The 7 Principles of HACCP: A Practical Guide for UK Food Businesses

If you run a café, restaurant, takeaway, pub, food truck, bakery or other catering business, HACCP is an important part of how you manage food safety.

But HACCP doesn't need to mean hundreds of pages of complicated paperwork.

The seven principles of HACCP provide a structured way to identify food safety hazards, decide how those hazards will be controlled and show that your food safety procedures are actually working.

For smaller UK food businesses, the important thing is understanding how the principles apply to what you really do each day.

What does HACCP mean?

HACCP stands for Hazard Analysis and Critical Control Point.

It's a systematic approach to food safety that looks at each stage of a food process and asks what could go wrong, how serious that risk could be and what needs to be done to keep food safe.

Those differences matter because each process introduces different food safety hazards.

UK food businesses need food safety management procedures based on HACCP principles. Smaller businesses can often meet these requirements using simplified food safety management systems designed for catering.

Read the GOV.UK guidance on food safety management systems.

So what are the seven principles?

Principle 1: Identify the food safety hazards

The first HACCP principle is to identify the hazards that could make food unsafe.

Depending on the food and process, these may include:

• harmful bacteria, viruses or other microorganisms
• allergens
• chemicals such as cleaning products
• physical contamination such as glass, metal or pieces of packaging

You then need to consider where these hazards could arise.

Imagine a small café receiving raw chicken.

Possible hazards include bacterial contamination of the chicken, incorrect chilled storage, contamination of ready-to-eat foods during preparation and inadequate cooking.

The purpose isn't to write down every imaginable possibility. It's to identify the hazards that are reasonably relevant to your food operation and decide how they'll be controlled.

The second example doesn't tell staff what the actual hazard is or how it's controlled.

Principle 2: Identify the Critical Control Points

Once the hazards have been identified, the next stage is deciding whether any steps are Critical Control Points, usually shortened to CCPs.

A Critical Control Point is a stage where control is essential to prevent, eliminate or reduce a significant food safety hazard to an acceptable level.

Cooking is a common example.

If raw poultry contains harmful bacteria, effective cooking provides an important control. Losing control of that stage could result in unsafe food reaching the customer.

Not every stage in your kitchen automatically becomes a CCP.

This is where HACCP can sometimes become unnecessarily complicated. A small catering business shouldn't label every check, fridge or cleaning activity as a Critical Control Point simply because it sounds safer.

CCPs should be based on the actual process and food safety risks.

Principle 3: Establish critical limits

Once you've identified a Critical Control Point, you need to establish the point that separates acceptable from unacceptable.

This is known as a critical limit.

Critical limits need to be clear enough for staff to determine whether the process is under control.

Depending on the CCP, this might involve:

• temperature
• time
• pH
• another measurable food safety parameter

For example, simply telling a member of staff to "make sure it's hot" doesn't provide a useful critical limit.

The control needs to be measurable or otherwise clearly defined.

Your chosen limits should be supported by appropriate food safety guidance, legislation, validated processes or recognised industry practice.

Principle 4: Establish monitoring procedures

Having a critical limit isn't enough. You also need to know whether you're meeting it.

That's where HACCP monitoring comes in.

Monitoring means carrying out planned observations or measurements to confirm that a Critical Control Point remains under control.

For a small catering business this could include checking:

• cooking temperatures
• reheating temperatures
• chilled storage
• hot holding
• cooling processes

The monitoring system should answer some basic questions.

What is being checked? Who checks it? How is it checked? When is it checked? Where is the result recorded?

This is one reason digital food safety records can be useful. Instead of relying on loose sheets of paper, businesses can record routine checks and retain evidence of what happened.

Food-Safety.app provides digital food safety records designed particularly for smaller catering businesses that want a simpler way to manage day-to-day checks.

Principle 5: Decide what corrective action will be taken

Things go wrong.

A refrigerator fails. Food doesn't reach the required cooking temperature. A member of staff discovers that hot-held food has fallen outside the required control.

HACCP recognises that problems can happen. What matters is deciding in advance what staff should do when control is lost.

This is called corrective action.

Consider this situation.

A chef checks a batch of chicken and discovers that the required cooking control hasn't been achieved.

