Hygiene in the workplace: from notices to audit-proof hygiene operations

Hygiene in the workplace is not a voluntary well-being issue, but rather a bundled obligation from several legal sources. The Workplace Ordinance (ArbStättV) regulates rooms and sanitary areas, the Biological Substances Ordinance (BioStoffV) regulates the protective measures for biological agents, the Infection Protection Act (IfSG) regulates activity bans and instruction requirements, and the Technical Rules for Biological Agents (TRBA) specify the state of the art. Anyone who does not systematically bring these sources together risks supervisory complaints and, in the event of damage, personal liability on the part of the management.

This guide organises the obligations, describes the hygiene plan as a central document and shows when a hygiene officer is useful or mandatory. CIVAC is a compliance platform and officer-as-a-service for German companies and provides the templates that turn hygiene requirements into a verifiable operation in care, catering, production and offices.

Three sources shape everyday life. Section 3a ArbStättV obliges the employer to set up and operate workplaces in such a way that risks are avoided. Appendix 4.1 ArbStättV specifies sanitary rooms, washing and shower facilities, toilets and changing rooms. The BioStoffV regulates the handling of biological agents and classifies them into four protection levels, from harmless to highly pathogenic. § 8 BioStoffV requires a risk assessment before every activity, § 14 requires instruction at least annually.

The IfSG adds two central obligations. Section 42 IfSG prohibits certain people with infectious diseases from working in food areas. Section 43 requires instruction from the health department before the first activity and repeated internally every two years. Violations are administrative offenses according to Section 73 IfSG with fines of up to 25,000 euros, and significantly more if repeated.

Industry-specific rules exacerbate the picture. The KRINKO recommendations and TRBA 250 apply in care and clinics. In food production, the HACCP requirement from EU Regulation 852/2004 supplements hygiene management. Anyone who appoints a hygiene representative bundles these sources in one hand and secures the reporting line to the management.

The hygiene plan is the backbone of every hygiene company. It answers six questions: What is being cleaned or disinfected? With what? How? When and how often? Who is responsible? How is enforcement documented? The answers must be in writing, checked regularly and accessible to all employees. § 14 BioStoffV explicitly requires this documentation, in combination with the risk assessment according to § 8.

In clinics and care facilities, the hygiene plan is also required according to § 36 IfSG and can be verified by the health authority. In food production, EU Regulation 852/2004 requires a HACCP-based hygiene concept with critical control points. In the office environment, a lean plan that addresses sanitary areas, break and tea kitchens, first aid materials and ventilation is sufficient.

Regulatory authorities always find typical weak points in the same places. Firstly, missing or outdated cleaning product lists without current safety data sheets. Secondly, undocumented training for external cleaners. Thirdly, a lack of representation regulations as soon as the person responsible is on vacation. The appointment certificate, signed, filed, verifiable. The CIVAC audit templates for hygiene inspections guide you through the inspection and document findings, measures and follow-ups in one run.

§ 8 BioStoffV requires a written risk assessment before any activity with biological agents. It identifies substances, assigns them to protection levels 1 to 4, evaluates exposure routes and defines protective measures. TRBA 400 specifies the structure, TRBA 250 the measures in the healthcare system, TRBA 500 the general minimum requirements.

Protection level 1 includes microorganisms that are unlikely to cause illness. Level 2 includes pathogens that can cause illness without serious risk to the public. Level 3 refers to severe diseases with treatment options, level 4 to highly pathogenic diseases without effective therapy. The structural, technical and organisational requirements increase with each stage, from standard hygiene to full encapsulation.

In practice, the assessment is more than just a form. It interlinks rooms, activities, personal protective equipment, emergency measures, occupational health care according to ArbMedVV and instruction. Anyone who involves the company doctor early on avoids double assessments and completes the preventative care obligation in the same course. The assessment must be reviewed at least annually, and immediately in the event of significant changes.

Hygiene fails in practice not because of the plan, but because of the training. Section 14 BioStoffV requires workplace-related instruction before starting work and at least annually. Section 12 ArbSchG extends this obligation to all risks. In food establishments, Section 43 IfSG applies: initial instruction by the health department, documented internal repetition every two years, new instruction after a break in activity.

Documentation is the most common point of complaint. For each instruction, supervisory authorities require: date, topics, duration, participant signature, instructor, materials handed out. Excel lists without signatures are considered insufficient. Collective signatures without individual confirmation are regularly not recognised in disputes.

A training register that automatically controls obligations, intervals and resubmissions is of practical help. Others run compliance like a filing cabinet. We run it like software. The CIVAC workspace bundles hygiene instructions, BioStoffV instructions, ArbSchG compulsory training and cleaning staff briefings in one overview, with reminders before the deadline and an audit-proof storage of the confirmations. During the audit, the auditor retrieves training status and documents, the evidence is ready.

