77 officer roles, all coveredArt. 33 GDPR, 72 hours to report a breach93 controls under ISO/IEC 27001:2022905 ready-to-run audit templates in the workspace§ 130 OWiG, supervisory duty of the management boardOfficer appointment letter, signed, filed, evidencedOne workspace for tasks, trainings, audits, documentationDIN 14095 fire protection plans, standardisedEU AI Act, the first horizontal AI regulation worldwide77 officer roles, all coveredArt. 33 GDPR, 72 hours to report a breach93 controls under ISO/IEC 27001:2022905 ready-to-run audit templates in the workspace§ 130 OWiG, supervisory duty of the management boardOfficer appointment letter, signed, filed, evidencedOne workspace for tasks, trainings, audits, documentationDIN 14095 fire protection plans, standardisedEU AI Act, the first horizontal AI regulation worldwide
Institute for Hygiene and Environmental Medicine: tasks, duties, practical role
Health & Hygiene

Institute for Hygiene and Environmental Medicine: tasks, duties, practical role

24 June 202613 min readBy Stefan Möller
CIVAC

Institutes for hygiene and environmental medicine provide analysis, inspection and advice. Anyone who has to fulfil operational hygiene obligations according to IfSG, BioStoffV and TrinkwV also needs an internal representative structure. This article explains tasks and interfaces.

An Institute for Hygiene and Environmental Medicine is a scientific-medical institution that advises hospitals, care facilities, food companies, water suppliers and authorities in the areas of hospital hygiene, drinking water, ventilation technology, indoor pollution and infection protection. University institutes, such as those at Charité, LMU or Bonn University Hospital, also carry out research and training and further education. The legal basis for the operational obligations is, among other things, the Infection Protection Act (§§ 23, 36 IfSG), the Drinking Water Ordinance (TrinkwV), the Biological Substances Ordinance (BioStoffV) and the ArbStättV with Annex 3.5 on sanitary rooms.

This article is aimed at those responsible in clinics, care facilities, laboratories, industry and educational institutions who work or will work together with an institute. You will find out which services institutes typically offer, which internal duties and structures companies require in parallel, how hygiene officers (HB) and MRE networks are interlinked, and how inspections, sampling and lists of measures can be mapped out as an audit-proof process. In the final part, we show how CIVAC complements the operational compliance layer without duplicating the institute's scientific tasks.

Selecting the right institute depends on the type of institution, regional availability, range of services and accreditation. We therefore address both sides, the external analytics and the internal obligation, and show the interfaces as precisely as possible.

Key Takeaways

  • An institute for hygiene and environmental medicine provides analysis and advice; it does not replace the internal appointment of a hygiene officer.
  • Obligations arise primarily from IfSG §§ 23, 36, TrinkwV and BioStoffV, and in clinics also from KRINKO recommendations and state hygiene regulations.
  • Inspections, sampling, lists of measures and proof of training belong in versioned documentation with those responsible, deadlines and audit status.

What an institute for hygiene and environmental medicine achieves

Hygienic-microbiological institutes are often accredited according to DIN EN ISO/IEC 17025 and carry out the tests required by the relevant regulations. These include microbiological drinking water tests for E. coli, coliform bacteria, enterococci and Legionella spec. according to TrinkwV, the examination of cooling water systems according to 42nd BImSchV, inspections and consultations according to KRINKO recommendations, as well as indoor air measurements for mold, VOC or asbestos in existing buildings.

In addition, institutes take on consulting mandates for hospital hygiene, for example in the event of outbreaks, multi-resistant pathogen management (MRE networks), construction planning for operating rooms, processing of medical devices according to MPBetreibV and training of medical personnel. In environmental medicine, the focus is on exposure analysis, pollutant assessment and epidemiology. University institutes also coordinate research projects with the Robert Koch Institute, the Federal Environment Agency and the Federal Institute for Occupational Safety and Health (BAuA).

Important: The institute provides external expertise and analytics. The operational hygiene organisation, i.e. the appointment of hygiene officers, cleaning regimes, inspection protocols, training and lists of measures, remains the responsibility of the company. You can find an overview of the internal role at civac.de/roles/hygienerechner. If you cleanly separate the two layers and connect them via a platform, you avoid external reports disappearing into file folders without moving on to operational measures.

