When Should a HACCP Plan Be Checked & Reviewed

You’ve written your HACCP plan. It’s filed away in the office. Job done, right?

Not quite.

A HACCP plan isn’t a one-and-done document you tick off and forget. It’s a living system that needs regular checks, comprehensive reviews, and updates whenever your operation changes.

Get this wrong and you risk more than a poor inspection score. You risk a food safety incident, a recall, or worse.

So when should a HACCP plan be checked and reviewed? Let me walk you through exactly what’s required, what triggers a review, and how to stay on the right side of the law.

What Does “Reviewing a HACCP Plan” Actually Mean?

First, let’s clear up the terminology.

There’s a difference between checking your HACCP plan and reviewing it.

Checking (or monitoring) happens daily or weekly. It’s the routine verification that your critical control points are working. Temperature logs. Cleaning schedules. Supplier checks.

Reviewing is more comprehensive. It’s a formal reassessment of your entire HACCP system to confirm it’s still fit for purpose: whether hazards are accurate, control measures effective, and documentation reflects current practice.

Think of checking as your daily health monitoring. Reviewing is your annual medical.

Both are essential. And both are required by law.

Is It a Legal Requirement to Review Your HACCP Plan?

Yes.

Under Regulation (EC) No 852/2004 Article 5, every food business in the UK must “put in place, implement and maintain a permanent procedure or procedures based on the HACCP principles.”

The regulation is clear: “When any modification is made in the product, process, or any step, food business operators shall review the procedure and make the necessary changes to it.”

This is UK retained law. It applied before Brexit and it still applies now.

But here’s what most people miss.

The law doesn’t just say “have a HACCP plan.” It says your plan must be a permanent procedure that you maintain and update. That word “maintain” is doing a lot of work.

A plan that sits unchanged for years isn’t being maintained. It’s being ignored.

The revision clarified that validation means proving your controls work before you implement them, and verification means checking they continue to work in practice. Regular reviews are part of that verification cycle.

The bottom line?

If you’re not reviewing your HACCP plan at least once a year, or immediately after a significant change, you’re not complying with the law.

How Often Should a HACCP Plan Be Reviewed?

Here’s the short answer: at least once a year, plus whenever something significant changes.

Let me break that down.

When should a HACCP plan be checked?

Your HACCP system should be checked continuously.

Daily temperature logs. Weekly cleaning records. Monthly supplier audits. These are the monitoring activities that prove your critical control points are under control.

If you’re using Safer Food, Better Business (the FSA’s simplified HACCP pack for small caterers), your diary pages cover most of these checks.

These checks aren’t the same as a full review. They’re part of ongoing verification.

Is HACCP reviewed annually?

Yes, as a minimum.

Even if nothing in your business has changed, you must review your HACCP plan at least once per year.

Why?

Because scientific understanding evolves. Regulations update. New allergens emerge. Equipment ages. Staff change.

An annual review forces you to ask: “Is this plan still accurate? Are we still following it? Does it reflect how we actually work?”

And here’s a critical point: you must document the review even if nothing changes.

I’ve seen businesses fail inspections because they couldn’t prove they’d reviewed their plan. They’d been following it perfectly, but there was no dated, signed evidence of an annual review.

Environmental Health Officers (EHOs) need to see that review date. Without it, your plan looks abandoned.

What Triggers a HACCP Plan Review?

An annual review is the baseline. But there are several situations where you need to review your plan immediately, not next year.

Changes to Your Operation

Any significant operational change is a trigger for review.

That includes:

New equipment: A new oven, fridge, or vacuum packer changes your process and requires updated controls, critical limits, and monitoring procedures.

Menu changes: Adding dishes with raw egg, new allergens, or ready-to-eat products all require HACCP updates.

New suppliers: Switching suppliers changes your hazard profile. Reassess supplier assurance, delivery controls, and specifications.

Structural changes: Renovations, new layout, additional storage. Anything affecting workflow or cross-contamination risk.

New staff roles or premises moves: Both require significant HACCP review or rewriting.

I’ve seen businesses expand from a small café into catering and event supply without updating their HACCP plan. The plan still described a simple café operation. That’s a compliance failure waiting to happen.

After Food Safety Incidents or Near-Misses

If something goes wrong, review your plan immediately.

That includes customer complaints about foreign objects, allergens, or illness; internal near-misses; and product recalls (whether yours or a supplier’s).

The point of HACCP is prevention. If something slipped through, your system failed.

If your business had a near-miss or complaint, treat it as a warning. Review the relevant section of your HACCP plan and work out what needs to tighten up.

Regulatory or Scientific Updates

Food safety regulations and scientific understanding don’t stand still.

Examples:

• Natasha’s Law (PPDS labelling) came into force in October 2021. Businesses offering prepacked food for direct sale had to update allergen controls and labelling.
• New guidance on food safety culture (Regulation (EU) 2021/382, retained in UK law) introduced formal expectations around culture, training, and management review.
• Updates to Codex HACCP principles in 2020 clarified validation and verification requirements.

You don’t need to rewrite your plan every time the FSA publishes new guidance. But you do need to stay aware of major changes and assess whether they affect your controls.

