Hygiene in the catering industry: What the health department will really check in 2026

In Germany, hygiene controls in the catering industry are the responsibility of the responsible food control and health authorities and are based on a dense set of regulations: the EU Regulation 852/2004 on food hygiene, the national food hygiene regulation (LMHV), the Infection Protection Act (IfSG) and DIN 10514 for hygiene training. Inspectors usually appear unannounced, document within 30 to 90 minutes and, based on visible findings, decide whether follow-up inspections, conditions or, in the event of a repeat event, an operating ban in accordance with Section 39 LFGB follow. The hygiene traffic light introduced or planned in some federal states further increases the visibility of the results because evaluations are publicly displayed or published online.

This article explains what exactly the health authority sees in a restaurant, bar or catering business and does not see, which documents must be available in which form, how a HACCP concept is structured and where the most common complaints occur. It describes the role of the hygiene officer, the interface to the company doctor and the requirements for pest monitoring, cleaning plans and supplier control. CIVAC is a compliance platform and officer-as-a-service. Licence the workspace for your internal representatives, or have our representatives order it. The templates for HACCP test points, cleaning plans and IfSG instruction protocols are available in both models and are documented in such a way that every test ends without a search.

EU Regulation 852/2004 forms the overarching framework for food hygiene in all member states. It obliges every food business operator to set up, document and maintain a procedure based on the HACCP principles. Art. 4 requires general hygiene requirements, Art. 5 the HACCP system, Annex II specifies structural, technical and personnel hygiene. The LMHV implements these requirements into German law and adds obligations regarding personnel hygiene, training and self-monitoring. Finally, the LFGB contains the fine and penalty regulations and authorizes the monitoring authorities to take measures up to and including an operating ban according to Section 39.

The Infection Protection Act applies in parallel. Section 42 IfSG contains activity and employment bans for people who come into contact with perishable food and who suffer from certain illnesses. Section 43 requires initial instruction from the health authority before starting work and then follow-up instruction from the employer every two years. Anyone who looks at these three sets of rules individually overlooks the interfaces: a lost IfSG instruction protocol becomes a defect in the HACCP test, an outdated cleaning plan becomes an LMHV violation. CIVAC maps the interlocking of obligations in the platform and ensures that an update identifies the dependent documents in one place. The Hygiene Officer does not work against three isolated files, but against a consolidated data set that meets each of these sets of rules. In addition, there is the Animal LMHV for businesses with food of animal origin, which contains additional labelling and storage requirements. The Drinking Water Ordinance also affects gastronomy as soon as ice, hot drinks or kettles are used, which is often overlooked. In companies with an event or catering function, the restaurant law of the respective federal state also applies, which contains location-specific regulations on staff sanitation, ventilation and storage space and is assessed in conjunction with the building regulations.

HACCP stands for Hazard Analysis and Critical Control Points. The seven principles from the Codex Alimentarius and Art. 5 Regulation 852/2004 are: hazard analysis, determination of critical control points (CCP), establishment of limit values, monitoring procedures, corrective measures, verification procedures and documentation. In gastronomic practice, this means specifically: What dangers arise when goods are received, stored, prepared, cooked, kept warm and served; at which points is a check mandatory, such as core temperature for poultry or cold chain temperature below 7 degrees for perishable goods; which values ​​are adhered to; who checks, how often and how are the findings recorded.

Inspectors ask specifically about the written HACCP concept. It must at least be available in a version that corresponds to the operational reality, i.e. current systems, current menu, current suppliers. A HACCP concept that refers to a deep fryer sold two years ago is considered not to have been maintained. Corrections must be documented with the date, person responsible and reason. There are 490 audit templates available in the CIVAC workspace, including HACCP test points for cold and hot kitchens, bars and catering. The templates are adapted to the company in the mandate and versioned in an audit log. The auditor calls, the evidence is ready. Anyone who treats the HACCP concept as a PDF that has been created once will fail the first serious test; Anyone who keeps it as a living document is also convincing during key inspections lasting several days. Annual verification is standard, as is an update whenever there are significant changes to the menu, supplier structure or cuisine. Specific reasons include a new convection machine, an additional location or the start of catering orders with delivery. Personnel changes that lead to a change in responsibilities are also a reason for a concept update.

§ 43 IfSG requires that people who handle food in accordance with § 42 IfSG receive instructions from the health department before starting the activity for the first time and then submit a written declaration. This initial instruction is a prerequisite for employment; An employee without a valid certificate is not allowed to work with unpackaged food. The employer must have documented this initial instruction, in the original or as a digital copy, and be able to present it at every inspection. The certificate from the health authority must not be older than three months at the time of employment.

