HACCP Records: The 2026 Folder Structure UK Inspectors Want (Complete Guide)
What FSA inspectors actually want to see when they walk into your UK food business, the 2026 HACCP folder structure, by record type and retention period.
Quick answer: Every UK food business must identify food safety hazards and implement HACCP-based procedures under retained Regulation (EC) 852/2004. Records must evidence hazard analysis, critical control points (CCPs), monitoring, corrective action, and verification. FSA inspections use these records to set your Food Hygiene Rating Scheme score. There is no single legal retention period for most records: keep them up to date and available for inspection.
HACCP paperwork is what the inspector asks for first. A well-kept HACCP folder makes the inspection a 30-minute formality; a missing one turns a routine visit into an improvement notice and a 0 or 1 on the scores-on-the-doors sticker in the window.
Enforcement: what goes wrong in practice
Food officers and the Food Hygiene Rating Scheme care less about a perfect textbook HACCP manual and more about whether yesterday’s fridge actually stayed cold, and whether you can prove it.
- Missing or invented temperature logs: gaps, identical readings every day, or logs filled in a week at a time. Officers notice handwriting batches and “too perfect” data. Use a real temperature log sheet and fill it when you measure.
- HACCP plan that doesn’t match the menu: the folder describes a cook-serve cafe; the business now does vacuum-pack or delivery. Update the plan when the process changes.
- Allergen failures under Natasha’s Law / PPDS: incomplete labels on prepacked-for-direct-sale food are a fast route to poor ratings and formal action. Cross-link: Natasha’s Law PPDS.
- No supplier traceability when something is recalled: if you cannot show where a batch came from within hours, the incident becomes your incident.
- Training records that stop at induction: staff who joined after the last hygiene course, with no refreshers, undermine an otherwise tidy folder.
Hygiene ratings and formal notices often cite the same root: procedures not evidenced in daily records. Keep the plan short, the logs honest, and the corrective actions written when a reading fails. Patterns for training. Not a write-up of any named business’s case.
Who must keep HACCP records
Any UK food business, restaurants, takeaways, hotels, cafes, school kitchens, care home kitchens, butchers, bakeries, retailers, caterers, producers, manufacturers, wholesalers. The scale of documentation varies with the size and risk of the operation, but the principle is universal.
The seven HACCP principles
- Conduct a hazard analysis, biological, chemical, physical, allergen
- Identify Critical Control Points (CCPs) where hazards can be controlled
- Establish critical limits for each CCP (time, temperature, pH)
- Establish monitoring procedures for each CCP
- Establish corrective action when limits are breached
- Verify the system is working (e.g. periodic audit, external calibration)
- Keep records to evidence every step
What records does a UK food business have to keep?
A UK food business has to keep three things at a minimum: written food safety management procedures based on HACCP principles, traceability records showing who supplied you and who you supplied, and allergen information for the food you sell. Everything else is the daily evidence that those procedures are actually being followed.
Keep these three whatever your size
- Food safety management procedures. Your HACCP plan, or a completed Safer Food, Better Business pack if you are a small caterer. This is the document an officer asks for first.
- Traceability records. Who supplied each ingredient and who you supplied, on the "one step up, one step down" basis. gov.uk lists these as a legal responsibility in their own right.
- Allergen information. The 14 regulated allergens for everything you sell, plus full ingredient labelling on Prepacked for Direct Sale food under Natasha's Law.
Then the daily records that prove the procedures run
- Temperature logs for fridges, freezers, cooking, hot holding and cooling.
- Cleaning schedules, signed and dated.
- Staff training records.
- Supplier delivery checks and batch or durability details where they apply.
And the two you cannot create afterwards
- Withdrawal and recall records, which you cannot reconstruct after the event.
- The corrective action you wrote down on the day a check failed. Officers look for this specifically, because it is the proof that the system works rather than the proof that it exists.
What records the FSA expects
At an inspection you should be able to produce a HACCP plan, temperature logs (fridge, freezer, cook, hot hold, cool-down), cleaning schedules signed off as complete, supplier approval records and traceability documents, allergen records for every menu item, staff training records and food hygiene certificates, pest control inspection records, water quality records for private supplies, and due diligence records for any claims (organic, halal, free-from).
Temperature logs, the daily requirement
Fridges must hold food at 8°C or below (best practice 5°C); freezers at -18°C or below. Cook temperatures for poultry should reach 75°C core; 63°C for hot-held food; cool-down from 63°C to 5°C within 90 minutes. Every CCP should be monitored at the frequency set in the plan, usually daily, sometimes per batch.
Allergen records and Natasha's Law
Since October 2021, all Prepacked for Direct Sale (PPDS) food must carry a full ingredient label including all 14 regulated allergens emphasised. Records should show you know the allergen status of every ingredient from every supplier, with specification sheets on file and reviewed at least annually.
Supplier records and traceability
Under "one step up, one step down" traceability, you must know exactly where each ingredient came from and where it went. Invoices, delivery notes, batch codes, and product specifications should be filed together. In a withdrawal or recall, the FSA expects traceability evidence within four hours.
Retention periods
UK food law sets no fixed retention period for most food safety records. What gov.uk requires is that your records are up to date and available when an officer asks for them. The FSA's own instruction for Safer Food, Better Business is to keep completed diary pages until your next inspection, on paper or electronically. Some records do carry specific legal periods, notably traceability for products of animal origin, so check the rules for your sector rather than applying one blanket figure.
Food Hygiene Rating Scheme consequences
FHRS scores (0 to 5) are public. Councils in England, Wales, and Northern Ireland publish them on food.gov.uk. Scotland runs Food Hygiene Information Scheme (FHIS) with "Pass" or "Improvement Required". Missing records are one of the most common reasons for a sub-3 score, and a score below 3 often triggers re-inspection, tariff impact with delivery platforms, and loss of contract with corporate clients.
Common mistakes
- A templated HACCP plan not adapted to the business
- Temperature logs that are suspiciously round, 5°C every day at 9am
- Missing signatures showing who completed each check
- Cleaning schedules ticked but no evidence of what was cleaned
- Allergen matrix not updated when a recipe changes
FAQs
Do I need Safer Food, Better Business?
SFBB is the FSA's entry-level pack for small caterers. It's not mandatory but will satisfy the documentation requirement for most small businesses if followed faithfully. Larger businesses should use a fuller HACCP framework.
Who signs off the HACCP plan?
The business owner or designated food safety manager. In a multi-site chain, a central HACCP plan is permitted but must be adapted for each site's specific risks.
Can records be digital?
Yes. Many kitchens now use apps for temperature logging, cleaning schedules, and allergen records. The FSA accepts digital records provided they are complete, tamper-evident, and producible during an inspection.
How long should I keep training records?
For the duration of employment plus a reasonable period (typically 3 years) to evidence compliance at the time of any incident.
Sources and further reading
- Food Standards Agency
- FSA: HACCP guidance
- Retained Regulation (EC) 852/2004, food hygiene
- Food Information (Amendment) (England) Regulations 2019, Natasha's Law
Last reviewed 2026-04-22 by Jamie Dawson, Editor. Corrections: corrections@logbook.co.uk
Food records are one branch of a bigger family, see every type of UK logbook explained.
