Institute for Hygiene and the Environment: Tasks, Inspections, and Business Implications

The Institute for Hygiene and the Environment (HU Hamburg) is Germany's largest municipal testing authority and operates on behalf of Hamburg's Authority for Justice and Consumer Protection. It analyses drinking water under the Drinking Water Regulation (TrinkwV 2023), examines foodstuffs under EU Regulation (EC) No. 882/2004, and assesses environmental samples in accordance with the Federal Immission Control Act (BImSchG) and the Water Resources Act (WHG). For businesses that fall within the inspection remit of the HU or comparable state institutes, the results of these examinations are legally binding.

This article explains the tasks performed by HU Hamburg and comparable state hygiene institutes, the business consequences that can follow from their inspections, and why a structured hygiene organisation with a responsible officer is the best preparation for official inspections.

The Institute for Hygiene and the Environment (HU Hamburg) was founded in 1900 and is today the largest municipal testing authority in Germany. It operates on behalf of Hamburg's authorities and is accredited under DIN EN ISO/IEC 17025. Its range of tasks covers four core areas: drinking water and bathing water testing; food and commodity examinations; environmental hygiene (air, soil, wastewater); and medical devices and biological safety.

Comparable institutes exist in all federal states: the Bavarian State Office for Health and Food Safety (LGL), the Lower Saxony State Office for Health (NLGA), or the Berlin State Office for Health and Social Affairs (LAGeSo). Their findings constitute administrative acts; threshold exceedances lead to conditions, deadline extensions, or operational prohibitions.

For operators of drinking water installations, the relevant state institute is often the authority to which sampling results must be reported under § 16 IfSG or § 21 TrinkwV. Anyone who does not know these reporting channels and has not complied with them risks fines for breach of the reporting obligation — regardless of the actual findings. A Hygiene Officer knows these reporting structures and adheres to them.

The Drinking Water Regulation 2023 (TrinkwV) requires operators of drinking water installations that do not serve exclusively private households to have their water regularly tested. The testing parameters, frequencies, and sampling points are defined in Annexes 1 to 5 of the TrinkwV. Accredited laboratories such as HU Hamburg — or its counterparts in other federal states — carry out these analyses.

For hot water systems with a storage volume exceeding 400 litres or a pipe volume exceeding 3 litres, annual testing for Legionella under Annex 4 TrinkwV is mandatory. If the result exceeds the technical action value of 100 CFU/100 ml, the public health authority must be notified immediately and a hazard analysis must be carried out.

The operational process coordinated by a Hygiene Officer comprises: commissioning the accredited laboratory; scheduling sample collection by the operator (or the laboratory); receiving the analysis certificate; assessing it against the threshold values in Annex 1 TrinkwV; notifying the authority upon exceedance; initiating immediate action; and documenting the entire chain. This chain must be unbroken — not only for the HU, but for any inspector who wishes to reconstruct the process.

Food businesses — manufacturers, traders, catering — are subject to official food monitoring under EU Control Regulation (EU) 2017/625. Samples are taken on-site by food inspectors and sent to accredited laboratories such as HU Hamburg. Samples with findings lead to deficiency reports, which are formally communicated to the business.

Typical grounds for findings include: microbiological threshold exceedances (e.g. Salmonella, Listeria, EHEC), labelling deficiencies, allergen labelling errors, or exceedance of maximum contaminant levels. In each case a duty to respond arises: the business must carry out root cause analysis, take immediate action, and inform the supervisory authority of the measures taken.

Businesses operating an HACCP system have an advantage in this situation: documentation of the critical control points, threshold values, and corrective actions demonstrates to the inspector that the business manages the risk systematically. Where the HACCP system is absent or undocumented, every finding automatically carries greater weight. A Hygiene Officer who keeps the HACCP plan current creates the structural conditions for audit readiness.

HU Hamburg and comparable state institutes also examine environmental samples: air emissions under the BImSchG, wastewater discharges under WHG and the Wastewater Ordinance, soil samples where contaminated land is suspected under the Federal Soil Protection Act (BBodSchG). For industrial operations subject to the 4th BImSchV or the Wastewater Ordinance, these examinations are part of the regular monitoring programme.

Operations with installations requiring a permit under § 4 BImSchG must carry out self-monitoring measurements under § 26 BImSchG, or have them carried out by approved measurement bodies. The measurement results must be recorded and presented to the competent authority on request. Where approved emission or discharge threshold values are exceeded, immediate action and notification to the authority are mandatory.

