Energy audit according to DIN EN 16247: Who is obliged, who checks, who is liable

Section 8 paragraph 1 of the Energy Services Act (EDL-G) obliges every company that is not considered a small or medium-sized enterprise (SME) according to Recommendation 2003/361/EC to regularly carry out an energy audit in accordance with DIN EN 16247-1. Initial audit within four years of losing SME status, then repeated every four years, deadline binding, no extension possible, no transitional regulation for locations or subsidiaries. Supervision lies with the Federal Office of Economics and Export Control (BAFA), which can impose fines of up to 50,000 euros per violation (Section 12 EDL-G). With the Energy Efficiency Act (EnEfG) from November 2023, additional obligations for implementation plans, energy management systems and final energy consumption thresholds have been added, which practically replace the EDL-G in the upper consumption segment.

This article explains which companies are subject to the energy audit requirement, how the methodology according to DIN EN 16247-1 can be implemented in practice, which interfaces to the environmental officer and to the energy management system according to ISO 50001 exist and how the audit trail can be documented in an auditor-proof manner. The framework follows CIVAC's positioning as a compliance platform and officer-as-a-service for energy and environmental obligations, with workspace, 490 audit templates and the ability to appoint an external environmental officer within two business days. The article addresses management, energy managers and environmental officers who have to make an appropriate decision between the audit, ISO 50001 and the EnEfG implementation plan.

The energy audit obligation is linked to the SME status according to Recommendation 2003/361/EC of the European Commission. A company is not considered an SME if it exceeds one of three thresholds: 250 employees (full-time equivalents), 50 million euros in annual sales or 43 million euros in annual balance sheet total. The calculation is carried out on a consolidated basis: affiliated companies and partner companies are included proportionately or fully, depending on the level of participation and voting rights. A German medium-sized company with 180 employees can immediately cross the threshold and become subject to an audit through a 51 percent shareholding in a group without any changes to its own workforce. The BAFA provides a calculation guide with examples of typical constellations, from family holdings to joint ventures to private equity investments with a multi-level structure.

Cut-off date logic: Anyone who was a non-SME on December 5, 2015 (first obligation) had to submit the first audit by this date. Anyone who later outgrows their SME status must undergo an initial audit within 20 months of losing their SME status and then repeat every 48 months. There is no extension of the deadline; a cure can only be achieved through subsequent submission with the risk of a fine. The operational consequence: Every company should check its SME status annually on the balance sheet date and enter it in the compliance calendar. The role page of the environmental protection officer at CIVAC links the audit calendar with the appointment certificates and reporting lines to the managing director and automatically checks the SME status on the balance sheet date. The deadline begins when the status change is known, not when the balance sheet is approved in the following year. This is particularly true for carve-outs from corporations where the new ownership structure immediately changes the SME status and the audit is due within 20 months.

DIN EN 16247-1 (German edition 2022) defines the requirements for energy audits in all sectors. The audit process includes six stages. First: First contact and agreement on the scope, limits and level of detail of the audit, including the locations, systems and energy sources included. Second: Kick-off meeting with definition of responsibilities and the audit plan, the data suppliers in the company and the on-site appointments. Third: data collection over at least 12 months, with load profiles, bills and measured values ​​for electricity, heat, cold, compressed air, fuel, natural gas and other relevant energy sources. Fourth: On-site visit with sample measurements, inspection of the essential systems and identification of savings opportunities. Fifth: Analysis with an economic evaluation of the measures, usually with capital value or payback period. Sixth: Final report with a catalogue of measures and handover to the management.

The auditor must be qualified and independent. Section 8b EDL-G defines the qualification requirements: relevant degree (engineering, natural sciences) plus three years of professional experience or technician training plus ten years of experience in the energy sector, plus further training of at least 8 hours per year. Auditors must register with BAFA; The public list includes around 6,500 people with different industry focuses. Internal auditors are permitted if they meet the qualification requirements and are not directly responsible for the assets audited. The online declaration to the BAFA must be made within two months of the completion of the audit, with assurance of legal conformity, a list of energy consumption per energy source and confirmation from the auditor. The auditor calls, the evidence is ready. According to the standard, the audit report itself must cover at least 90 percent of energy consumption; Sampling logic with omissions is only permitted within narrowly defined limits and must be methodologically justified in the report so that the auditor can understand the selection.

§ 8 paragraph 3 EDL-G exempts companies from the audit obligation if they operate a certified energy management system according to ISO 50001:2018 or a validated environmental management system according to EMAS (EU Regulation 1221/2009). The exemption applies as soon as the system is fully implemented and a valid certificate or validation is available. In the transition year during the initial certification, the exemption can apply proportionately, provided that the implementation progress is documented to the BAFA with a project plan and an audit report from the certification body. The choice between audit (every 4 years) and management system (ongoing effort with annual monitoring audits) depends on energy consumption, company size and the likelihood of further energy or environmental obligations, such as CSRD reporting or EU taxonomy.

