A cruise ship is the only vessel in commercial shipping whose compliance is published as a number the public can look up. Under the Vessel Sanitation Program, established by the CDC in 1975 under the authority of the Public Health Service Act, every passenger cruise vessel with a foreign itinerary calling at a United States port and carrying thirteen or more passengers is subject to twice-yearly unannounced operational sanitation inspections. Ships begin at 100 points and lose them according to the public health significance of each violation found. Eighty-six or above passes. Eighty-five or below is unsatisfactory and triggers reinspection. Scores are posted, outbreaks are posted by ship name and sailing date, and in 2026 the published record already includes vessels scoring in the low eighties and outbreaks attributed to norovirus and E. coli on named sailings. No other vessel type carries that. And the scoring reaches beyond the moment of inspection: VSP cites violations identified during record review even where the ship was not in United States waters when the violation occurred. Your own logs, covering your entire itinerary, are the evidence. Start a free trial of Marine Inspection and hold them accordingly.
86-100
Satisfactory
0-85
Unsatisfactory, reinspection follows
Frequency
Twice yearly, unannounced, plus reinspection where necessary
Scope
Any passenger cruise vessel on a foreign itinerary calling at a US port with thirteen or more passengers
Method
Start at 100, deduct by public health significance of each violation found
Publication
Scores and outbreaks published by ship name, sailing date and causative agent
Fourteen points of margin, across eight inspection areas, on a vessel with thousands of individually inspectable items, assessed without warning. Continuous readiness is not a strategy here — it is the only available approach.
The Record Review Provision
This is the clause most operators underestimate, and it changes the nature of the obligation entirely. Book a Marine Inspection demo and see logs held as structured, retrievable data rather than as charts in a binder.
What the standard says
VSP has cited and will continue to cite violations identified in the record review, even where the ship was not sailing in United States waters when the violation occurred.
Where record review reveals violations that could result in illness when the ship arrives in a US port, points may be deducted according to the violations identified during the inspection. The standards give an explicit example: ships producing water in ports, harbours and polluted waterways.
Read carefully, this removes any notion of a territorial boundary around the obligation. The inspection happens in a US port, but the evidence examined covers wherever the vessel has been since the logs began, which for a ship on a world itinerary is a great deal of water outside anyone's jurisdiction.
The consequence
Your compliance state is continuous and global, not territorial and momentary. A halogen residual out of range in a foreign port six weeks ago is scorable in Miami today if it is in the log. There is no portion of the itinerary during which the records stop mattering.
The uncomfortable inversion
On most vessels the record is what defends you. Here it can also be what costs you points, because the inspector reads what you wrote. That is not an argument for recording less — falsified or absent logs are a far worse finding. It is an argument for recording accurately and then closing what the record reveals, promptly and with evidence, before an inspector reads the same data.
What good looks like
Out-of-range readings that trigger a corrective action automatically, with the action assigned, completed and evidenced in the same system that holds the reading. An inspector then finds not a violation sitting unaddressed in a log, but a deviation identified, actioned and closed by a named person on a recorded date.
The Eight Inspection Areas
Inspectors evaluate the vessel against eight specific areas, and the list reads like an inventory of everything that can go wrong when several thousand people live, eat and swim together in a floating city. Sign up for Marine Inspection and run each area internally between inspections rather than ahead of them.
Potable water systems
Inspectors take actual samples to verify chlorine and pH levels rather than relying on the ship's own figures. Bunkering, production, storage, distribution and cross-connection control all sit here, and the standards specifically flag water production in ports, harbours and polluted waterways as a scorable practice.
Records: halogen residual logs, production location, cross-connection control programme
Galleys and dining rooms
Food handling, temperature control, equipment condition and cleaning. Inspectors interview food service staff directly on safe handling practices and check whether crew reporting illness have been kept away from food preparation, which makes this an area assessed through people as much as through equipment.
Records: temperature logs, equipment maintenance, crew illness exclusion decisions
Swimming pools and whirlpool baths
Recirculation, filtration, disinfection and monitoring across every pool and spa aboard. On a large ship this is a substantial number of independent water systems, each with its own chemistry and its own log.
Records: chemistry readings per pool, filtration maintenance, closure decisions
Medical facilities
Facility condition and the systems through which illness is identified, reported and managed, including the logging of passenger and crew symptom reports that underpins outbreak detection.
Records: AGE case logs, reporting completeness, facility maintenance
Child activity centres
A distinct inspection area because young children are both more susceptible to gastrointestinal illness and more effective at transmitting it. Cleaning protocols, exclusion policies and facility condition are assessed separately from general housekeeping.
Records: cleaning schedules, exclusion decisions, facility condition
Cabins and housekeeping
Housekeeping protocols across thousands of guest and crew cabins, including cleaning during and after illness. This is the largest area by item count and the hardest to evidence, because it is thousands of repeated tasks performed by a large team.
