Institute of Microbiology and Hygiene: What facilities can really expect

According to Section 23 of the Infection Protection Act (IfSG), medical facilities, inpatient care facilities and community facilities are obliged to take the measures necessary according to the state of medical science to prevent nosocomial infections. The Commission for Hospital Hygiene and Infection Prevention (KRINKO) at the Robert Koch Institute specifies this status in recommendations that are binding in practice. An institute for microbiology and hygiene is not just a sample analyst, but a key partner for findings, risk assessment and official reports. Anyone who only sees the institute as a laboratory is missing out on a significant part of the scope of compliance and leaving the operational hygiene structure to chance.

This article explains what services an institute for microbiology and hygiene actually provides, which accreditations are mandatory and how the interface to the internal hygiene officer can be organised. You will find out which reporting channels are in place according to the IfSG, which documentation obligations the hygiene plan triggers and which parts of the contract with the institute you should fix in writing. The article is aimed at management, medical management and hygiene officers in clinics, MVZs, care facilities, food companies and water suppliers. At the end you will receive a contract points catalogue and a transition path for changing institutes.

An institute for microbiology and hygiene typically provides four service blocks: microbiological diagnostics from patient samples (blood cultures, swabs, aspirates); Surroundings and environmental studies (drinking water according to TrinkwV, swimming pool water, surfaces, indoor air); advisory hygiene (inspections, hygiene plan review, training) as well as participation in outbreak investigations. These four blocks are not interchangeable. A pure diagnostic laboratory without hygiene advice cannot fully serve a facility because the evaluation of the findings and the derivation of measures require clinical hygiene expertise. Hygiene advice without a diagnostic basis runs the other way around in theoretical space.

Anyone who selects an institute should therefore check which of the four blocks is included in the contract. In particular, advisory hygiene is often structured as an hourly quota and not as a flat rate. This has advantages and disadvantages: hourly models scale with actual needs, flat rates provide planning security. Which model is right depends on the size of the facility, the risk profile and the internal hygiene capacity. A clinic with its own hygiene specialist (HFK) needs a different model than a MVZ without internal capacity. A care facility, on the other hand, needs a different mix than a food company with HACCP obligations.

The interface to the internal hygiene officer is the third block that is often underestimated. The institute provides findings and recommendations; the hygiene officer is responsible for their implementation in the hygiene plan and for documentation to supervisory authorities. Without a clear separation of roles, gaps arise in which neither institute nor facility is formally responsible. It is precisely these gaps that end up in complaints from the health authorities and in activity reports from the state authorities.

An institute for microbiology and hygiene must be accredited for analytical services according to DIN EN ISO/IEC 17025. The accreditation is carried out by the German Accreditation Body (DAkkS) and is parameter-specific, i.e. not generally for "microbiology", but for defined analysis methods. Have the accreditation certificate with its scope presented to you. If a parameter that you have regularly tested (e.g. Legionella spp. according to DIN EN ISO 11731) is not within the scope, the finding is significantly less reliable for legal purposes and can be challenged in court in the event of a dispute.

For drinking water tests according to TrinkwV, listing as an examination body according to Section 15 Paragraph 4 TrinkwV is also required. This listing is carried out by the respective federal state and can be viewed via the Federal Environment Agency. For the examination of patient-related samples (clinical microbiology), accreditation according to DIN EN ISO 15189 is also relevant. This standard is medical-laboratory analytical and supplements 17025 with clinical aspects such as release of findings, pre-analytical phase and patient reference. Institutes that hold both accreditations are the most widely applicable in practice.

When making the selection, it is not only the accreditation of the institute as a unit that counts, but also the specialist medical management. According to Section 9 of the MTA Reform Act and the professional regulations, responsibility for clinical microbiological findings is tied to specialists in microbiology, virology and infection epidemiology. Check whether the institute has appropriate specialists and whether they are involved in the findings approval process. Anonymized findings without specialist validation are a warning signal and can lead to complaints during a supervisory examination.

A finding is only as good as the sample from which it comes. The sampling plan is therefore the central document between the facility and the institute. It regulates which samples are taken, at what frequency, at which locations and by whom. For drinking water, sampling must be standardised according to DIN EN ISO 19458. The standards of KRINKO and the respective medical societies apply to patient samples. For environmental samples (sampling, sedimentation), hygiene plans and KRINKO recommendations regulate the frequency and sampling geometry.

