The HACCP system (Hazard Analysis and Critical Control Points) is the backbone of modern food safety. It is not a badge or a formality: it is a systematic, preventive method for identifying, evaluating and controlling hazards that could make a food product unsafe for consumers. In the European Union, its application is not optional. Regulation (EC) 852/2004 obliges all food business operators, except primary producers, to create, apply and maintain permanent procedures based on HACCP principles. Understanding the difference between paper compliance and genuine risk control is what separates a safe business from one exposed to a public health crisis.
The foundation: prerequisites before HACCP
A fundamental mistake is building a HACCP plan on an unstable foundation. HACCP does not work without solid Prerequisite Hygiene Programmes (PRPs): cleaning and disinfection, pest control, maintenance of facilities, water potability, staff training, traceability and waste management. These programmes control the general manufacturing environment; HACCP then focuses on the specific process hazards that prerequisites alone cannot eliminate. When prerequisites fail, the HACCP plan becomes overloaded with control points that should really be managed by basic hygiene measures.
The seven principles of HACCP
The Codex Alimentarius, the international reference framework of the FAO and WHO, structures the system around seven principles that must be applied in order:
- 1. Hazard analysis. Identify biological hazards (pathogens such as Salmonella or Listeria monocytogenes), chemical hazards (allergens, mycotoxins, pesticide residues, cleaning product residues) and physical hazards (glass, metal, plastic), then assess their likelihood and severity.
- 2. Determine the Critical Control Points (CCPs). The stages in the process where control is essential to prevent or eliminate a hazard, or reduce it to an acceptable level. The Codex decision tree helps distinguish a genuine CCP from an ordinary control point.
- 3. Establish critical limits. Measurable values that separate the acceptable from the unacceptable: a minimum cooking temperature, a pH value, a concentration, a time.
- 4. Monitoring system. Scheduled measurements or observations to confirm that a CCP is under control, with a defined responsible person, frequency and method.
- 5. Corrective actions. What to do when monitoring indicates that a CCP has deviated from its critical limit, including the fate of the affected product.
- 6. Verification. Confirming that the system works: laboratory analyses, equipment calibration, review of records and internal audits.
- 7. Documentation and record-keeping. The evidence that demonstrates control and enables traceability and defence during an inspection.
Practical example: cooking and chilling
Consider a ready-meal production line. The cooking stage is typically a CCP: the critical limit may be set at reaching 75 °C at the centre of the product, a value that ensures the destruction of vegetative pathogens. Monitoring consists of measuring with a calibrated probe the temperature at the coldest point of each batch. If a batch does not reach that temperature, the corrective action is to extend the cooking time and hold the product. Subsequent chilling is another CCP: passing through the danger zone (approximately 5 to 65 °C) as rapidly as possible prevents the multiplication of spores that survived cooking, such as those of Clostridium perfringens. Every measurement is recorded, and those records constitute the documentary evidence required by health authorities.
The reasoning that links the critical limit to food safety rests on the time-temperature relationship. Inactivation of pathogens is not instantaneous; it depends on the combination of temperature reached and time maintained: 70 °C held for two minutes may be equivalent, in terms of logarithmic microbial reduction, to a higher temperature held for a shorter period. That is why a well-defined critical limit specifies both variables, not just a single number. In chilling, the same logic applies in reverse: the longer food spends in the danger zone, the more opportunity surviving spores have to germinate and multiply, which is why the guidance is to chill rapidly and under controlled conditions, never allowing food to cool at room temperature.
Emerging hazards and digital traceability
The catalogue of hazards is not static. In recent years, threats have gained prominence that a modern HACCP plan must address: food authenticity and food fraud (ingredient substitution, falsification of origin), which gave rise to the concept of food fraud and specific vulnerability plans (VACCP); food defence against intentional adulteration (TACCP); and process contaminants such as acrylamide, regulated in the EU with reference levels for certain baked and fried products. An up-to-date system integrates these risks into the hazard analysis rather than limiting itself to the three classic categories — biological, chemical and physical — in isolation.
