Is HACCP a legal requirement in the UK?

What UK law says about HACCP

Check your compliance against Regulation (EC) No 852/2004, which the UK retained post-Brexit and enforces through the Food Hygiene (England) Regulations 2006 and their devolved equivalents. Article 5 of that regulation requires all food business operators, except primary producers, to implement and maintain a permanent procedure based on HACCP principles.

The law does not demand a rigid, document-heavy system in every case. Micro businesses and lower-risk operators can use simplified approaches, provided those approaches still address the seven HACCP principles: hazard analysis, critical control points, critical limits, monitoring, corrective actions, verification, and documentation.

Local authority environmental health officers enforce compliance through routine inspections. Failure to demonstrate a functioning HACCP-based procedure can result in improvement notices, fines, or prohibition orders. Completing recognised HACCP courses gives food handlers and managers the knowledge to build procedures that satisfy inspectors and protect consumers.

Which businesses must comply with HACCP regulations

Any business that handles, prepares, processes, or serves food, from commercial restaurants and supermarkets to school canteens, care home kitchens, and charity food events, falls under the HACCP obligation. The Food Standards Agency defines a food business operator broadly, covering both profit and non-profit food activities.

Farmers and primary producers are exempt from Article 5 of Regulation (EC) No 852/2004, but the obligation applies as soon as produce enters any processing, packing, or retail stage. Size offers no exemption: a sole trader selling food at a market must implement HACCP-based procedures, though enforcement officers expect the system to reflect the scale of the operation. A simple documented log of checks and corrective actions satisfies the requirement for low-risk, small-scale businesses.

Online food sellers, dark kitchens, and meal kit preparers follow the same rules as physical premises. The HACCP system must be in place from the point of registration with the local authority, not introduced after an inspection.

What a legally compliant HACCP plan must include

A common compliance gap is producing a HACCP plan that names the seven principles without showing how each applies to the specific operation. The Food Standards Agency requires the plan to reflect actual practices, not generic templates.

The plan must identify all biological, chemical, and physical hazards at each handling stage, then establish the critical control points where control prevents or eliminates risk. At every CCP, it must define measurable critical limits, including minimum cooking temperatures and maximum storage times, alongside monitoring procedures that specify how checks are carried out, how often, and by whom. Corrective actions, verification procedures, and documented records complete the system.

Simpler operations can use industry-recognised guides such as the FSA’s Safer Food, Better Business pack, which satisfies the legal requirement provided the business follows it accurately and keeps records current. Inspectors check whether the written plan matches what happens on site; a plan stored unread will not satisfy enforcement officers regardless of how thorough it looks on paper.

Consequences of failing to meet HACCP requirements

Enforcement officers from local authority environmental health departments carry out unannounced inspections and can issue improvement notices, prohibition orders, and prosecutions. Operating without a HACCP-based procedure can result in an unlimited fine under the Food Safety Act 1990, recorded as a criminal offence against the business.

The Food Standards Agency’s hygiene rating scheme links directly to inspection findings. Poor HACCP records typically produce a lower rating, which must be displayed publicly in Scotland, Wales, and Northern Ireland. In England, display is voluntary, but low ratings are publicly searchable and can affect trade substantially.

Environmental health officers can close a premises immediately if a HACCP failure creates an imminent risk to public health. Reopening requires a further inspection and written confirmation the issue has been resolved. Repeated non-compliance can lead to licence revocation.

Businesses that cause a confirmed foodborne illness outbreak face civil liability if absent HACCP controls contributed to the incident. Insurers may decline claims or raise premiums where documented food safety management was not in place.

How HACCP requirements differ across the four UK nations

Each UK nation enforces HACCP obligations through its own food hygiene regulations. England, Scotland, Wales, and Northern Ireland each maintain separate statutory instruments, but all four transpose the same core requirement from Regulation (EC) No 852/2004, so the obligation itself is consistent across the UK.

Practical differences emerge in inspection frequency and guidance materials. The Food Standards Agency covers England, Wales, and Northern Ireland, while Food Standards Scotland operates independently. Businesses trading across multiple nations must ensure their HACCP documentation meets the expectations of each relevant authority.

Staff responsible for developing or maintaining HACCP procedures must demonstrate competence, and refreshing that knowledge when processes change is a practical necessity. The STC HACCP Refresher & Update covers current UK requirements and suits businesses reviewing procedures following changes to their operation, menu, or local authority guidance.