Psychosocial Risk Assessment (GBU Psyche): A Legal Guide for Employers in Germany

Starting in 2026, Germany's state occupational safety authorities will inspect at least 5 percent of all businesses every year, with a clear focus on an up-to-date psychosocial risk assessment. Yet many companies still skip this step, even though the legal duty has applied since 2013 and covers every employer from the very first employee onward. This guide explains what the psychosocial risk assessment (GBU Psyche) actually requires, how the legally defined process works, and what role the employee survey plays in it.

The psychosocial risk assessment (Gefährdungsbeurteilung psychischer Belastung, or "GBU Psyche") is a mandatory part of the general risk assessment required under Germany's Occupational Health and Safety Act (Arbeitsschutzgesetz, ArbSchG). It obliges employers to systematically identify the psychosocial stress factors present in the workplace, assess them, and derive measures for designing work in a way that protects employees' health.

Psychosocial workload initially describes, in neutral terms, the sum of all external influences acting on a person at work — for example, work intensity, decision-making latitude, social relationships, or working-time arrangements. A health risk only arises once these influences place a negative strain on a specific person. The assessment therefore does not start from illnesses that have already occurred; it starts preventively, at the level of the working conditions themselves.

Typical Areas of Stress

The Joint German Occupational Safety and Health Strategy's (GDA) recommendations for considering psychosocial workload in risk assessments (GDA Working Programme Psyche) distinguish five core areas that every psychosocial risk assessment should cover:

• Work content and tasks — for example, task completeness, decision latitude, over- or under-demand
• Work organisation — for example, working time, workflow, communication and cooperation
• Social relationships with colleagues and managers
• Work environment — for example, noise, lighting, physical conditions with a psychological effect
• New forms of work — for example, mobile working, constant availability, digital communication

In practice, the psychosocial risk assessment is often treated purely as a legal obligation to be handled with as little effort as possible. That view falls short. Done properly, it produces a data foundation that is useful for far more than documentation for the supervisory authority.

• Early detection of stress peaks: Psychosocial stress factors become visible before they show up as absences, resignations, or declining performance.
• Targeted rather than blanket measures: Results broken down by job group or department show where action is actually needed, instead of spreading wellbeing measures evenly regardless of need.
• Trust and retention: Employees see that psychological strain is taken as seriously as physical safety.
• A solid basis for managers: Results give concrete starting points for conversations and team development, instead of relying on assumptions.

In practice, the structured employee survey is the central tool for gathering these insights systematically and repeatably — more on this in the chapter on methods.

The duty to carry out a risk assessment has existed since 1996, when Germany's Occupational Health and Safety Act (ArbSchG) came into force. With the amendment of 19 October 2013, the legislator explicitly added psychosocial workload as its own risk factor under Section 5(3) No. 6 ArbSchG, effective 25 October 2013. Since then, the law has made it unambiguous: psychological health counts just as much under occupational safety law as physical safety.

Responsibility for carrying out the assessment lies with the employer (Section 3 ArbSchG). The employer does not have to perform the assessment personally and may commission qualified staff or external service providers — legal responsibility, however, remains with the company.

Additional Legal Bases and Standards

In addition to Section 5 ArbSchG, Section 3 of the Ordinance on Industrial Safety and Health (BetrSichV) and Section 3 of the Workplace Ordinance (ArbStättV) also require psychological aspects to be taken into account for work equipment and the work environment. Germany-wide guidance is provided by the design recommendations for considering psychosocial workload in risk assessments, issued under the Joint German Occupational Safety and Health Strategy (GDA Working Programme Psyche).

Internationally, ISO 45003:2021 complements this framework. The standard specifies requirements for managing psychological health and safety at work and is designed as a complement to ISO 45001. It is not mandatory in Germany, but for companies certified to ISO 45001 and internationally active groups, it offers useful guidance that goes beyond the national requirements.

For the risk assessment, including its psychosocial component, the Joint German Occupational Safety and Health Strategy defines a standardised seven-step process. Companies do not go through it just once; it runs as an ongoing cycle.

The law does not prescribe a specific data-collection method. In practice, companies use three approaches, which can also be combined:

Selected Assessment Instruments at a Glance

Within these three approaches, a number of standardised questionnaire instruments have become particularly well established in practice, including:

In practice, companies rarely need to choose an instrument themselves: employee-survey software solutions often already come with a ready-made, GDA-compliant question catalogue, so companies don't have to handle the selection and methodological design on their own.

A structured employee survey is the best fit for most companies, since it delivers the documentation basis required by law while also providing a valid, comparable picture of the actual stress situation across departments and over time.

A central decision when implementing the psychosocial risk assessment concerns its framing: should the company run it as a standalone survey, or integrate it into the annual employee survey it already plans to run? Both approaches are equally valid under the law; the choice depends on organisational factors.

The design of the psychosocial risk assessment is subject to the works council's co-determination rights under Section 87(1) No. 7 of the Works Constitution Act (BetrVG) (rules for preventing workplace accidents and occupational illnesses, and health protection). The works council therefore has a say on method, questionnaire content, execution, and the follow-up process. Co-determination does not apply to the question of whether the assessment takes place at all, since the law already mandates it.

In practice, a works agreement (Betriebsvereinbarung) is advisable, setting out purpose, methodology, anonymisation, data access, and how results are handled in a binding way. This not only creates legal certainty but also increases acceptance — and with it, willingness to participate among staff.

Section 6 ArbSchG obliges employers to document the risk assessment in writing. For companies with more than ten employees, the law mandates written form; for smaller companies, the supervisory authority can require it on a case-by-case basis.

The documentation must contain at least the following information:

• Identified psychosocial hazards by job group or department
• Defined measures to reduce the strain
• Responsible persons and implementation deadlines
• Result of the effectiveness review

Germany's state occupational safety authorities review the implementation of the risk assessment as part of their supervisory activity. If they find deficiencies during an inspection, they can first issue an enforceable order with a deadline under Section 22(3) ArbSchG.

If a company disregards such an order, it commits a regulatory offence under Section 25 ArbSchG. Fines of up to €30,000 are then possible. Violations of subordinate regulations such as the Workplace Ordinance or the Ordinance on Industrial Safety and Health can be fined up to €5,000. In cases of persistent repetition, Section 26 ArbSchG even classifies the violation as a criminal offence, punishable by up to one year's imprisonment or a fine.

From 2026 onward, inspection intensity will also increase: the German states must inspect an average of at least 5% of their businesses per year, with a particular focus on an up-to-date psychosocial risk assessment.

Beyond corporate liability, company management can also come into personal focus if the assessment is missing or inadequate. Under Section 130 of the German Administrative Offences Act (OWiG) — breach of supervisory duty in businesses and companies — management can be fined personally if it fails to take the supervisory measures required in the business and this enables a breach of a duty relating to the business, with fines of up to €1 million for breaches involving criminal liability. Whether and to what extent such an organisational fault applies in a specific case depends on the circumstances and cannot be answered categorically.