Appendix 4.1 ArbStättV provides a clear framework for sanitary rooms. Toilets separated by gender for groups of ten or more employees, washing areas with running water, suitable cleaning and skin protection products, lockers for work and private clothing. If the activity is dirty or it is hot, showers are a must. The ASR A4.1 specifies the number, dimensions and equipment.

Ventilation is regulated by the ASR A3.6. Minimum room volumes, outside air rates and CO2 values ​​are specified, as are the maintenance obligations for air conditioning systems. According to VDI 6022, air conditioning systems must be hygienically tested regularly, usually every two to three years, and in sensitive areas annually. Documented test protocols are a mandatory part of the supervisory control.

Drinking water follows the Drinking Water Ordinance. According to Annex 4 Drinking Water Ordinance, large systems for heating drinking water must be inspected annually for legionella, particularly closely in schools and care facilities. Exceeding findings trigger an obligation to report to the health department. Anyone who takes hygiene in the workplace seriously will interlink these three areas in the hygiene plan and use a uniform inspection calendar that manages sanitation, ventilation and water in parallel.

It has been clear since 2020 that every hygiene system needs a pandemic path. Section 5 IfSG authorizes epidemic situations, the SARS-CoV-2 ArbSchVO has set specific obligations between 2021 and 2023, and even without current special standards, Section 3 ArbSchG remains in effect: the employer must take safety and health measures as soon as a risk is identified.

Operationally, this includes a concept for suspected cases: symptom triage, testing and exemption rules, cleaning of contaminated areas Areas, communication to employees and customers, reporting channels to the health department. In the case of illnesses that must be reported in accordance with Sections 6 and 7 IfSG, the report is sent via the doctor, and the company reaction runs alongside it. Deadline expires as soon as we become aware of it.

Stricter outbreak concepts in accordance with Section 23 IfSG are being added for clinics, care, schools and daycare centres, with hygienic standards from the RKI and KRINKO recommendations. In the audit, the health department checks three points: existence of the concept, timeliness, test run. The CIVAC workspace maintains the pandemic path, outbreak concept and reporting paths in a structure with the GDPR data breaches so that those responsible have a consistent reporting logic.

In clinics and care facilities, the hygiene officer is actually required by state hygiene regulations and Section 23 IfSG. In food establishments, EU Regulation 852/2004 requires a person responsible for the HACCP concept. Outside of these mandatory sectors, the appointment is voluntary, but if the number of employees increases, for special activities or for past complaints, it is a properly documented response to Section 130 OWiG.

The hygiene officer creates and maintains the hygiene plan, conducts inspections, trains staff, coordinates external service providers, reports to management and is the contact person for the health department and the professional association. The order is made in writing with a description of the task, reporting route and scope of exemption. The appointment certificate, signed, filed, verifiable.

External ordering via CIVAC reduces training time and includes expertise testing, insurance and representation. If there are several locations, a central mandate can be combined with local contacts. In the hygiene officer mandate, hygiene plan templates, BioStoffV assessments, training registers and audit calendars are preconfigured in the workspace.

Oversight of hygiene in the workplace is shared by the health department, trade inspectorate and professional association. Inspections are routine in nursing, clinics and food establishments, and are event-related in industry and offices. The hygiene plan, instructions, cleaning documentation, sanitary areas, air conditioning maintenance, drinking water findings and personal protective equipment are checked.

Fines arise from several legal sources. § 73 IfSG up to 25,000 euros, or more in the event of a repeat offense. § 22 ArbSchG up to 25,000 euros, § 25 OWiG depending on the individual regulation. § 17 BioStoffV up to 50,000 euros. Section 130 OWiG activates the personal liability of the management in the event of a breach of supervisory duty, personally up to 1 million euros.

Insurers check the hygiene organisation in the event of damage. If there is no plan, there is no insurance coverage. A hygiene incident in a care facility with hospital germ transmission quickly leads to six-figure claims for damages, with headlines in the local press and long-term damage to the trust of relatives. The auditor calls, the evidence is ready. Anyone who uses hygiene as a platform has the advantage of speed in the audit.

Hygiene in the workplace rarely fails because of knowledge and mostly because of care. Plans age, staff changes, new cleaning products arrive, rooms are remodeled. Anyone who lists hygiene as an annual mandatory document will lose connection to their own company. Anyone who maintains it as an ongoing process does not have to prepare anything during the audit, only to retrieve it.

CIVAC is a compliance platform and officer-as-a-service. The workspace brings together a hygiene plan, risk assessments according to BioStoffV, training register, inspection protocols, air conditioning and drinking water tests, pandemic path and reporting line to management. 25 representative roles are live, 490 audit templates ready for use, EU data residency standard. Licence the workspace for your internal representatives, or have our representatives order it.

Turn reading into a mandate. Write to info@civac.de or use the contact form on civac.de. Within two working days you will receive a draft mandate or a licence proposal tailored to the industry, locations and existing structures. The classic consulting market needs two to six weeks for this.