Food safety management manual (HACCP manual)

What the food safety management manual is

The phrase "food safety management manual" (in practice also "HACCP manual" or "self-monitoring plan") does not appear in the text of Regulation (EC) 852/2004. The Regulation requires the food business operator to put in place, implement and maintain permanent procedures based on the HACCP principles Article 5(1) of Regulation (EC) No 852/2004 and, as the seventh of those principles, to establish documents and records appropriate to the nature and size of the business in order to demonstrate the effective application of the measures Article 5(2) of Regulation (EC) No 852/2004. The manual is the documentary form that, in EU and national practice, discharges this requirement: it brings together in a single body the description of the activity, the hazard analysis, the critical control points, the prerequisites and the related records.

The distinction between the system and the document is decisive. The rule requires the HACCP system and proportionate documentation; it does not require a document with a specific title. A formally perfect manual that is not implemented breaches Article 5 Article 5(1) of Regulation (EC) No 852/2004; procedures that are implemented but not adequately documented do not satisfy the seventh principle and are hard to demonstrate during a control Article 5(2) of Regulation (EC) No 852/2004.

It is not a certificate

The food safety management manual is not a certificate or an attestation issued by a body. It is an in-house document, drawn up and signed by the operator, who remains responsible for food safety Article 17 of Regulation (EC) No 178/2002. Article 5(4)(a) provides that the operator demonstrates compliance to the competent authority in the manner that authority requires Article 5(4) of Regulation (EC) No 852/2004: there is no issuance, endorsement or prior validation of the manual by a third-party body. Regulation (EC) 852/2004 provides for no certification (see the real obligations of a food business, not certifications). Even the guides to good practice assessed by Member States under Article 8 are voluntary aids, not certifications of the individual establishment Article 8(3) of Regulation (EC) No 852/2004.

Typical contents

The Regulation sets no mandatory table of contents. Commission Notice 2022/C 355/01 and settled practice identify a minimum content, always proportionate to the nature and size of the business. A complete manual typically contains:

In simple businesses the document is leaner: where no CCPs can be identified, well-managed prerequisites and good hygiene practices can form the core of the manual, with reduced but traceable documentation (see flexibility for small businesses). On how to build it in practice, see the operational obligations.

Updating

The manual is not a static document. The second subparagraph of paragraph 2 requires a review whenever a product, process or any other stage changes Article 5(2) of Regulation (EC) No 852/2004; paragraph 4(b) requires the documents describing the procedures to be kept up to date at all times Article 5(4) of Regulation (EC) No 852/2004. Updating is therefore event-driven (a new supplier, new equipment, a new menu, the launch of delivery), not tied to a periodic deadline set by the Regulation. Records must be kept for an appropriate period, which the Regulation does not quantify Article 5(4) of Regulation (EC) No 852/2004: the practical criterion, indicated by Commission Notice 2022/C 355/01, is to match it to the commercial life of the product.