Three errors occur particularly frequently in practice. First: sampling by untrained personnel, resulting in false positive or false negative results. Secondly: gaps in the transport (temperature, time), which falsify the result and are particularly critical for drinking water or food samples. Third: sampling points that are not representative of the actual risk, for example because they were chosen for convenience. A good sampling plan explicitly addresses all three sources of error, names the responsible people and defines escalation options in the event of sample failure.

The institute should not only approve the plan, but also actively shape it. If the institute submits the plan as a service and the institution only signs it, there is a lack of internal understanding. If the institution writes the plan on its own, there is a lack of analytical expertise. The sampling plan is therefore a common document, ideally reviewed annually and adapted to current KRINKO recommendations and any abnormalities in the diagnostic process. The appointment certificate, signed, filed, verifiable. The same applies to the sampling plan. Anyone who keeps a version of the plan in the hygiene tool has a consistent track in the audit.

The Infection Protection Act regulates three different reporting channels, which are often mixed in practice. First: reporting obligations according to Sections 6 and 7 IfSG for medical or laboratory diagnostic findings of reportable pathogens and diseases. These reports are made by the treating doctor or the diagnosing laboratory to the responsible health authority, usually via DEMIS (German Electronic Reporting and Information System for Infection Protection). Second: Section 23 IfSG reports of nosocomial infections and resistant pathogens by the facility management to the health department. Third: Outbreak reports and frequent occurrence patterns according to Section 6 Paragraph 3 IfSG.

Responsibility is clearly distributed, but the interfaces are critical. If the laboratory detects a reportable pathogen, the laboratory reports it. However, the facility must ensure that internal hygiene measures are started, that the hygiene specialist is informed and that the hygiene officer includes the findings in the hygiene plan event report. These three steps are not the responsibility of the laboratory, but of the facility. Anyone who has a gap here will have to explain themselves to an authority audit and, in the worst case, will have to accept fines.

The deadline expires as soon as we become aware of it. That also applies here. According to Section 8 Paragraph 1 IfSG, reports must be made immediately, at the latest within 24 hours. In the case of nosocomial outbreaks according to Section 6 Paragraph 3 IfSG, reporting is mandatory. Therefore, clarify contractually with the institute how the flow of information for reportable findings between the institute, the treating doctor and the facility management is organised and what escalation deadlines apply. A written reporting chain is mandatory, not a convenience feature, and it should contain at least two levels of representation.

According to Section 23 Paragraph 5 IfSG, the hygiene plan is a facility-related document that specifies the hygiene and infection prevention measures. It must be created and updated by the institution; the Institute of Microbiology and Hygiene can advise and provide technical comments, but cannot bear responsibility. This division is clear in regulatory terms, but is often unclear in practice. If the institute writes the hygiene plan and the facility only signs it, the facility formally assumes responsibility for a plan that it has not implemented operationally. This doesn't work and is noticed in the audit.

The hygiene officer (in clinics often a doctor with a KRINKO curriculum) is the operational interface. At CIVAC, this role is represented as a compliance platform and officer-as-a-service: The workspace maintains the hygiene plan in versioned form, documents inspections, holds training certificates and links findings from the institute with measures. Licence the workspace for your internal representatives or have our representatives order it. Both make the connection between the findings and the hygiene plan entry verifiable and consistently versionable.

In practical terms, this means: Every critical finding from the institute triggers a hygiene plan entry that documents the finding, the derived measure, the person responsible and the date of implementation. Audit-proof, documented, Section 23-proof. When the health department checks, this history is in one line, not as a collection of loose emails and PDF attachments. This structural work is not the task of the institute, but it is the task by which an institution is measured in supervision. It also decides whether nosocomial risks can be insured.

A good contract with an institute for microbiology and hygiene regulates seven points, each of which must be formulated in a verifiable manner, not as a declaration of intent. First: The service catalogue with concrete parameters, methods and reference standards. Second: The accreditation certificates with scope, ideally as an attachment to the contract with a versioning clause in the event of accreditation changes. Third: Response times and delivery times for findings per parameter, including special and Cito procedures for reportable pathogens.

Fourth: The escalation path for critical findings (e.g. reportable pathogens according to Section 7 IfSG or exceeding limit values ​​for legionella according to TrinkwV). Who calls who and when? Which threshold triggers which reaction? Fifth: The sampling plan as an integral part of the contract, with annual review and adjustment clause in the event of updated KRINKO recommendations or changed risk situation.

