HACCP Regulations

EC Regulation 852/2004: The Legal Basis for HACCP in the UK

Regulation 852/2004 and HACCP: What UK Food Businesses Must Know

Quick answer

Regulation (EC) No 852/2004 on the hygiene of foodstuffs is the single most important piece of food safety legislation for UK food businesses. It is the regulation that makes HACCP a legal requirement, not just a best practice recommendation. Originally an EU regulation, it was retained in UK domestic law after Brexit through the European Union (Withdrawal) Act 2018 and continues to apply with minor amendments. Every food business operator in the UK - from a street food stall to a hospital kitchen - must implement and maintain procedures based on HACCP principles as required by this regulation. This article explains what the regulation says, what it requires in practice, and how it interacts with other UK food safety law.

Article 5 of Regulation 852/2004 is the specific legal provision requiring HACCP-based procedures in every UK food business.
The regulation was retained in UK law after Brexit and continues to apply with no substantive changes to HACCP requirements.
Small businesses can use proportionate approaches (such as SFBB) but are not exempt from having a food safety management system.

Key takeaways

Article 5 of Regulation 852/2004 is the specific legal provision requiring HACCP-based procedures in every UK food business.

The regulation was retained in UK law after Brexit and continues to apply with no substantive changes to HACCP requirements.

Small businesses can use proportionate approaches (such as SFBB) but are not exempt from having a food safety management system.

Regulation 852/2004 works alongside the Food Safety Act 1990, domestic hygiene regulations, and food information regulations to form the complete legal framework.

The flexibility clause in Article 5(2) means requirements should be proportionate to the size and nature of the business.

The Key Articles That Require HACCP

Article 5 of Regulation 852/2004 is the article that creates the HACCP obligation. It states that food business operators shall put in place, implement, and maintain a permanent procedure or procedures based on the HACCP principles. The article then lists the seven HACCP principles that the procedures must incorporate: identifying hazards that must be prevented, eliminated, or reduced (Principle 1); identifying the critical control points (Principle 2); establishing critical limits at CCPs (Principle 3); establishing monitoring procedures at CCPs (Principle 4); establishing corrective actions when monitoring indicates a CCP is not under control (Principle 5); establishing verification procedures to confirm the system is working (Principle 6); and establishing documentation and records proportionate to the nature and size of the business (Principle 7). Article 5(2) allows flexibility: it states that HACCP requirements should take account of the principles in the Codex Alimentarius and should be flexible enough to be applied in all situations, including small businesses. This flexibility clause is critical - it means that a sole-trader running a sandwich van is not expected to produce the same level of documentation as a factory. The requirement is proportionate, not one-size-fits-all.

HACCP Regulations

The regulation, met every day and provable

Regulation 852/2004 asks for a documented system that is followed. Paddl gives you the plan, the daily checks with a timestamp and signature, and the audit pack that shows an officer both. Paddl is £69 per location per month with every feature and a 30-day free trial.

Start free trial HACCP software

Compare the best HACCP software Download the free HACCP plan template FoodDocs vs Paddl for HACCP

Post-Brexit Status and Retained EU Law

When the UK left the EU on 31 January 2020, Regulation 852/2004 was retained in UK domestic law through the European Union (Withdrawal) Act 2018. This means it continues to have the force of law in England, Wales, and Scotland. Northern Ireland operates under slightly different arrangements due to the Windsor Framework (formerly the Northern Ireland Protocol), under which EU food safety regulations continue to apply directly. The retained version of 852/2004 has been amended by several UK statutory instruments to remove references to EU institutions and replace them with UK equivalents. For practical purposes, the HACCP requirements are identical to when the UK was an EU member state. The FSA (Food Standards Agency) remains the central competent authority for food safety policy, and local authority Environmental Health departments remain the enforcement bodies. Any future changes to the regulation in the UK will be made through UK legislation, not EU legislation. Businesses should monitor FSA announcements for any proposed amendments, particularly around the UK government's programme to review retained EU law. As of early 2026, no substantive changes to the HACCP requirements in 852/2004 have been made or proposed.

