HACCP Audits & Reviews

The Annual HACCP Review: Step-by-Step Process

How to Conduct Your Annual HACCP Plan Review

Quick answer

Your HACCP plan is not a document you create once and file away. The Codex Alimentarius guidelines and EC Regulation 852/2004 both require ongoing verification, and the annual review is the centrepiece of that verification. It is a structured reassessment of your entire food safety management system: are the hazards you identified still the right ones? Are your critical limits still valid? Are your monitoring procedures working? Has anything changed in your operation that the plan does not reflect? For most UK food businesses, the annual review is also the moment that EHOs look for when assessing "confidence in management" during inspections. This guide walks through the process step by step.

The annual HACCP review must involve your full HACCP team and cover every element of the plan, from preliminary steps through to record-keeping.
Gather all data before the review: audit reports, complaints, corrective action logs, temperature summaries, and any regulatory changes.
Look for trends and patterns, not just individual incidents - repeated corrective actions indicate a systemic problem.

Key takeaways

The annual HACCP review must involve your full HACCP team and cover every element of the plan, from preliminary steps through to record-keeping.

Gather all data before the review: audit reports, complaints, corrective action logs, temperature summaries, and any regulatory changes.

Look for trends and patterns, not just individual incidents - repeated corrective actions indicate a systemic problem.

Document the review formally with attendees, findings, actions, responsibilities, and deadlines.

Communicate changes to all staff and verify implementation within the first month.

Assembling the Review Team and Setting the Agenda

The annual HACCP review should involve your full HACCP team, not just the food safety manager working alone. For a restaurant, this typically means the head chef, the general manager, and a supervisor or senior member of kitchen staff. For larger operations, include the operations director, a representative from each kitchen section, and any external food safety advisor you retain. Set a date well in advance and protect it from cancellation - this is a compliance requirement, not an optional meeting. Prepare an agenda that covers every element of the HACCP system: preliminary steps (team composition, product descriptions, flow diagrams), the hazard analysis, CCP identification, critical limits, monitoring procedures, corrective actions, verification activities, and record-keeping. Gather all relevant data before the meeting: internal audit reports from the past year, EHO inspection reports, customer complaint records, supplier audit results, temperature monitoring summaries (including out-of-range frequencies), corrective action logs, and any food safety incidents. The review should take at least two hours for a simple operation and a full day for complex ones. Do not try to rush it into a 30-minute slot at the end of a management meeting.

HACCP Audits & Reviews

Audit-ready without the week before

Paddl reviews the plan with you when the menu or chemicals change, keeps a compliance score per site, and exports the whole record as a PDF for an auditor or an EHO for any date range. Paddl is £69 per location per month with every feature and a 30-day free trial.

Start free trial HACCP software

Try the free EHO Readiness Quiz Compare the best HACCP software Download the EHO inspection checklist FoodDocs vs Paddl for HACCP

Reviewing Each Element of the HACCP Plan

Work through the plan systematically. For the preliminary steps: has the HACCP team composition changed? If a key member has left, who has replaced them and are they trained? Are the product descriptions still accurate? Has your menu changed in ways that require new product groups? Are the flow diagrams current and verified on-site? For the hazard analysis: are the identified hazards still relevant? Have new hazards emerged (new ingredients, new processes, new equipment, changes in supplier)? Have any regulatory changes affected what you need to control? For CCP identification: are the CCPs still in the right places? If you have changed a process step, the CCP may have moved. For critical limits: are they still scientifically valid and achievable in practice? If your cooking CCP specifies 75C core temperature but you have introduced a new menu item that is traditionally served at a lower temperature (e.g. medium-rare steak), you need to document the risk assessment and any alternative control measure. For monitoring: review the frequency, method, and person responsible. Are monitoring records complete and accurate? What percentage of readings were out of range, and were corrective actions taken every time?

