77 officer roles, all coveredArt. 33 GDPR, 72 hours to report a breach93 controls under ISO/IEC 27001:2022905 ready-to-run audit templates in the workspace§ 130 OWiG, supervisory duty of the management boardOfficer appointment letter, signed, filed, evidencedOne workspace for tasks, trainings, audits, documentationDIN 14095 fire protection plans, standardisedEU AI Act, the first horizontal AI regulation worldwide77 officer roles, all coveredArt. 33 GDPR, 72 hours to report a breach93 controls under ISO/IEC 27001:2022905 ready-to-run audit templates in the workspace§ 130 OWiG, supervisory duty of the management boardOfficer appointment letter, signed, filed, evidencedOne workspace for tasks, trainings, audits, documentationDIN 14095 fire protection plans, standardisedEU AI Act, the first horizontal AI regulation worldwide
Hygiene in the doctor's office: The reliable checklist for the inspection
Health & Hygiene

Hygiene in the doctor's office: The reliable checklist for the inspection

4 August 202612 min readBy Stefan Möller
CIVAC

The reliable hygiene checklist for private practices, MVZs and day clinics: 9 areas, reference to paragraphs, clear responsibilities and a procedure that will survive the next inspection by the health department without any complaints.

According to Section 23 Paragraph 5 IfSG, Section 8 MPBetreibV and the KRINKO recommendations of the Robert Koch Institute, medical practices, MVZs and day clinics must maintain a written hygiene plan, update it regularly and be able to present it as part of infection hygiene monitoring by the responsible health authority. The obligation has been established for years, but the requirements have become much more specific in the last ten years. Anyone who relies on an outdated checklist from the practice folder will experience the inspection as an unpleasant surprise with a written follow-up procedure. Anyone who relies on a structured, verifiable checklist that is based on the current RKI recommendations will experience it as a formal check-off in four to six hours, without any follow-up correspondence.

This article provides a reliable hygiene checklist for private practices, MVZs and day clinics, arranged according to nine test areas. Each area contains the relevant paragraph or the KRINKO-RKI-BfArM recommendation, the typical complaints from inspection practice in 2024 and 2025 as well as a clear procedure for correction. You will find out which tasks the hygiene officer takes on, which documents must be on the table when inspecting the health department and how CIVAC, as a compliance platform and officer-as-a-service, noticeably reduces the effort without shifting the specialist medical responsibility of the practice management. The checklist can be transferred across the industry to dentists and practice clinics with adjustments.

Key Takeaways

  • The hygiene plan is not a document, but a structured collection of cleaning, disinfection, preparation and training plans with clear responsibilities.
  • The processing of medical devices in accordance with Section 8 MPBetreibV in conjunction with the KRINKO-RKI-BfArM recommendation 2012 is the most common point of complaint during inspections.
  • An effectively appointed hygiene officer with documented further training saves the practice the risk of personal administrative offenses in accordance with Section 73 IfSG.

Legal basis: What a practice must prove

The hygiene requirements in the doctor's practice are based on four pillars, which together define the duties of the practice management. Firstly, the Infection Protection Act (IfSG), in particular Section 23 Paragraph 5 IfSG, which establishes the obligation to have a hygiene plan and regulates infection hygiene monitoring by the health department. Secondly, the Medical Device Operator Ordinance (MPBetreibV), in particular Section 8 on the reprocessing of medical devices and Section 11 on user tasks with documented instruction. Thirdly, the KRINKO recommendations from the Robert Koch Institute, which are scientifically proven and are considered a binding standard in practice, although they are formally recommendations and a deviation is only possible with documented reasons. Fourthly, the state hygiene regulations (e.g. MedHygV NRW, HygVO Bayern), which impose additional requirements on training frequency, personnel qualifications and documentation, vary in severity from region to region.

