What Is HACCP and How a Food Safety Plan Works

Quick answer

HACCP is the food safety self-control system that every business handling food must apply. Instead of checking the finished dish, it identifies in advance the points in your process where a hazard can arise and sets the measures to keep it under control. It rests on 7 principles, is written up in a manual, and is proven through records you fill in every single day.

What HACCP is and where it comes from

HACCP stands for Hazard Analysis and Critical Control Points. The key word is "preventive". The method does not wait for food to spoil before discarding it: it works upstream, asking at every stage of the job, "what can go wrong here, and how do I stop it?"

The approach is built into food safety law across most of the world and forms the backbone of EU Regulation 852/2004 and the FDA's HACCP-based rules in the United States. The logic is the same everywhere: anyone who produces, processes, transports, stores or serves food for human consumption must apply self-control based on HACCP principles.

That covers restaurants, bars, cafes, bakeries, food trucks, canteens, caterers and farm kitchens. There is no exemption tied to size: the ten-seat bar needs its manual and its records just like a hotel kitchen does. What changes is the complexity of the plan, not whether it exists.

The 7 principles of HACCP

The system rests on 7 principles codified by the Codex Alimentarius. They are not suggestions; they are the mandatory structure of any food safety plan.

1. Hazard analysis — identify biological (bacteria, viruses, parasites), chemical (cleaning agents, allergens, residues) and physical (glass, metal, bone) hazards at every stage, from goods-in to service.
2. Identify the CCPs — Critical Control Points are the stages where control is essential and cannot be recovered later (cooking, chilling, receiving fresh goods).
3. Set critical limits — the measurable value that separates safe from unsafe, almost always a temperature.
4. Monitoring — how, when and who checks each CCP, always in writing.
5. Corrective actions — what to do when a limit is breached, decided in advance.
6. Verification — periodically confirm the system actually works.
7. Documentation — everything must be written down and kept.

CCPs and critical limits: the operational core

Telling a true CCP apart from a mere point of attention is what separates a serious plan from a useless sheet of paper. A CCP is a stage where, if you lose control, you cannot fix it downstream: cooking poultry is a CCP because afterwards you get no second chance to kill salmonella.

For each CCP you set a measurable critical limit. In a kitchen these are almost always temperatures and times. The table below collects the values worth knowing by heart.

| CCP | Critical limit | What I check | |---|---|---| | Receiving chilled goods | < 4 °C | Temperature on delivery | | Receiving frozen goods | < -18 °C | Temperature on delivery | | Refrigerated storage | 0–4 °C | Fridge temp, twice a day | | Frozen storage | < -18 °C | Freezer temp | | Cooking | > 75 °C core | Probe thermometer | | Hot holding | > 63 °C | Bain-marie / hot counter | | Rapid cooling | from 60 °C to 10 °C within 2 h | Blast chiller or procedure |

The so-called "danger zone" is the band between 5 °C and 63 °C, where bacteria multiply fast. The practical rule is simple: no perishable food should sit in that band for more than 2 hours in total.

The HACCP manual

The manual is the foundation of the system. It must describe your real operation: products, processes, identified hazards, CCPs, cleaning procedures, waste handling and staff training. A generic manual downloaded online and never adapted is the first thing to collapse in an audit, because it describes processes you don't run.

You can write it yourself from a template, or hire a consultant. Either way it must be updated whenever you change your menu, suppliers, equipment or workflow. It is not a document you sign and forget: it is the living picture of how you manage food safety.

Monitoring, records and traceability

Principles without records are worth nothing. Daily monitoring boils down to a few repeated habits:

• Fridge/freezer temperatures: read at least twice a day (opening and closing), with date, time, value and the operator's initials.
• Core temperature of the highest-risk cooked items, with a sanitised probe.
• Goods-in: check and log the temperature of chilled deliveries on arrival.
• Traceability: keep supplier delivery notes and invoices for at least 2 years, so you can trace any ingredient back to its source.

A simple worked example. The fridge must hold at 4 °C or below. At 9:00 you read 6.5 °C: the limit is breached. Your predefined corrective action kicks in at once: check the cause (door left open? fault?), inspect the products, discard anything that may have sat in the danger zone beyond 2 hours, and write it all on the log. Without that written line, as far as the inspector is concerned the check never happened.

Staff training

Food safety training is mandatory for anyone handling food. Duration varies by jurisdiction, but the general pattern looks like this.

| Role | Typical course | Indicative refresh | |---|---|---| | Food handler (server, dishwasher) | Level 1–2, a few hours | every 2–3 years | | Supervisor (chef, owner) | Level 3, ~12 hours | every 2–3 years |

Courses run roughly 50–150 EUR per person, in class or online provided the certificate is recognised. Without a valid certificate, a worker should not be handling food: in an inspection a missing certificate is an almost automatic penalty.

Common mistakes

• Logs filled in the night before the inspection. They are easy to spot: same pen, same handwriting, temperatures too regular. An imperfect but genuine log beats a perfect fake one.
• A manual copied and never adapted. It describes a kitchen that isn't yours. One question from the inspector dismantles it.
• A fridge at 6–7 °C treated as fine. The limit is 4 °C. Those extra degrees are exactly where bacteria thrive.
• Expired or missing certificates for new hires. Seasonal staff are the classic weak point: train them before they start, not "as soon as possible".
• Neglected traceability. Binning delivery notes after a week makes it impossible to trace the supply chain during a food alert.
• A probe thermometer that's never calibrated. An instrument 3 °C out distorts every cooking check.

Related resources

HACCP is not paperwork for its own sake: it is how you avoid a foodborne incident that could close your business, and how you pass inspections without stress. If you are opening or bringing a venue up to standard, start with the manual, train all staff immediately, install reliable thermometers and begin records from day one. For the practical kitchen-floor side, see our guide HACCP in hospitality: obligations and implementation.