ISO 50001 requires a continuous plan-do-check-act cycle with energy policy, energy aspects, target values, energy indicators, internal audit and management review. The standard requires a trained energy team function with responsible people from top management, external audits by an accredited certifier (in Germany, including DEKRA, TÜV, DQS) and annual monitoring audits. EMAS goes beyond ISO 50001 because a complete environmental assessment, a public environmental declaration and an entry in the site register are required, but there are simplifications for official notifications. Since November 2023, the Energy Efficiency Act (EnEfG) has required a fully-fledged energy or environmental management system for final energy consumption of 7.5 GWh or more per year, so that many energy-intensive companies have chosen ISO 50001 or EMAS anyway. Audit-proof, documented, §-proof is the target quality of every implementation. The investment calculation should take life cycle costs into account before deciding between audit and management system, because ISO 50001 generally delivers lower unit costs per identified savings measure while improving the ESG and CSRD database.

§ 12 paragraph 1 EDL-G classifies violations as administrative offenses with fines of up to 50,000 euros per case. In particular, the following are worthy of fines: audit not carried out or not carried out in a timely manner, audit results not reported to BAFA or not reported in a timely manner, incorrect declaration of energy consumption, audit not carried out by a qualified auditor, lack of documentation of the methodology. The BAFA carries out random checks, with a sampling rate of around 20 percent of the reported audits per year, supplemented by event-related checks based on information from the market or other authorities. The most common mistakes in practice: missing data on smaller locations (branches, warehouses, sales offices), incomplete recording of fuels (fleet, company cars), confusion between heat use and heat production, incorrect assumptions about SME status after group restructuring.

Common mistake number two: The audit report is available, but the online declaration via the BAFA portal was missed or submitted too late. Section 8a paragraph 3 EDL-G requires the declaration within two months of the completion of the audit; Deadlines start from the time the audit result is known, not from the date on which the audit report is released within the company. Common mistake number three: Switching between audit requirements and ISO 50001 exemptions in an ongoing four-year cycle without complete documentation, so that no evidence is available for a partial period. The operational answer is a central audit calendar with deadlines, responsible persons and escalation to management. CIVAC provides this calendar as part of the workspace, with a link to the appointment certificate, audit report and BAFA confirmation. The appointment certificate, signed, filed, verifiable. An annual self-examination of the audit calendar by the compliance officer reduces the reporting date risk and closes the gap of around three months between the reporting date and the audit preparation time.

The Energy Efficiency Act (EnEfG, in force since November 18, 2023) supplements the EDL-G with three essential layers. First: Companies with an average final energy consumption over three years of more than 7.5 GWh must introduce an energy management system according to ISO 50001 or an environmental management system according to EMAS by mid-2025 (Section 8 EnEfG), with initial certification and ongoing maintenance. Secondly: Companies with a final energy consumption of over 2.5 GWh must publish the economic measures identified in the audit or management system in an implementation plan, stating the measure, the expected savings, the investment volume and the planned implementation (Section 9 EnEfG). Third: Data centres with a connected load of 300 kW or more have separate obligations regarding waste heat utilization, PUE values ​​and a public energy efficiency register.

The implementation plans must be published within three years of the audit or system completion and confirmed by an auditor or qualified expert. Violations are punished with fines of up to 100,000 euros, significantly higher than under EDL-G. For companies that reach the 7.5 GWh threshold, the audit requirement is practically obsolete because the ISO 50001 introduction becomes mandatory anyway. For companies between 2.5 and 7.5 GWh, the energy audit remains relevant, supplemented by the implementation plan. CIVAC models both thresholds in the Environmental Workspace and links the audit obligation, EnEfG obligation and implementation plan in a single roadmap with deadlines, responsible parties and escalation rules. The platform monitors the three-year rolling average and raises an alarm before the threshold is exceeded. According to EnEfG, the implementation plan itself must cover at least the first three years of the economic measures, with the date, investment volume and expected savings in kWh and euros per measure, each in an open format for publication on the Internet.

The audit report according to DIN EN 16247-1 has a fixed structure. Summary with the most important key figures and measures, description of the company and the systems considered, energy flow diagram with sources and sinks, load profile analysis with peak load and base load, profitability calculation per measure, list of measures with prioritization and investment volume, audit trail with data and measurement methodology. In practice, the list of measures includes 15 to 60 individual measures, from LED conversion to heat recovery to compressed air leakage remediation, from heating optimization to load management in the home. Economic viability is typically reported in terms of payback or net present value (NPV), with energy price and discount rate assumptions that the auditor must disclose.

The report must be handed over to management, with a reporting line documented in the compliance workspace. There is no direct obligation to implement the identified measures from Section 8 EDL-G, but there is an obligation to publish the implementation plan from Section 9 EnEfG if the 2.5 GWh threshold is exceeded. Insurers and banks are increasingly using audit reports for ESG ratings and CSRD reports, so that data quality also becomes relevant outside of pure EDL-G compliance. Anyone who enters the report into a central repository can use it for GHG accounting according to Scope 1 and 2, the EU taxonomy and the SFDR data requests of their shareholders without any additional effort. The list of measures also flows into the CSRD's E1 transition plan. Others run compliance like a filing cabinet. We run it like software. The integration with the catalogue of measures allows direct handover to controlling and investment planning, so that the audit does not become a file, but rather a prioritised implementation plan with clear responsibilities and quarterly milestones and a traceable audit trail.

