Hygiene in the school kitchen: Obligations, HACCP and the path to a reliable hygiene plan

Hygiene in the school kitchen is subject to a tight set of rules: Section 42 IfSG lists activity and employment bans in the case of certain illnesses, Section 43 IfSG requires initial instructions from the health department and annual follow-up instructions from the employer. The EU Food Hygiene Regulation (EC) No. 852/2004 prescribes a HACCP concept for all food business operators, while the Food Hygiene Regulation (LMHV) supplements national detailed rules. School authorities and cafeteria operators are food business operators in the legal sense, with a full chain of obligations.

This article explains the legal basis, the role of the hygiene officer, the contents of a reliable hygiene plan and the typical complaints from official food control. We look at the school's own operation, catering contracts with external providers and mixed models. In the end, you will know which documents must be available for an unannounced inspection, how to verifiably document instructions and training and when an external hygiene officer as an officer-as-a-service pays off. We also address annual self-inspections, cleaning and disinfection plans, and pest prevention, which require special attention in school kitchens because children are among the vulnerable groups. We also look at the responsibilities in the three common operating models: own operation, pure catering and mixed model, as well as the typical risks of fines according to Section 60 LFGB and Section 73 IfSG. This provides you with a guide that is equally useful for school authorities, cafeteria operators and hygiene officers.

The legal architecture of school kitchen hygiene rests on four pillars. Firstly, the Infection Protection Act: Section 42 IfSG prohibits activities with food for certain diseases such as typhoid, cholera, shigellosis, EHEC, hepatitis A and hepatitis E as well as for infected wounds. § 43 IfSG requires initial instruction from the health department before work can begin. Follow-up instructions are given annually by the employer and must be documented in writing.

Secondly, the Food Hygiene Regulation (EC) No. 852/2004: It defines food business operators broadly; every commercial sale of food is covered, including in schools, daycare centres and boarding schools. Annex II regulates general hygiene regulations, Annex III regulates industry-specific details. HACCP according to Article 5 of the regulation is mandatory, the concept must identify the critical control points (CCPs), define limit values ​​and establish monitoring procedures.

Thirdly, the national food hygiene regulation (LMHV) and the animal food hygiene regulation (Tier-LMHV) for school kitchens that process meat, fish or dairy products. Fourthly, the Food and Feed Code (LFGB) with Section 39 as the authorizing basis for official food control. According to Section 60 LFGB, fines for violations range up to 100,000 euros per offense, and in serious cases up to 500,000 euros. The Hygiene Officer accompanies the implementation in the workspace, with a clear reporting line to the school management or the school authority. This means that responsibility is documented and can be delegated to a named person, instead of becoming blurred in the “we” mode. The legal sources are applicable cumulatively; a violation of one norm regularly triggers violations of the others. The supervisory authorities in Germany are the municipal or district food inspection offices, and in some federal states also the state offices for consumer protection. The local jurisdiction depends on where the kitchen is located.

HACCP stands for Hazard Analysis and Critical Control Points. The concept follows seven principles that are anchored in Article 5 of Regulation (EC) No. 852/2004. First: hazard analysis of all process steps, from delivery to storage, preparation, serving and cleaning. Second, identify the critical control points (CCPs) where a hazard must be controlled. Typical CCPs in school kitchens include goods receipt, cooling and holding temperatures, cooking processes, rinsing and the separation of raw and cooked food.

Third: setting limit values. Cooling temperatures for perishable foods a maximum of 7 degrees Celsius, for fish and minced meat a maximum of 2 degrees. Keep hot at at least 65 degrees. Core temperature when cooking at least 72 degrees for two minutes, for poultry at least 75 degrees. Fourth: monitoring procedures, i.e. who measures when, with which device and where are the results documented. Fifth, corrective action in case of deviations. Sixth: Verification measures such as internal audits, swab samples and external laboratory samples. Seventh: Documentation of all process steps.

