Opening a food business: a complete guide to your obligations (Reg. 852/2004)

How to read this guide

The EU obligations are uniform, but their practical implementation (forms, authorities, penalty amounts, minimum training content) is national or regional. This guide sets out the common EU framework and, for point-specific figures, refers to the country pages and detailed how-to pages. The duty-holder is always the food business operator (FBO): primary responsibility for food safety rests with the operator Article 17 of Regulation (EC) No 178/2002 and cannot be delegated to a consultant or a third-party body.

Step 1: frame your activity and check your obligations

The first step is to characterise the activity, because every later obligation flows from that. You need to establish what you produce, process or serve, in what quantities, for which recipients, and whether you handle products of animal origin. The Regulation applies to all stages of production, processing and distribution of food Article 1(1) of Regulation (EC) No 852/2004, with a few exclusions (among them primary production for private domestic use and the direct supply of small quantities from producer to consumer, left to national law).

To get your bearings quickly, use the check your obligations tool, which starts from the type of activity and lists the applicable obligations. This characterisation decides, among other things, whether registration is enough or approval is needed (step 2), which chapters of Annex II are relevant (step 3) and how detailed the food safety management plan has to be (step 4).

Step 2: registration with the competent authority

Every operator notifies the competent authority of each establishment it is responsible for, so that it may be registered, and reports any significant change and the cessation of the activity Article 6(2) of Regulation (EC) No 852/2004. Registration is a notification, not a prior authorisation: there is no "examination" issuing a title, but a duty to declare that brings the activity into the system of controls. The operational steps — who the authority is, which form to use, on what timeline — are set out in registering a food business.

This general obligation must be kept distinct from approval. Establishments handling products of animal origin subject to Regulation (EC) No 853/2004 do not merely register: they must obtain prior approval from the competent authority, with an on-site visit and the allocation of an identification number Article 6(3) of Regulation (EC) No 852/2004 Article 4 of Regulation (EC) No 853/2004. The difference — a declaratory notification versus a prior enabling act — is explained in registration vs approval. A café, a delicatessen or a pizzeria register; a dairy or a meat-cutting plant apply for approval.

Step 3: structural requirements (Annex II)

Premises and equipment must meet the general and specific hygiene requirements of Annex II Article 4(2) of Regulation (EC) No 852/2004. Chapter I sets the general requirements for premises (layout, maintenance, water supply, lighting, ventilation); Chapter II the requirements for rooms where food is prepared; the following chapters govern equipment, waste, personal hygiene and the handling of food. There is no single model of "compliant" premises: the requirements are framed in terms of the hygienic result to be achieved and must be applied to the specific activity.

Some requirements have cross-cutting weight and are covered in dedicated guides: managing the cold chain for perishable food and managing allergens across premises and processes. These requirements form the prerequisites on which the food safety management plan of the next step rests.

Step 4: the HACCP food safety management plan

The operator puts in place, implements and maintains one or more permanent procedures based on the HACCP principles Article 5(1) of Regulation (EC) No 852/2004. This is not a certificate nor a one-off form, but a management system built on real processes and documented in a way commensurate with the nature and size of the business. The documentary form of the system is the food safety management manual: the writing a HACCP manual page describes the preliminary steps and the seven principles step by step, while the complete guide to HACCP brings together the deep-dives on hazards, critical points and verification.

The plan is not static: it must be reviewed and updated whenever the product, process or any step changes, and the documents describing the procedures must be kept up to date at all times Article 5(4) of Regulation (EC) No 852/2004. This is where the business's documentary obligations concentrate, and it is also the document the authority examines first during a control.

Step 5: staff training

Food handlers must be trained or instructed in food hygiene matters in line with the type of activity Annex II, Chapter XII, point 1 of Regulation (EC) No 852/2004; those responsible for developing and maintaining the HACCP-based procedures must have received adequate training in applying those principles Annex II, Chapter XII, point 2 of Regulation (EC) No 852/2004. The Regulation sets an obligation of result — staff competent in relation to their tasks — but does not fix the duration, minimum content or form of any certificate: these matters are left to national or regional law, with marked differences between Member States. The mandatory training page sets out the framework and its variations. A training certificate is never "valid throughout the Union": it evidences compliance with an obligation under the law of the territory that issues it, not an EU-wide title.

Step 6: official controls

Once operating, the business is subject to official controls by the competent authority, which verifies compliance with food law Article 6(1) of Regulation (EC) No 852/2004. Official controls are now governed by Regulation (EU) 2017/625, which repealed and replaced the former Regulations 854/2004 and 882/2004 Article 1 of Regulation (EU) 2017/625. There is nothing to "pass" in order to open: control is subsequent and recurring, risk-based, and may take place without notice. The official controls: what to expect page describes how an inspection unfolds, while the official controls guide brings together powers, outcomes and safeguards. If requirements or measures are imposed, the routes of response are covered in non-compliance and appeals; penalty amounts are set by national law and, for Italy, are collected in the penalties under Legislative Decree 193/2007 page.

No certificate: only obligations

One misconception, which fuels misleading commercial practices, needs clearing up: Regulation 852/2004 provides for no certificate. There is no certificate under Regulation 852/2004, and no HACCP title "valid throughout the Union". There are obligations — registration, own-checks, training — which the operator discharges under its own responsibility Article 17 of Regulation (EC) No 178/2002. The reasoning, and the correct terms to use, are in why no such certificate exists. Something quite different are the voluntary certifications (ISO 22000, FSSC, BRCGS, IFS): private schemes demanded by the market that sit on top of the legal obligations without replacing them.