Hygiene in the kitchen workplace: duties, HACCP and the auditable hygiene plan

Regulation (EC) No. 852/2004 on food hygiene, the national food hygiene regulation (LMHV) and the Infection Protection Act (IfSG) form the legal core for hygiene in the kitchen workplace. They apply equally to the company canteen, the nursing home, the school cafeteria and star restaurants. Every food business operator is obliged to maintain a documented self-control system in accordance with the principles of HACCP (Hazard Analysis and Critical Control Points), to organise personnel hygiene and to verifiably carry out training courses in accordance with Section 4 LMHV. In the food inspection audit, it is not the appearance of the kitchen that is decisive, but rather the presentation of the hygiene documentation in a verifiable form. Anyone who cannot prove their own control has no defence in the event of a dispute, regardless of how cleanly the kitchen is actually run.

This article is aimed at hygiene officers, kitchen managers, management of catering establishments and those responsible for nursing care, school and company catering. You will find out which legal obligations specifically apply, what evidence is expected for an inspection, what training intervals the LMHV and the IfSG require and how the CIVAC compliance platform and Officer-as-a-Service manages a hygiene plan so that food monitoring receives all evidence within minutes of an unannounced visit. The focus is on the interface between food hygiene, occupational safety and operational responsibility of management according to Section 130 OWiG, a regulation that establishes the personal liability of management in the event of a breach of supervisory duty.

Regulation (EC) No. 852/2004 is the central European framework regulation. It obliges every food business operator to set up, implement and maintain a permanent procedure based on the HACCP principles. Annex II of the regulation regulates general hygiene rules for premises, rooms, equipment, food waste, water supply, staff hygiene and training. The LMHV supplements the regulation with national requirements, in particular the training requirement in Section 4 and the requirements for perishable foods.

The Infection Protection Act applies as soon as people come into contact with food that is intended to be given to others. Section 42 IfSG prohibits activities for certain diseases such as salmonellosis, shigellosis or acute infections with hepatitis A or E. Section 43 IfSG requires instruction from the health department or a doctor commissioned by the health department before starting the activity. The initial instruction must not be older than three months at the start of the activity. Follow-up instructions from the employer are mandatory every two years; the documentation must be kept at the place of employment.

The Hygiene Officer is not a legally required officer in the narrower sense like the data protection officer in companies with professional food processing. However, as the person responsible for implementing HACCP obligations and personnel hygiene, he is actually indispensable. In larger companies, the role is formally ordered and included in the hygiene plan. CIVAC keeps the appointment certificate digitally, with management signature and versioning, and makes it available for every check in seconds. The appointment certificate, signed, filed, verifiable. In hospitals and care facilities, the obligation to order also arises from the state hygiene regulations, which regularly refer to the KRINKO recommendations at the Robert Koch Institute. Anyone who works in communal catering falls under food and hospital hygiene at the same time and needs a clear role assignment.

The seven HACCP principles according to Article 5 of Regulation (EC) 852/2004 are: hazard analysis, determination of critical control points (CCP), determination of limit values, monitoring procedures, corrective measures, verification and documentation. Each of these seven principles must be operational in the kitchen and documented in the hygiene plan. A mere adoption of model HACCP from the Internet can be recognised in the audit and regularly leads to complaints.

In concrete terms, this means: The hazard analysis identifies the microbiological, chemical and physical hazards along the process chain from goods receipt through storage, preparation, cooking and serving to cleaning. The critical control points are usually the incoming goods inspection, the cold chain, the core temperature when heated above 70 degrees Celsius for at least two minutes, keeping the temperature above 65 degrees Celsius and the cleaning of the work surfaces. The limit values ​​result from the DIN standards such as DIN 10508 for temperatures in food hygiene.

In practice, the monitoring procedures are temperature measurements, visual inspections and cleaning plans. The corrective measures are defined in advance, such as what happens if the cold room temperature is exceeded. Verification is carried out through random samples and external audits. The documentation is the real sticking point. In the CIVAC workspace, each kitchen keeps its daily temperature measurements, cleaning protocols and training records in a structured template that cannot be overwritten or subsequently changed. The auditor calls, the evidence is ready. This logic replaces the classic clipboard, which in too many kitchens has individual gaps between entries and only allows guesswork in the audit. According to the LMHV, the self-control documents must be retained for at least one year; in practice, a retention period of three years is recommended for retrospective comparisons.

Personal hygiene is the most common reason for complaints in audits. Annex II Chapter VIII of Regulation (EC) 852/2004 requires every person who works in a food sector to maintain a high level of personal cleanliness and suitable, clean work clothing. Section 43 IfSG prohibits the handling of food in the case of acute gastrointestinal diseases, wounds with purulent secretions and certain pathogens. The instruction in accordance with Section 43 Paragraph 1 IfSG is mandatory before starting work for the first time and must be provided by the responsible health authority or a commissioned doctor.

