A HACCP plan must be reviewed at least once every 12 months. This annual reassessment is a regulatory requirement in the United States and aligns with international food safety standards. But the annual review is a minimum, not a ceiling. Any significant change to your operation, ingredients, equipment, or processes should trigger an immediate review of the relevant portions of your plan.
What U.S. Regulations Require
For meat and poultry facilities, the rule is explicit. Under 9 CFR 417.4, every establishment must reassess the adequacy of its HACCP plan at least annually and whenever any changes occur that could affect the hazard analysis or alter the plan. This includes changes to equipment, ingredients, or processes. The USDA’s Food Safety and Inspection Service enforces this requirement, and failure to document your annual reassessment is a common audit finding.
Facilities regulated under the FDA’s Preventive Controls rule (21 CFR Part 117) face a parallel requirement. The food safety plan must be reanalyzed as a whole, or in part, on a similar schedule. The FDA also reserves the authority to require a reanalysis when it determines one is necessary to respond to new hazards or developments in scientific understanding.
Events That Trigger an Immediate Review
The annual review is your baseline. Between those scheduled reassessments, certain changes require you to revisit your plan right away. Under FDA regulations, the specific triggers are:
- New or increased hazards: Any significant change in your facility’s activities that creates a reasonable potential for a new hazard or significantly increases a previously identified one.
- New hazard information: Learning about potential hazards associated with your food that weren’t known when the plan was written.
- Unanticipated food safety problems: A contamination event, customer complaint, or positive pathogen test that suggests something in the system failed.
- Ineffective controls: Finding that a preventive control, a combination of controls, or the food safety plan as a whole isn’t working as intended.
In practical terms, this means a review is warranted when you switch to a new ingredient supplier, install or modify processing equipment, change a cooking or cooling procedure, reformulate a product, or receive a recall notice related to an ingredient you use. The Codex Alimentarius guidelines, which form the international foundation for HACCP, reinforce this: the plan should be reviewed and updated whenever any modification is made to the product, process, or any step in the operation.
Annual Review vs. Ongoing Verification
It helps to understand that HACCP oversight happens at three distinct levels, each with its own timing.
Validation happens when you first design your HACCP plan or make a major change to it. This is where you demonstrate that the system, as designed, can actually control the identified hazards and produce a safe product. You’re proving the plan works under your facility’s real conditions.
Ongoing verification happens continuously, day to day and week to week. This includes activities like checking that monitoring is being done correctly, calibrating thermometers and other instruments, reviewing records, and occasionally sampling product. These activities confirm that the plan is being followed as written.
Reassessment is the formal, big-picture review. Done at least annually, this is where you step back and ask whether the plan itself is still adequate. Have your products changed? Has new science emerged about a hazard you control for? Are your critical limits still supported by current data? This is more than a paperwork exercise. It requires looking at the entire system with fresh eyes.
Who Should Be Involved
A HACCP review is only as good as the people conducting it. The review team should include a mix of management and floor-level operators drawn from different parts of the business. You need people with technical knowledge to evaluate whether controls are scientifically sound, and people with hands-on process knowledge to flag whether those controls are realistic in practice.
The team should be led by someone with a strong understanding of HACCP principles and good knowledge of both the food operations being reviewed and the technical information behind them. This person is responsible for managing the study and communicating findings. In small businesses, one or two people may fill all these roles, but the principle is the same: combine technical expertise with practical, on-the-ground experience.
Every team member should have clear authority from management to participate fully. A review where participants feel they can’t raise concerns or challenge existing practices defeats the purpose.
What to Document
Documenting your review properly is just as important as conducting it. Auditors and regulators don’t just want to know that you reviewed the plan. They want to see proof of what you evaluated, what you found, and what decisions you made.
Every record entry related to the HACCP plan must be made at the time the event occurs and include the date and time. Each entry must be signed or initialed by the employee making it. For the reassessment itself, your documentation should capture what aspects of the plan were evaluated, whether any hazards, controls, or critical limits were changed, and the rationale behind those decisions. If no changes were needed, document that conclusion and explain why.
Records should also cover the ongoing verification activities that feed into the annual review: monitoring logs for critical control points with actual times and temperatures, calibration records for instruments, corrective actions taken in response to any deviations, and verification results. Keeping these records current throughout the year makes the annual reassessment far more efficient and defensible.
Industry Standards Often Expect More
If your facility is certified under a GFSI-benchmarked standard like SQF, BRCGS, or FSSC 22000, the annual minimum still applies, but these programs require documented review cycles and often expect more rigorous reassessment practices. Third-party auditors working under these standards will look closely at whether your review was substantive or just a signature on a form.
Many food safety professionals treat the annual requirement as a starting point and build in quarterly or semi-annual check-ins on specific parts of the plan. This spreads the workload, catches problems sooner, and makes the formal annual reassessment less overwhelming. It also creates a stronger paper trail showing that food safety is an active, ongoing priority rather than a once-a-year obligation.