These four pillars result in the obligation to have a written hygiene plan, documented reprocessing of medical devices, regular training of staff (at least annually, documented), an expert appointment for reprocessing and a named hygiene officer in the practice. The order must be made in writing and the person must provide evidence of appropriate further training in accordance with the curriculum of the German Medical Association (40 hours, annual refresher of 8 hours). CIVAC provides a ready-made appointment certificate in the workspace for this order and alternatively offers an external hygiene officer as an officer-as-a-service, with documented further training and availability for the inspection. The appointment certificate, signed, filed, verifiable. The order is integrated into the practice QM and linked to the training plan. When ordering via CIVAC, the practice also receives a written task and report definition, which can be included in the next practice report and in the internal audit without any further adjustment.

The hygiene plan: structure and mandatory content

The hygiene plan is not a single document, but a structured collection of several partial plans. Mandatory content is: Responsibilities and appointment of the hygiene officer, cleaning and disinfection plan for surfaces (frequency, means, concentration, exposure time), skin disinfection and hand hygiene according to the five WHO indications, processing of medical devices according to risk classes (non-critical, semi-critical A/B, critical A/B/C), laundry and waste (especially AS 18 01 03 for infectious waste), handling of multi-resistant pathogens (MRSA, VRE, MRGN), suspected tuberculosis cases and reporting obligation according to § 6 IfSG, vaccination documentation of the staff according to § 23a IfSG, employee training plans with evidence, procedures for needle stick injuries according to the Biological Substances Ordinance and procedures for outbreaks with a documented reporting chain.

Each plan contains three elements: What is done, who does it, when and how it is documented. General formulations such as daily or regularly are not enough. KRINKO recommends specific frequencies, such as wiping disinfection of surfaces close to patients after each patient, sanitary areas at least twice a day, and floor disinfection in non-critical areas at least daily. These frequencies must be documented in the plan and verified by proof of cleaning (signature, date, time). Anyone who licences the CIVAC workspace receives the hygiene plan as a modular template with 37 prepared audit modules that can be adapted to the size of the practice. Licence the workspace for your internal representatives or have our representatives appointed; in both cases, a hygiene plan suitable for use will be created in less than two weeks, with interfaces to QM and personnel files. The hygiene plan must also be linked to emergency management (fire, power outage, cyber outage, hygiene outbreak) so that the interfaces between the plans do not diverge if a real incident affects multiple areas.

Hand hygiene and personal protective equipment

Hand hygiene is the most important individual measure for infection prevention and at the same time the most common weak point in the inspection. KRINKO and the WHO require five indications for hand disinfection: before patient contact, before aseptic activity, after contact with potentially infectious material, after patient contact and after contact with the immediate patient environment. Rubbed volume at least 3 ml, exposure time at least 30 seconds, complete wetting of all palms including thumbs, fingertips and nail folds. Jewelry and watches on the hands and forearms are not permitted, as are artificial or painted fingernails. Skin protection and skin care plans according to TRGS 401 are mandatory and must be posted at the washing area, with product names and frequency of use.

Personal protective equipment includes disposable gloves according to EN 455, protective gowns, mouth and nose protection and, in the case of airborne pathogens, FFP2 or FFP3 masks. The tightness test for FFP masks (fit test) must be carried out in a documented manner in accordance with TRBA 250, usually annually per employee and mask model. Complaints typically arise in three areas: lack of evidence of training on PPE use, unchecked expiry dates on disinfectant dispensers and undocumented maintenance of the dispensers. The CIVAC Workspace offers a maintenance protocol with automatic reminders 30, 14 and 3 days before due dates, so that no expiration dates are passed unnoticed. The CIVAC FAQ explains the most common complaints from 2024 and 2025 based on anonymized incidents from several federal states. The auditor calls, the evidence is ready. In addition, the workspace contains a checklist for the annual self-audit, which the practice management can carry out themselves or have it accompanied by the external hygiene officer, with a documented report to the management. An additional risk register records near-incidents that do not require reporting but indicate process weaknesses and serves as the basis for the annual risk assessment in accordance with the Biological Substances Ordinance.