A poor response would be:

“Record the temperature and serve the food.”

Recording the failure doesn't make the food safe.

A more appropriate response may involve continuing cooking until the required safety control has been achieved, checking the process again and recording what was done.

Where food can't be made safe, it may need to be discarded.

Corrective action should deal with the immediate food safety problem and, where necessary, investigate why the failure happened.

Principle 6: Verify that your HACCP system works

HACCP isn't finished once you've written the plan.

You need to check that the system is working.

This is called verification.

Verification can include reviewing records, observing staff practices, checking that monitoring takes place correctly, calibrating temperature probes and reviewing what happens when problems occur.

It should also include reviewing your HACCP procedures when your operation changes.

Imagine a café that has always prepared fresh food for immediate service.

It decides to start preparing meals two days in advance, cooling them, storing them refrigerated and reheating them when customers order.

The original HACCP process no longer accurately describes the business.

Cooling, chilled storage and reheating now need to be considered.

A HACCP plan should describe how the business operates today, not how it worked when the paperwork was originally written.

Principle 7: Keep appropriate documents and records

The final HACCP principle concerns documentation and record keeping.

Records help demonstrate that your food safety controls are being followed.

For a catering business these might include:

• cooking records
• fridge and freezer checks
• cooling records
• hot-holding checks
• reheating records
• corrective actions
• probe calibration
• cleaning records
• delivery checks

But more paperwork isn't automatically better HACCP.

Records should be appropriate to the size and nature of the food business.

A small mobile caterer serving a straightforward menu doesn't necessarily need the same documentation as a large manufacturing site producing thousands of products.

The goal is to have enough information to manage food safety properly and demonstrate that your controls are working.

Digital tools such as Food-Safety.app can help smaller businesses move routine food safety checks from paper records into a structured digital format.

How the seven HACCP principles work together

Consider a small takeaway preparing chicken curry.

The business identifies harmful bacterial contamination as a potential hazard.

It identifies cooking as an important control stage and establishes an appropriate cooking limit.

The chef checks the food during cooking and records the result.

If the required control hasn't been achieved, cooking continues and the food is checked again.

The manager periodically reviews cooking records and working practices to confirm that staff are following the HACCP procedure.

The business keeps appropriate records showing that the controls have been applied.

That's HACCP in practice.

The seven principles aren't seven separate pieces of paperwork. They're parts of one food safety management process.

HACCP for small food businesses

One of the biggest misconceptions about HACCP is that every small catering business needs to employ a consultant and write a huge technical HACCP manual.

That's not necessarily the case.

The Food Standards Agency provides Safer Food, Better Business, commonly known as SFBB, for smaller food businesses in England and Wales. It covers areas including cooking, chilling, cleaning, cross-contamination and management.

Northern Ireland has Safe Catering, while businesses in Scotland can use guidance including CookSafe.

The FSA also provides more detailed HACCP guidance, although restaurants, cafés, sandwich bars and similar businesses with relatively simple processes may find simplified food safety management systems more suitable.

Read the Food Standards Agency Safer Food, Better Business guidance.

HACCP mistakes small catering businesses should avoid

Problems often arise because the HACCP system and the actual kitchen operation have gradually become different.

A menu changes but the HACCP plan doesn't.

Food that was previously cooked and served immediately is now cooled and reheated.

A business starts vacuum packing food without reviewing its procedures.

Staff complete temperature records automatically without taking meaningful measurements.

Corrective-action boxes are filled with statements such as "manager informed" without explaining what happened to the affected food.

Another common mistake is copying someone else's HACCP plan.

Two restaurants may both serve chicken curry, but one may prepare it fresh while another batch cooks, cools, refrigerates and reheats it.

The hazards and controls aren't necessarily identical.

Your HACCP procedures need to describe your food, your processes and your controls.

Making HACCP useful in your business

HACCP works best when it's treated as a practical food safety system rather than an administrative exercise.

Start by understanding how food moves through your business. Identify the hazards that genuinely matter, decide how you control them and make sure staff understand what they're expected to do when something goes wrong.

For a smaller food business, a simple HACCP system that's understood, followed and regularly reviewed is far more useful than a complicated folder that nobody opens.