Traceability is the other major lever. Regulation (EC) 178/2002 establishes the principle of traceability "one step back, one step forward": every business must be able to identify from whom it received each ingredient and to whom it delivered each product. Digitising records — probes that automatically log temperatures, batch coding, document management systems — is not a luxury: it reduces manual transcription errors, cuts the time to execute a product recall from days to hours and provides the immediate evidence that an inspection demands. When a food safety alert breaks, the difference between withdrawing the affected batch and having to recall an entire production period comes down to brand credibility and cost.
HACCP, ISO 22000 and GFSI schemes
HACCP is the method; certifiable standards integrate it into a complete management system:
| Framework | What it is | Nature |
|---|---|---|
| Regulation (EC) 852/2004 | Legal obligation to apply HACCP principles in the EU | Mandatory |
| Codex Alimentarius | International reference framework (FAO/WHO) | Reference guidance |
| ISO 22000 | Food safety management system | Certifiable, voluntary |
| FSSC 22000 / BRCGS / IFS | GFSI-recognised schemes, required by major retailers | Certifiable, commercial requirement |
ISO 22000 combines HACCP principles with the ISO high-level structure for management systems and adds operational prerequisite programmes (OPRPs), an intermediate category between a general prerequisite and a CCP. The schemes recognised by the GFSI (Global Food Safety Initiative) — such as FSSC 22000, BRCGS and IFS — have in practice become a commercial passport: major retail chains do not purchase from suppliers that do not hold them.
Common errors
The first is confusing a control point with a CCP: declaring every process stage as critical overloads the system and dilutes attention away from the few points that genuinely matter. The second is setting non-measurable critical limits ("sufficient cooking") instead of objective, verifiable values. The third is monitoring without records: if it is not documented, it does not exist as far as an inspection is concerned. The fourth is underestimating allergens, now one of the main causes of product recalls in Europe, where incorrect labelling or cross-contamination constitutes a chemical hazard as serious as a pathogen. The fifth is treating the HACCP plan as a document written once and filed away, rather than as a living system that is reviewed whenever a recipe, supplier or piece of equipment changes.
Frequently asked questions
Is HACCP mandatory in the EU? Yes. Regulation (EC) 852/2004 requires all food business operators, except primary producers, to apply procedures based on HACCP principles.
What is the difference between a prerequisite and a CCP? Prerequisites control the general hygiene conditions (cleaning, pest control, water). A CCP is a specific stage in the process where a particular control measure is the last barrier to prevent a defined hazard.
Are HACCP and ISO 22000 the same thing? No. HACCP is the methodology for hazard analysis and control; ISO 22000 is a certifiable standard that integrates that method into a complete food safety management system.
How often should the HACCP plan be reviewed? At least once a year, and mandatorily whenever a significant change occurs: a new recipe, a new ingredient or allergen, a change of supplier, new equipment, refurbishment of facilities, or following a significant deviation.
What role does staff training play? A central one. The operative who measures temperatures, checks allergen labelling or carries out cleaning is the person who makes the system work day to day. A flawless plan on paper fails if the person implementing it does not understand why a critical limit is critical. Continuous training and verification of understanding therefore form part of the system's prerequisites.
Conclusion
In food safety, risk is not managed through good intentions but through a method that demonstrates, data point by data point, that every hazard is under control at the point where it could cause harm. The value of HACCP does not lie in the archived manual; it lies in the temperature records taken every shift, in the critical limits expressed as numbers that an inspector can verify, and in the chain of traceability that makes it possible to withdraw a suspect batch within hours before it reaches the consumer. A business that treats HACCP as a living system — supported by robust prerequisites and reviewed at every change — not only avoids penalties: it protects its brand against the risk that truly threatens it, which is a public health alert. At Summum Calidad we implement these systems so that control is real and demonstrable, not merely documentary.