HACCP explained: the 7 principles in practice

What HACCP is, who must use it, the five preliminary steps and seven principles, and how to make monitoring, records and training work on every shift.

In shortHACCP (Hazard Analysis and Critical Control Points) is a preventive system for food safety. You identify the biological, chemical and physical hazards in your process, decide which steps are critical for controlling them, set measurable limits, monitor those steps, correct problems, verify the system works and keep records. HACCP plans are required for some products, such as meat and poultry under USDA, and seafood and juice under FDA, and are widely used as the basis of food safety programs everywhere else.

Why HACCP matters

Traditional food safety relied on inspecting finished products. HACCP moves control upstream: instead of hoping to catch unsafe food at the end, you control the steps where hazards can be prevented, eliminated or reduced to safe levels. It is the foundation of most modern food safety systems, retailer requirements and certification schemes.

For restaurants, commissaries and food producers, HACCP also has a workforce side. Every critical step is carried out by a person on a shift: the cook who checks the internal temperature, the employee who logs the cooler, the supervisor who signs off a corrective action. If those people are not trained, scheduled and checked, the plan exists only on paper.

Who must have a HACCP plan

Where HACCP is required in the U.S.
Sector Regulator Requirement
Meat and poultry processing USDA Food Safety and Inspection Service HACCP plans required for establishments under inspection
Seafood processing FDA Seafood HACCP regulation
Juice processing FDA Juice HACCP regulation
Most other FDA-regulated food facilities FDA Food safety plans with hazard analysis and preventive controls under FSMA, which build on HACCP concepts
Retail and food service State and local health departments HACCP plans required for certain specialized processes, such as reduced oxygen packaging or curing, under codes based on the FDA Food Code

Even where it is not required, many customers and certification programs expect a HACCP-based approach. Our guide to FSMA for food businesses explains the FDA preventive controls rules.

The five preliminary steps

  1. Assemble the HACCP team with people who know the products, the process and food safety.
  2. Describe the food and its distribution, including ingredients, packaging and storage.
  3. Describe the intended use and consumers, including vulnerable groups such as children or the elderly.
  4. Draw a flow diagram of every step from receiving to shipping or serving.
  5. Verify the flow diagram on the floor, during real production and on different shifts.

The last step is often skipped. Walk the process on the night shift too; it rarely runs exactly the same way as on days.

The seven principles

HACCP principles
# Principle What it means in practice
1 Conduct a hazard analysis List biological, chemical (including allergens) and physical hazards at each step and decide which are significant
2 Determine critical control points (CCPs) Identify the steps where control is essential to prevent or eliminate a hazard, such as cooking or metal detection
3 Establish critical limits Set measurable limits for each CCP, such as a minimum internal temperature and time
4 Establish monitoring procedures Decide who checks each CCP, how, and how often
5 Establish corrective actions Decide what happens when a limit is not met: hold, rework or discard product, and fix the cause
6 Establish verification procedures Check that the system works: calibrate thermometers, review records, test products
7 Establish record-keeping Keep records of monitoring, corrective actions and verification

Monitoring: where plans succeed or fail

Monitoring is done by front-line employees, often under time pressure. Make it easy to do right:

Records filled in from memory at the end of a shift are a common audit finding and a sign the check did not really happen. Digital records with a time stamp and a photo where useful make that much harder.

Corrective actions

When a critical limit is missed, the plan must say exactly what to do. A good corrective action covers four things: bring the process back under control, decide what happens to the affected product, record what happened, and find and fix the cause. For example, if a cooler log shows a temperature above the limit, the employee moves product to a working unit, the supervisor evaluates the affected product against the plan, maintenance repairs the unit, and the event is recorded with times and names.

Prerequisite programs

HACCP works on top of basic good practices, often called prerequisite programs: sanitation, pest control, supplier approval, allergen control, personal hygiene, equipment maintenance and training. If these are weak, the HACCP plan will be overloaded. Use checklists such as the restaurant food safety checklist and kitchen operations checklist to keep them running on every shift.

Training and staffing

Every employee who carries out a monitoring step needs to understand the critical limit, how to check it and what to do if it is missed. Keep training records for each person and refresh training when products or equipment change. Schedule enough trained people on each shift so checks are not skipped during the rush, and make sure the night and weekend crews are trained to the same standard. Training is working time and should be paid. The training attendance sheet helps you record who was trained.

Reviewing and updating the plan

Review the plan at least once a year and whenever something changes: a new product, recipe, supplier, piece of equipment or process step, or a food safety incident. Verification activities such as record reviews and thermometer calibration should be scheduled and assigned like any other task.

How EZTime helps

EZTime helps with the people side of a HACCP program. Monitoring checks, sanitation and verification run as recurring tasks with time stamps and photo proof, training certificates are stored in each digital employee file with expiry reminders, and schedules show who is responsible on each shift. EZTime does not replace your HACCP plan or your regulator’s requirements.

Frequently asked questions

What are the 7 principles of HACCP?

Hazard analysis, critical control points, critical limits, monitoring, corrective actions, verification and record-keeping.

Is HACCP mandatory in the U.S.?

For some sectors, yes: meat and poultry under USDA, and seafood and juice under FDA. Most other FDA-regulated facilities need a food safety plan under FSMA.

Do restaurants need a HACCP plan?

Usually only for specialized processes defined by the local food code, but many restaurants use HACCP principles for their food safety program.

What is a critical control point?

A step where control is essential to prevent, eliminate or reduce a food safety hazard to an acceptable level.

How long should HACCP records be kept?

It depends on the regulation and product. Check the rules that apply to you; many require at least one to two years.

Where to go next

You may also need

Make every check happen on every shift

Run food safety checks as tasks with time stamps and photos in EZTime. For a team of 15, EZTime starts at about $30 a month ($2 per employee).

Disclaimer: This guide is general information only and is not regulatory, legal or food safety advice. Requirements depend on your products, processes and regulator (FDA, USDA or state and local agencies). Check current regulations and work with a qualified food safety professional.