Legal Lexicon

Wiki»Legal Lexikon»Verwaltungsrecht»Environmental Audit

Environmental Audit

Environmental Audit: Definition, Legal Framework, and Practical Implementation

The environmental audit is a structured, systematic, and documented process for evaluating environmental aspects, environmental performance, and compliance with environmental regulations as well as self-imposed environmental objectives within organizations. Legally, the environmental audit plays a central role in the ongoing development of environmental management and touches upon numerous national and European legal provisions.

Legal Foundations of the Environmental Audit

International and European Law

The origins of standardized environmental audits lie in international regulations. Of particular significance is the ISO 14001 series (environmental management systems) under the international sponsorship of the International Organization for Standardization (ISO). At the European level, the Regulation (EC) No. 1221/2009 on the voluntary participation by organizations in a Community eco-management and audit scheme (EMAS) is particularly relevant. This so-called EMAS Regulation governs environmental audits in the European Union in detail.

National Law in Germany

In German law, the environmental audit is primarily regulated by the Environmental Audit Act (UAG) of December 7, 2011. This implements the EMAS Regulation and contains provisions regarding the accreditation of environmental verifiers, the conduct of environmental statements and audits, and monitoring measures. Other laws, such as the Federal Immission Control Act (BImSchG) and the Circular Economy Act (KrWG), also refer to environmental audits, particularly with regard to compliance with operational environmental protection measures.

Content and Process of the Environmental Audit

Definition and Objectives

The environmental audit is an instrument for self-monitoring and improving corporate environmental performance. It serves to determine whether a company’s environmental policy, the procedures for implementing this policy, and environmentally relevant processes comply with the requirements of the respective environmental management systems as well as the applicable legal environmental requirements. In addition, the environmental audit aims to identify weaknesses and enable measures to remedy them.

Types and Scope of the Environmental Audit

Two main types of audit are distinguished:

  • Internal environmental audits: These are conducted within the organization and are part of the continuous improvement process.
  • External environmental audits (e.g., under EMAS, ISO 14001): These are performed by environmental verifiers and serve to provide independent verification and evidence of compliance with specific environmental management standards.

The scope of an environmental audit varies depending on the area of application and can range from individual operations to complex sites with multiple production lines. In many cases, the audit also extends to the assessment of supply chains and significant inputs.

Legal Obligations and Liability Issues

Statutory Obligations to Conduct Environmental Audits

As a rule, conducting an environmental audit is voluntary and subject to the decision of the respective company. However, for certain industries or under specific legal requirements, there may be an obligation to conduct or submit audit results. Participation in EMAS is always voluntary, but in return it requires regular environmental audits to ensure continuous improvement and transparency.

Review of Legal Compliance and Environmental Impacts

A key element of an environmental audit is the review of compliance with environmental regulations (“Legal Compliance Check”). If violations are identified, these must be systematically documented in accordance with the requirements of the UAG or ISO 14001, and targeted measures initiated. Violations of environmental regulations can result in regulatory sanctions, fines, and in individual cases, even criminal liability.

Liability and Legal Consequences

If an environmental audit identifies breaches of environmental requirements or deficiencies in environmental performance, organizations are obliged to take corrective action without delay. In the event of official inspections, documented environmental audits often serve as evidence of organized environmental protection and can lead to a reduction in sanctions or fulfillment of reporting obligations. If deficiencies identified in the audit report are not remedied, this may lead to stricter sanctions and claims for damages or recourse against responsible parties.

Requirements for the Process and Documentation of Environmental Audits

Audit Procedures and Reporting

Defined procedures must be followed when conducting an environmental audit, including in particular the creation of an audit plan, selection of areas to be audited, conducting interviews and inspections, as well as the review of documents. All findings are summarized in an audit report, which can be used internally and submitted to supervisory authorities.

Environmental Statement and Continuous Improvement

Particular importance is attached to the environmental statement, which must be prepared and updated regularly within an environmental management system (especially under EMAS). It documents the environmental policy, the key environmental aspects, the progress achieved, and the future goals of the organization. In principle, this statement must be made publicly accessible and is validated by environmental verifiers.

Special Aspects and Developments in Environmental Auditing

Digital Environmental Auditing and Data Protection

With digitalization, environmental auditing is also undergoing transformation. Electronic audit procedures, databases for legal monitoring, and cloud-based evaluations are becoming increasingly important. In this context, data protection and data security requirements must be observed, especially in accordance with the GDPR (General Data Protection Regulation).

