What is HACCP? A Guide for UK Food Businesses

If you work in the food industry, you have almost certainly come across the term HACCP. It appears in legislation, certification standards and audit checklists. But what does it actually mean and what does it look like in practice for UK food businesses? This guide breaks it down clearly, without the jargon.

‍

What does HACCP stand for?

‍

HACCP stands for Hazard Analysis and Critical Control Points. It is a systematic, science-based approach to identifying and controlling food safety hazards before they cause harm. HACCP works by building safety into the process itself, instead of testing finished products and hoping for the best.

The approach was originally developed in the 1960s for NASA’s space food programme, where the consequences of a food safety failure were, quite literally, catastrophic. Today it is the foundation of food safety management systems worldwide and a legal requirement for most food businesses in the UK.

‍

What is the importance of the HACCP guidelines?

‍
HACCP is one of the most important tools a food business has to protect its consumers and reputation, as well as demonstrate that it is operating responsibly.

In the UK, most food businesses are required under Regulation (EC) No 852/2004 to have food safety management procedures. The Codex Alimentarius is the most universally adopted approach to meeting this requirement.

HACCP shifts the focus from reactive problem-solving to proactive risk management, helping you identify where things could go wrong before a product ever leaves your site.

For businesses seeking BRCGS certification or another benchmarked standard, a robust HACCP plan is not optional. It sits at the heart of every food safety standard and will be one of the first things an auditor looks at.

‍

Who needs HACCP in the UK?

‍
Most food businesses. UK food law requires businesses involved in manufacturing, processing, packing, storing, transporting, distributing, handling or selling food to have HACCP-based procedures in place.

Limited exemptions exist for primary producers and very small businesses supplying directly to consumers. But even where a full written plan is not strictly required by law, it is widely considered best practice and will almost certainly be expected by retail customers, food service buyers or certification bodies.

‍

What a HACCP plan actually looks like in practice

‍
There are seven principles of HACCP, established by the Codex Alimentarius Commission and adopted by BRCGS as the foundation of any food safety management system. Before the principles can be applied, five preliminary steps must be completed and prerequisite programmes must be in place to provide the stable foundation the system depends on.

The five preliminary steps are:

1. Assemble a multi-disciplinary HACCP team with the relevant knowledge and expertise across your products and processes.
2. Describe the product, including its ingredients, composition, intended use and target consumer.
3. Identify the intended use and likely consumer, including any vulnerable groups such as the elderly, young children or people with a food intolerance.
4. Construct a flow diagram mapping every step of your process from raw material receipt through to despatch.
5. Verify the flow diagram by walking the line to confirm it accurately reflects what happens in practice.

For each step, you consider what could go wrong: could a pathogen survive the cooking step? Could an allergen be introduced through cross-contamination? A CCP is established with a defined critical limit, monitoring routine and corrective action in the event of critical control point failure.

‍

What are HACCP prerequisite programmes?

‍
Before you can build an effective HACCP plan, certain basic food safety practices need to be in place. These are known as prerequisite programmes (PRPs) and they cover the fundamental conditions your site needs to operate safely, including but not limited to: cleaning and hygiene, pest control, allergen management, staff training, maintenance and supplier controls.

Without PRPs, your CCPs become irrelevant because the wider production environment is no longer under control.

In practice, many food businesses overcomplicate HACCP because they assume more paperwork equals better compliance. Auditors are usually looking for clarity, consistency and evidence of control, not unnecessary complexity.

‍

What are the seven principles of HACCP?

1. Conduct a hazard analysis. Identify biological, chemical and physical hazards at each step of your process and assess the associated risk. The BRCGS Food Safety Standard includes radiological contamination, allergens, malicious contamination and fraud.
2. Identify Critical Control Points (CCPs). A CCP is a step where a control measure can prevent, eliminate or reduce a hazard to an acceptable level. Common examples include cooking, chilling and metal detection.
3. Establish critical limits. Define the measurable boundary that separates safe from unsafe at each CCP. Critical limits may include minimum cooking temperatures of 75°C.
4. Establish monitoring procedures. Decide how you will monitor each CCP, how often and who is responsible. Monitoring must be documented.
5. Establish corrective actions. Define what happens when a CCP is not under control, including what to do with affected products and how to restore control.
6. Establish verification and validation procedures. Confirm your HACCP system is working through internal audits, record reviews or periodic testing and also review of customer complaints. It is also important to establish the rationale for the CCP and the particular critical limit.
7. Establish documentation and record-keeping. If it is not written down, it did not happen. Documentation demonstrates due diligence to regulators, auditors and customers.

‍

Common questions about HACCP

‍

Do I need HACCP if my business is small? The principles apply regardless of business size. The complexity of your plan will reflect your operation, but a small artisan producer and a large factory both need to manage their hazards.

Do I need HACCP if my business is low risk? Every food business has its hazards. Low risk does not mean no risk.

‍Is HACCP just a paperwork exercise? Documentation should reflect what is actually happening on site. A plan that exists only on paper will not protect your business and will not hold up under audit scrutiny.

How often should a HACCP plan be reviewed? The plan must be reviewed whenever something changes, whether a new ingredient, process or product and formally reviewed at least annually.

How long do you need to keep HACCP records in the UK? Most routine records should be typically kept for a minimum of the shelf life of the product plus 12 months. Your certification body or retailer may have additional requirements above the required minimum.

‍

HACCP, TACCP and VACCP: what is the difference and how do they work together?

‍
HACCP addresses unintentional food safety hazards. But it is not the only framework your business may need.

TACCP (Threat Assessment and Critical Control Points) addresses food defence, for example, intentional adulteration or malicious contamination, whether by a disgruntled employee or a criminal third party. TACCP also considers deliberate threats delivered through digital means, such as cyber‑attacks that could compromise food safety systems.

VACCP (Vulnerability Assessment and Critical Control Points) addresses food fraud: where in your supply chain could someone substitute, dilute or misrepresent your ingredients for economic gain? The horsemeat scandal is the most well-known example in the UK of what happens when vulnerability is not properly assessed.

All three use similar logic: identify vulnerability, assess risk, apply controls and monitor. They complement each other and businesses seeking BRCGS certification will be expected to have all three in place.

When should you get help with HACCP?

‍
Are you starting from scratch with no HACCP experience in your team? Do you have a plan but doubt whether it is robust or audit ready? Or have you received non-conformances and need help understanding what went wrong?

At Savanne, we work with food businesses of all sizes to develop, review and implement HACCP plans that are practical, tailored and ready for audit. If you are unsure where to start or want an experienced pair of eyes on your existing system, book a free discovery call with our expert food safety consultant.