Regulation Of Hospital Pathogen Sequencing Reporting Obligations Germany

Introduction

Hospital pathogen sequencing involves analysing the genetic material of bacteria, viruses, fungi and other infectious agents to identify mutations, monitor disease transmission, detect outbreaks and investigate antimicrobial resistance. In Germany, hospitals and diagnostic laboratories use pathogen sequencing to support infection prevention, clinical treatment and public-health surveillance.

The principal legislation is the Infection Protection Act (Infektionsschutzgesetz – IfSG). However, German law distinguishes between the obligation to report specified infectious diseases or pathogens and the use of genomic sequencing for surveillance. Hospitals do not have a universal statutory obligation to sequence every infectious pathogen or automatically submit every genomic sequence to the Robert Koch Institute (RKI).

Legal Framework Under the Infection Protection Act

1. Notification of Infectious Diseases – Section 6 IfSG

Section 6 IfSG establishes the notification obligations for specified diseases. Physicians and other persons identified by the provision must notify the competent public-health authority when the statutory conditions are met.

Notifications generally include relevant patient and clinical information, such as the suspected or confirmed disease, date of diagnosis and other information required by law.

Hospitals must establish internal procedures to ensure that reportable cases are identified and notified within the applicable statutory deadlines. The reporting obligation depends on the disease and circumstances specified in the Act.

2. Laboratory Reporting – Section 7 IfSG

Section 7 establishes notification requirements for specified pathogens detected by laboratories. This provision is particularly important for hospital microbiology departments and external diagnostic laboratories.

Where a laboratory identifies a pathogen listed under Section 7, the responsible laboratory professional must comply with the applicable reporting requirements. Depending on the pathogen, reporting may be made by name or without identifying the patient.

Importantly, Section 7 generally concerns the detection of specified pathogens. It does not establish a general obligation to perform whole-genome sequencing or submit the complete genomic sequence of every detected pathogen.

3. Reporting Procedures – Sections 8 to 11 IfSG

Sections 8 to 10 identify persons responsible for notifications and establish requirements concerning their content and transmission. Section 11 governs the forwarding of certain information through public-health authorities to the relevant state authorities and the RKI.

Hospitals must ensure that reporting responsibilities are clearly allocated between treating physicians, laboratory directors and other responsible personnel.

Genomic Sequencing and Additional Reporting Requirements

Pathogen sequencing may be conducted for several purposes:

Identifying mutations and emerging pathogen variants.

Investigating hospital-acquired infections.

Detecting transmission between patients or hospital departments.

Monitoring antimicrobial resistance.

Supporting outbreak investigations.

Contributing to national and international surveillance programmes.

The IfSG provides the foundation for infectious-disease reporting and epidemiological surveillance. Section 13 allows additional epidemiological surveillance activities, while Section 14 provides for electronic reporting and information systems.

However, these provisions should not be interpreted as creating an automatic nationwide duty for every hospital to sequence every pathogen. Additional sequencing and data-submission requirements may arise from specific statutory orders, public-health instructions, surveillance programmes, contractual arrangements or research protocols.

For example, during an outbreak, public-health authorities may require additional epidemiological information or coordinate sequencing investigations under their applicable legal powers.

Hospital Responsibilities and Data Protection

Hospitals must maintain appropriate infection-prevention and reporting procedures. Section 23 IfSG is particularly relevant because it establishes infection-prevention responsibilities for healthcare institutions and requires appropriate hygiene measures.

The General Data Protection Regulation (GDPR) applies where sequencing information is linked to identifiable patient information. Article 9 protects health data as a special category of personal data. Article 6 requires an appropriate legal basis for processing, while Article 32 requires suitable technical and organisational security measures.

Hospitals should therefore distinguish between:

Patient-identifiable clinical information.

Pseudonymised patient information.

Pathogen genomic sequences without identifying patient information.

A pathogen sequence is not automatically a patient's genetic data. Nevertheless, associated patient records may remain personal health data and require GDPR protection.

Role of the Robert Koch Institute

The RKI coordinates important national infectious-disease surveillance activities. It receives statutory notifications through the reporting system and analyses epidemiological information to identify public-health risks.

The RKI also participates in genomic surveillance and cooperation with laboratories and public-health institutions. Sequencing data can help establish relationships between pathogen samples and detect emerging resistance patterns.

Hospitals participating in specific surveillance networks may have additional reporting responsibilities under the relevant programme arrangements. These should be distinguished from general statutory notification obligations under the IfSG.

Relevant Case Laws

There is no leading German court judgment specifically determining a universal hospital obligation to submit pathogen genomic sequences. However, the following decisions provide relevant legal principles.

1. Federal Constitutional Court – Census Act Decision (BVerfGE 65, 1, 1983)

The Federal Constitutional Court recognised the constitutional right to informational self-determination. This principle requires public authorities to respect legal limits when collecting and using personal information. It is relevant when hospitals transmit identifiable patient information alongside pathogen sequencing results.

2. Z v Finland (Application No. 22009/93, 1997)

The European Court of Human Rights emphasised the importance of confidentiality in medical records. The decision supports strong safeguards when hospitals disclose patient information for infectious-disease surveillance.

3. S. and Marper v United Kingdom (Applications Nos. 30562/04 and 30566/04, 2008)

The Court held that retaining DNA profiles and related personal information engages Article 8 of the European Convention on Human Rights. Although the case concerned forensic DNA databases, its privacy principles are relevant to the retention and use of genetic information.

4. Digital Rights Ireland (Joined Cases C-293/12 and C-594/12, 2014)

The Court of Justice of the European Union invalidated the Data Retention Directive because its broad retention requirements disproportionately interfered with privacy rights. The decision provides proportionality principles relevant to large-scale health-data systems, although it did not concern pathogen sequencing directly.

Conclusion

Germany regulates hospital pathogen sequencing reporting through the Infection Protection Act, particularly Sections 6, 7, 8–11, 13, 14 and 23, together with GDPR requirements. Hospitals and laboratories must report specified diseases and pathogens when statutory conditions are satisfied. However, there is no universal obligation to sequence every detected pathogen or automatically submit every genomic sequence. Additional sequencing duties depend on specific legal requirements, public-health instructions or surveillance programme arrangements. Effective compliance requires accurate notification, clear institutional responsibilities, secure genomic-data handling and cooperation with the RKI.