What officers need to know.
Regulatory shifts, framework updates and operational guidance, curated for Data Protection, IT Security, Compliance and AI Governance leads. Written from the field, verified against primary sources.
How to Hire an External Data Protection Officer in Germany: Process, Cost, Liability
Appointing an external Data Protection Officer in Germany is not a procurement detail. It is a statutory act under Art. 37 GDPR with personal liability, deadlines, and an evidence trail. This guide explains the legal trigger, the contract structure, the cost ranges, and how CIVAC delivers in two working days.
Hazardous Substances Officer in Germany: Appointment, Duties, and Liability under GefStoffV
Germany's Hazardous Substances Ordinance (GefStoffV) requires structured oversight of chemical workplace risks. This guide explains who needs to appoint a Hazardous Substances Officer, what the role covers, and how to staff it without overspending in German subsidiaries.
Fire protection officer costs: What ordering, training and operation really cost
How much does a fire protection officer cost? A realistic framework is between 6,000 and 30,000 euros net per year, depending on the model. This article explains the cost blocks, the risk of fines and the model options internal, external or hybrid.
Incident and valuable assets: Who represents the incident representative on sabbatical
Incident operations must have an incident representative permanently available. Special representation obligations apply to credit balance models, sabbaticals and long-term accounts. This article explains Section 9 of the 12th BImSchV and the practical setup.
Draft bill for the HinSchG: What became of the draft and what applies today
The draft bill for the HinSchG from April 2022 was changed several times during the legislative process. The article reconstructs the most important changes, shows the current legal situation and explains how you can set up an internal reporting office that complies with the HinSchG.
Order a market value appraisal: When, how and with what compliance obligations
A market value report in accordance with Section 194 of the BauGB is a mandatory document for many transactions, credit checks and group valuations. This article shows when an appraisal is required, how the ordering process works and what obligations exist for management, the legal department and compliance.
ISO 9001 Quality Manager Services in Germany: Roles, Cost, and Appointment
ISO 9001:2015 certification requires a dedicated quality management representative, internal audits, and a documented management system. This guide explains the scope of external quality manager services in Germany, costs, appointment letters, and how CIVAC delivers the function in two business days.
Quality management representative: tasks, order and ISO 9001:2015
Since ISO 9001:2015, the appointment of a quality management representative is no longer formally mandatory, but is in fact indispensable. This guide explains tasks, ordering, liability and audit preparation including operational implementation in a central workspace.
Select occupational health service provider: criteria, contracts, officer mandate
The Occupational Safety Act (ASiG) obliges practically every company with employees to provide company medical care. Which criteria count when selecting an occupational health service provider, which contractual clauses are indispensable and how is the appointment certificate documented in an audit-proof manner?
Psychological risk assessment with the company doctor: process in seven steps
The assessment of psychological stress has been an express mandatory part of every risk assessment since 2013. The article shows the seven-step process with the company doctor, the mandatory documentation, the typical complaints from the supervisory authorities and the connection to the company doctor's confidentiality obligation.
Set up a complaint office: AGG, HinSchG and the obligations of the employer
The Section 13 AGG Complaint Office is mandatory for every employer. With the HinSchG, a second mandatory reporting point has been added since 2023. This guide shows how both positions are structured, delineated and documented in an audit-proof manner, and how CIVAC delivers dual duty in a workspace.
AGG training: obligations, content and evidence for 2026
Section 12 Paragraph 2 AGG obliges employers to train employees to prevent discrimination. This article explains the scope of duties, target groups, content, frequency and the documentation that a supervisory audit or labour court proceedings expect.
ESG Reporting Software in Germany: How to Cover CSRD and CSDDD in One Workspace
CSRD took effect for large undertakings in financial year 2024, and CSDDD is now phasing in. This article shows how German enterprises evaluate ESG reporting software that holds up to auditors, regulators, and supply-chain scrutiny.
Money laundering prevention training: Obligations, frequency and evidence according to Section 6 GwG
Mandatory content, frequencies, evidence and fine risks for AMLA employee training. How you can implement the training obligation in accordance with Section 6 Paragraph 2 No. 6 GwG in an audit-proof manner, what BaFin checks in the AuA-BT and how the CIVAC platform stores training certificates in an audit-proof manner.
Money laundering officer duty: Which industry has to order?
Not every company has to appoint a money laundering officer, but the list of those required under Section 2 of the GwG is longer than many medium-sized companies assume. This article shows which industries are affected, when the ordering obligation applies and what fines can be imposed if failure to do so occurs.
Create a fire service plan according to DIN 14095: requirements, content and order path
The fire brigade plan according to DIN 14095 is the most important document for the responding fire brigade in the event of a fire. This guide shows when it is mandatory, what it must contain, who creates it and how it is kept up to date.
Fire protection assistant training: duties, quotas and proof in the company
Fire protection assistant training is mandatory according to § 10 ArbSchG and ASR A2.2. What quota, what content, what evidence in the audit and how the BSB keeps the organisation audit-proof.
AML Compliance in Germany: Geldwaeschegesetz Obligations and How to Operate Them
Germany regulates anti-money laundering through the Geldwaeschegesetz (GwG) and BaFin guidance. This article explains who qualifies as an obliged entity, what risk analysis and KYC obligations apply and how CIVAC supports the AML officer with platform plus officer-as-a-service.
Office and home office risk assessment: template, structure, effectiveness test
Risk assessments have been mandatory since 1996. The requirements were sharpened in 2016 and 2022 with telework and mobile work. This article provides the template structure, the test steps and the documentation requirements according to Section 6 ArbSchG.
SiFa costs 2026: What an occupational safety specialist really costs
The costs for an occupational safety specialist depend on the working hours in accordance with DGUV regulation 2, the size of the company and the risk class. This article calculates specific scenarios and shows where providers calculate too cheaply and price in risks.
Calculate SiFa operating time according to DGUV regulation 2: Appendix 2 and Appendix 3 explained
The working time of the occupational safety specialist results from DGUV regulation 2 with basic support according to Appendix 2 and company-specific support. If you understand the logic, you can avoid under- and over-sizing.
Hazardous substances in the company: Obligations, cadastre and appointment certificate at a glance
Companies encounter hazardous substances in almost every industry, from cleaning agents to welding fumes. The Hazardous Substances Ordinance requires risk assessments, registers, operating instructions and training. The article organises the duties and shows how a digital workspace makes bureaucracy sustainable.
Occupational Health Services in Germany: English-Speaking Company Doctors and the ASiG Framework
Every employer in Germany must appoint a company doctor under section 2 ASiG. For international teams, the challenge is not the appointment itself but documentation, G-examinations, and works-council coordination in English. This guide explains the legal frame, the typical service catalogue, and how a compliance workspace keeps records audit-ready in both languages.
Workplace Risk Assessment Template Germany: What §5 ArbSchG Actually Requires
A workplace risk assessment template that works in Germany must satisfy §5 of the Occupational Safety and Health Act, the relevant Berufsgenossenschaft, and the labour inspectorate of the Bundesland. This article explains the legal minimum and how to keep the template auditable across sites.