Surface cleaning and disinfection: frequencies and means

According to KRINKO, areas are divided into three risk categories: non-critical (floor, walls, distant surfaces), semi-critical (door handles, light switches, furniture close to the patient) and critical (examination tables, lamps, device surfaces in contact with mucous membranes). For each category, the method (wiping disinfection with a defined agent, no spray mist without reliable justification) and the frequency (after each patient, several times a day, at least daily) must be specified in the hygiene plan. Only listed agents according to VAH or RKI, with a proven spectrum of action against the relevant pathogens (limited virucidal, virucidal, sporocidal depending on the area of ​​use) may be used. The applicable areas of action are listed on the product data sheet, and the inspection checks the comparison against the use documented in the hygiene plan.

Concentration and exposure time must be adhered to exactly. A 1 percent solution with 5 minutes exposure time cannot be replaced by a 0.5 percent solution with 10 minutes because the manufacturer's information is binding and effectiveness has only been proven in the validated combination. Prepared dosing aids and labelled spray bottles with the date they were opened (maximum 24 hours of use, unless the manufacturer states otherwise) are mandatory. The most common complaints: unmarked spray bottles, expired dosage tablets, lack of wipe rotation, use of unlisted consumer products from the drugstore. If you maintain a structured overview of funds in the CIVAC workspace, you can avoid these points and can provide electronic proof of the data sheet every time you change funds. Others run compliance like a filing cabinet. We run it like software., with versioning and an audit trail. We also recommend a quarterly sample of three randomly selected spray bottles and three randomly selected wipes in order to check the actual implementation of the documented concentration in ongoing practice operations. The results of these random checks belong in the risk assessment and in the training plan because deviations are often not due to incorrect means, but rather to incorrect use by the staff.

Processing of medical devices according to MPBetreibV

According to Section 8 MPBetreibV and the joint KRINKO/BfArM recommendation from 2012, the reprocessing of medical devices is the most testing-intensive field of practice hygiene. Risk classification is carried out in stages: non-critical (no mucous membrane contact), semi-critical A (mucous membrane contact without critical material, such as specula), semi-critical B (with critical material, such as flexible endoscopes without lumen), critical A (injury to intact skin, such as standard surgical instruments), critical B (complex preparation, such as hollow instruments), critical C (particularly high requirements, such as flexible endoscopes with lumens). Validated reprocessing procedures are required for each stage: mechanical cleaning and disinfection (RDG) with validation every 12 months, sterilization in a small autoclave with validation every 12 months, documented batch control with Bowie-Dick test and Helix test, documented routine controls per batch.

Reprocessing may only be carried out by persons with expertise in accordance with the KRINKO recommendation 2012. The expertise includes 40 hours of theory plus documented practical training in a preparatory unit. The experts must be appointed in writing; the order belongs in the hygiene plan and in the personnel file. Complaints typically arise from a lack of validation protocols, undocumented routine controls, expired sterile packaging (usually six months from sterilization, provided the packaging is intact and stored properly), a lack of traceability from batch to patient and undocumented functional tests of the RDG. Anyone who orders an external hygiene representative via CIVAC will receive the processing protocols from the workspace and an SLA of two working days for the order itself, instead of the industry standard two to six weeks. Audit-proof, documented, § 8 MPBetreibV-proof. The validation reports of the RDG and the small autoclave are stored electronically in the workspace with proof of the routine checks and can be accessed with two clicks during the inspection instead of having to search in the filing cabinet.

Personnel: training, vaccination and aptitude testing

According to Section 23a IfSG, the practice staff is obliged to provide proof of their vaccination status against measles. In addition, STIKO recommends further vaccinations for medical staff (hepatitis B, seasonal influenza, pertussis, varicella, COVID-19 according to current recommendations). According to the Biological Substances Ordinance and the ArbMedVV, the employer is obliged to offer or arrange occupational health care. The G42 examination (activities with a risk of infection) is mandatory precautionary measures for defined activities and must be carried out before starting the activity, with repetition at documented intervals depending on the risk assessment. The examination and consultation must be documented by the company doctor; the findings are subject to medical confidentiality and are not passed on to the employer.