Records: cleaning protocol compliance, sanitisation after illness, defect reporting
Ventilation
Air handling across accommodation, food service and public spaces, where condition and cleaning bear on both air quality and the transmission environment.
Records: filter changes, coil and duct cleaning, unit maintenance history
The common thread
Every one of these eight areas is scored partly on physical condition and partly on the log behind it. That means a maintenance system that cannot hold water chemistry, temperature readings, cleaning completion and illness reporting is covering perhaps half of what determines the number.
The evidence and the equipment belong in the same record
86
the number that has to hold
Halogen residuals and pool chemistry with automatic corrective action on an out-of-range reading, galley temperature logs, cleaning completion across thousands of cabins, ventilation maintenance per unit, and illness reporting — captured at the point of the reading, attributed to a named crew member, and retrievable across the whole itinerary rather than only the US portion.
The Department Boundary Problem
Here is the structural feature that makes cruise maintenance unlike every other vessel type in this series. On a tanker, a bulker or a ferry, the technical department owns the equipment and maintains it. On a cruise ship the same physical item is routinely owned by one department, maintained by a second, and scored by a third party against a published number. Schedule a walkthrough and see work orders routed across departments without leaving the record.
Hotel
Cabins, public spaces, housekeeping, laundry, food and beverage service, retail and entertainment. Owns the largest share of guest-facing assets and the majority of items an inspector physically touches.
Engineering
Propulsion, power generation, HVAC, potable water production and distribution, waste systems, refrigeration, vacuum sewage, pool plant and every item of galley equipment that has a motor or a heating element.
Medical
Illness identification, case logging, exclusion decisions for crew and passengers, and the reporting that determines whether a voyage crosses the outbreak threshold.
Marine and safety
Life-saving appliances, fire systems, watertight integrity, drills, muster and everything SOLAS requires of a passenger ship, running in parallel with all of the above.
Where it breaks
A galley dishwasher's final rinse temperature is a scored item. Food and Beverage notices it running low. Engineering has to fix the booster heater. The score belongs to neither department individually and to the ship collectively. If the observation is made verbally, or logged in a hotel system engineering cannot see, or raised as a ticket with no link to the temperature record that prompted it, then the finding, the repair and the evidence live in three places and reconcile in none. Multiply that across pool plant, cabin plumbing, ventilation in food spaces and refrigeration, and you have the single largest source of preventable point loss on a cruise ship.
Ownership, Maintenance and Scoring Rarely Align
The table below is the practical expression of the boundary problem: who owns the asset, who maintains it, and who gets scored on it. Where those three diverge, a routing mechanism has to exist or the work does not happen reliably. Start a free trial and map your own divergences before the next inspection window.
Table 1: Where Ownership, Maintenance and Scoring Diverge
| Asset | Owned By | Maintained By | Scored Under | The Routing Requirement |
|---|---|---|---|---|
| Galley dishwashing equipment | Food and beverage | Engineering | Galleys and dining rooms | An out-of-range temperature raises an engineering job automatically, linked to the reading |
| Potable water distribution | Engineering | Engineering | Potable water systems | Aligned, and therefore the easiest area to get right |
| Cabin plumbing fixtures | Hotel | Engineering | Cabins and housekeeping | A stateroom attendant raises a defect that reaches engineering without a phone call |
| Pool and whirlpool plant | Hotel operations | Engineering | Swimming pools and whirlpools | Chemistry readings and plant maintenance in one record, not two |
| Ventilation in food spaces | Engineering | Engineering | Ventilation and galleys | One asset scored under two areas, so evidence must satisfy both |
| Refrigeration and cold rooms | Food and beverage | Engineering | Galleys and dining rooms | Temperature excursions traceable to the unit and to the corrective action |
| Child centre facilities | Youth programmes | Hotel and engineering | Child activity centres | Three-way routing, and the area most often left off the maintenance system entirely |
| Medical facility equipment | Medical | Engineering and medical | Medical facilities | Clinical and technical maintenance visible to both, with clear ownership per item |
| Life-saving appliances | Marine and safety | Marine and safety | SOLAS, not VSP | A separate regime running in parallel, in the same system |
A defect raised by a stateroom attendant should reach engineering as an assigned job, without a phone call and without leaving the record.
The Three Per Cent Threshold
Outbreak status is not a judgement call. It is a numeric threshold, and crossing it puts a named ship and a named sailing on a public list. Book a walkthrough and see symptom logging held alongside the systems that cause it.
3%
of passengers or crew
An acute gastroenteritis outbreak is defined as AGE rates of three per cent or more of passengers or crew. VSP requires cruise ships to log and report the number of passengers and crew who report symptoms of gastrointestinal illness to the ship's medical staff.
