Occupational Hygiene: Obligations, Roles, and Structured Implementation

The Infection Protection Act (§ 36 IfSG) requires certain facilities to create and continuously update operational hygiene plans — with specific requirements for training, documentation, and regular review. These requirements are supplemented by the Drinking Water Regulation (TrinkwV 2023) and the recommendations of the Commission for Hospital Hygiene and Infection Prevention (KRINKO) at the Robert Koch Institute. Organisations that manage these requirements as a pile of paperwork risk significant findings during inspections by the public health authority.

This article describes which companies and facilities fall under the relevant hygiene obligations, what core tasks a Hygiene Officer undertakes, and how a structured platform ensures that hygiene records are genuinely available when an inspection occurs. The focus is on operational reality: training cycles, inspection protocols, drinking water tests, and the obligation to maintain complete, unbroken evidence.

§ 36 IfSG obliges community facilities (nurseries, schools), healthcare facilities (hospitals, nursing homes, medical practices), as well as shelters for homeless persons and comparable establishments to create hygiene action plans. The plans must be available in writing, regularly updated, and accessible for inspections by the public health authority.

The Drinking Water Regulation 2023 (TrinkwV) supplements these requirements for all operators of drinking water installations that do not serve exclusively private households. Regular hazard analyses under § 21 TrinkwV, sampling, and reporting to the public health authority are mandatory. Violations of the TrinkwV may be subject to fines under § 25 TrinkwV.

The KRINKO recommendations of the Robert Koch Institute are formally not legal standards, but are regarded as the recognised state of science and technology. Courts and supervisory authorities regularly refer to these recommendations when assessing hygiene deficiencies. Anyone who persistently ignores them exposes themselves not only to regulatory risks but also to civil liability.

For industrial operations involved in food processing, EU Regulation (EC) No. 852/2004 (Food Hygiene) and the HACCP system (Hazard Analysis and Critical Control Points) additionally apply. Businesses in this area must document an HACCP concept and continuously monitor critical control points. The totality of these standards constitutes the mandatory programme that a Hygiene Officer works through in a structured manner.

The obligation to appoint a Hygiene Officer does not derive from a single provision but from the interaction of several legal sources. § 36 IfSG explicitly names facilities that must maintain a written hygiene plan. In practice this means: hospitals, rehabilitation facilities, dialysis centres, care homes for the elderly and nursing homes, outpatient nursing services, medical practices carrying out invasive procedures, dental practices, nurseries, and schools.

In addition, employers' liability insurance associations, trade associations, and regional public health authorities in certain sectors require evidence of a qualified hygiene contact person. In the food industry, the responsible person under § 4 LMHV is in effect a Hygiene Officer under a different name.

Industrial operations with production facilities that operate cooling water circuits (Legionella risk under VDI 2047-2) or air handling systems (VDI 6022) also require an officer who coordinates and documents the maintenance records, sampling results, and hazard analyses. Where this function is absent, personal liability falls directly on senior management — under § 130 OWiG in conjunction with the relevant sectoral legislation.

In short: anyone employing more than 50 staff and operating in one of the areas mentioned should actively assess their appointment obligation before the public health authority or trade association raises the question.

A Hygiene Officer takes on three structural core tasks: first, regular hygiene inspections with recorded deficiencies and an action plan; second, organising and documenting hygiene training for all relevant employees; and third, the ongoing maintenance of hygiene documentation — plans, inspection protocols, sampling results, and training records.

The frequency of inspections depends on the type of facility and the applicable standards. In hospitals, KRINKO recommends at least quarterly inspections; in nursing homes, half-yearly cycles are standard. Each inspection results in a written protocol documenting deficiencies, responsible persons, and deadlines. This protocol is the central piece of evidence in official inspections.

Hygiene training under § 36 para. 2 IfSG must be conducted for newly appointed employees before they begin work, and for all employees at regular intervals. Training content, participant lists, and test results must be retained. A digital workspace enables these cycles to be tracked automatically and certificates to be retrieved at the click of a button — rather than having to search through filing cabinets.

Additional tasks include: outbreak management, coordination with the public health authority for notifiable diseases under § 6 IfSG, and updating the hygiene plan when changes occur in the building, operations, or staffing structure.

A hygiene plan under § 36 IfSG must contain at least the following elements: a description of the facility and the hygiene-relevant areas; specification of cleaning and disinfection measures (including agents, concentrations, and contact times); provisions on hand hygiene; requirements for protective equipment; provisions for the reprocessing of medical devices (where applicable); and procedures for notifiable diseases.

The obligation to update the plan is in practice often the sticking point. A hygiene plan that has sat unchanged in a binder for three years while the facility has been refurbished and new staff have joined is not fulfilling its function. Supervisory authorities regularly check the date of amendment.

Digital versioning resolves this problem: every change to the plan is saved with a timestamp and the name of the officer who made the change. The version history can be exported at the click of a button. During an inspection, not only is the current plan available, but also evidence of when and why changes were made.

For businesses subject to HACCP requirements, documentation of the HACCP concept is additionally required: critical control points (CCPs), threshold values, monitoring measures, corrective actions, and verification procedures. Here too: paper is patient, but in an official food inspection only what is actually documented and retrievable counts.