Analysing Trends and Identifying Improvements

The annual review is your opportunity to step back and look at patterns. If your fridge temperatures were out of range 15 times in the past year, is that a fridge maintenance issue, a door discipline issue, or an overloading issue? If you had three allergen-related complaints, what do they have in common - was it always the same dish, the same service period, or the same staff members? Trend analysis turns raw data into actionable insights. Review your corrective action log. Are the same corrective actions being repeated? If you keep recording "fridge door left open - reminded staff" month after month, the corrective action is not effective and you need a different approach (a door alarm, a spring-close mechanism, or a redesigned workflow that reduces the need to leave the door open). Look at your customer complaint records for food safety themes. Look at your staff training records and identify gaps. Compare your current practices against any updated FSA guidance, industry codes of practice, or changes in legislation that have occurred during the year. The Food Hygiene Rating Scheme scoring criteria are also worth reviewing against your system - particularly the "confidence in management" scoring, which directly reflects whether your HACCP system is active, reviewed, and improving.

Documenting the Review and Updating the Plan

Record the review in a formal document that includes: the date of the review, who attended, what was assessed, what findings were made, what changes to the HACCP plan are required, who is responsible for each change, and the deadline for completion. This document is evidence for EHOs that your annual review actually happened and was substantive. If changes to the plan are needed, update the relevant documents: flow diagrams (with new version numbers), hazard analysis worksheets, CCP documentation, monitoring procedures, and record-keeping templates. Communicate changes to all relevant staff and provide training where new procedures are introduced. Do not make wholesale changes without proper implementation - a beautifully updated plan that nobody follows is worse than an older plan that staff understand and follow. Phase in changes if necessary and verify they are being followed within the first month. Set the date for the next annual review before the meeting ends. If your plan needs significant updates, consider scheduling a follow-up meeting in three to six months to check that the changes have been implemented and are working. File the review record alongside your HACCP documentation where it can be easily retrieved for the next EHO inspection.

What to do next

Set your annual review date now

Pick a date within the next 12 months, book a meeting room, and send invitations to your full HACCP team. Protect this date from cancellation.

Compile your review data pack

Gather internal audit reports, EHO inspection results, customer complaints with food safety themes, corrective action logs, temperature monitoring summaries, and supplier audit results from the past year.

Create a review minutes template

Prepare a structured document with sections for each element of the HACCP plan, space for findings and actions, and fields for responsible persons and deadlines.

Common mistakes to avoid

Mistake

Treating the annual review as a paperwork exercise done by one person

Instead

The review must be a genuine team discussion with input from people who work in the kitchen daily. A manager completing the form alone misses operational realities and does not meet the spirit of HACCP verification.

Mistake

Reviewing the plan but not updating it

Instead

If the review identifies that a flow diagram is out of date or a new hazard exists, the plan must actually be changed. A review that notes "flow diagram needs updating" but does not set a deadline and assign responsibility has not completed the job.

Frequently asked questions

Is the annual HACCP review a legal requirement?

EC Regulation 852/2004 requires food business operators to review their HACCP-based procedures regularly and whenever changes are made. While the regulation does not specify "annual", the Codex Alimentarius guidelines recommend at least annual verification, and this is the standard that UK EHOs assess against. Not conducting an annual review will negatively affect your "confidence in management" score.

What if nothing has changed since last year?

Even if your menu, suppliers, equipment, and layout have not changed, you still need to review monitoring data, corrective action trends, audit findings, and regulatory updates. You may find that while your procedures have not changed, compliance with them has drifted. Document that the review was conducted and that no changes were required, with the supporting evidence.

Can I combine the annual review with an internal audit?

You can schedule them together, but they serve different purposes. The audit checks whether current procedures are being followed. The review asks whether the procedures themselves are still correct. Doing both on the same day is efficient, provided you allocate enough time for each and document them separately.

How long should the annual review take?

For a single-site restaurant or cafe with a straightforward menu, allow two to three hours. For a multi-site operation, a care home, or a business with complex processes (cook-chill, sous vide, catering), allow a full day. The time investment is proportionate to the complexity of your operation and the amount of data you need to review.

HACCP Audits & Reviews