A workplace risk assessment (German: Gefährdungsbeurteilung) is a legally mandated occupational health and safety instrument that requires employers to systematically identify and evaluate all workplace hazards and derive appropriate protective measures (§5 ArbSchG — German Occupational Health and Safety Act). It applies to all companies — regardless of size or industry — and must be documented in writing. Employers who fail to maintain a risk assessment risk fines of up to €5,000 per violation and face personal liability in the event of workplace accidents.
Note for international readers: The Gefährdungsbeurteilung is a specific requirement under German law (ArbSchG). While the underlying principles align with international standards such as ISO 45001 and EU Directive 89/391/EEC, the legal references in this article specifically apply to Germany. If you operate in another country, please consult your national occupational health and safety legislation.
What Is a Workplace Risk Assessment?
The risk assessment is the central planning instrument of occupational health and safety management in Germany. According to §5 para. 1 of the Occupational Health and Safety Act (ArbSchG), every employer is obligated to assess the hazards associated with their employees' work and determine which occupational safety measures are required.
In practice, this means systematically analysing all work activities, equipment, work environments and organisational structures in your company for potential risks to employee health and safety — and deriving binding protective measures from this analysis.
A risk assessment is not a one-time exercise, but an ongoing process: it must be reviewed and updated whenever working conditions change significantly, after workplace accidents or near-misses, and at regular intervals.
Who Is Required to Conduct One?
The obligation to conduct a risk assessment applies without exception to all employers in Germany — whether a large corporation, a medium-sized company or a sole trader with a single employee. Industry, field of activity and company size are irrelevant. Office workplaces, home office setups and field service activities all fall under the legal requirement.
Who Is Responsible?
The Employer as Primary Responsible Party
Legal responsibility for the risk assessment always lies with the employer. This responsibility cannot be delegated — even if you transfer the operational execution to others. This means: you can assign tasks to managers, safety officers or external specialists, but you remain responsible for the completeness and quality of the assessment.
The Role of Safety Officers and Works Councils
Occupational safety specialists (Fachkräfte für Arbeitssicherheit, Sifa) are specially trained advisors who support employers in carrying out risk assessments. They are legally required once a company exceeds a certain size (§2 ASiG — Safety at Work Act). Safety representatives (Sicherheitsbeauftragte, Siba) are employees who assist with safety matters without bearing their own legal obligations.
The works council (Betriebsrat) has co-determination rights regarding health protection regulations under §87 para. 1 no. 7 of the Works Constitution Act (BetrVG) — it must be involved in defining protective measures, though not necessarily in the hazard identification process itself.
The 6 Categories of Workplace Hazards
Under §5 para. 3 ArbSchG, six categories of hazards must be covered in any risk assessment:
1. Physical hazards — Noise, vibration, radiation (UV, X-ray), heat or cold affecting employees.
2. Chemical and biological hazards — Hazardous substances, dust, fumes or biological agents such as bacteria and viruses (particularly relevant in healthcare and laboratory settings).
3. Physical (ergonomic) strain — Heavy lifting and carrying, one-sided postures, repetitive movements or non-ergonomic working positions.
4. Psychological stress — Time pressure, monotony, lack of autonomy, conflicts with colleagues or customers. Since 2013, the consideration of psychological stress has been explicitly enshrined in §5 ArbSchG.
5. Working environment conditions — Lighting, room climate, spatial layout, noise levels and ergonomic workplace design.
6. Work organisation and working time arrangements — Shift work, night work, overtime, unclear responsibilities or inadequate onboarding.
Conducting a Risk Assessment Step by Step
The 5-Step Process
A legally sound risk assessment follows a structured process:
Step 1: Define work areas and activities — Determine which work areas, workplaces and activities need to be assessed. For similar activities (e.g. multiple identical office workstations), one representative assessment is generally sufficient.
Step 2: Identify hazards — Analyse all six hazard categories (see above) for each work area. Actively involve employees — they know the actual working conditions best.
Step 3: Evaluate risks — For each identified hazard, assess the risk: How likely is harm to occur? How serious would it be? Prioritise your actions accordingly.
Step 4: Define and implement measures — Derive concrete protective measures. The ArbSchG follows the so-called STOP principle: Substitution takes priority over Technical measures, then Organisational measures, and finally Personal protective equipment.
Step 5: Review effectiveness — After implementing measures, verify whether they have actually reduced the hazard. Adjust the assessment as needed.
Home Office and Mobile Working
Employers' occupational safety responsibility extends to home office workplaces as well. Since physical inspections of private homes are generally not feasible, employee self-assessments have become the established practice in Germany: employees complete a standardised questionnaire about their working conditions at home (desk, chair, lighting, screen distance, etc.). The Federal Institute for Occupational Safety and Health (BAUA) provides adapted guidance tools for mobile working arrangements. Further information on designing hybrid working models is available in the Aivy lexicon.
Psychological Stress — What to Consider
Psychological hazards are frequently underestimated in practice or addressed only superficially — yet they are legally equivalent to physical hazards. According to BAUA, relevant stress factors include: high time pressure, frequent work interruptions, conflicts within teams or with managers, emotional demands (e.g. in social professions), and monotony or lack of development opportunities.