Outbreaks are posted where the ship is under VSP jurisdiction on voyages including both US and foreign ports and the voyage reaches that threshold, and VSP may also post other outbreaks of public health significance beyond it.
Because the trigger is arithmetic rather than editorial, the reporting obligation is what determines the outcome. A ship that logs symptom reports diligently and one that logs them loosely are not equally exposed — they are differently visible, and only one of those positions is defensible.
What gets published
Cruise line, ship name, sailing dates and causative agent. The 2026 list already includes norovirus and E. coli attributions on named voyages. VSP may also post other outbreaks of public health significance beyond the threshold cases.
Why it belongs in the maintenance record
Because the causes frequently sit in equipment. A water system fault, a refrigeration excursion, a dishwasher not reaching final rinse temperature, a pool with chemistry out of range. Symptom counts rising while an equipment defect sits open is a pattern nobody sees when illness reporting lives in a medical system and defects live in a technical one.
The operational response
Enhanced sanitisation, exclusion of symptomatic crew from food handling, and closure decisions on affected spaces — all of which generate records that will be reviewed later, and all of which need to be attributable to named people and specific times rather than described afterwards in a report.
Everything a Passenger Ship Carries, Plus a Hotel
VSP is the distinctive burden but it is not the whole one. A cruise ship carries the full passenger vessel safety regime at the same time, and both run continuously. Sign up for Marine Inspection and hold both regimes in one evidence base.
The safety regime
Musters of newly embarked passengers prior to or immediately upon departure under the amended SOLAS Regulation III/19, which on a ship turning around weekly means a full muster every embarkation day
Watertight doors operated daily and drilled weekly, with the sixty-second bridge closure standard where applicable
Damage control drills at regular intervals under amendments to SOLAS Chapter II-1 Regulation 19 and Chapter III Regulations 30 and 37
Safe Return to Port under Regulations II-1/8-1, II-2/21 and II-2/22 for ships with keels laid on or after 1 July 2010 that are 120 metres or longer or have three or more main vertical zones
The full drill matrix with named participation, response times and debrief findings with corrective actions
The hotel estate
Thousands of guest cabins with plumbing, HVAC, electrical and furnishing assets, each individually able to generate a defect
Multiple galleys, pantries, bars and dining venues with commercial catering equipment under continuous load
Pools, whirlpools, spa and fitness facilities, each an independent water system with its own plant
Theatres, retail, casino and entertainment technology with their own maintenance and safety requirements
Laundry, provisioning, waste and refrigeration operating at industrial scale for a population of several thousand
The scale problem
A large cruise ship carries an asset count comparable to a mid-sized hotel and a small power station combined, staffed by a crew that rotates, inspected twice a year without warning against a published score, and simultaneously subject to the most demanding passenger safety regime in maritime regulation. Systems built for a twenty-vessel cargo fleet do not scale to it, and hotel property management systems do not carry class survey windows or muster records. The requirement is genuinely unusual.
Evaluating a Platform for a Cruise Fleet
Run these with a hotel director, a chief engineer and a public health officer in the room together, which is itself a useful test of whether the departments can agree on anything. Schedule a demo and insist all three attend.
Table 2: Buyer Questions Specific to Cruise Operators
| Area | The Question | A Real Answer | What Should Worry You |
|---|---|---|---|
| Cross-department routing | Can a stateroom attendant raise a defect that becomes an engineering job? | Demonstrated live, end to end, with no re-entry between departments | Separate modules per department with an export between them |
| Reading-driven actions | Does an out-of-range temperature or halogen residual generate a job automatically? | A threshold on the reading that raises and assigns work without a human deciding | Readings stored as data with no consequence attached |
| Log retrieval | Can we produce potable water and pool chemistry logs for a voyage four months ago? | Retrieved during the demo from your own data in under two minutes | Logs exportable only as spreadsheets someone then has to format |
| Scale | How does the system handle several thousand cabins as individual locations? | Your own cabin and space list imported during the evaluation | A hierarchy that becomes unusable past a few hundred items |
| Two regimes | Can VSP evidence and SOLAS drill records live in the same system? | One record producing both output formats | A public health module bolted onto an unrelated maintenance product |
| Crew rotation | Does a new joiner find the same record the same way as the person they replaced? | Structure that holds independently of individual familiarity | Configuration so bespoke that only its author can navigate it |
| Speed of capture | How long does a full pool chemistry round take to record? | Timed live by the person who actually does it | A form that will be completed at a desk from a notebook |
| Offline capture | Can records be captured in a machinery space, a cold room or a tender platform? | Airplane mode demonstration with photographs and clean sync | Reliance on shipboard wifi coverage being universal |
| Reference | Which cruise operators of our size use this today? | A named, contactable reference running comparable tonnage | Cargo fleet references offered as equivalent experience |
2026 CRUISE COMPLIANCE REALITY
The current standard is the document to work from. VSP publishes its Environmental Public Health Standards, and terminology defined within them carries specific meaning in the text — including the definition of an AGE outbreak as rates of three per cent or more of passengers or crew. Work from the current published edition rather than from any summary including this one, and confirm the applicable version with the programme directly. Record review extends beyond US waters. Violations identified during record review may be cited even where the ship was not in United States waters when they occurred, where they could result in illness on arrival at a US port. Treat the entire itinerary as inspectable. Construction and renovation are separately inspected. Cruise vessel design and equipment must meet sanitary design criteria, and owners or shipyards building or renovating vessels can request construction inspections — relevant to any newbuild or refit programme. The safety regime runs in parallel. ISM Code Element 10, SOLAS Chapter IX and the full passenger ship safety framework apply independently of anything in the public health regime.