Audit Findings or EHO Feedback

If an Environmental Health Officer inspects your business and identifies gaps, that’s a trigger for review.

Same goes for third-party audits (BRC, SALSA, or similar standards).

Audit feedback is gold. It tells you what’s not working. Update your plan, close the gaps, and document what you’ve changed.

What an EHO Expects to See in Your HACCP Review

Environmental Health Officers don’t just want to see a HACCP plan. They want to see evidence that it’s being used and maintained.

Here’s what they’re looking for:

Evidence of regular reviews: A dated, signed record showing when the plan was last reviewed and by whom. Even if nothing changed, that review needs documenting.

A “living document”: Your plan should look used. Annotations, updates, version control. If it’s pristine and untouched, that’s a red flag.

Match between plan and practice: EHOs will walk your kitchen and compare what they see with what’s written. If your plan says you monitor fridge temperatures twice daily but records show gaps, that’s non-compliance.

Appropriate detail for your business: A small café doesn’t need a 50-page HACCP study. But it does need site-specific detail. Generic templates downloaded from the internet won’t cut it.

The FSA’s MyHACCP tool provides free templates and guidance. For simplified systems, Safer Food, Better Business is the go-to pack for England. Scotland, Wales, and Northern Ireland have equivalent packs (CookSafe, FoodWise Wales, Safe Catering).

The FSA recommends keeping completed HACCP plans and review records for 36 months from the date of completion. That gives you a clear audit trail.

HACCP Reviews and Food Safety Culture

Here’s something many food businesses don’t realise.

In 2021, the EU introduced a legal requirement for food businesses to establish and maintain a food safety culture (Regulation (EU) 2021/382, amending Regulation (EC) 852/2004). This requirement was retained in UK law post-Brexit.

Food safety culture isn’t just about training or posters on the wall. It’s about behaviours, accountability, and leadership.

One of the five mandatory requirements under the regulation is “appropriate supervision and procedures to ensure that relevant food safety requirements are met.”

That includes evidence that you’re conducting regular management reviews, acting on audit findings, and maintaining your food safety systems.

In other words: if you’re not reviewing your HACCP plan regularly and documenting it, you’re not just failing HACCP compliance. You’re failing food safety culture compliance.

Commission Notice 2022/C 355/01 clarifies that enforcement authorities should evaluate food safety culture through observation, employee interviews, and review of leading indicators, including whether management reviews are happening as planned.

Your HACCP review schedule is now part of a broader legal expectation around food safety culture.

Common HACCP Review Mistakes

Here are the mistakes I see most often:

Treating it as a one-off exercise: You create the plan, pass your inspection, then file it away. A year later, it’s gathering dust.

Not documenting “no change” reviews: Even if nothing changed, you still need to review annually and record it. “Nothing to report” is a valid outcome. Not reviewing at all is a compliance failure.

Delayed reviews after operational changes: You’ve bought new equipment or changed suppliers but haven’t updated your HACCP plan yet. You’re operating outside your documented system.

Using generic templates without customisation: Downloading a template isn’t a HACCP plan. It needs to be site-specific, with your hazards, your controls, your staff responsibilities.

Not involving the right people: HACCP reviews should involve the people who actually do the work. If your plan is written by someone who never sets foot in the kitchen, it won’t reflect reality.

How to Stay on Top of HACCP Reviews

Here’s how to make HACCP reviews routine rather than a last-minute panic before an inspection.

• Set calendar reminders for your annual review: Pick a date (e.g. 1st March every year) and make it non-negotiable. Block time in the diary. Assign someone to lead it.
• Assign clear responsibility: Who’s accountable for keeping your HACCP plan current? In small businesses, it’s often the owner or manager. In larger operations, it might be a food safety manager or HACCP team.
• Use a review checklist: A simple checklist helps you cover all bases: hazards still accurate? Controls still effective? Any changes since last review? Documentation up to date? Signature and date.
• Link reviews to other routine tasks: Tie your HACCP review to something you already do annually (staff appraisals, business planning, insurance renewals). That makes it harder to forget.
• Train your team to understand HACCP principles: The more your team understands why HACCP matters, the more likely they are to follow it and flag when something’s changed. Training isn’t just about ticking a box. It’s about building competence and confidence.

If you or your team need to build a solid foundation in HACCP principles, including when and how to review your plan, take our HACCP training course. It’s CPD-accredited, 100% online, and you’ll get an instant digital certificate on passing.

Understanding HACCP isn’t just about compliance. It’s about genuinely reducing risk and protecting your customers.

The Bottom Line

Your HACCP plan should be checked continuously and reviewed formally at least once a year.

But more importantly, it should be reviewed whenever something significant changes: new equipment, menu changes, suppliers, incidents, or regulatory updates.

A HACCP plan that never changes is a plan that’s never used.

Environmental Health Officers know this. They’re not looking for perfection. They’re looking for evidence that you take food safety seriously, that your plan reflects reality, and that you’re staying on top of changes.

If you treat your HACCP plan as a living document, not a tick-box exercise, you’ll not only stay compliant, you’ll genuinely reduce risk.

And that’s the whole point.

Get CPD-accredited, EHO-approved online training from Essential Food Hygiene. Instant digital certificates. Bulk discounts for teams. View our courses.