Staff training is mandatory at least annually, documented with date, content, speaker and list of participants with signatures. Topics: Hand hygiene, surface cleaning, preparation, MRE handling, needle stick injuries with emergency protocol and post-exposure prophylaxis, data protection according to Art. 32 GDPR in everyday practice, fire protection according to company fire protection regulations. The hygiene officer may carry out the training himself, provided that the expertise is proven and the content is up-to-date. CIVAC offers ready-made training modules in the workspace with learning controls so that the documentation is generated automatically and the personnel file remains clean. Licence the workspace for your internal representatives or have our representatives order it; the training certificate is created in both models with the same format and the same audit depth for each of the 25 representative roles. Anyone who runs a multi-location practice or a chain of practices particularly benefits from the fact that the training materials are maintained centrally and displayed identically at each location, with a location-specific list of participants for each appointment. The evaluation of the learning controls provides the hygiene officer with information about which topics should be retrained and makes the training plan adaptable to the actual level of knowledge.

Waste, laundry and multi-resistant pathogens

Practice waste is divided into categories according to LAGA Notice 18. AS 18 01 04 (non-infectious waste such as wound dressings, syringes without risk of punctures) should be disposed of with normal residual waste, provided there is no risk of injury and there is no contamination with body fluids. AS 18 01 01 (pointed and sharp objects such as cannulas, scalpels, lancets) are collected in puncture-proof and break-proof containers and disposed of as hazardous waste; the containers are closed and disposed of when three-quarters full. AS 18 01 03 (infectious waste, for example from patients with highly contagious pathogens) is waste that requires special monitoring and should only be disposed of via certified waste disposal companies. The handover must be documented with accompanying notes, which must be kept for five years.

Laundry from the patient area is generally treated as contaminated laundry and washed disinfectant, either internally at at least 60 degrees with listed detergent or externally by certified laundries according to RAL-GZ 992. If the presence of multi-resistant pathogens (MRSA, VRE, MRGN, tuberculosis) is proven or reasonably suspected, stricter hygiene measures apply the respective KRINKO recommendations: spatial separation as far as possible, protective gown and gloves when in contact with patients, separate care utensils, separate laundry and waste disposal, reporting to the health department in accordance with Section 6 IfSG in the event of notifiable illnesses. Deadline begins as soon as we become aware of it. The CIVAC workspace contains the reporting templates for each federal state, with current fax numbers and online portals for the responsible health authorities. Audit-proof, documented, § 6 IfSG-proof. An overview of the diseases that must be reported by name with the current status for 2026 is included in the workspace and will be automatically updated as soon as the Robert Koch Institute expands or restricts the catalogue.

The health department inspection: How to prepare

Infection hygiene monitoring in accordance with Section 23 Paragraph 6 IfSG is usually announced with a lead time of two to four weeks, in exceptional cases unannounced following reports from patients or staff. It is carried out by the health department, often in combination with an inspection in accordance with medical device law by the responsible district government or the state health department. The inspection appointment begins with a discussion about the practice structure, followed by a review of the documentation and a tour of all rooms with a special look at the preparation area, sanitary area and storage areas. The central documentation includes: hygiene plan, cleaning and disinfection plans, processing protocols including validations, proof of training from the last three years, appointment certificate from the hygiene officer, vaccination documentation and occupational health care for the staff, risk assessment according to the Biological Substances Ordinance, proof of disposal with accompanying notes.

The most common complaints from 2024 and 2025: incomplete processing validation, missing certificates of expertise, expired ones Sterile packaging, incorrect dosage of agents, incomplete training documentation, missing or outdated appointment of the hygiene officer and inadequate risk assessment according to the Biological Substances Ordinance. Anyone who prepares an inspection with a structured workspace has all documents in an audit-proof storage, versioned, with a time stamp and responsibility for each entry. CIVAC provides a test run during which an external hygiene officer inspects the practice and gives specific correction instructions, usually within two weeks before the official date. Others run compliance like a filing cabinet. We run it like software., with a reporting function to the practice management. Following the inspection, we document the process, the inspector's inquiries and the commitments made so that follow-up correspondence can be dealt with properly within the set deadline, usually without another on-site appointment.