The role of the Environmental Officer overlaps here with that of the Hygiene Officer: both coordinate measurement services, assess results against threshold values, and keep the documentation chain unbroken. In companies with multiple permit-relevant installations, a clear division of tasks with digital support is recommended to ensure no measurement cycle is missed.

§ 6 IfSG defines notifiable diseases that physicians and managers of community facilities must report to the public health authority. Particularly relevant for businesses are: salmonellosis, EHEC infections, Hepatitis A, norovirus outbreaks in community facilities, and Legionellosis. The notification deadline is generally 24 hours from the point of knowledge.

§ 16 IfSG authorises the public health authority to take action in the event of threatening communicable diseases — including threshold exceedances in drinking water or bathing water installations, before any illness cases occur. Operators who identify an exceedance are obliged to notify immediately. Waiting for the laboratory to report the finding without taking active steps constitutes a regulatory offence.

The deadline runs from the point of knowledge — a formulation that is often underestimated in practice. As soon as a laboratory report is received and the Hygiene Officer takes receipt of it, the notification deadline begins. Digital receipt confirmations with timestamps and automatic task triggers ensure this deadline is not missed. Those who cannot demonstrate missed deadlines bear the burden of proof in case of doubt.

Hygiene inspections by public health authorities or commissioned institutes follow a structured pattern. Advance notice is not always required; in food businesses, unannounced inspections are expressly provided for under (EU) 2017/625. Inspectors check: the actual state of operational hygiene (walkthrough), presentation of hygiene documentation, training records, and HACCP documentation.

The inspector typically asks the following questions: Is a current hygiene plan available? When was it last revised? When was hygiene training conducted and by whom? Are the drinking water testing results from the past two years available? Have all deficiencies from the last inspection been resolved and documented?

Anyone who answers these questions with a pile of files will be searching during the inspection. Anyone using a digital workspace can call up the hygiene plan (current, versioned), the training matrix (all employees, all cycles), inspection reports, and the action protocol within minutes. Instrument of appointment, signed, filed, evidenced. That is the difference between structured preparation and reactive searching.

Legionella are waterborne bacteria that can cause Legionnaires' disease (Legionellosis) when contaminated aerosol is inhaled (e.g. from showers, cooling towers, whirlpools). Under Annex 4 TrinkwV 2023, operators of large hot water systems are required to carry out annual sampling.

Where the technical action value (100 CFU/100 ml) is exceeded, the following steps are mandatory: immediate notification of the public health authority; hazard analysis by a qualified expert; immediate remediation measures (e.g. thermal disinfection, flushing); follow-up sampling for clearance; and written documentation of all steps.

VDI Guideline 2047-2 sets out the state of the art for cooling towers: annual risk assessment, quarterly sampling, regular maintenance and cleaning. Operations that run cooling towers must actively manage and document their Legionella status. A Hygiene Officer who does not track these cycles creates liability risks — even where no illness case occurs.

The complexity of operational hygiene obligations — multiple standards, different authorities, varying deadlines and inspection cycles — makes a purely paper-based organisation prone to error. Missed sampling deadlines, undocumented training, outdated hygiene plans: each of these errors can lead to findings in an inspection.

A digital hygiene platform automatically tracks all tasks, deadlines, and cycles: when is the next drinking water sampling due? Which employees must be trained by when? When was the last inspection, and what deficiencies were identified? All of this information is retrievable in real time, timestamped, and exportable.

The monthly documentation workflow consolidates completed tasks, completed training, and closed inspections in an export that serves directly as compliance evidence. Others manage compliance like a filing cabinet. We manage it like software.

CIVAC integrates the Hygiene Officer — internal or external — into this workflow. 37 ready-to-use audit templates cover inspection protocols, HACCP assessments, and drinking water records. Data residency is exclusively in the EU; AES-256 encryption at rest, TLS 1.3 in transit.

Whether drinking water testing by HU Hamburg, official food inspection, or official hygiene inspection: the outcome of every inspection depends essentially on how well the operational hygiene documentation is structured. § 36 IfSG, TrinkwV, KRINKO, and HACCP define a level of requirements that can barely be kept audit-ready without a structured function.

CIVAC provides both options as a compliance platform and Officer-as-a-Service: licence the workspace for your internal officers — or commission our officers. External Hygiene Officers from the CIVAC partner network are formally appointed in writing; the instrument of appointment is available within two working days.

For businesses that wish to prepare for their next official inspection, CIVAC offers a free initial assessment of the hygiene appointment obligation and documentation status.

Turn reading into action: write to info@civac.de or use the contact form on civac.de.