Sixth: The advisory hygiene as a separate block with hourly quotas or flat rate and with clearly defined occasions (inspection, outbreak, plan review, training). Seventh: The data interface, i.e. the question of whether findings flow electronically into the HIS or into the hygiene tool, in which format and with which interface standards (HL7, DICOM, LDT, CSV, FHIR). Without a clear interface, there is additional effort driven by media disruption, which massively slows down hygiene reporting and creates staff loyalty.

The auditor calls, the evidence is ready. This phrase is doubly applicable here because in the case of nosocomial outbreaks, the health department does not wait a week until internal search processes have been completed. Anyone who draws up the contract according to these seven points has a reliable basis and avoids the typical complaints.

Two functions are often mixed in the market, but are different in terms of methodology and regulation. Microbiological diagnostics refers to specific patient samples with the question: Which pathogen is present, which resistance, which therapy option? Hygiene surveillance relates to the environment and population: How do nosocomial infection rates develop, which clusters form, which hygiene measures are effective? Both functions require different methods, reference standards and reporting structures. Separating them is not academic, but operationally necessary.

For microbiological diagnostics, standards such as EUCAST for resistance testing, ISO 15189 for laboratory processes and the medical-microbiological professional code for the release of findings apply. For hygiene surveillance, KISS (Hospital Infection Surveillance System of the NRZ at RKI), the KRINKO recommendations for surveillance and, for nursing facilities, the facility-specific hygiene plans in accordance with Section 23 IfSG apply. Anyone who sources both functions from one company has synergies if the data flows are separated internally and confidentiality is maintained. Otherwise there is a risk of data protection conflicts according to Art. 9 GDPR.

An institute that offers both must clearly separate which person is responsible for which function. The fusion of diagnostics and surveillance in one reporting can lead to distortions, for example if a single positive patient result is misinterpreted as a hygiene indicator. In the CIVAC workspace, this separation can be reflected in the evidence structure, so that diagnostic findings and surveillance metrics have separate audit paths. This means that the significance of both functions remains intact, and the institution can clearly assign which finding triggered which measure during supervisory audits.

Changing an institute is possible, but not trivial. Four aspects deserve particular attention. Firstly, the historical findings: historical data from the last 24 to 60 months should be transferred in machine-readable form (CSV, HL7 export) because they are the basis for assessing trends and clusters. Without this history, the new institute starts from scratch and cannot recognise seasonal patterns, resistance developments or cluster formations.

Secondly, the interface to the HIS and the hygiene tool. Changing the institute often means changing the data formats, the LDT interfaces and the handover routines. This technical migration should be planned three months in advance, including test results, double findings in a transition phase and written acceptance of the new interface by the facility IT. A poor interface change can lead to loss of findings, which have reportable consequences in the IfSG context and trigger expensive rework.

Thirdly, staff retention. If the specialist medical advice at the old institute depends on a specific person, their loss is a risk. At the new institute, clarify which person will provide advice and which representative is organised. Others run compliance like a filing cabinet. We run it like software. In the CIVAC workspace, history, interfaces and person assignment remain in a uniform structure, so that the change of institute in the workspace is a configuration change, not a data migration in Excel lists. This saves weeks.

Fourthly, communication with the health department: If you change the testing laboratory according to TrinkwV, a notification makes sense in order to avoid misunderstandings when reporting the findings. This notification should be included in the handover plan, ideally with the date, recipient and written confirmation.

An institute for microbiology and hygiene is both a partner and a supplier. Responsibility for the hygiene plan, IfSG reports and nosocomial prevention remains with the institution. There are three points you should clarify in writing after reading this article: Is the institute's accreditation resilient for specific parameters, i.e. for every parameter actually commissioned? Is there a jointly developed and annually reviewed sampling plan? Is the interface to the hygiene officer and the hygiene plan documented, i.e. not just organised informally? These three questions decide whether your facility can show a closed chain of evidence in the audit.

CIVAC is a compliance platform and officer-as-a-service solution that operationally supports precisely this interface between findings and hygiene plan, between institute and facility, between diagnostics and surveillance. Licence the workspace for your internal representatives or have our representatives order it. Both models use the same ISO/IEC 27001:2022 certified infrastructure with EU data residency, the same audit templates and the same ordering workflow. The choice depends on whether you have your own hygiene specialist or want to source the function externally.

If you would like to have the interface between your Institute of Microbiology and Hygiene and your internal hygiene structure checked, write to info@civac.de or use the contact form on civac.de. Within two working days you will receive a structured proposal with gap analysis, interface mapping and an onboarding plan for the hygiene officer function. Turn reading into an assignment.