From reading to ordering: managing hygiene in a structured manner

Reliable hygiene compliance does not consist of an Excel list, but of a structured file, a trained person and a documented SLA. CIVAC offers both ways in a single platform. First, the licensed workspace: You keep the internal hygiene officer, but use the 490 prepared audit templates, the training modules, the automatic reminder of expiry dates and the structured storage with versioning. Secondly, Officer-as-a-Service: CIVAC provides an external hygiene officer with proven advanced training who takes over the appointment, is regularly on site, accompanies the inspection and keeps the documentation. Licence the workspace for your internal representatives or have our representatives appointed, in both cases the next inspection date can be planned and prepared in writing.

If your next inspection is scheduled in the next six months or if the last one ended with complaints, write to us briefly about what was complained about and how your current hygiene organisation is structured. We will respond within one working day with an assessment and a suggestion that prioritises the open points according to effort and risk. Turn reading into a mandate.: info@civac.de or via the contact form on civac.de. You will receive a technical answer, not a sales presentation, and the hygiene representative will be appointed, if necessary, within the SLA of two working days with a prepared appointment certificate and catalogue of tasks. The auditor calls, the evidence is ready. If you also want to use an ISO/IEC 27001:2022-compliant workspace, the hygiene documentation can be integrated into the same EU data residence in which the patient data is processed anyway, without any further contract adjustment.

FAQ

Who must be appointed as a hygiene representative in the doctor's office?

Every established doctor's practice, every MVZ and every day clinic needs a hygiene representative appointed in writing. The person must provide evidence of further training in accordance with the German Medical Association curriculum (40 hours) plus an annual refresher course. The order is made in writing by the practice management. A sample is available in the CIVAC workspace and can be used within two working days, with a catalogue of tasks and a reporting line to the practice management as well as documentation in the personnel file.

How often does the hygiene plan need to be updated?

The hygiene plan must be checked at least annually to ensure that it is up to date and adapted to any relevant changes (new devices, new KRINKO recommendations, new pathogens, new agents). The update must be documented with the date, reason and responsibility. During an inspection, the latest update is checked. A version that has remained unchanged for more than 18 months regularly leads to complaints from the health department, with subsequent written requests for an update.

What sterile goods storage periods apply in the doctor's office?

Sterile goods packed in transparent sterilization packaging can usually be stored for six months, provided that the packaging is intact and the storage is dry, protected from dust and without temperature fluctuations. The batch must be marked with the sterilization date and expiry date. If the manufacturer's instructions differ, the shorter period applies. Double-packaged sterile goods often have a longer shelf life, provided the storage conditions are documented and adhered to.

What exactly is checked during an inspection by the health department?

The health department checks the hygiene plan, the processing documentation including validations, the training certificates from the last three years, the appointment certificate of the hygiene officer, the vaccination documentation of the staff and the premises in a tour with a focus on the processing area and sanitary area. Frequent complaints concern preparation, training documentation and resource labelling. A structured workspace filing significantly reduces the inspection time and avoids written follow-up procedures with follow-up inspections.

What fines are there for violations of hygiene regulations?

Violations of Section 23 IfSG can be punished according to Section 73 IfSG with fines of up to 25,000 euros per violation; in serious cases, legal consequences may follow. Violations of the MPBetreibV can also be subject to fines in accordance with Section 13 MPBetreibV. Personal responsibility lies with the practice owner; an effective appointment of the hygiene officer shifts the operational responsibility to the named person in a documented manner.

Can CIVAC appoint an external hygiene representative for my practice?

Yes. As a compliance platform and officer-as-a-service, CIVAC offers an external hygiene officer with documented further training according to the curriculum of the German Medical Association. The order is placed with an SLA of two working days, with an appointment certificate, catalogue of tasks, training plan and on-site supervision. Alternatively, you can licence the workspace for your internal hygiene officer and keep the function in practice, with identical audit depth and the same 37 templates.

No obligation

Sounds like a lot of work?

Officer duties, deadlines, paperwork — that's exactly what we take off your hands. Say hello and we'll show you how.

Turn this into a mandate.

Let us carry the operational weight. External officer, templates and documentation in one workspace. No obligation.

Related articles