The subsequent instructions are given by the employer himself and must be repeated at least every two years in accordance with Section 43 Paragraph 4 IfSG. It must cover the illnesses mentioned in Section 42, the employees' obligations to report and cooperate and the hygiene requirements. A list of participants with date, signature and topics is mandatory; Without proof of participation, the subsequent instructions are deemed not to have been given. CIVAC provides a logged format for follow-up instructions that documents the list of topics, participants, date and signature and combines it in the workspace with a reminder function for the next appointment. The appointment certificate, signed, filed, verifiable. What applies to the hygiene officer applies analogously to every instruction: What is not recorded did not take place in the inspector's eyes, and memories do not replace a document. In addition, the instruction must be carried out in a language that all participants understand; For multilingual workforces, a written translation of the duties is part of the documentation. Seasonal workers and temporary workers are expressly included, which is often overlooked in practice. Interns and kitchen assistants are also subject to this obligation as soon as they touch unpackaged food. The retention period for the instruction protocols is three years after the end of the employment relationship; After that, the GDPR deletion obligation applies.

Inspectors usually work with a standardised test catalogue. In Bavaria, Baden-Wuerttemberg and North Rhine-Westphalia, the catalogues have the same focus: personal hygiene and clothing, cleanliness of work surfaces, separation of raw and cooked products, storage and cold chain, labelling of food and allergens, pest monitoring, HACCP documents, IfSG instructions, cleaning and disinfection plan. The inspection begins with a visual tour, followed by spot checks in cold rooms and storage locations and ends with a document review. Any abnormalities are recorded in the inspection report and handed over to the operator against signature.

Frequent complaints include: non-functional thermometers in refrigerators, unlabeled storage containers, missing best-before information on self-produced sauces, unclear separation of allergens and outdated or unfilled cleaning lists. Pest bait without a maintenance record is also regularly complained about. CIVAC provides an examination self-check in the workspace, which presents these points to the hygiene officer as a recurring task and records the completion status with date. Anyone who completes this self-check every month will have a complete picture in the event of an examination and can accompany each finding with a correction report. The hygiene traffic light or its regional equivalents increasingly also assess the reaction to previously identified deficiencies; A well-maintained correction log has a direct impact on the public rating. Inspectors usually document the findings with photos and a structured test report, which the operator countersigns. This report is the basis for all further official steps and should be digitized and stored in the workspace immediately after the inspection so that deadlines and requirements are not lost. A copy to the management is standard because responsibility according to the LFGB does not end with the hygiene officer. Anyone who objects to the test report or would like to lodge an objection has deadlines for doing so, which begin with the date it is handed out; These deadlines are set automatically in the workspace.

The appointment of a hygiene representative is not legally required in every federal state in the catering industry, but is strongly recommended in companies with their own production kitchen, catering or communal catering. In hospital catering and nursing facilities, DIN 10514 also applies, and in some federal states the minimum building regulations apply. The hygiene officer is responsible for maintaining the HACCP concept, carrying out follow-up instructions, updating cleaning plans and coordinating with pest control, suppliers and the company doctor. He is the contact person for official inspections and documents corrective measures according to findings.

The appointment is made in writing with a task profile and reporting path to management. In companies with several locations, it is recommended to have central control with local representatives for each location so that HACCP standards apply uniformly but site specifics are documented. CIVAC provides the hygiene officer as an external order within two working days or licences the workspace for an internal hygiene officer. Licence the workspace for your internal representatives, or have our representatives order it. The task list, reporting line and documentation structure are identical in both models, which allows later internalization or externalization without a break in file management. This is particularly relevant for chains and franchise systems in which employees rotate and location management changes. The hygiene officer works closely with the company doctor because Section 42 IfSG links occupational medical assessments with employment bans. Further professional training for the hygiene officer in the areas of microbiology, cleaning chemistry and allergen management is part of the minimum standard, as is an annual refresher course. Anyone who fills the position on a purely nominal basis, without training and without a time budget, risks being accused of fictitious appointment in the next inspection. Auditors ask about hourly allocations and the last documented advisory or corrective measures in order to evaluate the actual performance of functions.

Three subject areas dominate the complaints in the catering industry: pest monitoring, cleaning and temperature control. Pest monitoring requires regular inspections, documented baiting plans, findings reports from the service provider and corrective measures in the event of an infestation. Anyone who has implemented an IPM concept (Integrated Pest Management) has a clear advantage; DIN EN 16636 describes the minimum standard for professional pest control. Inspectors will not accept handwritten notes without a date or service provider stamp.

Cleaning and disinfection plans must specify frequency, means, concentration, exposure time and responsible person for each area of ​​the kitchen and guest rooms. In practice, a list on the wall is not enough; Auditors want to see proof that the list has been processed. Receipts with initials and date are standard, digital receipts via tablets and QR codes are becoming increasingly common. Temperature controls include refrigeration rooms (below 7 degrees for perishable goods, below minus 18 degrees for frozen goods), keeping warm above 65 degrees and cooking poultry to at least 70 degrees internal temperature for 10 minutes. CIVAC integrates these three fields in a common cockpit that brings together pest reports, cleaning protocols and temperature logs on a daily basis. Others run compliance like a filing cabinet. We run it like software. The connection to IoT sensors for cooling rooms is also planned in the workspace and replaces manual entry where it makes technical sense. In the event of a cold room failure, an alarm is sent to the hygiene officer, documented and completed with a corrective action. The audit trail remains seamless even over night shifts and weekends, something that classic clipboard solutions typically cannot achieve. The results from pest, cleaning and temperature monitoring flow into the HACCP verification protocol and are used in the annual concept review.

