HACCP
HACCP (Hazard Analysis and Critical Control Points) is a globally recognized system for proactively ensuring food safety. It enables food businesses to identify potential hazards at an early stage and control them at critical control points before unsafe products reach consumers.
What is HACCP?
HACCP is a preventive food safety management system based on scientific principles. It helps food businesses systematically identify, assess, and control potential hazards in food production.
HACCP was developed in the 1960s as part of space programs, in cooperation with NASA and industry partners. The aim was to ensure the highest possible level of safety for food consumed by astronauts. Today, HACCP is recognized as an international standard in the food industry.
The HACCP concept focuses primarily on physical, chemical, and biological hazards, as well as allergen-related risks, throughout the entire process chain. This can include goods receipt, processing, storage, and delivery. By defining critical control points (CCPs), companies can monitor and control risks in a targeted and reliable way.
What is the aim of the HACCP concept?
The main aim of the HACCP concept is to ensure food safety through preventive measures. Instead of detecting errors only in the final product, HACCP focuses on controlling risks throughout the ongoing production process.
Further objectives of the HACCP concept include:
- Protecting consumer health by minimizing risk
- Optimizing operational workflows and processes
- Reducing production losses through early error detection
- Complying with legal requirements and regulations
- Increasing legal certainty and strengthening consumer trust
The 7 principles of the HACCP concept
The implementation of a HACCP system is based on seven clearly defined principles established internationally by the Codex Alimentarius.
1. Hazard analysis
The first principle involves a comprehensive hazard analysis of all production steps. Companies must identify three categories of hazards:
- Biological hazards: bacteria such as Salmonella, Listeria, and Campylobacter, viruses such as noroviruses, parasites, and molds
- Chemical hazards: residues of cleaning agents, disinfectants, pesticides, heavy metals, or allergens
- Physical hazards: foreign materials such as metal fragments, glass shards, plastic parts, or stones
For each process step, the analysis assesses the likelihood of occurrence and the potential severity of the hazard.
2. Determining critical control points (CCPs)
After the hazard analysis, the critical control points (CCPs) are determined. These are process steps in food production where control is essential to prevent, eliminate, or reduce a hazard to an acceptable level.
A heating step used to destroy pathogenic microorganisms is typically a critical control point. CCPs are usually determined on a risk-based basis using a decision tree. This is used to assess whether control at a specific step is essential to prevent, eliminate, or reduce a relevant hazard to an acceptable level.
Even if the decision tree shows that a process step is not a CCP, such processes may still have a major impact on food safety. Processes that play an important role in food safety by controlling and monitoring process parameters but are not identified as CCPs are usually referred to as control points, control measures, or oPRPs (operational prerequisite programs).
3. Establishing critical limits
Measurable critical limits must be defined for each identified CCP. These limits separate acceptable from unacceptable conditions and are based on scientific evidence and legal requirements.
Examples of critical limits include:
- Minimum temperatures during heating processes, for example, 72 °C for 15 seconds
- pH ranges to prevent bacterial growth
- Test piece sizes for metal detectors, for example, ferrous metal: 1.5 mm, non-ferrous metal: 2 mm, stainless steel: 2.5 mm
The limits must be defined precisely enough to allow a clear assessment.
4. Monitoring critical control points
Continuous monitoring of CCPs ensures that the defined critical limits are met. Companies must define how, when, and by whom the checks are carried out.
Monitoring can be carried out continuously using automatic measuring devices or at defined intervals by trained personnel. Complete documentation of all measurement results is essential for later verification.
5. Establishing corrective actions
Corrective actions must be defined for each CCP and implemented immediately if critical limits are exceeded. These measures specify how affected products are handled and how safe conditions are restored.
Possible corrective actions include:
- Reprocessing the affected product
- Redirecting the product for other uses
- Blocking and destroying contaminated food
- Immediately adjusting the process to restore control
6. Verification procedures
Regular verification checks whether the HACCP system is functioning as intended and effectively ensuring food safety. This includes internal audits, review of records, calibration of measuring equipment, and, where necessary, microbiological testing. Verification is carried out at planned intervals and additionally whenever changes are made to the process.
7. Documentation and recordkeeping
The final principle requires full documentation of the entire HACCP system. This documentation is essential for providing evidence to the relevant food safety authorities.
HACCP documentation includes:
- Hazard analysis with an assessment of all identified risks
- Definition of CCPs with established critical limits
- Monitoring plans and control procedures
- Corrective actions and their implementation
- Records of all checks carried out and all measurement results
- Verification reports and training records
Documentation and records must be kept for defined periods and made available to the competent authorities upon request.
