HACCP Principles

HACCP Principle 7: Documentation & Record Keeping Requirements

HACCP Documentation That Satisfies Regulators and Protects Your Business

Documentation is the backbone of your HACCP system. If it is not written down, it did not happen - at least as far as your Environmental Health Officer is concerned. Principle 7 requires you to maintain records that demonstrate your HACCP system is properly designed, implemented, and maintained. This is not about creating bureaucracy for its own sake. Good documentation protects your business legally, supports consistency across shifts and staff changes, and provides the data you need to continuously improve your food safety management.

Key takeaways

HACCP documentation includes both the plan itself and the operational records proving it is implemented.

If it is not recorded, it did not happen - this is how regulators assess your system.

Digital record-keeping offers significant advantages over paper in reliability, analysis, and retrieval.

Retain all HACCP records for a minimum of two years, or three to five years as best practice.

The Two Types of HACCP Documentation

HACCP documentation falls into two categories: the HACCP plan itself (the system documentation) and the operational records generated by implementing the plan. The HACCP plan documents your hazard analysis, CCP identification, critical limits, monitoring procedures, corrective action procedures, and verification activities. It should also include your team composition, product descriptions, flow diagrams, and any supporting information like supplier specifications or scientific references for your critical limits. This is your reference document - it describes what your system should look like. Operational records are the evidence that the system is being followed: monitoring logs, corrective action reports, calibration records, internal audit reports, training records, and verification findings. These are your proof documents - they demonstrate what actually happened. Both types are essential. A beautiful HACCP plan with no operational records is a plan that is not implemented. Detailed operational records with no plan suggest a system that lacks structure.

Essential Records for UK Hospitality

At minimum, your HACCP documentation should include: temperature monitoring records for all CCPs (cooking, cooling, storage, delivery acceptance, hot holding), corrective action logs showing any deviations and responses, calibration records for all thermometers and monitoring equipment, cleaning schedules and records, pest control records, supplier approval documentation and delivery records, staff training records (including food safety certificates), allergen information and management records, and internal audit reports. For many small businesses using the SFBB approach, much of this is captured in the SFBB diary and safe methods pack. However, even SFBB-based businesses should maintain proper temperature logs and corrective action records. The SFBB diary is a starting point, not the complete picture. All records must be legible, dated, signed (or electronically attributed), and stored so they can be retrieved quickly during an inspection.

Digital vs Paper Record Keeping

Paper records have been the standard for decades, and they are still accepted by local authorities. However, they come with significant limitations: they are easy to falsify, difficult to analyse for trends, vulnerable to damage or loss, and time-consuming to review during inspections. Digital record-keeping systems offer timestamped entries, automated alerts for missed checks or out-of-range readings, trend analysis and reporting, secure cloud storage, easy retrieval during inspections, and integration with temperature monitoring hardware. The FSA does not mandate digital systems, but the direction of travel is clear. Many local authorities now actively encourage digital approaches. If you adopt a digital system, ensure it provides audit trails (who entered what, when), cannot be retrospectively altered without a visible amendment record, and can export data in a format your local authority can review. Some EHOs may not be familiar with a particular software platform, so having the ability to generate clear printed reports or PDFs is important.

HACCP Principles

Automate your HACCP compliance

Paddl generates HACCP plans tailored to your business, creates monitoring routines from your CCPs, and keeps digital records that EHO inspectors can verify instantly. No more paper folders.

Start free trial See HACCP features

Try the free HACCP Hazard Identifier

How Long to Keep Records

UK food law does not specify a mandatory retention period for HACCP records in most cases. However, the general guidance is to retain records for the shelf life of the product plus one year, or a minimum of two years. For traceability records, the Food Law Code of Practice suggests a minimum of five years. Many food safety consultants recommend a blanket retention period of three to five years for all HACCP records. This covers the typical statute of limitations period for food safety offences in England and Wales (three years from the date of the offence or one year from discovery, whichever is later, for summary offences). For businesses that serve vulnerable populations (care homes, nurseries, hospitals), longer retention of five to seven years is prudent. Digital storage makes long-term retention trivial and cost-free, which is another argument for moving away from paper. Whatever period you choose, document it in your HACCP plan and apply it consistently.

What to do next

Organise your HACCP documentation

Create a clear folder structure (physical or digital) separating your HACCP plan, monitoring records, corrective actions, calibration records, and verification reports.

Audit your current records for gaps

Check whether you have complete, signed records for every CCP monitoring check, every corrective action, every calibration, and every internal audit. Identify and fill gaps.

Consider switching to digital records

Evaluate digital HACCP record-keeping systems. Look for timestamp verification, automated alerts, trend reporting, and easy data export for inspections.

Common mistakes to avoid

Mistake

Having a HACCP plan but no operational records

Instead

The plan is only valuable if it is implemented. Operational records (monitoring logs, corrective actions, audits) are the evidence.

Mistake

Keeping records in an inaccessible location

Instead

Records must be readily available during an EHO inspection. Keep them organised and easily retrievable, whether paper or digital.

Mistake

Not retaining records long enough

Instead

Retain all HACCP records for at least two years (three to five years recommended). Digital storage makes this straightforward.

Frequently asked questions

Do I legally need to keep HACCP records?

EC Regulation 852/2004 (retained in UK law) requires food business operators to keep and retain documentation regarding procedures based on HACCP principles. This means you must have records demonstrating that your food safety management system is implemented and maintained. The specific format is not prescribed, but the records must exist.

Can my EHO demand to see my HACCP records?

Yes. Under the Food Safety Act 1990 and the Food Safety and Hygiene (England) Regulations 2013, authorised officers have the right to inspect food safety management documentation and records during a routine inspection or investigation. Failure to produce records can negatively affect your food hygiene rating.

What if I use SFBB - do I still need separate HACCP records?

SFBB is a food safety management system based on HACCP principles. If you are using SFBB properly, with completed safe methods, an up-to-date diary, and supporting records (temperature logs, cleaning schedules), this can satisfy the documentation requirements. However, larger or more complex operations may need more detailed records than SFBB provides.

How should I store my HACCP plan?

Keep a current copy readily accessible in the kitchen or food preparation area (many businesses keep it in the office). If paper-based, keep it in a protective binder. If digital, ensure it can be accessed on-site during inspections. Back up digital records regularly. Keep archived versions of previous plans so you can demonstrate how your system has evolved.

HACCP Principles