The selection of an institute depends on the scope of accreditation, response times and experience with your own type of institution. University institutes provide scientific depth, regionally based private institutes often provide faster response times in inspection and sampling. If you operate multiple locations, it makes sense to standardise reporting formats and methodology across all locations, otherwise trend comparisons and supervisory communication become unnecessarily time-consuming.

A comparison grid with scope of accreditation, sampling logistics, findings turnaround, digital report formats and training courses helps in practice. If you maintain the grid once per region, you can conduct contract negotiations based on evidence and not on instinct.

Obligations according to IfSG: § 23 Hospital Hygiene, § 36 Facilities

TheInfection Protection Actis the backbone of the internal hygiene organisation. § 23 IfSG obliges hospitals, facilities for outpatient surgery, preventive and rehabilitation facilities, dialysis facilities and day clinics to ensure the measures required according to the state of medical science, including the appointment ofhospital hygienists, hygiene specialists and hygiene-commissioned doctors. The specific requirements arise from the state hygiene regulations and the KRINKO recommendations of the Robert Koch Institute.

§ 36 IfSG affects facilities such as nursing homes, homeless facilities, community accommodation, correctional facilities and schools. They must draw up hygiene plans and tolerate inspections by the health department. Hygiene plans contain cleaning and disinfection plans, training concepts, reporting channels for notifiable diseases in accordance with Sections 6 and 7 IfSG, entrance controls and procedural instructions in the event of outbreaks. They must be updated at least annually, in practice more quickly if there is a change in personnel or restructuring.

In addition, there are reporting obligations according to Sections 6 and 7 IfSG, which, depending on the pathogen, must be addressed to the health department, sometimes by name, sometimes not by name. The deadline is generally 24 hours from knowledge. Deadline begins as soon as we become aware of it. CIVAC maps reporting obligations as a guided workflow, with contact points, template texts and audit-proof storage. In the audit, the order, hygiene plan, proof of training and registration certificate are available in parallel.

In practical terms, Section 23 Paragraph 4 IfSG supplements the obligation for ongoingsurveillanceof nosocomial infections, the data of which must be recorded in a standardised form and serve for self-control. The data is subject to medical confidentiality in accordance with Section 203 of the Criminal Code and can only be used in a pseudonymized form within the surveillance networks.

In addition, the interface to human resources is important, for example with contact lists, training on standard hygiene and activity bans according to Section 31 IfSG. A clean personnel file makes supervisory communication much easier.

TrinkwV: scope of examination, legionella, reporting obligations

The Drinking Water Ordinance in the version of the second amending ordinance requires operators of drinking water installations with large systems for drinking water heating to carry out a periodic orientation test for Legionella spec. In particular, apartment buildings, hotels, care facilities, clinics, schools and indoor swimming pools are required. Sampling is carried out by accredited bodies, which are often located at an institute for hygiene. The investigation includes at least three representative samples per drinking water heater plus peripheral sampling points.

If the technical measure value of 100 CFU/100 ml for legionella is exceeded, a cause analysis, a risk analysis according to VDI 6023 and measures to restore drinking water quality must be carried out. Immediate measures can include flushing, thermal disinfection or terminal filters, and in the medium term, modifications to the house installation. The risk analysis must be submitted to the health department. If the measure value of 10,000 CFU/100 ml is exceeded, there is an immediate obligation to act, including informing the user.

In addition, notification obligations apply in accordance with Section 13 TrinkwV during commissioning and decommissioning, as well as a comprehensive documentation requirement in accordance with Section 16 TrinkwV. The documentation includes schemes, maintenance protocols, sample results and measures. CIVAC structures this documentation as a versioned folder for each location, so that the health department receives information during an inspection in minutes instead of weeks.

The Drinking Water Ordinance differentiates between large systems and small systems, which determines the sampling requirement and the sampling grid. In addition, a periodic examination of the private water supplier is required, with an additional obligation to carry out a risk analysis in accordance with the UBA recommendation. Anyone who keeps the TrinkwV in an internal profile for each location, with a diagram, sampling points and maintenance dates, avoids discussions with the health department.

Operationally, a clearly defined measure path for the infestation is crucial, which contains the steps of immediate action, cause analysis, technical remediation, repeat measurement and supervisory report as mandatory fields. Without this path, findings often remain at the stage of immediate action because the structural cause remains unresolved.