The annual follow-up instruction by the employer in accordance with Section 43 Paragraph 4 IfSG is a separate obligation and must not be confused with the initial instruction. It must be documented and kept at the place of employment. In practice, this annual instruction is missing in more than half of the companies complained about by food inspection authorities. The hygiene officer keeps an instruction matrix with the date of the first instruction, the date of the last follow-up instruction, the next due date and the signature of the person instructed.

In addition, there is training in accordance with Section 4 LMHV. This is to be distinguished from the Section 43 instructions. It includes the imparting of basic food hygiene knowledge and must be repeated at the start of the activity and at appropriate intervals, in practice at least every twelve months. Combined training is possible if both contents are covered and the documentation is done separately. The CIVAC workspace offers a prepared training template for both duties and automatically delivers the instruction matrix to each employee. An escalation to the hygiene officer takes place 30 days before the expiry of a deadline so that no instructions are accidentally lost. Temporary and seasonal workers are also included, not just permanent staff.

The hygiene plan is the central document for food hygiene in a kitchen. It is not a legally defined obligation in the narrower sense, but results from the documentation obligation of the HACCP principles and the LMHV. Food control expects a written plan that specifies at least the cleaning and disinfection procedures for each area, the means used with a data sheet, the cleaning frequency, the responsible people and the control procedures.

A good hygiene plan is divided into areas: goods receipt, storage, refrigeration, preparation area, cooking area, distribution, rinsing area, sanitary area, garbage area. What, with what, when and who are documented for each area. The cleaning agents are provided with a safety data sheet in accordance with Regulation (EC) No. 1907/2006 (REACH). The cleaning plans are visibly displayed in the kitchen and managed digitally at the same time, so that a change in version does not end up gathering dust in a drawer.

Maintaining the plan is the real challenge. New equipment, new cleaning products, changed suppliers or personnel changes require an update. In the CIVAC workspace, the hygiene plan is linked to the list of cleaning products, the risk assessment according to Section 5 ArbSchG and the instruction matrix. A change to a cleaning agent triggers a resubmission for the associated plan sections. This way, the plan remains current without having to overturn the entire document in an annual revision. In practice, if you revise a hygiene plan once a year, you lose twelve months of topicality. Anyone who cares for it based on events will be picked up at the next unannounced food inspection inspection in two working days, instead of two weeks of hectic research. A well-maintained hygiene plan also shows the effectiveness of self-control and is therefore a central argument against liability allegations against the management according to Section 130 OWiG.

Temperature management is the most common critical control point in any kitchen. Regulation (EC) No. 853/2004 and DIN 10508 specify the permissible temperature ranges. Fresh meat products must be stored at a maximum of 7 degrees Celsius, minced meat at a maximum of 2 degrees Celsius, fishery products at a melting ice temperature (0 to 2 degrees Celsius), frozen foods at a minimum of minus 18 degrees Celsius. A violation of the cold chain cannot be cured; the affected goods must be discarded and the incident documented.

The food served is kept hot at a core temperature of at least 65 degrees Celsius throughout the entire serving period. Heating and reheating require at least 70 degrees Celsius for two minutes in the core zone. These values ​​are measured and recorded daily. A measurement without a protocol is considered not to have taken place in the audit. The hygiene plan names the measuring intervals, the measuring points and the person responsible.

In practice, electronic measurement logging that transfers the values ​​directly to the workspace has proven successful. CIVAC supports the connection of common Bluetooth thermometers as well as manual input for companies without an IoT connection. It is important that the measurement is carried out on the actual food or at the representative point, not on the room air. A room thermometer in a cold store is not a substitute for core temperature measurement. Audit-proof, documented, § 4 LMHV-proof. Anyone who measures and records temperatures seamlessly has the most stable argument in the cold chain and hot storage if a sample turns out to be abnormal in the laboratory. A clearly documented series of measurements shows the authority that the HACCP procedure works, even if an isolated case occurs. Sensor-supported cold room monitoring with automatic escalation when limit values ​​are exceeded is now also affordable for medium-sized kitchens and significantly reduces the risk of an unnoticed cooling failure overnight.

Pest control is mandatory according to Annex II, Chapter IX of Regulation (EC) 852/2004. In practice it is contracted out to specialist companies who provide bait plans, inspection reports and infestation documentation. The hygiene plan integrates these reports into an overview that shows food monitoring the status at a glance. Anyone who commissions a service provider without integrating their reports into their own system will have proof of the contract in the audit, but no current status.

Allergen management follows the Food Information Regulation (EU) No. 1169/2011. Fourteen main allergens must be identified in the menu and labelling. In public catering and catering, an obligation to provide information also applies when it is sold loosely, for example via notices, menus or verbal information with documented training for the service staff. Incorrect or missing allergen labelling can be prosecuted as an administrative offense according to Section 60 LFGB, with significant civil consequences in the event of damage.