Exemptions and Proportionality

Regulation 852/2004 applies to all stages of production, processing, and distribution of food, with limited exemptions. Primary production (farming, fishing, hunting) is covered by Annex I rather than Annex II and has simplified hygiene requirements. Private domestic preparation of food for personal consumption is exempt. Occasional handling, preparation, and storage of food by private individuals at community events (church fetes, village hall suppers) may be exempt depending on scale and frequency, though the exact threshold is determined by local authorities. The regulation explicitly recognises that small businesses need proportionate requirements. Article 5(2)(g) states that the requirement for documentation must take account of the nature and size of the food business. Recital 15 of the regulation notes that HACCP requirements should not apply to small businesses where the application of prerequisite programmes alone can control food safety. This has been interpreted by the FSA as meaning that very small, simple operations can use the Safer Food Better Business (SFBB) pack as their HACCP-based procedure. SFBB incorporates HACCP thinking into a simplified format that does not require a formal hazard analysis or CCP identification. However, this does not mean small businesses are exempt from having a food safety management system - it means the system can be simpler.

How 852/2004 Interacts With Other UK Food Law

Regulation 852/2004 does not exist in isolation. It sits within a framework of food safety legislation. The Food Safety Act 1990 provides the overarching legal framework in England and Wales, making it an offence to sell food that is unsafe, not of the nature, substance, or quality demanded, or falsely described. The Food Safety and Hygiene (England) Regulations 2013 (and equivalents for Wales, Scotland, and Northern Ireland) are the domestic regulations that enforce 852/2004. They give EHOs the power to inspect premises, serve improvement notices, issue emergency prohibition notices, and prosecute businesses that fail to comply. Regulation (EC) No 853/2004 (also retained) adds specific hygiene rules for food of animal origin - relevant if you handle raw meat, fish, eggs, or dairy. The Food Information Regulations 2014 (retained from EU FIC 1169/2011) cover allergen labelling and are closely linked to the allergen elements of your HACCP plan. Understanding how these regulations interact matters because compliance with 852/2004 alone is not sufficient. Your HACCP plan must also address allergen requirements under the food information regulations, structural requirements under the hygiene regulations, and the general safety obligation under the Food Safety Act. In practice, a well-designed HACCP-based food safety management system covers all of these requirements together.

What to do next

Verify your HACCP system meets Article 5 requirements

Check that your food safety management system addresses all seven HACCP principles listed in Article 5(1). Even if you use SFBB, confirm that hazard identification, control measures, monitoring, corrective actions, and record-keeping are all covered.

Understand which regulations apply to your specific operation

If you handle food of animal origin, check whether Regulation 853/2004 imposes additional requirements. If you serve food to vulnerable groups, review whether your controls are proportionate to the additional risk.

Monitor FSA announcements for regulatory changes

Subscribe to FSA updates to stay informed about any proposed changes to retained EU food safety regulations as part of the UK government review of retained EU law.

Common mistakes to avoid

Mistake

Believing small businesses are exempt from HACCP

Instead

There is no size exemption. Every food business must have procedures based on HACCP principles. The regulation allows proportionate approaches, so a small cafe can use SFBB rather than a full HACCP study, but it must have something.

Mistake

Assuming EU food safety law no longer applies after Brexit

Instead

Regulation 852/2004 was retained in UK domestic law and has the same legal force as before Brexit. Non-compliance carries the same penalties.

Frequently asked questions

Does Regulation 852/2004 still apply in the UK after Brexit?

Yes. It was retained in UK domestic law through the European Union (Withdrawal) Act 2018 and continues to apply in England, Wales, and Scotland. Northern Ireland is subject to the EU version directly under the Windsor Framework. No substantive changes have been made to the HACCP requirements.

Can I be prosecuted for not having a HACCP plan?

Yes. The Food Safety and Hygiene (England) Regulations 2013 (and devolved equivalents) enforce Regulation 852/2004. Failure to have HACCP-based procedures is an offence that can result in prosecution, unlimited fines, and potentially imprisonment for up to two years for the most serious cases.

Does SFBB count as compliance with Regulation 852/2004?

For small, simple food businesses, yes. The FSA designed SFBB specifically as a proportionate way for small businesses to meet the HACCP requirements of 852/2004. However, if your operation is more complex than SFBB covers (cook-chill, multiple process types, catering for vulnerable groups), you may need to supplement SFBB with additional documentation.

What is the difference between 852/2004 and 853/2004?

Regulation 852/2004 sets general hygiene requirements for all food businesses, including the HACCP obligation. Regulation 853/2004 sets additional specific hygiene rules for food of animal origin (meat, fish, dairy, eggs). If you handle these products, both regulations apply to you. Most hospitality businesses are covered by 852/2004; the additional requirements of 853/2004 primarily affect slaughterhouses, cutting plants, and processing facilities.

HACCP Regulations