Hygiene Training: Legal Obligations, Content, and Operational Implementation

The obligation to conduct hygiene training in Germany arises from several legal standards: § 43 of the Infection Protection Act (IfSG) requires persons who handle food commercially to undergo initial instruction by the public health authority and annual operational refresher training. § 36 IfSG requires community facilities and certain healthcare businesses to conduct regular training based on the KRINKO recommendations of the Robert Koch Institute. EU Food Hygiene Regulation (EC) No. 852/2004, Annex II, Chapter XII, additionally requires documented hygiene training for all persons working in a food business.

This creates a three-layer obligation for management: conduct the training itself, tailor the content to the actual activity, and archive the records in an audit-proof manner. This article sets out the legal foundations, describes the content and frequency of the various types of training, and shows what documentation structure withstands a regulatory inspection.

The obligation to conduct hygiene training in Germany is not regulated in a single standard but arises from the interaction of several laws and regulations. The Infection Protection Act forms the foundation: § 43 IfSG applies to persons who commercially produce, handle, or bring food into circulation. An initial instruction by the competent public health authority is required before commencing work; thereafter, the employer must ensure annual operational refresher training and document it in writing.

§ 36 IfSG covers a different scope: community facilities such as schools, nurseries, and nursing homes, as well as outpatient nursing services and facilities under § 23 IfSG (hospitals, medical practices), are required to train their employees regularly on the basis of the recommendations of the Commission for Hospital Hygiene and Infection Prevention (KRINKO) at the Robert Koch Institute. These recommendations do not have statutory force, but supervisory authorities measure the state of the art by them.

At EU level, Regulation (EC) No. 852/2004 on food hygiene in Annex II, Chapter XII, requires food business operators to ensure that all employees who handle food are trained or instructed in accordance with their activities. The Drinking Water Regulation (TrinkwV 2023) contains its own requirements for the instruction of operating personnel at water supply installations. For hospitals and nursing facilities, state-level hygiene regulations additionally apply; these have now been enacted in all 16 federal states.

In this regulatory framework, the Hygiene Officer is the central coordination point: they plan training cycles and content, ensure legally compliant documentation, and are the primary contact for authority enquiries.

Not all hygiene training is legally equivalent. Three types can be distinguished, each with different requirements as to content, frequency, and documentation.

The initial instruction under § 43 para. 1 IfSG takes place once at the competent public health authority before the person first comes into commercial contact with food. The certificate (instruction confirmation) must be retained by the employer and presented to the food monitoring authority on request. This certificate has no legally defined expiry date but applies only for the period before commencement of first employment.

The operational refresher training under § 43 para. 4 IfSG must be conducted at least annually. It may be carried out by the employer or a person commissioned by them and must be documented in writing. In terms of content, it must be based on the current state of scientific knowledge on food hygiene and include activity-specific risks such as the cold chain, cross-contamination, and cleaning schedules.

The activity-related instruction under EU Regulation 852/2004 goes further conceptually: it is not limited to food handlers but covers all employees of the food business. The content and depth depend on the actual risk level of the specific activity. HACCP training (Hazard Analysis and Critical Control Points) under Regulation (EC) 852/2004, Annex II, Chapter I, must regularly be included.

In parallel, the medical and care environment has the infection hygiene instruction under KRINKO recommendations, which must be repeated at least annually and must include specific content such as hand hygiene (WHO 5 Moments concept) and protective equipment.

The content of hygiene training depends on the sector and the specific activity. Nevertheless, minimum content can be derived that is relevant across almost all types of training.

For food businesses, the annex to the IfSG instruction guidelines prescribes the following core topics: symptoms and transmission routes of foodborne diseases; activity prohibitions under § 42 IfSG in cases of gastrointestinal illness or infected wounds; notification obligations of the employee to the employer; and operational hygiene measures including cleaning, disinfection, pest control, and temperature control.

HACCP-relevant training supplements this framework with documentation of critical control points (CCPs), recognition of deviations, and corrective measures. Under EU Regulation 852/2004, the training content must be anchored in the business's HACCP concept.

In the healthcare and care environment, the KRINKO recommendation on hand hygiene focuses on the following modules: indication-appropriate hand disinfection, use of personal protective equipment (PPE), handling patient blood and body secretions, and surface disinfection to standard. Facility-specific outbreak plans and reporting channels under § 6 IfSG are added.

The Drinking Water Regulation additionally requires for water suppliers: knowledge of sampling under DIN EN ISO 19458, interpretation limits for microbiological parameters, and measures upon threshold exceedance. Training content should be linked to the actual hazard analysis of the business — a blanket standard training without activity-specific reference generally does not satisfy the legal requirement.

Hygiene training without complete documentation is, in the eyes of authorities and courts, as good as not conducted. The documentation requirements arise from several sources.

§ 43 para. 4 IfSG requires written documentation of operational refresher training. The supervisory authority may request these records at any time; a statutory retention period is not explicitly defined, but the general recommendation is at least five years, since regulatory proceedings under § 73 IfSG can be initiated within this period.

EU Regulation 852/2004 requires that training and support documents can be provided to the food monitoring authority on request. In practice, the following documents have proved inspection-ready: training plan with topics and dates; participant list with signature; confirmation of trainer with name and qualification; test result for online modules; and a version reference for the training materials used.

In the KRINKO and hospital context, facility-internal hygiene plans under § 23 para. 5 IfSG are additionally required, in which training measures must be documented as evidence. State-level hygiene regulations may impose stricter requirements.

Decisive for audit readiness is versioning: when training content is updated, it must be apparent which employee received which version. The externally appointed Hygiene Officer monitors this version chain and ensures that documentation is retrievable at any time. The inspector calls; the evidence is ready.