BioStoffV and ArbMedVV: Protection against biological agents

The Biological Substances Ordinance regulates the protection of employees from biological agents, i.e. microorganisms, cell cultures and endoparasites. It requires a written risk assessment in accordance with Sections 4-7 BioStoffV, classification into protection levels 1 to 4 and the determination of technical, organisational and personal protective measures. Clinics, laboratories, care facilities, waste management, research, agriculture and, in some cases, food businesses are affected.

The Ordinance on Occupational Health Care (ArbMedVV) requires compulsory or mandatory preventive care for activities involving biological substances, which must be carried out by a company doctor in accordance with Section 7 ASiG. Examples: Mandatory precautions for activities in protection level 3 or 4, offered precautions for activities with a risk of hepatitis A in wastewater or health facilities, desired precautions according to § 5a ArbMedVV.

Operationally, this means: a risk assessment for each activity, a set of operating instructions with proof of training, a list of mandatory precautions with dates, a PPE list, hygiene instructions and a procedure for puncture and cut injuries. The documentation is stored for at least 10 years, in the case of carcinogenic substances, 40 years after the activity has ended (Section 14 GefStoffV). The CIVAC audit templates contain all four building blocks as a coherent module because they are interlinked in terms of content and are never examined in isolation in the audit.

A risk assessment according to BioStoffV must be checked at least annually, and more frequently if necessary, for example after punctures and cuts, changes in activity or the introduction of new procedures. The documentation contains activity description, protection level, protective measures, residual risk assessment and effectiveness test, ideally with effectiveness indicators instead of just descriptions of measures.

Training and instruction are mandatory in the BioStoffV. They must be carried out at least annually and documented in writing. Contents include hazards, protective measures, what to do in the event of injuries, occupational health prevention procedures and reporting channels. The CIVAC platform links training certificates with personnel master data and job descriptions.

Hospital hygiene: KRINKO, MRE network, construction planning

TheCommission for Hospital Hygiene and Infection Prevention(KRINKO) at the Robert Koch Institute publishes recommendations that represent the state of medical science in accordance with Section 23 Paragraph 3 IfSG. Currently relevant, among other things, are the recommendations on MRE, ventilator-associated pneumonia, catheter-associated infections, the reprocessing of medical devices and structural-functional requirements for operating departments. A deviation from KRINKO recommendations is possible, but must be justified and documented.

Multi-resistant pathogens are increasingly being coordinated in regionalMRE networks. The network connects clinics, outpatient practices, care facilities and health authorities and agrees on uniform screening, isolation and sanitation standards. Those who join can access templates, training, surveillance evaluations and outbreak support. Institutes for hygiene and environmental medicine are often the specialist sponsors or co-coordinators of the networks.

When planning construction, DIN 1946-4 for air conditioning in operating rooms and procedure rooms applies, as well as the KRINKO appendix on structural and functional requirements, MPBetreibV specifications for processing and the state hygiene regulations. Anyone planning a clinic construction project should involve the hygiene department and the institute in the design phase, because changes in the execution phase can quickly cost six figures. CIVAC supports you with a project-related list of measures that links trades, deadlines and proof of compliance.

Surveillance of nosocomial infections via the KISS system of the National Reference Centre provides standardised comparative data and is mandatory for many types of hospitals according to Section 23 Paragraph 4 IfSG. Anyone who links the KISS data in the workspace with their own measures can identify structural drivers more quickly, such as an increased rate of ventilator-associated pneumonia in a specific ward.

In construction planning, it is recommended that hygiene, architecture, medical technology and construction supervision be integrated early into a joint steering committee. Anyone who only starts after the shell has been built will delay commissioning and produce rework. A project-related list of measures that assigns each requirement to the trade and the schedule is the gold standard here.

Hygiene officer: role, qualifications, appointment

The Hygiene Officer is the operational contact person for hygiene in the company. In clinics these are hygiene-commissioned doctors (HBA), hygiene specialists (HFK) and in large hospitals, hospital hygienists. In care facilities, shared accommodation and schools, the appointment of a hygiene officer is regulated in the state hygiene regulations. In food hygiene, the person responsible for HACCP also comes into play.

Qualification: At least one certified further training, such as hygiene officer doctor (200 hours) or hygiene specialist (two years part-time). Tasks: inspections, training, cleaning and disinfection plans, advice to management, participation in outbreak management, interface to the health department and the institute. What is important is the reporting line to the management or the medical management, which must be documented in writing.