Incoming goods is the first critical control point in the HACCP system. Inspectors randomly check delivery notes, best-before dates, proof of refrigerated transport and the separation of raw and ready-to-eat products at the entrance. Supplier lists must be up-to-date and document the suppliers' own checks. For animals of animal origin, EU Regulation 853/2004 also applies with special requirements for identity marking and the cold chain. Anyone who takes on a new supplier without having seen their hygiene certificates risks later an indirect complaint about traceability according to Art. 18 VO 178/2002.

Allergen labelling has been mandatory since the LMIV (VO 1169/2011). The 14 major allergens must be communicated either on the menu, in a separate allergen list or verbally after documented staff training. Inspectors randomly ask employees whether a dish is gluten-free; incorrect information is complained about. CIVAC offers an allergen matrix template in the workspace that assigns foods and allergens in a table and displays a message every time the recipe is changed. The template connects to the service personnel training module and provides training refreshers. The interface to quality management and the company doctor is also planned because allergens and food intolerances are personnel issues and consumer protection issues at the same time. In the event of a crisis, for example after a guest has an allergic reaction, the quality of the allergen matrix held determines the question of liability. The same applies to the traceability of raw materials: Anyone who cannot identify the delivered dishes within hours of a finding in a batch risks a large-scale return campaign and government-ordered consumption warnings. The workspace keeps batch numbers and best-before dates in such a way that such tracing is possible in less than ten minutes. This is also a requirement from VO 178/2002 Art. 18, the violation of which can result in fines of up to five-figure amounts.

The consequences of a contested inspection range from a verbal instruction to an immediate ban on operations. Initial findings usually lead to a written requirement with a deadline. If defects are not remedied, follow-up inspections and fines will follow; Section 60 LFGB provides for fines of up to 100,000 euros; in particularly serious cases (risk to health, multiple repetitions) criminal proceedings are possible in accordance with Section 58 LFGB and business closure in accordance with Section 39 LFGB. In practice, the threshold for closure is reached in the event of an acute health risk, pest problems that have been identified repeatedly or violations of cold chain obligations.

In addition, there is civil liability towards guests who are entitled to compensation after food poisoning, as well as the reputational impact of hygiene traffic light notices, regional authority websites and media reporting. In some federal states, test reports are issued upon request under freedom of information laws or VIG (Consumer Information Act). Anyone who had weak control cannot hide it. The protective effect of an audit-proof HACCP concept is therefore not only in official areas, but also in public areas. CIVAC keeps a correction log in the workspace that links each finding with the person responsible, deadline and proof of completion. The clock starts on awareness. This is the difference between a one-off complaint and an escalation chain. The correction log also has an impact on insurance law: in the event of a claim, business liability insurers check whether hygiene requirements were completed on time and reduce benefits in the event of breaches of obligations. A documented closure loop is therefore not only an official requirement, but also a civil one. Anyone who had defects in the previous audit and submits a complete correction log in the following year will usually be rated significantly better in the evaluation because the effort to eliminate defects is also given positive weight in food law in accordance with Art. 83 GDPR-like considerations.

The catering industry works with tight margins and high staff rotation. Hygiene compliance can only be carried out reliably in this environment if it is operationally integrated into everyday life and is not reactivated as a special project before every inspection. A verifiable stand is created from three building blocks: a current HACCP concept, documented routines for cleaning, pest monitoring and temperature control and a hygiene officer who conducts the instructions in accordance with Section 43 IfSG and takes corrective measures based on findings from controls or self-inspections. CIVAC is a compliance platform and officer-as-a-service. Licence the workspace for your internal representatives, or have our representatives order it.

It's easy to get started. An inventory clarifies which documents are available, how old the HACCP concept is, when the last follow-up instruction was given and whether a pest monitoring contract with documented reports exists. On this basis, a proposal with scope of duties, remuneration and reporting route will be created within two working days. Turn reading into a mandate.: Write to info@civac.de or use the contact form. We clarify the requirements of your federal state, the specifics of your type of business (restaurant, bar, catering, communal catering) and the service level in a 30-minute conversation and then send a draft contract with a transparent list of services. Audit-proof, documented, § 43 IfSG-proof. The next audit becomes routine, not a crisis, and that is the pragmatic value of a compliance platform in an industry that cannot afford a second audit. A clean hygiene file is also an argument that speeds up contract negotiations and audits for insurance auditors, franchisors and lease licensors. Anyone who sublets guest rooms to event organizers or operates a pop-up kitchen on a temporary basis extends the requirements to the subcontractor and requires a contractual clarification of responsibilities, which is included as standard in our template.