How to do a risk assessment in Germany: a guide in 7 steps
Who has to carry out a risk assessment, how do you go about it and what belongs in the documentation? The key steps, hazard factors and a checklist.
Last updated on 8 min readAMS Go editorial team
Key points at a glance
- Every employer in Germany must carry out and document a risk assessment from the very first employee (Sections 5 and 6 of the Occupational Safety and Health Act, ArbSchG).
- The process follows seven steps – from defining work areas to keeping the assessment up to date.
- Protective measures are selected according to the STOP principle: substitution before technical, organisational and personal measures.
- The risk assessment is not a one-off document; it must be updated whenever something changes.
What is a risk assessment?
The risk assessment (Gefährdungsbeurteilung) is the central instrument of occupational safety in Germany. With it, the employer identifies which hazards can occur at work, evaluates them and defines suitable protective measures. It is also the basis for many other duties – for example operating instructions, safety instructions, the choice of personal protective equipment and inspections of work equipment.
A good risk assessment is not an end in itself: it helps prevent accidents and work-related illness, and it makes clear who implements which measure by when.
Who has to carry out a risk assessment?
The duty follows from Section 5 of the Occupational Safety and Health Act (Arbeitsschutzgesetz, ArbSchG) and applies to every employer – regardless of industry and company size, from the very first employee. Under Section 6 ArbSchG the result must be documented.
The employer is responsible. They can delegate the work to competent persons, such as managers. The occupational safety specialist (Fachkraft für Arbeitssicherheit) and the company doctor (Betriebsarzt) provide advice. It pays to involve employees – they know their workplaces best. If there is a works council, it has a right of co-determination on the risk assessment.
Carrying out a risk assessment in 7 steps
A seven-step approach has proven itself, as also recommended by the German employers' liability insurance associations (Berufsgenossenschaften) and the Federal Institute for Occupational Safety and Health (BAuA):
- 1
Define work areas and activities
Divide the company into manageable units – by work area, activity or group of people. Similar workplaces can be combined.
- 2
Identify hazards
For each area, systematically identify which hazards occur. Inspections, conversations with employees, accident reports, operating manuals and safety data sheets all help.
- 3
Assess hazards
Evaluate each hazard by how likely harm is and how severe it would be. This shows whether and how urgently action is needed.
- 4
Define measures
Define protective measures according to the STOP principle and the state of the art – each with a person responsible and a deadline.
- 5
Implement measures
Implement the measures and follow up on whether deadlines are met.
- 6
Check effectiveness
Check whether the measures work and whether they have created new hazards.
- 7
Document and update
Record results, measures and the review, and update the risk assessment as soon as anything changes.
The 11 hazard factors at a glance
A fixed system helps ensure no hazard is overlooked. A widely used classification is the eleven hazard factors (Gefährdungsfaktoren) of the Federal Institute for Occupational Safety and Health (BAuA):
Mechanical hazards
ExamplesMoving machine parts, tripping, falling, falling objects
Electrical hazards
ExamplesElectric shock, arc flash
Hazardous substances
ExamplesInhalation, skin contact, fire caused by solvents
Biological agents
ExamplesBacteria, viruses, mould
Fire and explosion hazards
ExamplesFlammable substances, dusts, ignition sources
Thermal hazards
ExamplesHot or very cold surfaces and media
Special physical effects
ExamplesNoise, vibration, optical radiation
Working environment
ExamplesClimate, lighting, space
Physical strain
ExamplesLifting and carrying, awkward postures, overhead work
Mental factors
ExamplesWork intensity, working hours, conflicts
Other hazards
ExamplesWeather, animals, contact with customers
Measures according to the STOP principle
A fixed order of priority applies when choosing protective measures (Section 4 ArbSchG): hazards are eliminated at source wherever possible, technical solutions take precedence over organisational ones, and personal protective equipment is only used when other measures are not enough.
S – Substitution
MeaningEliminate the hazard by replacing it
ExampleWater-based instead of solvent-based cleaning agent
T – Technical
MeaningShield the source of the hazard technically
ExampleGuard, extraction, light curtain
O – Organisational
MeaningRegulate processes and responsibilities
ExampleSafety instruction, access rules, working time design
P – Personal
MeaningProtect employees with protective equipment
ExampleHearing protection, protective gloves, safety shoes
How is the risk assessment documented?
The law does not prescribe a specific form – paper, spreadsheet or software are all possible. Under Section 6 ArbSchG, however, the documentation must show the result of the risk assessment, the measures defined and the result of their review. In practice it includes:
- Work area, activity or group of people
- Hazards identified and their assessment
- Protective measures defined, with people responsible and deadlines
- Implementation status and result of the effectiveness check
- Date and people involved
When does the risk assessment have to be updated?
The risk assessment must reflect the actual conditions in the company. The ArbSchG does not prescribe a fixed interval – but many companies review their risk assessments at least once a year. Typical reasons for an update are:
- New machines, work equipment or hazardous substances
- Changed work processes, conversions or new workplaces
- Accidents, near misses or work-related illness
- New regulations or new knowledge about the state of the art
- Findings from safety inspections and effectiveness checks
Checklist: carrying out a risk assessment
- Work areas, activities and groups of people are recorded
- All hazard factors were checked for each area – including mental workload
- Every hazard is assessed and the need for action noted
- Measures are defined according to the STOP principle
- Every measure has a person responsible and a deadline
- The effectiveness of the measures was checked
- Result, measures and review are documented
- Employees were instructed on the results
Free templates for this guide
As PDF and Excel, no sign-up – free to use in your own company.
Frequently asked questions
Is a risk assessment mandatory in Germany?
Yes. Under Section 5 ArbSchG every employer must assess the hazards at work – regardless of company size and from the very first employee. Under Section 6 ArbSchG the result must be documented.
Who carries out the risk assessment?
The employer is responsible. They can delegate the task to competent persons such as managers. The occupational safety specialist and the company doctor support and advise; employees should be involved.
How often does the risk assessment have to be updated?
There is no fixed interval. The risk assessment must be updated when work equipment, processes or substances change, after accidents or when new knowledge emerges. Many companies also review it at least once a year.
What happens if there is no risk assessment?
The supervisory authorities can issue orders and impose fines. In the event of an occupational accident, the employer also faces liability consequences – for example recourse claims by the employers' liability insurance association in cases of gross negligence.
Can I carry out the risk assessment digitally?
Yes. The form is up to you. Software such as AMS Go helps with templates and AI suggestions for hazards, links measures directly to people responsible and deadlines, and keeps the documentation up to date and audit-proof.
Terms from the glossary
This guide gives a general overview of German occupational safety law and does not replace legal advice. The regulations in force and the rules of the statutory accident insurance institutions are authoritative.
Organise occupational safety digitally
With the occupational safety software AMS Go you handle risk assessments, safety instructions, inspections and more in one system – mobile and with AI support.