For school kitchens with predominantly simple activities, the state authorities recognise simplified industry guidelines, such as the DGE quality standard for school catering. The simplification does not relieve the obligation, it only reduces the effort. Audit-proof, documented, § 5-proof. The CIVAC workspace provides 490 ready-to-use audit templates, including HACCP flowchart, CCP matrix, temperature logs and corrective action log, each versioned with timestamp and accountability. The templates are tailored to the DGE quality standard and country-specific hygiene guidelines, so that adaptation to the respective control authority remains minimal. Processes such as resumption after a closure or escalation after a critical complaint are also stored as a workflow. Outsourcing to an external hygiene officer is possible and makes economic sense if the school does not employ its own specialist. The school management remains responsible, the external representative takes over operational management and technical advice in day-to-day business.

Before starting any activity with food, every person must undergo initial instruction from the health department. This is regulated in Section 43 Paragraph 1 IfSG. The instruction covers the activity bans according to Section 42 IfSG, the obligation to report your own illness or suspicion and personal hygiene. The health department issues a certificate that must not be older than three months when the activity begins. The employer must check the certificate, take a copy and keep it for the duration of the employment.

Follow-up instructions are given at least annually, carried out by the employer or a qualified person commissioned by the employer. The follow-up instructions are documented in writing: date, content, participants, signature. The documentation must be kept for at least two years and presented to the responsible authority upon request. According to Section 73 IfSG, anyone who misses the instruction risks an administrative offense with a fine of up to 25,000 euros per violation.

In school kitchens with frequently changing staff (temps, interns, parents at school parties), the obligation to provide instruction is regularly overlooked. Even those who only prepare food once a month are subject to this obligation. Parents who hand out cakes or snacks at school parties are generally not included because they are not commercially active. However, as soon as regularity or remuneration is added, the obligation to provide instruction takes effect. In the CIVAC workspace, instruction status, expiry periods and follow-up instructions are kept in a table, with reminders 30 days before expiry. The auditor calls, the evidence is ready. The digital instruction signatures are possible using eIDAS-compliant signature procedures, so that even locations with distributed staff can fulfil the obligation without media disruption. The instruction content is updated annually, especially in the event of changes to the IfSG or new RKI recommendations.

A hygiene plan is the written representation of all hygiene-relevant processes and instructions. It is mandatory for community facilities according to Section 36 IfSG, which explicitly includes schools. Contents: Cleaning and disinfection plan with agent, concentration, exposure time and frequency for each surface and device; personal hygiene with hand washing, protective clothing, reporting illness; Food hygiene with incoming goods inspection, storage, preparation, distribution; Pest prevention with monitoring stations, bait points and visual inspections; Laundry hygiene with separation of clean and dirty laundry.

Frequent gaps in practice: lack of assignment of responsibility ("who does what when"), unclear frequencies ("regularly" instead of "daily after school"), no escalation channels in the event of deviations, no proof of training of the cleaning staff, no updating after structural changes, no comparison with the HACCP concept. The official food control department strictly assesses these gaps; in the event of repeated complaints, the public announcement follows in accordance with Section 40 LFGB.

The hygiene plan must be checked at least once a year and adjusted immediately in the event of changes. Training for all employees on the hygiene plan must be documented, refreshed annually and carried out immediately when new employees are hired. In addition to the hygiene officer, CIVAC's role catalogue includes 25 other officer roles that often become relevant together in larger school authority structures, such as fire protection, occupational safety and data protection. The workspace links the roles so that multiple responsibilities are consistently documented, with a clear reporting line to the school authority. This avoids duplication of work and gaps in responsibility, which is particularly cost-relevant for providers with several schools. Audit-proof, documented, Section 36-proof. The hygiene plan must be kept in German and accessible in multiple languages ​​if the kitchen staff is predominantly non-German-speaking. Visual instructions complement the written form and reduce error rates.