The GDA Work Programme "Psyche" (Joint German Occupational Safety and Health Strategy) offers practical checklists and survey instruments for identifying psychological hazards. An open error culture within the organisation and psychological safety in teams are complementary factors that can sustainably reduce psychological risk levels over time.
Documentation Requirements and Fine Risks
What Must Be Documented? (§6 ArbSchG)
§6 ArbSchG requires that the results of the risk assessment be recorded in writing. For companies with more than 10 employees, this is explicitly required by law. For smaller businesses, the written documentation requirement is formally less strict, but is strongly recommended — in the event of damage or accident, it serves as the primary piece of evidence.
The documentation must contain at minimum: the hazards identified per work area, the protective measures derived, deadlines and responsibilities, and the date of the assessment. Digital documentation is legally permissible.
Consequences of Missing Documentation
Failing to conduct a risk assessment constitutes an administrative offence under §25 ArbSchG. Supervisory authorities (trade associations, labour inspection offices) can impose fines of up to €5,000 per violation. For serious or repeated violations, higher fines are possible. Furthermore, the employer may face personal liability in the event of a workplace accident if no or an incomplete risk assessment was in place. The trade association can also order corrective action and, in extreme cases, prohibit business activities.
Frequently Asked Questions About Risk Assessments
Who is responsible for the risk assessment?
Fundamentally, the employer (§5 ArbSchG). Operational execution can be delegated to managers, safety officers or external occupational safety specialists. However, overall legal responsibility always remains with the employer. The works council has co-determination rights regarding the definition of protective measures (§87 para. 1 no. 7 BetrVG), but not regarding the hazard identification process itself.
How often does the risk assessment need to be updated?
The ArbSchG does not specify fixed intervals. An obligation to update arises when working conditions change significantly, when new equipment or substances are introduced, after workplace accidents or near-misses, and when protective measures prove ineffective. As a rule of thumb, BAUA recommends an annual review.
Does the risk assessment need to be documented in writing?
Yes. §6 ArbSchG requires written documentation, explicitly mandatory by law for companies with more than 10 employees. For smaller businesses, written documentation is not strictly required but is strongly recommended for liability reasons. Digital documentation is permissible.
Does the risk assessment apply to home office workplaces?
Yes. Employers bear occupational safety responsibility for home office workplaces as well. Since inspections of private premises are usually not feasible in practice, employee self-assessment via a standardised questionnaire has become the established approach. BAUA provides adapted guidance tools for this purpose.
Must psychological stress be taken into account?
Yes, explicitly enshrined in §5 ArbSchG since 2013. Factors to be considered include time pressure, monotony, lack of autonomy, conflicts and emotional demands. The GDA Work Programme "Psyche" offers practical guidance, checklists and survey instruments.
What happens if no risk assessment is in place?
The absence of a risk assessment is an administrative offence (§25 ArbSchG): fines of up to €5,000 per violation are possible. In addition, the employer faces personal liability in the event of a workplace accident if no risk assessment was in place. The trade association can order corrective action or, in extreme cases, prohibit specific activities.
Which 6 hazard categories must be covered?
According to §5 para. 3 ArbSchG: physical hazards, chemical and biological hazards, physical (ergonomic) strain, psychological stress, working environment conditions, and work organisation and working time arrangements. All six categories must be assessed for every work area — even if individual categories ultimately reveal no relevant hazard.
Conclusion
A risk assessment is not a bureaucratic box-ticking exercise, but an effective instrument for protecting your employees' health — and for safeguarding your organisation. Carrying out the five steps consistently, assessing all six hazard categories, documenting results carefully and updating them regularly not only fulfils legal requirements, but actively contributes to a healthy workplace and a sustainable organisational culture.
Keep in mind in particular: psychological stress has been a legally equivalent consideration since 2013 — an area that many companies still underestimate. And for home office workplaces, the obligation applies just as it does to traditional offices.
Would you like to learn more about how modern HR technology can make your people operations more efficient and fair overall? Learn more about the Aivy digital platform.
Sources
- Occupational Health and Safety Act (ArbSchG) §5 — Assessment of Working Conditions. Federal Ministry of Justice, Germany, 1996 (last amended 2013). https://www.gesetze-im-internet.de/arbschg/__5.html
- Occupational Health and Safety Act (ArbSchG) §6 — Documentation. Federal Ministry of Justice, Germany, 1996. https://www.gesetze-im-internet.de/arbschg/__6.html
- Occupational Health and Safety Act (ArbSchG) §25 — Fine Provisions. Federal Ministry of Justice, Germany. https://www.gesetze-im-internet.de/arbschg/__25.html
- Federal Institute for Occupational Safety and Health (BAUA): Risk Assessment — Guidance and Tools. Continuously updated.
- DGUV Information 211-041: Risk Assessment. German Social Accident Insurance (DGUV), 2021. https://publikationen.dguv.de/regelwerk/dguv-informationen/2765/gefaehrdungsbeurteilung
- GDA Work Programme "Psyche" — Guidance for Assessing Psychological Hazards. Joint German Occupational Safety and Health Strategy, 2022. https://www.gda-psyche.de
- Federal Ministry of Labour and Social Affairs (BMAS): Guidelines on Risk Assessment and Documentation, 2013. https://www.bmas.de
Make a better pre-selection — even before the first interview
In just a few minutes, Aivy shows you which candidates really fit the role. Beyond resumes based on strengths.
