How to Respond to a Food Safety Incident in Your Food Business
Step-by-step guide to managing food safety incidents in UK food businesses. Covers containment, mandatory reporting, root cause investigation, corrective actions, and procedure review.
A food safety incident can range from a customer complaint about a foreign object in their meal to a confirmed case of food poisoning affecting multiple people. However serious the incident, your response must be swift, systematic, and documented. Under the Food Safety Act 1990, selling food that is injurious to health, unfit for human consumption, or so contaminated that it would be unreasonable to expect it to be eaten is a criminal offence carrying unlimited fines and up to 2 years imprisonment.
You are legally required to report certain incidents to your local authority environmental health team. If the incident involves food that could cause injury to health and has been distributed beyond your premises, you must also notify the Food Standards Agency. RIDDOR (Reporting of Injuries, Diseases and Dangerous Occurrences Regulations 2013) requires you to report to the HSE if a member of staff or the public suffers a specified disease or condition linked to your workplace, including certain food-borne infections.
This guide walks you through the immediate response, mandatory reporting obligations, investigation process, and the corrective actions needed to prevent recurrence and protect your business.
5 steps to complete
Contain the incident immediately
As soon as a food safety incident is identified, take immediate containment action. If a customer reports illness or an allergic reaction, provide first aid and call 999 if there is any risk of anaphylaxis or severe illness. If contaminated or suspect food is identified, remove it from sale, display, and storage immediately. Segregate and label it clearly ("DO NOT USE - under investigation") and store it separately from other food. If the contamination could affect other products (for example, a pest infestation in a storage area, or a batch of contaminated ingredient used across multiple dishes), extend the containment to all potentially affected items. Record the time, nature of the incident, affected products, and actions taken.
Notify the relevant authorities
Determine your reporting obligations. You must notify your local authority environmental health department if: a customer reports food poisoning linked to your premises, you identify contaminated food that may have been sold to customers, or you discover a serious food safety hazard (such as pest contamination of stored food). If the affected food has been distributed to other businesses, notify the Food Standards Agency immediately. Under RIDDOR, report to the HSE if a worker or member of the public is diagnosed with a specified occupational disease related to your food business, or if someone is taken to hospital as a result of an incident on your premises. Keep records of all notifications, including who you spoke to, when, and what was reported.
Investigate the root cause thoroughly
Conduct a structured investigation to identify how the incident occurred. Gather all relevant information: interview staff involved in preparing and serving the affected food, review temperature logs and monitoring records for the relevant period, check cleaning records and cross-contamination controls, examine supplier delivery records and traceability documentation, inspect the relevant areas of your premises for contamination sources, and review CCTV if available. Identify whether the root cause was a procedural failure (staff did not follow the process), a system failure (no process existed), a supplier issue (contaminated ingredient), or an environmental factor (pest ingress, equipment failure). Document the investigation with dates, evidence, and findings.
Implement corrective actions to prevent recurrence
Based on your root cause analysis, implement specific corrective actions. These might include: retraining staff on the relevant procedures, revising your HACCP plan or SFBB records to address the identified gap, changing suppliers or increasing incoming goods inspection, repairing or replacing faulty equipment, improving cleaning procedures or pest control measures, introducing new monitoring checks, or updating allergen information. Each corrective action should have a responsible person and a completion date. Verify that each action has been implemented effectively and record the evidence.
Review and strengthen your procedures
Use the incident as a catalyst for a broader review of your food safety management system. Ask: could this incident have been prevented by existing procedures that were not followed, or were the procedures themselves inadequate? Review your HACCP plan, SFBB records, training programme, monitoring systems, and supplier management against the lessons learned. Update your procedures where necessary, communicate changes to all staff, and schedule a follow-up review (typically after one month) to verify the new or revised procedures are working. Add the incident and its resolution to your staff training programme as a case study to reinforce learning.
Tips for success
Common mistakes to avoid
Frequently asked questions
When am I legally required to report a food safety incident?
You must report to your local authority environmental health team if you have reason to believe that food you have sold or served has caused illness or injury, or if you identify a food safety hazard that could affect public health. You must report to the Food Standards Agency if affected food has been distributed to other businesses. Under RIDDOR, you must report to the HSE if a worker or member of the public suffers a reportable injury, disease, or dangerous occurrence connected to your workplace. When in doubt, report: it is always better to report an incident that turns out to be minor than to fail to report one that is serious.
What is RIDDOR and when does it apply to food businesses?
RIDDOR (Reporting of Injuries, Diseases and Dangerous Occurrences Regulations 2013) requires employers to report certain workplace incidents to the HSE. For food businesses, relevant reportable events include: a member of the public being taken to hospital from your premises as a result of an incident, an employee diagnosed with a food-borne illness that could be occupationally linked (such as Hepatitis A in a food handler), and dangerous occurrences (such as a structural collapse). Reports must be made without delay, typically within 10 days for injuries and 15 days for diseases.
Should I contact customers who may have been affected?
If you have reason to believe that food sold to customers may be unsafe (for example, you discover that a contaminated ingredient was used in dishes served over several days), you should attempt to contact affected customers where possible. If the food has been distributed to other businesses, product recall or withdrawal procedures apply, and you must notify the Food Standards Agency. Your local authority environmental health team can advise on the appropriate level of customer notification based on the specific circumstances.
How can I protect my business from legal liability after an incident?
The strongest protection is demonstrating that you had robust food safety procedures in place and that you responded appropriately to the incident. The due diligence defence under Section 21 of the Food Safety Act 1990 requires evidence that you took all reasonable precautions and exercised all due diligence. Maintain thorough documentation: your HACCP plan, training records, temperature logs, cleaning schedules, supplier records, and the incident investigation report itself. Cooperate fully with any investigation, notify your insurer promptly, and seek legal advice for serious incidents.
What should I do if I suspect a member of staff has a food-borne illness?
Staff with symptoms of vomiting, diarrhoea, or other gastrointestinal illness must be excluded from handling food immediately. Under the Food Safety and Hygiene (England) Regulations 2013, food handlers must report symptoms to their employer, and the employer must not allow them to work with food while symptomatic. The exclusion period is typically 48 hours after symptoms cease, though for certain pathogens (E. coli O157, Hepatitis A, Typhoid), longer exclusion and clearance by a medical professional is required. Report the illness to your local authority if you suspect it is linked to your workplace.
Ready to simplify compliance?
Paddl automates the processes described in this guide. Digital records, automatic alerts, and complete audit trails for your hospitality business.
Full access to all features · Dedicated onboarding support · Cancel anytime