What is HACCP? The 7 principles of food safety explained

Summary

HACCP (Hazard Analysis and Critical Control Points) is a food safety management system that identifies, evaluates, and controls hazards throughout food production. Built on 7 core principles, HACCP is a legal requirement for UK food businesses under Regulation (EC) 852/2004. Rather than relying on end-product testing, HACCP takes a preventive approach, stopping foodborne illness before it starts.

If you work in food production, catering, or hospitality, you’ve almost certainly come across the term HACCP. But what exactly does it mean, and how does it actually work in practice?

The good news is, it’s more straightforward than it might look on paper. In this guide, we’ll walk you through everything you need to know about HACCP, including all 7 principles explained clearly, the different types of food safety hazards to watch out for, and a practical overview of how to get it up and running in your business.

What does HACCP stand for?

HACCP stands for Hazard Analysis and Critical Control Points. It’s a preventive food safety system, which means it’s built around spotting and controlling risks before they cause harm, rather than waiting for something to go wrong and dealing with the fallout.

It was originally developed in the 1960s by NASA and Pillsbury to keep food safe for astronauts on space missions. Since then, it’s become the gold standard for food safety management across the UK, EU, and US. The core idea is simple: instead of just testing the finished product, you take control at every stage of production and distribution.

Is HACCP a legal requirement in the UK?

Yes, it is. Most food businesses in the UK are legally required to have food safety management procedures based on HACCP principles, under Regulation (EC) 852/2004 on the hygiene of foodstuffs, which was retained in UK law after Brexit. The Food Standards Agency (FSA) also expects this as standard.

If you run a smaller operation, like a local café or a market stall, the FSA’s Safer Food, Better Business (SFBB) pack offers a simpler, diary-style route to meeting the requirement. We’ve included a comparison table a little further down so you can see which approach suits your business best.

The 7 principles of HACCP

The HACCP system is built on 7 principles. Think of them as the backbone of your food safety plan. Each one builds on the last, and together they give you a clear, structured way to keep food safe from start to finish.

Here’s a closer look at each one.

Principle 1: Conduct a hazard analysis

This is where it all begins. Your team works through every stage of production, from raw ingredient delivery right through to the point of sale or service, and asks: what could go wrong here, and how serious would it be?

Hazards fall into four categories – biological, chemical, physical, and allergenic. Once you’ve identified them, you assess each one for how likely it is to occur and how severe the consequences would be. This helps you focus your energy on the risks that really matter.

Principle 2: Determine Critical Control Points (CCPs)

A Critical Control Point (CCP) is a step in your process where a control measure can be applied to prevent, eliminate, or reduce a food safety hazard to an acceptable level. Not every step will qualify as a CCP, and that’s fine.

A handy tool here is the HACCP Decision Tree, which guides your team through a series of yes/no questions to work out whether a step needs to be designated as a CCP. In UK food businesses, common CCPs include cooking, chilling, pasteurisation, and metal detection.

Principle 3: Establish critical limits

For every CCP, you need to set a critical limit, which is the minimum or maximum value that must be met to keep the food safe. These need to be objective and measurable, so everyone knows exactly what they’re working to.

Critical limits can be based on things like temperature (e.g., a minimum of 75°C when cooking poultry), time (e.g., minimum pasteurisation duration), pH level, moisture content, or salt concentration. They should always be grounded in scientific evidence, regulatory guidance, or established industry standards.

Principle 4: Establish monitoring procedures

Setting limits is one thing, but keeping an eye on them is another. This principle is all about putting a clear, consistent monitoring system in place, so you always know whether your CCPs are under control.

A good monitoring system will run continuously or at defined intervals, use calibrated equipment like thermometers or pH meters, produce dated records, and be carried out by staff who understand why it matters. The faster you can get results, the faster you can act if something’s off.

Principle 5: Establish corrective actions

Even the best systems have moments where something doesn’t go to plan. That’s why this principle is so important. When a critical limit is breached, you need a pre-planned corrective action ready to go, so there’s no guesswork, no delay, and no unsafe food reaching your customers.

Your corrective actions should address the immediate problem (for example, discarding or reprocessing the affected batch), stop unsafe food from moving further down the chain, dig into the root cause of what went wrong, and document everything clearly, including what happened, who responded, and how it was resolved.

Principle 6: Establish verification procedures

Verification is how you step back and check that your HACCP system is genuinely working, not just on paper, but in practice. It goes beyond day-to-day monitoring and takes a bigger picture view.

Verification activities might include internal and external audits, calibration checks on monitoring equipment, reviewing monitoring records for patterns, microbiological testing of finished products, and updating your HACCP plan whenever processes or ingredients change. Your system should be verified at least once a year, and any time something significant changes in your operation.