The appointment document regulates tasks, authorities, representation, training budget and replacement arrangements in the event of vacation or illness. The appointment certificate, signed, filed, verifiable. CIVAC provides a versioned template in the workspace and links it with the inspection plan, training certificates and measures so that the order does not remain a one-off document, but becomes visible as a living system. More about the role: civac.de/roles/hygieneberater.

The reporting line is the most common breaking point in the hygiene organisation. Anyone who denies the hygiene officer direct access to management leaves risks hanging in middle management. The appointment certificate should therefore explicitly define the direct reporting line and provide for a quarterly written status report to the management. Others run compliance like a filing cabinet. We run it like software.

Training is an essential success factor. Poor hygiene instruction produces formal compliance but no behaviour change. Those who conduct training as short, case-based modules with a comprehension test achieve measurably better hand disinfection compliance and lower infection rates. The CIVAC platform connects training and inspection data.

Inspection, sampling, list of measures: How the process actually works

A well-founded hygiene inspection follows a standardised scheme, derived from KRINKO recommendations, state hygiene regulations and facility-specific risk analyses. Typical components are: visual inspection of patient rooms, sanitary areas, operating room locks and kitchens, checking the cleaning plans and their implementation, spot checks for hand disinfection using compliance observations or consumption measurements, inspection of the processing of medical devices and checking of the documentation.

Sampling follows the hygiene plan and indication. They include microbiological examinations of drinking water at end points, swab samples on critical surfaces, swab samples on reprocessed medical devices and air hygiene measurements in the operating room. The evaluation is carried out by an accredited laboratory, often the commissioned institute. The results must be commented on in a findings report and assigned to a measure, otherwise they lose their value for the hygiene organisation.

The measure list is the link between findings and improvement. It assigns each abnormality a person responsible, a deadline, a status and proof. Anyone who keeps this list in a platform instead of in an Excel table will see the complete life cycle in the audit: findings, cause, measure, effectiveness test, conclusion. The auditor calls, the evidence is ready. CIVAC bundles findings, measures and training in a workspace and facilitates the reporting line to management.

An inspection only becomes effective when the measures from the previous inspection are systematically followed and their effectiveness checked. A measure without effectiveness testing produces effort but no improvement. Anyone who places the effectiveness control as a mandatory field in the list of measures can see at a glance in the audit whether the hygiene organisation is routine or whether it has achieved real improvements.

It makes sense to have a quarterly evaluation across all inspections, in which recurring findings, average processing times and open measures are shown. This evaluation belongs to management, not just to the hygiene team, because it has a control function.

Collaboration with the institute: contract, SLA, data transfer

Collaboration with an Institute for Hygiene and Environmental Medicine should be regulated contractually, not through individual orders by email. Useful contract components include: scope of services (inspections, sampling, advice, training, outbreak support), response times (SLA for routine appointments and emergencies), sampling procedures and accredited methods, reporting formats, data transfer standards, liability and confidentiality, data protection in accordance with GDPR and BDSG when processing patient-related data.

The interface to internal compliance is operationally important. Findings from the institute must be transferred to the internal action list without the need for a second data maintenance. PDF reports are helpful, structured data export is better. Anyone who files the institute reports in a file folder is wasting half of their value because trend analyses, quartile comparisons and effectiveness monitoring are not possible. A compliance platform closes this gap.

The following applies to data protection: Patient-related data may only be transmitted to third parties under a legal basis in accordance with Art. 9 GDPR. In hospital hygiene, Section 23 Paragraph 4 IfSG covers most transmissions, supplemented by Section 12 Paragraph 2 of the Federal Data Protection Act for legal obligations. External consulting contracts should also contain a confidentiality clause with reference to Section 203 of the Criminal Code. The CIVAC platform stores all data transfers in an audit-proof manner with a time stamp and recipient.

Standardized data transfer also saves time in supervisory communication. If you only receive a finding as a PDF, you have to transfer it manually to the list of measures. Anyone who uses a structured CSV or a direct API connection to the compliance workspace shortens the transmission time from days to minutes and reduces transmission errors.

The clarity of the escalation paths in the event of an outbreak is contractually relevant. Anyone who works without a contract has no guaranteed response times in an emergency. A framework agreement with defined standby slots is mandatory for clinics, care facilities and manufacturers in the food industry.