The EDL-G does not have a formally appointed representative such as Section 53 BImSchG for the pollution control officer. In practice, however, the environmental officer (UsB) or a specially designated energy manager takes on the coordination role for the audit because environmental law, climate reporting and energy audits can hardly be separated operationally. The tasks overlap along the same data basis: consumption figures, emission factors, list of measures, reporting line to management, interface to authorities. A written order with a catalogue of tasks and reporting line creates clarity about responsibility, representation and escalation and is the basis for the management's defence under Section 130 OWiG in the event of a BAFA fine or an EnEfG sanction. Without an appointment, liability passes unfiltered to the managing director.

At CIVAC, the dual role of environmental officer and energy manager can either be filled internally and supported with the workspace, or appointed externally. Licence the workspace for your internal representatives, or have our representatives order it. The external path is particularly useful if the company operates several locations, regularly fulfils BImSchG, EDL-G and EnEfG obligations in parallel and the appointment certificate, reporting line and audit calendar have to be set up as an integrated package. The platform bundles 490 audit templates, a DIN EN 16247 data model, a BAFA declaration template and an EnEfG threshold tracker in a workspace with EU data residency and ISO/IEC 27001:2022 controls. Reports flow directly into the company's compliance file and are available in minutes for any CSRD, LkSG or investor data request. The reporting line is set out in the appointment certificate so that escalation to management and reporting to the supervisory or administrative board are formally secured, including quarterly status reports and the submission of the annual financial statements by the auditor.

Model A is the internal variant: A qualified employee in facility management, technology or QHSE takes over the energy audit coordination, uses the workspace as a central platform and commissions an external or internal auditor to carry out the actual audit. The model works for companies with around 300 employees and a dedicated energy or environmental function with a sufficient personnel budget. Advantages: in-depth knowledge of your own systems, continuous data collection, direct interface to maintenance and investment planning, short response times to technical questions from the auditor. Disadvantages: Methodological risk with infrequent audits (every four years), vacancy risk with personnel changes, effort for the initial setup of the audit track, lack of routine in dealing with the BAFA portal and the annual samples.

Model B is the appointed external environmental officer with simultaneous energy audit coordination. CIVAC SLA: 2 working days instead of 2 to 6 weeks classic. Der externe Beauftragte wird schriftlich bestellt, berichtet an die Geschäftsführung, nutzt den Workspace, koordiniert den Audit-Auftrag an einen BAFA-registrierten Auditor, übernimmt die Online-Erklärung an das BAFA und führt parallel die EnEfG-Schwellenwertüberprüfung und den Umsetzungsplan. Advantages: no deadline risk, routine methodology, clear interface to CSRD and LkSG obligations, uniform database. Disadvantages: ongoing costs from the first month, onboarding phase of one to two months for data acquisition. Licence the workspace for your internal representatives, or have our representatives order it. Both models use the same platform with 490 audit templates and EU data residency. It is possible to switch between the models at any time because data, templates and reporting lines are in the same workspace and the appointment certificate only needs to be adapted, without data migration or methodology change.

If you want to check whether your company is subject to the energy audit requirement and whether the next deadline will be met, you can take four concrete steps to achieve clarity within 60 days. First: Check the SME status on a consolidated basis, with the current group of shareholders, number of employees, annual sales and balance sheet total, documented in a file note as of the balance sheet date. Second: Locate the last audit report and last BAFA online declaration and identify the four-year deadline that is binding for the next audit. Third: Calculate EnEfG thresholds (2.5 GWh and 7.5 GWh) for your own company, because the implementation plan obligation and, if necessary, the ISO 50001 obligation are derived from this. Fourth: Check the appointment of the environmental officer, with the appointment certificate, catalogue of tasks and reporting line to management.

CIVAC supports these four steps as a compliance platform and officer-as-a-service. The platform bundles 490 audit templates, an SME status calculator according to recommendation 2003/361/EC, a DIN-EN-16247 data model, a BAFA declaration template, an EnEfG threshold tracker and a link to the environmental officer's appointment certificate. All data is in EU data residency with ISO/IEC 27001:2022 controls. Turn reading into an assignment. Write to info@civac.de or use the contact form on civac.de/faq to receive an initial classification of your audit deadline, the EnEfG thresholds and the appointment options for the environmental officer within two working days, including a sample mandate, appointment certificate and project plan for the first 60 days. This creates a documented, auditor-proof compliance process from the deadline in the calendar. The SME status, the audit deadline, the EnEfG thresholds and the appointment of the environmental officer belong in a single compliance calendar so that future deadline violations are ruled out and the reporting line remains verifiable for each financial year. In this way, the audit becomes a planned routine, not a last-minute action before the deadline.