Deadlines run from the point of knowledge. This principle also applies to training obligations: the obligation to conduct refresher training arises at the latest one year after the last training, regardless of whether the supervisory authority has already exceeded this period.

For § 43 IfSG, the annual cycle is the statutory minimum. An earlier repetition may be required if new KRINKO recommendations are published, an outbreak event has occurred in the business, or the food monitoring authority has called for a content update during an inspection.

In the KRINKO environment, hygiene commissions recommend at least annual training for all patient-facing employees and half-yearly refreshers for staff in areas with elevated infection risk, including intensive care, neonatology, and oncology. This is not a statutory obligation, but carries considerable weight in fine proceedings and in civil liability claims.

Newly appointed employees must be trained before commencing their first activity. Retrospective completion within the first working week is generally still accepted by authorities; however, missing training is still a usable deficiency in a regulatory inspection.

For water supply installations under TrinkwV, the Federal Environment Agency recommends a two-year training period; for installations with Legionella risk, an annual cycle may be appropriate.

Since the COVID-19 pandemic, online formats have gained considerably in importance for hygiene training. The question of whether digital training satisfies the legal requirement cannot be answered with a blanket yes or no.

For operational refresher training under § 43 para. 4 IfSG, an online format is generally permissible provided the system ensures verifiable participation (login log, learning time recording), a knowledge test with a documented result, and audit-proof archiving of the training materials. The competent veterinary and food monitoring authority may impose stricter requirements in individual cases; prior consultation with the authority is advisable.

The initial instruction under § 43 para. 1 IfSG, however, is expressly conducted by the public health authority and cannot be replaced by an operational online training. Some public health authorities now offer video instructions as a substitute; whether this is legally effective depends on state law.

For KRINKO-compliant training in the care sector, various state regulations require at least a partial in-person component, particularly for practical skills such as hand disinfection technique. A purely theoretical online training without practical evidence cannot be regarded as a full substitute in these contexts.

The CIVAC workspace contains an integrated training module with test function, certificate generation, and automated reminder function for due refresher training. Training records are archived in an audit-proof manner and can be exported at the click of a button.

Missing or deficient hygiene training is not a formality. § 73 para. 1a no. 10 IfSG classifies the failure to conduct the prescribed operational instruction as a regulatory offence punishable by a fine of up to €25,000. In serious cases — particularly where an outbreak event is connected to the missing training — criminal proceedings under § 74 IfSG are conceivable.

Under food law, official food monitoring under § 39 LFGB may order the closure of a business or prohibition of certain activities if hygiene training cannot be evidenced. EU Regulation 852/2004 does not contain its own sanction provision; sanctions are applied through national food law.

Under civil law, liability is relevant: if customers or patients fall ill due to a hygiene deficiency that can be attributed to missing or insufficient training, tortious liability under § 823 BGB may arise. In care facilities, this can cumulate with the duty of care under the care contract under §§ 611 ff. BGB. Courts in such proceedings treat the training document as the central exculpatory evidence.

For the management of a limited liability company (GmbH) or AG, there is also an organisational and supervisory obligation: anyone who does not delegate, monitor, and document hygiene training risks personal liability under § 43 GmbHG. The appointed Hygiene Officer formally takes on this supervisory function and thereby creates an audit-proof basis of exculpation for management.

The Hygiene Officer is legally prescribed in certain types of facility. § 36 IfSG in conjunction with the state regulations on hospital hygiene requires hospitals, care homes for the elderly and nursing homes, and inpatient facilities for persons with disabilities to appoint a hygiene-responsible nurse; larger facilities additionally require a hospital hygienist. In the food sector, a formal Hygiene Officer is not prescribed by federal law, but is in practice an established standard for medium and larger businesses.

The tasks of the Hygiene Officer include in common practice: creating, updating, and training on the operational hygiene plan; coordinating cleaning and disinfection planning; evaluating hygiene deficiencies and implementing corrective measures; preparing for official inspections; and documenting all training measures under § 43 IfSG. Additionally: coordination with the occupational health service and informing management of elevated infection risk.

Qualification requirements vary by type of facility: in the hospital and care sector, KRINKO recommendations and state regulations require certified advanced training as an Infection Control Nurse or a university degree in hygiene. In the food sector, a competence training to HACCP standards is generally considered sufficient.

Companies that cannot or do not wish to provide a qualified internal Hygiene Officer can fill this role externally. Instrument of appointment, signed, filed, evidenced — this standard applies regardless of whether the officer is internal or external.

Audit-proof hygiene training requires no complex infrastructure, but does require clear accountability and a system that automatically manages dates, content, and records. Companies that currently store hygiene training records in spreadsheets or binders risk records being unfindable or unversioned during a regulatory inspection.

The structured framework comprises four elements: first, a training plan that records for each position the applicable standards (§ 43 IfSG, KRINKO, EU Regulation 852/2004) and the respective frequency; second, a module with knowledge test and automatic certificate generation; third, audit-proof storage with versioning of training content; fourth, a reminder system that notifies the officer of due dates in good time.

The CIVAC workspace provides all four elements as an integrated platform function. Training modules can be adapted to sector-specific requirements; certificates are automatically generated and archived; due refresher training appears in the task dashboard. Others manage compliance like a filing cabinet. We manage it like software.

Licence the workspace for your internal officers or commission our officers — in both cases, training documentation is audit-proof from day one. CIVAC SLA: contract, officer, appointment document within two working days.

Turn reading into action. Write to us at info@civac.de or use the contact form on civac.de.