Three operational areas dominate official control. Firstly, the receipt of goods: Every delivery is checked for temperature (refrigerated and frozen goods), packaging condition, best-before date and cleanliness. Any abnormalities are documented and the goods are rejected if necessary. Frozen goods must have a maximum temperature of minus 18 degrees Celsius upon delivery, perishable foods a maximum of 7 degrees, fish and minced meat a maximum of 2 degrees. A delivery note without temperature information is a defect, a delivery note that exceeds the temperature is a reason for refusal of acceptance.

Secondly, temperature control in the warehouse and distribution: cold rooms and freezers are checked at least twice a day, the result documented in the temperature logbook. Maintain a core temperature of at least 65 degrees, check before the start of serving and after every hour. Food that falls below 65 degrees must be recooked immediately or discarded. Thirdly, the allergen labelling according to the Food Information Ordinance (LMIV) and Section 14 LMIDV: The 14 main allergens must be identified for each dish, in writing or verbally upon request with a comprehensible explanation.

Cross-contamination is the most common complaint. Separate cutting boards for meat, poultry, fish and vegetables, separate storage in the refrigerator (raw poultry always on the bottom), separate cleaning utensils, separate hands and gloves. A violation regularly leads to requirements or bans on individual procedures during a follow-up inspection. The CIVAC workspace documents the separation logic visually, with sketches, responsibilities and training status. Swab samples from the in-house self-control concept and laboratory findings are stored and evaluated in the same process, so that trends can be identified at an early stage and corrective measures do not only take effect after official complaints have been made. Pest monitoring is also part of the process, with a location map of the bait points and trend analysis for early detection. External pest controllers document their inspections directly in the workspace, so that the school authority has an overview of the current status at all times.

A legally required hygiene officer does not explicitly exist for school kitchens, unlike for hospitals according to Section 23 IfSG. In practice, the appointment is still the standard way to ensure that the school management's supervisory obligation in accordance with Section 130 OWiG can be fulfilled. Anyone who does not appoint a representative must make all hygiene-related decisions themselves and provide evidence of this, which quickly becomes unrealistic as school sizes grow.

The hygiene representative trains the kitchen staff, coordinates instructions, checks the hygiene plan, accompanies official controls, documents deviations and suggests corrective measures. The professional qualifications are based on the recommendations of the Federal Centre for Health Education (BZgA) and the country-specific guidelines. Completed training in a food profession plus additional hygiene qualifications is common.

Licence the workspace for your internal representatives, or have our representatives order it. If the school authority has several schools, the external solution is economically attractive: an external hygiene officer typically looks after 5 to 15 schools in parallel, with standardised audits, comparable documentation and consolidated reporting to the school authority. CIVAC delivers the appointment certificate within two working days instead of the industry standard two to six weeks, including a list of tasks, reporting lines and representation regulations. Others run compliance like a filing cabinet. We run it like software.: 93 controls from ISO/IEC 27001:2022 also structure the hygiene cockpit, from access rights to the audit trail. The workspace scales from an individual cafeteria to a school network with 50 locations. Reporting lines, substitution regulations and escalation paths can be configured for each location without losing consolidation at the provider level. The annual report format to the school authority is standardised, with key figures on the level of instruction, deviations, corrective measures and external audit results.

There are three models for school meals. Firstly, purely in-house operation: the school authority or school runs the kitchen itself, with its own staff, its own purchasing of goods, its own HACCP concept. Full responsibility lies with the school authority. Secondly, the pure catering model: an external caterer delivers ready-made meals and the school serves them out. The caterer is the food business operator for production and transport, the school is responsible for serving and, if necessary, keeping food hot.

Third, the mixed model: the caterer supplies components or prepared ingredients, the school kitchen prepares them. Here the HACCP obligations and the LMIV obligations are distributed between both actors. A written interface agreement is mandatory, otherwise there will be gaps in allergen labelling, temperature control and traceability. Regulation (EC) No. 178/2002 requires traceability one step backwards and one step forward ("one step back, one step forward"), in the school canteen this means supplier and issuing class.

