Quick answer
Food businesses operating after primary production and its specified associated operations generally need permanent procedures based on HACCP principles. The procedures and evidence must fit the nature and size of the business. This is a duty to manage food safety effectively, not a universal requirement to buy a particular software package, training certificate or commercial “HACCP certificate”.
Separate the legal duty from a certificate
Article 5 of Regulation 852/2004 in the Great Britain legislation text sets out HACCP-based procedures, up-to-date documentation, review after relevant changes and appropriate records. The duty concerns what the food business puts in place, implements and maintains.
A purchased manual, a training certificate or a software subscription does not demonstrate that the procedures fit the business or that staff follow them. Those resources can support implementation, but the operator must be able to explain the actual hazards, controls and evidence.
Check the activity and the applicable national framework
Article 5 specifically addresses stages after primary production and the associated operations listed in Annex I. That distinction should not be turned into a general exemption for transport, storage, home-based selling or a small business. The precise activity and scope matter; other hygiene and food-law duties can still apply.
Great Britain and Northern Ireland do not use identical post-EU-exit legal routes. Read the GB assimilated-law text and the applicable EU hygiene framework relevant to Northern Ireland in their correct context. Ask the relevant food authority or a qualified adviser when a boundary, exemption or unusual process is uncertain. This guide does not decide an individual business’s legal status.
What proportionate procedures can look like
FSA guidance explains that procedures should reflect business size and scale. A small café may use an adapted official catering pack, while a manufacturer with more complex products may need a more detailed technical study. Proportionality changes how the system is organised; it does not mean important hazards can be ignored.
| Question | Useful evidence |
|---|---|
| What do you produce or serve? | A current description of the food, process and intended use. |
| What could make it unsafe? | Hazard analysis and the rationale for relevant controls. |
| How do staff maintain control? | Understandable procedures, monitoring and competent supervision. |
| What happens when a control fails? | Corrective-action arrangements and affected-food decisions. |
| How do you know the system remains suitable? | Verification, review and records of relevant changes. |
Choose the right guidance tool
Use the national resource relevant to your business. Food Standards Scotland’s CookSafe helps Scottish caterers develop procedures that reflect their operation. The FSA HACCP page signposts different resources, including simpler catering packs and MyHACCP for small manufacturing.
Do not assume that a familiar pack covers an unusual process merely because the business is small. If a process, product or customer group falls outside its intended scope, get competent advice and develop the additional controls and evidence needed.
Avoid common misunderstandings
Illustrative example: a home-based producer believes a food hygiene certificate means no further system is needed. The correct question is whether the business’s activities require food-safety procedures and whether those procedures address the actual foods and handling. The training outcome and the business-management duty are separate.
Keep your procedures current, record meaningful monitoring and retain evidence for an appropriate period. There is no single retention period that this article can set for every product, business or legal obligation. Use the existing record-review guide to organise that evidence.
Next steps
- Identify the precise activity, products, jurisdiction and applicable requirements.
- Choose a proportionate HACCP-based approach and adapt it to real operations.
- Implement the controls and check staff understanding.
- Keep evidence current and obtain qualified advice for uncertain legal scope.
Read the official practical guidance — Use the current source alongside the procedures for your own business.