Environmental Audit in the Context of Sustainability and CSR

The environmental audit is playing an increasing role in sustainable corporate management and Corporate Social Responsibility (CSR). It is part of reporting obligations under the German Supply Chain Due Diligence Act (LkSG) and the EU Taxonomy Regulation. Accordingly, the environmental audit can be regarded as an instrument for promoting transparency and sustainable business practices.


Summary: The environmental audit is a legally regulated examination and improvement process in corporate environmental protection. Governed by international, European, and national regulations such as the EMAS Regulation and Environmental Audit Act, it ensures the systematic review of compliance with environmental requirements and the company’s own environmental objectives. Careful execution and documentation of an environmental audit contribute significantly to risk avoidance, improving environmental performance, and the legal safeguarding of companies.

Frequently Asked Questions

Who is legally required to conduct an environmental audit?

In Germany, companies are generally not under a general statutory obligation to conduct environmental audits. However, legal obligations can arise from various special legal regulations, for example under the Environmental Audit Act (UAG) or within the framework of sector-specific provisions such as the Federal Immission Control Act (BImSchG) for facilities requiring approval. Furthermore, certain business sectors, especially energy-intensive industries, are obliged under European regulations, such as the EU EMAS Regulation (Regulation (EC) No. 1221/2009), to implement an environmental management system and thereby also to conduct regular environmental audits, provided they opt for EMAS registration. In individual cases, conditions in official permits, operating instructions, or public law contracts may contain obligations for specific environmental audits.

What legal requirements apply to external auditors in the context of environmental auditing?

External auditors who conduct environmental audits, for example under EMAS or ISO 14001, are subject to certain qualification requirements to ensure the legal recognition of the audits. Under the Environmental Audit Act, environmental verifiers may only act if they have been accredited by a competent German or European accreditation body. Accreditation requires, among other things, relevant professional training, several years of relevant professional experience, and proof of regular continuing education. Personal reliability is also reviewed. Such requirements serve legal certainty for authorities and stakeholders and ensure that audit results can be used in court.

What are the legal consequences of an improperly conducted environmental audit?

An improperly conducted environmental audit can have various legal consequences. On the one hand, the affected company may lose recognition of its environmental management systems under EMAS or ISO 14001. On the other hand, in the case of audits mandated or relevant to regulatory approval, a regulatory offense may exist that can be punished with fines. In the event of damage, such as environmental incidents, faulty or manipulated audits may also have civil or even criminal consequences. Possible liability consequences must also be considered, particularly regarding company management pursuant to Section 43 of the German Limited Liability Companies Act (GmbHG) or Section 93 of the German Stock Corporation Act (AktG) if proper supervision is lacking. Finally, affected environmental verifiers may lose their accreditation and be held liable for damages incurred.

In what context are the results of an environmental audit used legally?

The results of an environmental audit can be relevant in various legal contexts. Typically, they serve as evidence in the context of certifications (EMAS, ISO 14001) for authorities, contractual partners, and the public. During approval procedures under environmental and emission control law, they may need to be submitted to the competent authorities and thus have positive effects on the granting, extension, or modification of permits. Additionally, the results can be used as evidence in administrative offense or criminal proceedings, for example, to demonstrate compliance with legal obligations or, conversely, as evidence of breaches of duty. Audit reports are also sometimes used as the basis for measures under the Environmental Information Act (UIG) to ensure transparency and public participation.

Are there data protection requirements in environmental audits?

Personal data and company trade secrets are regularly collected during environmental audits, for example, in documenting responsibilities, work instructions, or environmental officers. The requirements of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG) apply here. This means that all collected and processed personal data must be limited to what is necessary and protected against unauthorized access. Data subjects must be informed about the nature, purpose, and scope of data collection (transparency requirement). Furthermore, access to audit documents and reports must be appropriately restricted, especially when external auditors are involved. In the event of violations, fines and claims for damages may result.

What role do regulatory conditions play in connection with environmental audits?

Regulatory conditions can require the conduct of specific environmental audits, for example, as part of approval procedures for industrial facilities or as a result of findings from daily operations. These conditions are generally specified in the approval notice or in enforcement or regulatory orders and are binding for the company. Non-compliance with these conditions constitutes a regulatory offense and can result in fines and, in extreme cases, (partial) shutdown of a facility. Regulatory orders can also contain precise requirements regarding deadlines, scope, and methods of the audit. In cases of repeated violations, further sanctions and claims for damages may also be imposed.