HACCP

How Often Should a HACCP Plan Be Reviewed?

Learn how often to review your HACCP plan, what triggers an unscheduled review, and what the review process should include for UK food businesses.

Quick Answer

A HACCP plan should be reviewed at least once a year. It must also be reviewed whenever there is a significant change such as a new menu, new equipment, or a food safety incident.

Key Facts

HACCP plans should be formally reviewed at least once per year.
Unscheduled reviews are required after any significant change to the business.
Triggers include new menus, new equipment, new suppliers, building works, and food safety incidents.
The review must be documented with date, reviewer, findings, and any changes made.
EHO inspectors check when the plan was last reviewed as part of the confidence in management assessment.

In Detail

The seventh principle of HACCP — verification — requires that your food safety management system is regularly reviewed to ensure it remains effective and up to date. While UK regulations do not specify an exact review frequency in statute, the universally accepted best practice is to conduct a formal review at least once per year. This annual review should be a structured assessment of your entire HACCP plan, checking that all identified hazards are still relevant, Critical Control Points are still appropriate, critical limits are still correct, monitoring procedures are being followed, and corrective actions are effective. In addition to the annual review, your HACCP plan must be reviewed whenever there is a significant change to your business. This includes changes to your menu or recipes, introduction of new ingredients or suppliers, installation of new equipment, physical alterations to the kitchen or premises, changes in staff or management, a food safety incident or customer complaint, changes in legislation or guidance, and feedback from an EHO inspection. Any of these changes could introduce new hazards or make existing controls inadequate, so the plan must be updated to reflect the current reality of your operation. The review should be documented, showing the date of the review, who conducted it, what was checked, any changes made, and the reason for those changes. This documentation is important evidence for EHO inspections, as it demonstrates that your food safety management is active and responsive rather than a static document. An EHO will look at the date of your last review and will expect to see evidence of updates. A HACCP plan that has not been reviewed for two or three years suggests that the business is not taking food safety management seriously.

What to Include in a HACCP Review

A thorough annual review should cover the following areas: check your flow diagrams still accurately represent your processes; verify that all hazards identified are still relevant and no new hazards have emerged; confirm that your Critical Control Points are still the right ones; check that critical limits are still appropriate (e.g., have cooking temperatures changed due to new recipes?); review monitoring records for patterns — are there frequent deviations at certain CCPs?; assess whether corrective actions taken during the year were effective; check that all documentation is complete and accessible; verify that staff training is up to date, particularly for new starters; and review any customer complaints or food safety incidents and whether they indicate gaps in your system. The review should result in a signed and dated record, even if no changes are needed.

Frequently Asked Questions

Who should conduct the HACCP review?

The review should be conducted by someone with sufficient knowledge of HACCP principles and your business operations. In many businesses, this is the owner or manager who is also the food safety lead. For larger operations, it may involve the HACCP team. Some businesses engage external food safety consultants for an independent review, which can be particularly valuable for identifying blind spots.

Do I need to review my SFBB pack as well?

Yes. SFBB is your HACCP-based food safety management system, so the same review requirements apply. Check that all the safe methods still reflect what you do in practice, update any sections that have changed, and make sure the diary is being completed regularly. The FSA also publishes updates to the SFBB pack from time to time, so check that you have the latest version.

What happens if I do not review my HACCP plan?

An outdated HACCP plan that does not reflect your current operations is effectively non-compliant. If an EHO inspector finds that your documented procedures do not match your actual practices, or that the plan has not been reviewed for an extended period, this will negatively affect your score on confidence in management. In serious cases, you could receive an improvement notice requiring you to update your system within a specified timeframe.

Simplify food safety compliance

Paddl automates temperature logs, HACCP plans, SFBB records, and more — so you always have the answer when an inspector asks.