Critical Control Points

What to Do When a CCP Fails: Corrective Action Procedures

CCP Failure: Corrective Action Procedures

A CCP failure - also called a critical limit deviation - occurs when monitoring reveals that a critical limit has not been met. This is the moment your HACCP system is truly tested. Corrective actions are pre-planned responses that address both the immediate food safety risk (what happens to the affected food) and the underlying cause (why did the failure occur and how do we prevent it recurring). Under Codex Alimentarius and EC Regulation 852/2004, food business operators must have documented corrective action procedures for each CCP.

Key takeaways

Stop and segregate immediately - do not allow potentially unsafe food to be served

Identify all affected product since the last conforming check

Default to discard when there is any doubt about safety

Root cause analysis is essential - fixing the symptom without the cause leads to repeat failures

Update the HACCP plan to reflect corrective actions and preventive measures

Immediate Response: The First 5 Minutes

When a monitoring check reveals a critical limit deviation, the immediate steps are: Stop the process or segregate the affected food. Do not allow potentially unsafe food to continue through production or be served to customers. Identify and isolate all product affected since the last conforming monitoring check. If checks are hourly, that means all product from the last hour. Mark isolated product clearly as "ON HOLD - DO NOT USE" with the date, time, and reason. Notify the responsible person (supervisor, head chef, quality manager) immediately. Do not wait until the end of the shift. Begin the corrective action procedure as documented in your HACCP plan. These steps should take no more than 5 minutes. Every minute of delay increases the volume of potentially unsafe food and the risk to consumers. Train all monitoring staff to act immediately and confidently, without waiting for permission.

Product Disposition: Use, Rework, or Discard

Once affected product is isolated, you must decide what happens to it. There are three options. Use as-is: if the deviation is minor and the food remains safe (e.g. a fridge briefly reached 6C with a critical limit of 8C), the food may be acceptable. This decision must be based on evidence, not assumption. Rework or re-process: if the food can be safely brought back into compliance. For example, undercooked chicken can be returned to the oven until it reaches 75C. However, food that has been in the danger zone for extended periods cannot be made safe by further cooking because toxins may have formed. Discard: if the food cannot be confirmed safe, it must be disposed of. This is the default action when there is any doubt. Document the disposition decision with the reasoning, the person who made it, and the evidence used. An EHO will expect to see this documentation.

Root Cause Analysis

After addressing the immediate food safety risk, investigate why the deviation occurred. Common root causes include: equipment failure (fridge compressor failure, probe out of calibration, oven element failing), process failure (cooling time too long because portions were too large, cooking time not adjusted for a new product), human error (staff member forgot to check temperature, used wrong colour-coded board), and supplier failure (delivery arrived above temperature, ingredient specification changed). Use a structured approach: ask "why" repeatedly until you reach the underlying cause, not just the symptom. "The fridge was warm" is a symptom. "The fridge was warm because the door seal has degraded, because there is no scheduled seal inspection" is a root cause. Document the root cause analysis and keep it with the CCP deviation record.

Critical Control Points

Automate your HACCP compliance

Paddl generates HACCP plans tailored to your business, creates monitoring routines from your CCPs, and keeps digital records that EHO inspectors can verify instantly. No more paper folders.

Start free trial See HACCP features

Try the free HACCP Hazard Identifier

Preventing Recurrence

The final and most important step is implementing changes to prevent the same failure from happening again. Corrective actions that only address the immediate batch but do not fix the root cause will lead to repeated failures. Preventive measures might include: repairing or replacing equipment, adding an operating limit as an early warning, increasing monitoring frequency at the CCP, retraining staff, changing the process (smaller portions for cooling, longer cooking times), adding a new prerequisite programme, or changing suppliers. Update the HACCP plan to reflect any changes made. Review the effectiveness of the preventive measure at the next HACCP review - has the deviation recurred? If so, the preventive measure was insufficient and needs strengthening. Keep a log of all CCP deviations and corrective actions. Review this log quarterly to identify trends. Repeated deviations at the same CCP may indicate a systemic problem that requires a fundamental process change.

What to do next

Write a corrective action procedure for each CCP

Before a failure occurs, document the specific steps for each CCP: who to notify, how to isolate product, decision criteria for use/rework/discard, and who has authority to make the disposition decision.

Create "ON HOLD" labels

Keep a supply of pre-printed or blank hold labels in the kitchen and storage areas so affected product can be marked immediately and unambiguously.

Review your deviation log quarterly

Track all CCP deviations and look for patterns. Three failures at the same CCP in three months is a signal that the process or equipment needs changing, not just the staff.

Common mistakes to avoid

Mistake

Waiting until the end of the shift to act on a deviation

Instead

Every minute of delay means more potentially unsafe food is produced or served. Act within 5 minutes of detecting the deviation.

Mistake

Discarding the food but not investigating the cause

Instead

Disposing of one batch solves the immediate problem but guarantees it will happen again. Always complete a root cause analysis.

Mistake

Blaming the staff member instead of fixing the system

Instead

Most CCP failures have systemic causes (equipment, process design, training gaps). Focus on fixing the system, not punishing individuals.

Frequently asked questions

Do I need to report CCP failures to the local authority?

Not every CCP failure needs reporting. However, if unsafe food has been served to customers, or if there is a risk that contaminated product has left your premises, you should notify your local authority environmental health department. If a customer reports illness, cooperate fully with any investigation.

Who has the authority to make product disposition decisions?

This should be defined in your HACCP plan. Typically, the head chef, kitchen manager, or quality manager has this authority. The key is that the person is trained, understands the hazards, and can make an evidence-based decision. Monitoring staff should escalate, not make disposition decisions alone.

What records do I need to keep for a CCP deviation?

At minimum: the date and time of the deviation, the CCP and critical limit involved, the monitoring result that triggered the deviation, the product affected (type, quantity, batch), the disposition decision (use, rework, discard), the corrective action taken, the root cause identified, the preventive measure implemented, and the names of all people involved.

How many CCP failures are "acceptable"?

There is no acceptable number. Every CCP failure represents a breakdown in food safety control. The goal is zero. Frequent failures indicate that your critical limits, monitoring procedures, or processes need revising. A well-managed HACCP system should have very few deviations.

Critical Control Points