads them. Chlorine-based produce sanitisers and vegetable washes may reduce bacterial loads, but Cryptosporidium is notably resistant to chlorine, so do not rely on a chlorine dip as a parasite kill step. The dependable defences are safe source water, buying from reputable suppliers, and cooking where the dish allows. For cooked dishes, thorough heating is far more reliable than any wash. Where produce will be eaten raw, clean water and clean handling are essentially your only barriers, so both must be right. Wash raw produce under clean, potable running water to remove soil and reduce contamination.. Washing reduces but does not eliminate risk, and cannot fix contaminated water.. Do not treat a chlorine sanitiser dip as a reliable kill step for Cryptosporidium.. When a dish is cooked, rely on thorough cooking rather than washing alone.. Responding to a boil-water alert A boil-water alert (or boil-water notice) is issued by a water utility or health authority when the supply may be unsafe, often after heavy rain, flooding, a mains failure or a detected treatment problem. Alerts are one of the clearest signals that waterborne parasites and other pathogens may be present. When an alert is in force for your area, treat all tap water as unsafe for consumption and food preparation until told otherwise. The reliable way to make water safe from Cryptosporidium is to bring it to a rolling boil and let it cool; boiling destroys the parasite. Alternatively, use commercially bottled water or water treated by an appropriate method. Because rules and the exact scope of an alert can vary, always follow the specific instructions in the notice and confirm details with your state or territory regulator, local council or water utility. Use water brought to a rolling boil then cooled, or safe bottled water, for drinking and food prep.. Stop using tap-water ice; discard existing ice and use safe alternatives.. Wash ready-to-eat produce, and make drinks and dressings, only with boiled or safe water.. Follow the exact wording of the notice and confirm scope with your utility, council or regulator.. Staff hygiene and exclusion Because Cryptosporidium spreads by the faecal-oral route, an infected food handler is a serious hazard regardless of how clean your water is. The Food Standards Code requires that people who may contaminate food do not work directly with food while they are ill. Anyone with diarrhoea or vomiting must be excluded from handling food and, in practice, should not return to food-handling duties until they have been symptom-free for at least 48 hours; where a doctor or health authority advises longer, follow that advice, because the parasite can still be shed after symptoms settle. Thorough handwashing with soap and running potable water, especially after using the toilet and before handling food, is the everyday control that backs this up. Managers should encourage staff to report illness without fear of losing shifts, since hiding symptoms is what turns one case into an outbreak. Exclude anyone with diarrhoea or vomiting from handling food.. Do not return to food handling until at least 48 hours symptom-free, or longer if advised.. Wash hands thoroughly with soap and potable running water after the toilet and before food work.. Make it easy and safe for staff to report illness so cases are caught early.. Checklist: Confirm your water source and whether it is town supply or a private source.. Maintain back-flow prevention and service filters, ice machines and dispensers on schedule.. Use potable water for all washing, ice, drinks and any water added to food.. Store a clean, dedicated ice scoop outside the ice; never use a glass or hands.. Have a written plan for boil-water alerts covering ice, produce washing and drinks.. Enforce staff exclusion for diarrhoea and vomiting until at least 48 hours symptom-free.. Provide soap, warm potable running water and hand-drying at every handwash basin.. Cook dishes thoroughly to 75°C core where the recipe allows, rather than relying on washing.. Common mistakes: Assuming clear, chlorinated water is automatically free of Cryptosporidium.. Making or serving ice from tap water during a boil-water alert.. Relying on a chlorine or vegetable-wash dip as a kill step for parasites.. Using rainwater or bore water for washing produce without treatment or testing.. Letting staff with diarrhoea keep handling food, or returning them too soon.. Ignoring the plumbing side: no back-flow protection or neglected ice machines and filters..
Frequently asked questions
Does chlorinating or sanitising water kill Cryptosporidium?
Not reliably. Cryptosporidium oocysts have a tough outer wall that resists the chlorine levels normally used to disinfect drinking water and pools. Standard chlorination controls most bacteria but should not be trusted to destroy this parasite. The dependable defences are safe, properly treated source water, physical removal by adequate treatment, and boiling water when a boil-water alert is in force.
Is freezing enough to make ice safe if the water might be contaminated?
No. Freezing does not reliably kill Cryptosporidium, so ice made from unsafe water stays unsafe. Under the Food Standards Code ice is treated as a food and must be made from potable water. During a boil-water alert, discard ice made from tap water and switch to ice made from boiled or safe bottled water, or use commercially bagged ice until the alert is lifted.
What should my food business do during a boil-water alert?
Treat all tap water as unsafe for consumption and food prep. Use water brought to a rolling boil then cooled, or safe bottled water, for drinking, ice, washing ready-to-eat produce, and any water added to food. Stop using tap-water ice and discard existing ice. Follow the exact instructions in the notice and confirm the scope with your water utility, council or state regulator.
Does washing salad and produce remove the parasite?
Washing under clean, potable running water removes soil and reduces surface contamination, which is worthwhile for raw produce. But it does not sterilise and cannot fix contaminated wash water, and chlorine dips are unreliable against this parasite. For dishes that are cooked, thorough heating is far more effective. Where produce is eaten raw, safe water and clean handling are essentially your only barriers, so both must be correct.
When can a staff member return to food handling after diarrhoea?
Anyone with diarrhoea or vomiting must be kept away from handling food while ill. As a general rule they should not return to food-handling duties until they have been symptom-free for at least 48 hours, because Cryptosporidium can still be shed after symptoms stop. Where a doctor or health authority advises a longer exclusion, follow that advice, and confirm any specific requirements with your regulator.
Are private water supplies like tanks and bores a bigger risk?
Yes. Rainwater tanks, bores and dams can be contaminated by animal faeces, runoff and flooding, and they are not centrally treated or monitored like town supplies. If your business relies on a private source, treat it as higher risk, put a documented treatment and testing arrangement in place, and confirm the specific requirements with your state or territory regulator and local council, as rules vary.