The Drinking Water Regulation 2023 (TrinkwV) requires operators of drinking water installations that are not exclusively private systems to carry out a hazard analysis under § 21 TrinkwV. This analysis identifies risks in the pipe network — particularly Legionella in hot water systems — and defines risk-mitigation measures.

Hot water systems with a storage volume exceeding 400 litres or a pipe volume exceeding 3 litres between the outlet of the water heater and the draw-off point are subject to the annual testing obligation under Annex 4 TrinkwV. Sampling by an accredited laboratory, assessment of results, notification to the public health authority upon threshold exceedances under § 16 IfSG — all of this is mandatory and must be documented.

The Hygiene Officer coordinates these tasks: they commission the laboratory, receive the results, assess them against the threshold values in Annex 1 TrinkwV, and initiate immediate action where necessary. The documentation chain — commission, analysis report, assessment, measure, follow-up sampling — must be unbroken.

If this chain is absent, fines under § 25 TrinkwV may follow. Where Legionella findings exceed the technical action value (100 CFU/100 ml), immediate notification to the public health authority is required, together with an obligation to carry out immediate remediation. Without a documented process, a manageable hygiene problem becomes a liability risk for senior management.

The law does not prescribe a specific professional qualification for the Hygiene Officer, but does expect demonstrable technical competence. In hospitals and inpatient care facilities, the required qualification is guided by the KRINKO recommendations: Hygiene Officers who are physicians require completed advanced training in hospital hygiene; Infection Control Nurses (Hygienefachkraft, HFK) undergo specific specialist training in accordance with DKG guidelines.

In other sectors — food processing, industry, accommodation — the qualification requirement is less formalised, but evidence of technical competence is nevertheless required. Internal appointments frequently reach capacity limits: the employee who takes on the hygiene function alongside their other duties is absent during inspections, neglects documentation cycles, or leaves the company.

An external Hygiene Officer brings the required qualification, is not dependent on internal capacity constraints, and has no conflicts of interest. The formal instrument of appointment is issued in writing; the reporting line to senior management is clearly defined. CIVAC provides external Hygiene Officers through its certified partner network — contract, officer, and appointment document within two working days.

For companies that have or wish to build an internal officer, CIVAC alternatively licences the workspace: with hygiene-specific task templates, training modules, inspection protocols, and the monthly documentation workflow. Both options — internal workspace and external officer — can be combined in CIVAC's hybrid model.

Hygiene training is not a one-off matter. § 36 para. 2 IfSG prescribes instruction for employees in facilities under § 36 para. 1 IfSG upon commencement of employment and at least annually thereafter. Records of participation must be kept and presented to the public health authority on request.

In the food industry, training under § 4 LMHV (Food Hygiene Regulation) is mandatory. New employees in food production, processing, or distribution may not begin work until they possess hygiene knowledge. This must be documented.

Typical training content includes: hand hygiene, protective clothing, handling infectious diseases, HACCP fundamentals (in the food industry), notifiable diseases under § 6 IfSG, conduct rules during outbreaks, and cleaning and disinfection procedures.

A digital training workspace automatically tracks which employees have completed which modules, when the next training is due, and who has yet to complete it. Certificates are immediately retrievable. When the public health authority calls, the training record is available within minutes — not after a week of searching through files. The inspector calls; the evidence is ready.

Public health authorities, veterinary offices, employers' liability insurance associations, and statutory accident insurers review hygiene documentation to the same pattern: they want to see complete, current, and traceable records. Complete means: all mandatory documents are present. Current means: the date and version match the current operating situation. Traceable means: it is clear who checked, amended, or approved what and when.

Audit-ready hygiene documentation contains at minimum: the current hygiene plan with version control; inspection protocols from the past two to three years; training records for all employees; results of drinking water sampling (where applicable); maintenance records for hygiene-relevant installations; notification documentation for outbreaks or threshold exceedances; and the current HACCP plan (in food businesses).

Anyone who has these records distributed across different systems, email inboxes, and filing binders cannot present them in a structured manner during an inspection. The result is findings, deadline extensions, and in repeat cases fines or operational prohibitions.

CIVAC consolidates all evidence in the documentation interface: completed tasks, completed training, closed audits, and inspection protocols flow monthly into an exportable compliance report. Audit-ready, documented, compliant with § 36 IfSG.

Occupational hygiene is not an optional add-on but a structured mandatory programme with clearly defined roles, deadlines, and documentation obligations. § 36 IfSG, TrinkwV, KRINKO recommendations, and LMHV together define a level of requirements that can barely be reliably met without a dedicated function and structured documentation.

CIVAC is a compliance platform and Officer-as-a-Service that opens both paths: licence the workspace for your internal officers — or commission our officers. External Hygiene Officers from the CIVAC partner network are deployed with a contract, written instrument of appointment, and a clear reporting line within two working days.

The CIVAC workspace contains hygiene-specific task templates, digital inspection protocols, automated training cycles with certificate tracking, and the monthly documentation workflow. 37 ready-to-use audit templates also cover sector-specific requirements.

Others manage compliance like a filing cabinet. We manage it like software.

Turn reading into action: contact CIVAC at info@civac.de or via the contact form on civac.de. The initial assessment of your hygiene appointment obligation is free of charge.