A HACCP plan is a written food safety management system that identifies where hazards can enter a food product and establishes specific controls to prevent them. HACCP stands for Hazard Analysis and Critical Control Points, and the FDA defines it as a system that “addresses food safety through the analysis and control of biological, chemical, and physical hazards from raw material production, procurement and handling, to manufacturing, distribution and consumption of the finished product.” Rather than relying on inspecting finished products, HACCP focuses on preventing problems at every stage of production.
Who Needs a HACCP Plan
In the United States, HACCP plans are legally mandatory for three food sectors: meat and poultry processors (regulated by the USDA’s Food Safety and Inspection Service), seafood processors, and juice manufacturers (both regulated by the FDA). If you operate in any of these industries, you cannot legally produce food without a functioning HACCP plan in place.
Most other food manufacturers fall under the Food Safety Modernization Act (FSMA), which requires a closely related system called HARPC (Hazard Analysis and Risk-Based Preventive Controls). The underlying logic is nearly identical to HACCP, but HARPC broadens the scope. It requires four types of preventive controls: process controls, sanitation controls, allergen controls, and supply chain controls. It also mandates a written recall plan and requires that at least one member of your food safety team be a “preventive controls qualified individual.” Even if your facility technically falls under HARPC rather than HACCP, understanding HACCP principles is the foundation for both systems.
The 7 Principles of HACCP
Every HACCP plan is built on seven principles established by international food safety experts. These aren’t suggestions. They’re the structural backbone of the plan.
- Principle 1: Conduct a hazard analysis. Identify every biological, chemical, and physical hazard that could reasonably occur at each step of your production process.
- Principle 2: Determine critical control points (CCPs). These are the specific steps where a hazard can be prevented, eliminated, or reduced to a safe level. Examples include cooking, chilling, metal detection, and testing ingredients for chemical residues.
- Principle 3: Establish critical limits. Each CCP needs a measurable boundary that separates safe from unsafe. These limits can be based on temperature, time, pH, moisture level, salt concentration, or even sensory factors like aroma and visual appearance.
- Principle 4: Establish monitoring procedures. Define how and how often each CCP will be measured to ensure it stays within its critical limits.
- Principle 5: Establish corrective actions. Spell out exactly what happens when a critical limit is not met, including what to do with the affected product.
- Principle 6: Establish verification procedures. Confirm on an ongoing basis that the entire system is working as designed.
- Principle 7: Establish record-keeping procedures. Document everything: monitoring data, corrective actions, verification results, and calibration records.
What Critical Control Points Look Like in Practice
The concept of a critical control point is easier to grasp with a concrete example. Consider a facility producing frozen cooked beef patties. The HACCP team determines that cooking the patties to an internal temperature of 155°F for 16 seconds is necessary to eliminate harmful bacteria. That cooking step is the critical control point, and 155°F for 16 seconds is the critical limit.
How the facility monitors that limit depends on its equipment and process. One plant might set critical limits for oven temperature, oven humidity, conveyor belt speed (which controls time in the oven), and patty thickness. Another facility with different equipment might simply measure the internal temperature of the patties directly. Both approaches are valid as long as they reliably ensure the product reaches that safe threshold every time.
Other common CCPs include chilling cooked products rapidly enough to prevent bacterial growth, running finished products through a metal detector to catch physical contaminants, and controlling the pH or acidity of a formulation to prevent pathogen survival.
Preliminary Steps Before Building the Plan
Before you can apply the seven principles, the USDA recommends completing several preliminary steps that lay the groundwork for an effective plan:
- Develop prerequisite programs. These are basic sanitation and facility standards that control lower-risk hazards and support your HACCP plan. Think handwashing protocols, pest control, equipment maintenance, and supplier approval programs.
- Assemble a HACCP team. This group should include people who understand your production process, and at least one member must be trained in HACCP principles.
- Describe your product. Document what the food is, how it’s produced, and how it’s distributed and stored.
- Develop and verify a process flow chart. Map out every step from receiving raw materials to shipping the finished product, then walk the production floor to confirm the chart matches reality.
- Group your products. If you make multiple products, determine which ones can share a single HACCP plan based on similar processes and hazards.
Validation vs. Verification
These two terms are easy to confuse, but they serve different purposes. Validation happens up front: it proves that your HACCP plan, as designed, can actually control the hazards you’ve identified and produce a safe product under your specific plant conditions. You’re answering the question, “Will this plan work?”
Verification is ongoing. It confirms that the plan is being followed day after day. Verification activities include calibrating thermometers and other monitoring instruments, directly observing employees as they perform monitoring tasks, reviewing records, and periodically sampling products. You’re answering a different question: “Is the plan actually being followed right now?”
Record-Keeping Requirements
Documentation is what makes a HACCP plan enforceable and auditable. Every time someone monitors a CCP, they must record the actual values observed (temperatures, times, or other measurements), the date and time, and sign or initial the entry. Records must also capture any corrective actions taken when a deviation occurs, calibration results for monitoring instruments, and verification activities.
For meat and poultry facilities, the USDA requires records to be retained for one year if the product is slaughtered or refrigerated, and two years for frozen products. After six months, records can be moved to off-site storage, but they must be available within 24 hours if requested by an inspector. Other industries regulated by the FDA have similar documentation expectations under their respective rules.
Training and Certification Costs
HACCP certification courses typically run 18 hours and cover the seven principles along with industry-specific good manufacturing practices. Costs vary by sector. General food processing, dairy, produce, juice, and restaurant courses run around $299. Seafood-specific certification costs about $399, and meat and poultry certification is around $499. For frontline food workers who need a basic understanding of HACCP and good manufacturing practices rather than full certification, shorter courses of about 90 minutes are available for roughly $49.
Multiple organizations offer accredited HACCP training, both online and in person. If your facility falls under FSMA’s preventive controls rule rather than traditional HACCP, you’ll also want team members who complete the FDA’s Preventive Controls for Human Food course to qualify as a PCQI.