How is a CCP established?
A critical control point (CCP) is a step in a process where control is essential to prevent or eliminate a relevant hazard, or reduce it to an acceptable level.
Whether a step is classified as a CCP is determined based on risk. A decision tree is often used for this purpose, as it is an established tool.
Typical guiding questions include:
Are effective control measures available at this stage to manage the hazard?
- Does this step or stage of the process eliminate the hazard or reduce it to an acceptable level?
- Could contamination occur above the acceptable level, or increase to an unacceptable level?
- Will the hazard be eliminated or reduced to an acceptable level at a later step or stage of the process?
A process step is classified as a CCP when control at this stage is essential to ensure that the hazard is effectively managed.
How HACCP and basic hygiene measures work together
The HACCP concept is built on a solid foundation of basic hygiene measures. Without these prerequisites of Good Manufacturing Practice (GMP) or Good Hygiene Practice (GHP), an HACCP system cannot function effectively.
Basic hygiene measures include:
- Cleaning and disinfection of all operational areas and equipment
- Pest control and monitoring
- Personnel hygiene and employee training
- Maintenance and servicing of facilities and equipment
- Selection and monitoring of suppliers
- Separation of clean and unclean areas within the facility
Basic hygiene measures create the conditions necessary for monitoring the critical control points of the HACCP system.
Which companies are required to implement an HACCP system?
In principle, all food business operators must establish, implement, and maintain procedures based on HACCP principles. This applies primarily to businesses involved in processing and manufacturing, as well as downstream stages such as storage, transport, retail, and food service.
For primary production, the general hygiene requirements and Good Hygiene Practice measures apply first and foremost. Full implementation of HACCP is generally not required at this stage. However, its principles should be taken into account as far as possible, using a risk-based approach.
Is HACCP mandatory?
Yes, HACCP-based procedures have been mandatory in the European Union since 1 January 2006. The main legal basis is Regulation (EC) No 852/2004 on the hygiene of foodstuffs. In Germany, national regulations supplement the EU requirements.
Food business operators must maintain and retain appropriate HACCP documentation and records and be able to provide them to the competent authorities upon request.
Depending on the severity of the violation, non-compliance may result in fines, official enforcement measures, temporary or permanent closure of the business, and, in serious cases, criminal penalties.
Do you need support with the implementation, review, or documentation of your HACCP-based procedures?
Which hazards are controlled by HACCP guidelines?
The HACCP system systematically addresses three main categories of hazards in food production.
Biological hazards
Biological hazards are the most common type and include:
- Pathogenic bacteria such as Salmonella, Listeria, Campylobacter, and E. coli
- Viruses such as norovirus and hepatitis A
- Parasites and moulds with toxic properties
Example: Insufficiently cooked poultry may contain harmful Salmonella bacteria. A CCP involving temperature monitoring during the cooking process helps prevent this hazard.
Chemical hazards
Chemical hazards may result from contamination with:
- Cleaning agents and disinfectants
- Pesticides and plant protection products
- Heavy metals from machinery or packaging
- Allergenic substances due to inadequate separation
Physical hazards
Physical hazards include foreign objects such as:
- Metal fragments from machinery or tools
- Glass fragments from lamps or packaging
- Plastic parts or packaging residues
- Stones or wood splinters from raw materials
Installing metal detectors or X-ray systems is a common measure for controlling these types of physical hazards.
What are the potential consequences of inadequate HACCP implementation?
Incorrect or incomplete implementation of the HACCP system can have serious consequences.
Consequences for consumers
Consumers may face risks such as:
- Food poisoning and infectious diseases
- Allergic reactions caused by undeclared allergens
- Injuries from physical foreign objects
- Long-term health effects or life-threatening illnesses
Consequences for businesses
The affected company may face significant consequences, including:
- Costly product recalls
- Destruction of contaminated goods and production shutdowns
- Serious reputational damage and loss of trust
- Fines and official enforcement measures
- Closure of the business by the food safety authorities
- Civil claims for damages
- Criminal consequences in cases of gross negligence
Official food safety authorities regularly monitor compliance with HACCP requirements and may intervene immediately if deficiencies are identified.
What is the legal basis for HACCP guidelines?
The HACCP system is based on a comprehensive legal framework at international, European, and national levels.
European regulations
- Regulation (EC) No 852/2004 on the hygiene of foodstuffs, the central legal basis for HACCP in the EU
- Regulation (EC) No 853/2004 laying down specific hygiene rules for food of animal origin
- Regulation (EC) No 178/2002 laying down the general principles of food law
International standards
At international level, the HACCP principles are based on the recommendations of the Codex Alimentarius Commission, a joint body of the WHO and FAO. These international standards help ensure consistent requirements in global food trade and serve as a reference for national legislation.