Principle 7: Establish documentation and record keeping

Last but definitely not least, get it all written down. Good record keeping is what ties your entire HACCP system together. It’s your evidence that the plan is being followed, and it’s what you’ll lean on during an audit, inspection, or food safety incident.

Key records to keep include your hazard analysis findings, CCP monitoring logs, critical limit measurements (temperature logs, pH readings, and so on), corrective action records, verification and audit reports, staff training records, supplier information, cleaning schedules, and pest control reports.

It might feel like a lot, but a well-kept paper trail is one of the best protections your business has.

Types of food safety hazards

To carry out a solid hazard analysis, it helps to be clear on the four categories of food safety hazards and the kinds of controls that work for each.

Hazard Type	Examples	Typical Controls
Biological	Bacteria (Salmonella, E. coli, Listeria), viruses, parasites	Cooking to the correct temperature, chilling, cross-contamination controls
Chemical	Cleaning agents, pesticide residues, food additives	Correct storage, labelling, dosage controls
Physical	Glass, metal fragments, bone, plastic, hair	Visual inspection, metal detection, maintenance procedures, PPE
Allergenic	The 14 major allergens (including nuts, gluten, milk, eggs)	Clear labelling, segregation, dedicated equipment, staff training

It’s worth noting that allergenic hazards are taken seriously in the UK following the introduction of Natasha’s Law in 2021, which requires full ingredient labelling on all pre-packaged-for-direct-sale (PPDS) foods.

HACCP vs Safer Food, Better Business (SFBB)

Not sure which approach is right for you? Here’s a quick comparison to help you decide.

Aspect	HACCP	Safer Food, Better Business (SFBB)
What it is	Full food safety management system	Simplified FSA pack for smaller operations
Best for	Larger, more complex food businesses	Small catering businesses, cafés, takeaways
Documentation	Detailed CCP records and formal hazard analysis	Diary-style daily records
Legal status	Required under Regulation (EC) 852/2004	Accepted as meeting legal requirements for eligible small businesses

Both approaches share the same goal, and that’s to keep food safety and customers happy. The right fit depends on the size and complexity of your operation.

How do I implement HACCP?

Ready to get started? Here’s a straightforward overview of the implementation process. It may look like a lot of steps, but taken one at a time, it’s very manageable.

1. Assemble your HACCP team — bring together people from across the business, including production, quality assurance, maintenance, and management. Different perspectives make for a stronger plan.
2. Describe your products and intended use — document ingredients, processing methods, storage conditions, shelf life, and who the product is intended for.
3. Identify who could be at risk — think about vulnerable groups, including children, the elderly, pregnant women, and those with weakened immune systems.
4. Create a flow diagram — map the full journey of your food product, from raw ingredient delivery through to final consumption.
5. Verify the flow diagram on-site — walk through the process in real time to make sure the diagram accurately reflects what actually happens on the ground.
6. Apply the 7 principles — work through each one systematically to identify hazards, CCPs, and the controls needed.
7. Train all staff — everyone handling food should understand their role within the HACCP plan and why it matters.
8. Review regularly — revisit and update the plan whenever products, processes, or risks change.

FAQs

Is HACCP a legal requirement in the UK?

Yes. Under Regulation (EC) 852/2004, which was retained in UK law after Brexit, food businesses are required to implement food safety management procedures based on HACCP principles. The FSA also requires this as part of standard food business registration.

What does CCP mean in HACCP?

CCP stands for Critical Control Point. It’s a specific step in the food production process where a control measure must be applied to prevent, eliminate, or reduce a food safety hazard to an acceptable level. Common examples in UK food businesses include cooking, chilling, and pasteurisation.

How often should HACCP be reviewed?

At least once a year, and whenever something significant changes in your business, whether that’s a new product, updated processes or equipment, a newly identified hazard, or a food safety incident.

Do I need HACCP training?

Absolutely. HACCP training is strongly recommended for anyone involved in food safety management. All team members should have at least Level 2 training, while supervisors, managers, and business owners should look at Level 3 for a deeper understanding.

Get your team HACCP-ready with iHasco

Having the right training in place makes all the difference when it comes to HACCP. Our CPD Accredited HACCP Level 2 Training is perfect for all food industry employees, covering the principles of HACCP, food safety law, contamination risks, and practical implementation in a way that’s easy to follow and remember.

For supervisors, managers, and business owners, our HACCP Level 3 Training takes things further, equipping you to lead your HACCP system, oversee monitoring processes, and drive compliance across your team with confidence.

Get in touch with us today to find out more, or start your free trial and explore the courses for yourself.