FSSC 22000: the GFSI-recognised certification scheme based on ISO 22000
Updated 2026-07-12 · Reviewed by: Redazione ce85204 — revisione editoriale assistita da AI (2026-07-12)
FSSC 22000 is a GFSI-recognised certification scheme combining the ISO 22000 standard, the ISO/TS 22002 technical prerequisite programmes and additional requirements. It is voluntary and does not replace the obligations under Regulation 852/2004.
FSSC 22000 (Food Safety System Certification) is a GFSI-recognised food safety certification scheme. It is among the most widespread standards in branded food industry. Like all voluntary certifications, it is optional and answers market demand.
At a glance
- It is a GFSI-recognised scheme, hence accepted by major retailers as system assurance.
- It is made up of three elements: the ISO 22000 standard, the technical prerequisite programmes ISO/TS 22002 (sector-specific) and the FSSC scheme's additional requirements.
- It is voluntary: it does not replace registration Article 6(2) of Regulation (EC) No 852/2004, HACCP Article 5(1) of Regulation (EC) No 852/2004 and training Annex II, Chapter XII, point 1 of Regulation (EC) No 852/2004.
- It is governed by the FSSC Foundation and certified by accredited bodies (under ACCREDIA in Italy).
Commentary
What it is
FSSC 22000 arose to overcome the limitation of ISO 22000 alone, which is not GFSI-recognised because it does not set sufficiently prescriptive prerequisite requirements. The scheme therefore adds two components to the management structure of ISO 22000:
- the technical prerequisite programmes of the ISO/TS 22002 series, differentiated by category (for example ISO/TS 22002-1 for food manufacturing, -4 for packaging), which detail the hygiene prerequisites beyond the level of Annex II of the Regulation;
- the FSSC Foundation's own additional requirements, covering aspects such as services management, labelling, food defence, food fraud mitigation and logo use.
The result is a system that integrates hazard analysis under the HACCP principles required by Article 5 Article 5(2) of Regulation (EC) No 852/2004 with a certifiable, internationally recognised management framework.
Who asks for it
FSSC 22000 is required above all by branded industry and international buyers that accept GFSI-recognised schemes. It is very common among manufacturers supplying multiple markets, because a single GFSI-recognised certificate avoids duplicated second-party audits.
Accreditation
Certification is issued by bodies accredited under ISO/IEC 17021 supplemented by the scheme's requirements, within the framework of Regulation (EC) No 765/2008. GFSI recognition and accreditation (ACCREDIA in Italy), with the EA-MLA arrangements, are what make the certificate usable with international customers.
Relationship with the obligations under 852
No element of FSSC 22000 replaces the legal obligations. The certified business remains subject to registration Article 6(2) of Regulation (EC) No 852/2004, to the obligation of HACCP procedures Article 5(1) of Regulation (EC) No 852/2004 and to official control Article 6(1) of Regulation (EC) No 852/2004. The certificate is not a legal title: see why there is no certificate under Regulation 852/2004.
Common errors
- Thinking FSSC 22000 replaces public obligations. It adds to registration, HACCP and training Article 5(1) of Regulation (EC) No 852/2004; it does not replace them.
- Confusing it with ISO 22000 alone. ISO 22000 is one of the three components; on its own it is not GFSI-recognised.
- Treating GFSI recognition as a public act. GFSI is a private industry initiative: its recognition is a market benchmark, not a rule of law.
Frequently asked questions
Is FSSC 22000 mandatory?
No. It is voluntary. The legal obligations remain registration Article 6(2) of Regulation (EC) No 852/2004, HACCP Article 5(1) of Regulation (EC) No 852/2004 and training Annex II, Chapter XII, point 1 of Regulation (EC) No 852/2004.
How does it relate to ISO 22000?
FSSC 22000 comprises ISO 22000 as its management component, and adds the ISO/TS 22002 technical prerequisites and additional requirements. This combination earns it GFSI recognition, which ISO 22000 alone lacks.
Why is it so widely required?
Because it is GFSI-recognised: large customers accept it as standardised assurance, avoiding the need to inspect each supplier directly. It is particularly widespread in branded industry.
Is an FSSC-certified company exempt from official controls?
No. The competent authority retains full control powers Article 6(1) of Regulation (EC) No 852/2004. The certificate may serve as documentary evidence, but does not replace public control.
Sources
- EUR-Lex — Regulation (EC) No 852/2004, consolidated text as of 24 March 2021: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02004R0852-20210324 — accessed 2026-07-12.
- FSSC — Food Safety System Certification, scheme documents: https://www.fssc.com/ — accessed 2026-07-12.
- GFSI — Recognised certification programmes: https://mygfsi.com/ — accessed 2026-07-12.
Drafting and review
ce85204 editorial team. Draft generated with AI from primary sources; editorial review AI-assisted (see methodology).