HACCP is mandatory in some food industries and voluntary in others. In the United States, federal law requires HACCP plans for meat, poultry, seafood, and juice processors. For most other food businesses, including restaurants, retail stores, and many manufacturers, HACCP is technically voluntary but often expected by buyers, retailers, and trading partners.
Where HACCP Is Legally Required in the US
Three federal regulations make HACCP non-negotiable for specific food sectors. The USDA’s Food Safety and Inspection Service finalized its rule in July 1996 requiring all meat and poultry establishments to develop and implement HACCP systems. The FDA mandates HACCP for seafood processors under Title 21 CFR Part 123 and for juice processors under Title 21 CFR Part 120. If you operate in any of these categories, you must have a written HACCP plan, and inspectors will check it.
The consequences for failing to comply are serious. FSIS can suspend or withdraw inspection from a meat or poultry plant, which effectively shuts it down since these products cannot be sold without federal inspection. Enforcement actions include regulatory control actions, withholding actions, and formal suspensions. In extreme cases, FSIS refers violations for criminal prosecution, which can result in fines, imprisonment, or both.
Where HACCP Is Officially Voluntary
For restaurants, food service operations, and retail establishments, the FDA endorses HACCP on a voluntary basis. The agency publishes a manual specifically titled “Managing Food Safety: A Manual for the Voluntary Use of HACCP Principles for Operators of Food Service and Retail Establishments.” The FDA also supports voluntary HACCP adoption for Grade A dairy operations. So if you run a restaurant, bakery, grocery store, or catering business, no federal regulation forces you to maintain a formal HACCP plan.
That said, state and local health departments set their own rules. Some jurisdictions incorporate HACCP-based principles into their food codes, which can blur the line between voluntary and required depending on where you operate.
FSMA Changed the Picture for Manufacturers
The Food Safety Modernization Act, signed into law in 2011, introduced a new framework for food manufacturers that weren’t already covered by HACCP rules. Instead of traditional HACCP, most food facilities now must follow Hazard Analysis and Risk-Based Preventive Controls, sometimes called HARPC. The underlying approach is similar: both systems require you to identify food safety hazards using scientific data, then build verifiable controls around them. But HARPC uses broader language around what counts as a hazard and what qualifies as a control measure. If you manufacture, process, pack, or hold food and you’re not already under a HACCP mandate for meat, poultry, seafood, or juice, you likely fall under FSMA’s preventive controls rule instead.
HACCP Requirements in the EU
The European Union takes a broader mandatory approach. Regulation (EC) No 852/2004 requires food business operators across all sectors to establish food safety procedures based on HACCP principles. The regulation applies to any food business that implies “a certain continuity of activities and a certain degree of organisation,” which covers restaurants, processors, distributors, and retailers alike. There are two notable exceptions: the rules don’t apply to people producing food for their own private consumption, and primary production (farming) is not yet required to implement full HACCP, though guides to good hygiene practice are encouraged at the farm level. Small producers who sell directly to consumers or local retail may be regulated through national law rather than EU-wide HACCP requirements.
Why “Voluntary” Often Doesn’t Mean Optional
Even in sectors where HACCP carries no legal mandate, market forces can make it practically required. Major retailers and food service chains typically demand that their suppliers hold certification from a food safety scheme recognized by the Global Food Safety Initiative (GFSI). These schemes, including SQF and BRCGS, are built on HACCP principles. GFSI’s benchmarking requirements were first created in 2001 by a group of retailers who wanted to harmonize food safety standards across the global supply chain. Earning GFSI-recognized certification is often described as a “passport to the global market.”
If you want to sell products to a large grocery chain, a major distributor, or an international buyer, you will almost certainly need a HACCP-based food safety plan regardless of whether the law demands one. Companies that skip HACCP in technically voluntary sectors often find themselves locked out of their most valuable sales channels. For small businesses selling locally or direct to consumers, the pressure is lower, but the competitive advantage of having a documented food safety system still matters.
The Short Answer
HACCP is legally mandatory for US meat, poultry, seafood, and juice processors, and for virtually all food businesses in the EU. It is officially voluntary for US restaurants, retail food operations, and food service establishments. For US food manufacturers not covered by existing HACCP rules, FSMA’s preventive controls regulation imposes a closely related but distinct requirement. And across all sectors, supply chain expectations from major buyers make HACCP-based systems a practical necessity for most businesses that want to compete beyond their local market.