Responsibilities, audit rights, documentation obligations, reporting channels in the event of deviations, insured sums and contractual penalties should be regulated in the contract. The official control checks both actors; a complaint to the caterer is also regularly reflected in the school if the interface is unclear. The CIVAC workspace provides a contract template and an audit checklist that school authorities use to regularly evaluate their caterers. The evaluation results are incorporated into the supplier file, verifiable according to ISO/IEC 27001:2022 logic analogous to food safety. An ISO 22000 certification can also be built on this basis if the school authority or caterer seeks external certification. The audit trails are tamper-proof and stored on EU servers. In the event of a change of caterer, the structured supplier file significantly reduces the handover effort. Audit logs remain in the system, weak points are linked to measures, follow-ups are automated.

Official food inspections are risk-oriented and usually unannounced. As catering establishments for vulnerable groups, school kitchens are checked with high frequency, in many federal states once or twice a year. The inspector checks premises, equipment, storage conditions, documentation, staff hygiene, pest absence and allergen labelling. The inspection typically lasts two to four hours, or longer in larger canteens.

Complaints are classified into five categories: minor, moderately serious, serious, serious with consequences for health, acute danger. If there are serious defects, a follow-up inspection will follow within a few weeks; if there is an acute danger, the facility will be closed immediately. According to Section 60 LFGB, fines range up to 100,000 euros per offense. In the case of repeated violations and consumer information in accordance with Section 40 LFGB, the authority can make the violations public; the damage to reputation is considerable.

Preparation for the inspection: all documents at hand (HACCP concept, hygiene plan, proof of instruction, temperature logbooks from the last 24 months, pest monitoring, training certificates, cleaning protocols), name permanent contact persons, ensure representation. The deadline for submitting documents is usually 24 hours to seven days, depending on the category. CIVAC structures the documents in the workspace according to test categories so that every official control requirement can be met without any search effort. The appointment certificate, signed, filed, verifiable. In an emergency, this significantly reduces the stress and avoids follow-up checks due to documentation deficiencies. For larger school authorities, a standardised mock audit is recommended two to four times a year, carried out by the external hygiene officer, with a protocol and list of measures. Experience shows that those who carry out regular internal audits practically always pass official inspections without any serious complaints. The investment in the mock audit pays for itself with the first avoided follow-up inspection.

Hygiene in the school kitchen is not a question of good will, but of a resilient operating system. Instructions according to § 43 IfSG, HACCP concept according to VO (EC) No. 852/2004, hygiene plan according to § 36 IfSG, allergen labelling according to LMIV, traceability according to VO (EC) No. 178/2002: Anyone who follows these five pillars cleanly will pass every official inspection without complaint. CIVAC is a compliance platform and officer-as-a-service that combines exactly these pillars technically and organizationally, with EU data residency for all client data.

Licence the workspace for your internal representatives, or have our representatives order it. For school authorities with several locations, the external solution is economically superior: one hygiene officer looks after 5 to 15 schools, with consolidated documentation, comparable audits and a uniform reporting line to the school management or the school authority. The appointment certificate is ready within two working days, 490 ready-to-use audit templates cover HACCP, hygiene plan, instructions and caterer audit. Deadline expires when we become aware of it: Anyone who recognises a defect documents the correction immediately instead of having to do it when the inspector calls.

If you are unsure whether your hygiene documentation can withstand an official inspection, we will check this in the initial consultation. If you already have a hygiene officer, we will take over the audit-proof cockpit. Turn reading into a mandate.: Write to info@civac.de or use the contact form on civac.de. We will get back to you within one business day with a specific assessment, including a gap analysis of your current documentation and an estimate of annual operating costs. The initial consultation is binding and has no cost risk for you. The auditor calls, the evidence is ready. If the same provider has several schools, we design a consolidated rollout concept with standardised templates, a uniform reporting line and a provider-level overview for the school management.