In the CIVAC workspace, allergen management is linked directly to the menu. Every recipe carries an allergen label, every supplier provides specifications with allergen information, every change to the recipe triggers a label check. This link prevents a recipe change from taking place in the kitchen while the menu continues to be distributed unchanged. The hygiene officer receives a notification every time the recipe changes, as does the responsible service. A central allergen matrix for all branches of a catering chain is automatically consolidated from the individual recipes. The menu on the pinboard and the digital notice on the checkout monitor access the same data source, closing the typical gap between the notice and the actual recipe. With this architecture, a subsequent allergen finding by an authority following a consumer advice can be traced in minutes.

Hygiene in the kitchen overlaps with occupational safety. The Food and Hospitality Trade Association (BGN) requires a risk assessment in accordance with Section 5 of the Occupational Safety and Health Act, in which, among other things, biological agents are taken into account in accordance with the Biological Substances Ordinance. A salmonella infection of an employee during poultry cutting is a reportable event according to the IfSG and at the same time an accident at work according to SGB VII. Both aspects must be documented in parallel.

The occupational safety specialist works closely with the hygiene officer in kitchens. Issues such as cuts on slicers, burns on combi steamers, slipping accidents on wet floors and lifting heavy containers are classic occupational safety risks that run parallel to food hygiene. A joint risk assessment, a joint inspection protocol and joint instruction save effort and avoid gaps between the disciplines.

The CIVAC workspace combines the roles of hygiene officer, occupational safety specialist and company doctor in a common platform, with separate views depending on the role. The reporting line to management is consolidated so that management does not receive three separate reports, but rather a dashboard with key figures such as the number of open defects, the number of overdue notices, the number of abnormal temperature measurements and the number of reported incidents. Licence the workspace for your internal representatives, or have our representatives order it. The platform remains the same, responsibility lies either with your organisation or with an external representative appointed by CIVAC. This bundling avoids double risk assessments for identical activities and ensures that hygiene and occupational safety obligations do not diverge when an employee changes or starts a new job. A joint annual inspection with the hygiene officer, SiFa and company doctor is kept in the workspace as a protocol with photo attachments and a catalogue of measures and forwarded to the management with status.

Food monitoring controls risk-oriented and unannounced. Section 39 LFGB gives the authorities extensive access and inspection rights. During the inspection, the food inspector checks the structural and hygienic situation of the kitchen, personnel hygiene, the documentation of self-control (HACCP), the training and instruction certificates, the cleaning plans, the pest monitoring, the allergen labelling and the traceability in accordance with Regulation (EC) No. 178/2002.

Systematic preparation significantly reduces the risk. The hygiene officer's appointment certificate is ready to hand, the hygiene plan is up-to-date, the temperature logs from the last twelve months are available digitally, the instruction matrix is ​​up-to-date, the training certificates are sorted by employee, the safety data sheets for the cleaning products are linked. The audit trail in the workspace shows that nothing was added later, but that every entry was created at the actual time.

In the audit, the inspector typically asks: How often was the freezer measured in the last 90 days? What corrective action was taken on March 14 when the refrigeration temperature was above the limit? Who signed the follow-up instruction on June 7th? These answers can be provided within seconds from the workspace. From a clipboard or a drawer, the answer regularly takes days and leads to follow-up tests. Deadline expires as soon as we become aware of it: Anyone who discovers a defect during ongoing operations must immediately take corrective measures and document them; later remediation is not a cure. The traceability of batches and suppliers is also part of every audit and belongs in the system, not in the file folder. A recall exercise at least once a year, in which a real batch is simulated, is an effective test of your own systems and belongs in the management's hygiene audit.

Hygiene in the kitchen workplace is not a one-off task, but rather a continuous operational obligation with considerable documentation requirements. Anyone who takes hygiene obligations seriously as a management or kitchen manager does not need another file folder, but rather a platform that brings together self-control, instructions, training and pest and allergen management. CIVAC offers this platform and the associated role as a compliance platform and officer-as-a-service.

Licence the workspace for your internal representatives, then the hygiene officer, kitchen management and occupational safety specialist will jointly maintain the platform with all 490 audit templates, the instruction matrix and the digital hygiene plan. Or have our representatives appointed, then CIVAC will take over the appointment of the hygiene representative and integrate operational care into the reporting line to your management. Both models use the same platform with EU data residency and ISO/IEC 27001:2022 certification.

Turn reading into a mandate. Anyone who expects food monitoring or a BG audit in the next few months usually no longer has time to do their own research on templates, instruction periods and allergen matrices. Write to info@civac.de or use the contact form on civac.de for an initial consultation. During the conversation, we clarify the status of your current hygiene documentation, identify the two to three most critical gaps and decide together whether the workspace will be combined with your internal managers or whether an appointed external representative will take over ongoing maintenance. A first auditable version of your hygiene plan is created within two working days during regular operations. The ongoing maintenance expenses are reflected in a reporting line to the management, so that responsibility remains visible where it legally sits according to Section 130 OWiG, namely at the top of the company.