Frequently Asked Questions
What score does a cruise ship need to pass a VSP inspection?
Eighty-six or above on a hundred-point scale. Ships begin at 100 and inspectors deduct points according to the public health significance of each violation identified. A score of eighty-five or below is considered unsatisfactory and triggers reinspection. Every passenger cruise vessel with a foreign itinerary calling at a United States port and carrying thirteen or more passengers is subject to twice-yearly unannounced operational inspections, with reinspection where necessary. Scores are published, as are outbreaks, by ship name and sailing date, which makes this the only compliance regime in commercial shipping whose results are routinely read by customers.
Can we be cited for something that happened outside US waters?
Yes, through record review. The standards state that VSP has cited and will continue to cite violations identified in the record review even where the ship was not sailing in United States waters when the violation occurred, and that where record review reveals violations which could result in illness when the ship arrives in a US port, points may be deducted according to the violations identified during the inspection. An explicit example given is ships producing water in ports, harbours and polluted waterways. The practical implication is that your compliance state is continuous across the whole itinerary, and your own logs are the evidence.
What are the eight VSP inspection areas?
Inspectors evaluate potable and drinking water systems, taking actual samples to verify chlorine and pH; galleys and dining rooms, including interviewing food service staff on safe handling and checking that crew reporting illness have been kept away from food preparation; swimming pools and whirlpool baths; potable water charts and logs; housekeeping protocols; medical facilities; child activity centres; and cabins and ventilation. Each area is assessed on both physical condition and the records behind it, which is why a maintenance system that cannot hold water chemistry, temperature readings, cleaning completion and illness reporting covers only part of what determines the score.
What defines an outbreak, and what gets published?
An acute gastroenteritis outbreak is defined as AGE rates of three per cent or more of passengers or crew. VSP requires ships to log and report the number of passengers and crew reporting symptoms of gastrointestinal illness to the ship's medical staff, and posts outbreaks where the ship is under VSP jurisdiction on voyages including both US and foreign ports and the voyage reaches that threshold. Published information includes cruise line, ship name, sailing dates and causative agent, with norovirus and E. coli among the attributions appearing on the 2026 list. VSP may also post other outbreaks of public health significance.
Why is cross-department routing such a problem on cruise ships?
Because ownership, maintenance and scoring rarely sit with the same department. A galley dishwasher is owned by food and beverage, maintained by engineering and scored under galleys and dining rooms. A cabin plumbing fixture is owned by hotel, maintained by engineering and scored under cabins. Where the observation is made verbally, or logged in a system the maintaining department cannot see, the finding, the repair and the evidence end up in three places and reconcile in none. Across pool plant, ventilation in food spaces, refrigeration and cabin systems, that gap is the single largest source of preventable point loss.
Can one system handle both public health and SOLAS obligations?
It should, because the alternative is running two systems over the same crew and the same vessel. The underlying capability is the same in both cases: structured inspections captured at the point of work, attributed to named individuals, with findings converted into assigned tasks and closed with evidence. What differs is the output format and the content of the checklist. A cruise ship simultaneously carries the VSP regime, the full passenger ship safety framework including muster, watertight door and damage control obligations, and a hotel estate the size of a substantial shoreside property — and the crew serving all three is the same crew.
Cruise and passenger fleets
Your Score Is Public. Your Record Is Why.
Twice a year, unannounced, starting at 100
Water chemistry and galley temperatures that raise their own corrective actions, defects routed from hotel to engineering without leaving the record, cleaning completion across thousands of cabins, ventilation and pool plant held per unit, illness reporting alongside the equipment that causes it, and the whole passenger safety regime running in parallel — captured offline anywhere aboard, attributed to named crew, and retrievable across the entire itinerary rather than only the part an inspector can see.
