What Is HACCP and Do I Legally Need It?
HACCP gets mentioned constantly in food safety, but the actual legal position — and what it means for a business your size — is rarely explained clearly. Here it is, properly.
The short version
- HACCP stands for Hazard Analysis and Critical Control Points — a systematic way of identifying where food safety could go wrong, and controlling it.
- Yes, it’s a genuine legal requirement: UK food law (retained EU Regulation 852/2004) requires every food business to have procedures based on HACCP principles, regardless of size.
- For small businesses, this doesn’t mean writing an academic document — most use the free FSA-endorsed Safer Food, Better Business (SFBB) pack, which is HACCP built for a working kitchen.
What HACCP actually is
HACCP is a way of thinking about food safety proactively rather than reactively: instead of hoping nothing goes wrong, you identify the specific points in your process where something genuinely could — undercooking, cross-contamination, incorrect storage temperature — and put controls in place at exactly those points. It was originally developed for NASA’s food programme in the 1960s and has been the backbone of food safety law across the UK and EU ever since.
Is it actually a legal requirement?
Yes, unambiguously. Regulation (EC) 852/2004, retained in UK law after Brexit, requires food business operators to put in place, implement and maintain a permanent procedure (or procedures) based on HACCP principles. This applies to every food business — a Michelin-starred kitchen and a single person baking from home are both legally required to have one, just at a scale that matches what they actually do.
What this looks like for a small business
Nobody expects a small café or a home baker to produce a formal industrial HACCP document. The Food Standards Agency’s own Safer Food, Better Business (SFBB) pack is a free, plain-English tool built specifically to help small businesses meet this requirement — a diary and set of simple checks covering exactly the same hazards a full HACCP plan would, in a format that’s actually usable day to day.
The seven principles, briefly
Full HACCP is built around seven principles — hazard analysis, identifying critical control points, setting critical limits, monitoring, corrective action, verification, and record-keeping. We cover each one properly in our dedicated guide to the 7 principles of HACCP.
Get properly trained, from £15
CPD-standard, fully online, at your own pace — with a free taster so you know exactly what you’re getting before you buy.
Frequently asked questions
Do I need a formal written HACCP document as a small business?
Not necessarily a formal industrial-style document — most small businesses meet the legal requirement using the free Safer Food, Better Business pack, which is HACCP simplified for everyday use.
Is HACCP the same as a food hygiene certificate?
No — a food hygiene certificate (Level 1, 2 or 3) is about your personal knowledge and training. HACCP is your business’s food safety management system. You need both.
What happens if I don’t have HACCP procedures in place?
It’s a legal requirement, so its absence is something an Environmental Health Officer will flag directly during an inspection, and it can materially affect your food hygiene rating.