External analytics and internal organisation: How CIVAC connects the layers

An institute for hygiene and environmental medicine provides the scientific and laboratory diagnostic layer. The operational shift, i.e. appointment of the hygiene officer, hygiene plan, inspection, list of measures, training, reports, is the responsibility of the company. CIVAC sees itself as acompliance platform and officer-as-a-serviceand fills exactly this operational layer. The platform with 490 ready-to-use audit templates, reporting line to management and escalation paths complements the institute without duplicating it.

Others run compliance like a filing cabinet. We run it like software. Licence the workspace for your internal representatives, or have our representatives order it. The data resides in Germany, authentication takes place via SSO or SAML. Reports and measures can be exported as PDFs and in a structured manner, so that data can be transferred to the supervisory authority or health authority in minutes instead of weeks. You can find more background on the platform atcivac.de/faq.

Turn reading into an assignment. Write toinfo@civac.deor use the contact form on civac.de. We will schedule a 30-minute initial consultation in which we will discuss your hygiene organisation, the interfaces to the institute and the three next steps. You will receive a written proposal with a task list, timeline and transparent prices no later than the next working day. In any case, you retain sovereignty over order data and findings.

The CIVAC platform also supports interfaces to personnel, training and maintenance systems, so that an appointment certificate is not isolated in a file storage, but is actively linked to training, inspection appointments and effectiveness tests.

If you want to get specific straight away, let's talk about your current hygiene organisation. We listen in 30 minutes, sort the obligations according to IfSG, TrinkwV, BioStoffV and state regulations and suggest three next steps. You will receive the written proposal two working days later.

FAQ

Does an institute for hygiene replace the appointment of a hygiene officer?

No. The institute provides analytics, inspections and advice as an external service provider. The appointment of a hygiene officer results from Section 23 IfSG, the state hygiene regulations and facility-specific requirements and remains the responsibility of the company. Both layers work together, but do not replace each other. The appointment is made in writing, with documented tasks, reporting line and deputy.

What tests do the drinking water regulations require in clinics and hotels?

The TrinkwV requires a periodic preliminary examination for Legionella spec. with three representative samples per drinking water heater plus peripheral sampling points. If the technical measure value of 100 CFU/100 ml is exceeded, a cause analysis, risk analysis according to VDI 6023 and measures follow. From 10,000 CFU/100 ml, immediate action is required, including user information and notification to the health department. The documentation requirement according to Section 16 TrinkwV runs parallel and includes diagrams, maintenance protocols and measures.

What reporting obligations does the IfSG have?

According to Sections 6 and 7 IfSG, certain diseases and evidence of pathogens must be reported to the health department, sometimes by name, sometimes not by name. The deadline is generally 24 hours from knowledge. In addition, there are reporting obligations for outbreaks in accordance with Section 6 Paragraph 3 IfSG and for nosocomial clusters in accordance with Section 23 Paragraph 4 IfSG. Violations are administrative offenses according to Section 73 IfSG.

What distinguishes KRINKO recommendations from state hygiene regulations?

KRINKO recommendations at the Robert Koch Institute specify the state of medical science in accordance with Section 23 Paragraph 3 IfSG. They are not directly binding, but are in fact the benchmark in liability and supervisory issues. State hygiene regulations, on the other hand, are directly applicable law and regulate, for example, the appointment of hygiene officers. A deviation from KRINKO is permitted, but must be justified and documented.

What qualifications does a hygiene officer need in a clinic?

Doctors responsible for hygiene complete 200 hours of further training, while hygiene specialists complete two years of in-service training. In large hospitals, the hospital hygienist is added as medical expertise, usually with specialist recognition in hygiene and environmental medicine. Care facilities, schools or shared accommodation appoint hygiene officers with appropriate qualifications in accordance with state requirements and facility-specific risk analysis, plus further training at least annually and a documented training concept.

How does CIVAC help translate the institute’s findings into operational measures?

The CIVAC platform maintains a list of measures that assigns a person responsible, a deadline, a status and evidence to each finding. Findings from the institute are imported or linked so that trend analyses, quartile comparisons and effectiveness monitoring are possible. Auditors, supervisory authorities or health authorities receive the life cycle of each measure as an audit-proof report. The data residence is in Germany, accesses are logged.

No obligation

Sounds like a lot of work?

Officer duties, deadlines, paperwork — that's exactly what we take off your hands. Say hello and we'll show you how.

Turn this into a mandate.

Let us carry the operational weight. External officer, templates and documentation in one workspace. No obligation.

Related articles