You may also be interested in
FAQ
What is the Codex Alimentarius?
The Codex Alimentarius is a collection of internationally recognised food standards, guidelines, and codes of practice. The Codex Alimentarius Commission was established in 1963 by the FAO and WHO. It develops these standards to protect consumer health and promote fair practices in international food trade. HACCP principles were incorporated into European law in the early 1990s and have since served as a key international reference.
Where does the requirement for the HACCP system come from?
The development of HACCP began in the 1960s, when a system was needed in connection with space programmes to ensure the safety of food for space missions as reliably as possible. The preventive approach aimed to identify and control critical points in the manufacturing process.
HACCP became more widely known in the food industry during the 1970s. In the 1990s, HACCP guidelines were incorporated into the Codex Alimentarius as an international reference, including as an annex to the General Principles of Food Hygiene. Today, HACCP is recognised internationally as a standard for ensuring food safety.
How often must an HACCP system be verified?
Verification should be carried out at regular, planned intervals. A comprehensive annual review of the entire HACCP system is common practice.
Additional verification is required:
- When significant changes are made to products, processes, or recipes
- Following incidents, deviations, or customer complaints
- When new scientific findings on hazards become available
- Following changes to legal requirements or regulations
How many employees must be involved in the HACCP process?
The size of the HACCP team depends on the size and complexity of the business. In small businesses, one trained person may be sufficient to manage the system.
In larger food businesses, a multidisciplinary HACCP team is recommended, with representatives from:
- Production and manufacturing
- Quality assurance and quality control
- Engineering and maintenance
- Hygiene and cleaning
- Laboratory and analytical services
The key requirement is that all employees who work with food are trained in food hygiene and in the practical implementation of HACCP within the business.
Is specific HACCP training required?
Yes, appropriate training is essential. Regulation (EC) No 852/2004 requires food handlers to receive instruction in food hygiene matters appropriate to their work activities.
Specialized training is required for members of the HACCP team. This training should cover HACCP principles, methodology, and practical application. Training must be documented and refreshed regularly.
What is HACCP certification?
HACCP certification is a voluntary confirmation by an independent certification body that a company has implemented an HACCP system in accordance with recognized standards.
Unlike the legal obligation to apply HACCP principles, certification is not mandatory. However, it offers additional benefits. It demonstrates a company’s commitment to food safety to customers and authorities. Many large retailers require suppliers to hold certification under standards such as IFS, BRC, or FSSC 22000.
Who needs HACCP certification?
Although the application of HACCP is mandatory for all food businesses, external certification is not required for every company.
Certification is typically required by:
- Suppliers to large retail chains
- Companies exporting to certain markets
- Businesses operating in sensitive areas of food production
- Companies seeking to build additional trust with customers
Who is responsible for the HACCP hazard analysis within a company?
Overall responsibility for food safety, and therefore for the HACCP system, lies with the food business operator or company management.
An HACCP team is usually formed to carry out the hazard analysis under the leadership of a designated HACCP representative. This person should have comprehensive knowledge of HACCP methodology, the company’s specific processes, and the relevant hazards.
Who checks whether companies have an HACCP system and implement it correctly?
Official food control authorities regularly check compliance with food law requirements, including HACCP. In Germany, these inspections are carried out by the competent authorities of the federal states, particularly the veterinary and food control offices.
During site inspections, inspectors review the HACCP documentation, its practical implementation within the business, and compliance with critical limits at CCPs.
What happens during an HACCP audit?
During an HACCP audit, an internal or external auditor assesses the effectiveness of the implemented HACCP system.
The audit process typically includes:
- Reviewing the hazard analysis and identification of CCPs
- Checking critical limits and monitoring procedures
- Reviewing documentation and records
- Inspecting the facility to verify practical implementation
- Interviewing employees about their HACCP knowledge
- Assessing corrective actions taken in response to deviations
Following the audit, the company receives a report containing findings, recommendations for improvement, and, where applicable, non-conformities that must be corrected.
Which documents are required for the HACCP hazard analysis and the application of the critical control point system?
The documentation includes several key components:
- A product description containing all relevant characteristics and intended uses
- A flow diagram covering all process steps from goods receipt to dispatch
- A systematic hazard analysis including risk assessment
- Control plans for each CCP, including critical limits and monitoring procedures
- Record forms for all measurements and inspections
- Corrective action records for cases where critical limits are exceeded
- Verification reports and audit results
- Training records for all employees involved in HACCP-related activities