HACCP for Restaurants: A Practical, Non-Academic Guide
What HACCP actually requires of a small restaurant, the seven principles translated to a real kitchen, and the records that matter.
Last reviewed .
HACCP has a reputation for being paperwork designed for factories, which is largely fair — and largely why small restaurants do it badly. Stripped of its industrial context, it is a method for answering one question: how would you know, today, if something in your kitchen had gone unsafe?
The seven principles, translated
1. Conduct a hazard analysis
Identify what can go wrong and where. For a typical restaurant the significant hazards are biological (time/temperature abuse, cross-contamination), chemical (cleaning agents, allergens), physical (glass, metal, foreign bodies) and allergenic.
2. Determine Critical Control Points
A CCP is a step where control is essential and where loss of control means the food is unsafe. In most kitchens there are fewer than people expect:
- Cooking — a core temperature the pathogen is destroyed at.
- Cooling — the most common failure in every kitchen that fails.
- Reheating.
- High-risk ingredient storage — raw above ready-to-eat, and date-marked.
3. Set critical limits
A measurable threshold. "Cooked thoroughly" is not a limit. "Core temperature 75°C for 30 seconds, verified with a calibrated probe" is.
4. Establish monitoring
Who checks, how often, and what they record. Monitoring is not inspection — it is a routine check performed and written down at a defined frequency.
5. Define corrective action
What happens when a limit is breached. This is the step that is almost always missing. "The sous chef re-cooks it" is not a corrective action; "the item is held, the batch is discarded, the cause is recorded and the equipment re-checked" is.
6. Establish verification
How you confirm the monitoring itself is working — probe calibration records, a supervisory review of completed sheets, a swabbing schedule.
7. Establish documentation
The records that prove 1–6 happened. Retention periods are usually defined by regulation rather than the HACCP plan itself.
Temperature discipline
The numbers worth having memorised:
| Control | Requirement | Why |
|---|---|---|
| Chilling | 0–5°C | Below the growth range for most pathogens |
| Cooking core temp | 75°C for 30s (or equivalent) | Kills vegetative pathogens including C. perfringens |
| Hot holding | Above 63°C | Above the minimum growth range |
| Cooling | 60°C → 21°C within 2h; → 5°C within a further 4h | Two-stage cooling limits time in the danger zone |
| Reheating | 82°C for 15s (or 75°C for 30s) | Destroys organisms grown during cooling |
| Defrosting | Never at room temperature | The outer layer enters the danger zone while frozen |
Cooling is where kitchens fail
Almost every HACCP failure traces back to cooling. A large batch of cooked food cools from 60°C to 21°C slowly enough that C. perfringens multiplies to dangerous levels, then the surface is reheated for service and the toxins — which are heat-stable — survive.
Controls that work:
- Portion into shallow containers — a deep 10-litre bucket of stock is close to impossible to cool correctly.
- Use an ice bath or blast chiller, and stir.
- Ice-walk food for service — never leave a hot dish to cool on the pass and serve it an hour later.
- Label with a time and a use-by.
Calibration is verification
A probe thermometer reading 0°C for a pot of boiling water is not a temperature measurement, it is a guess. Calibration is a two-minute weekly job: ice slurry for 0°C, boiling water for 100°C. Record it. A fridge at 9°C will not trigger any alarm and will quietly destroy food, because the probe that should have caught it is reading wrong.
Records worth keeping
- Fridge and freezer temperature logs, twice daily.
- Probe calibration record.
- Opening and closing checks.
- Supplier delivery temperature checks for high-risk deliveries.
- Cleaning schedules with completion signatures.
- Incident and corrective-action log — including near misses.
- Allergen matrix, dated.
- Staff training records with dates and assessment outcomes.
Making it survivable on a busy day
A HACCP plan that requires 40 minutes of paperwork daily will be abandoned in week three. The plans that survive are the ones where the routine is folded into work already being done: the opening check is the same walk that turns on the extraction; the fridge log is written by whoever opens the door first. Automation helps precisely here — a system that logs a temperature and flags an exception does not need anyone to remember.
The goal is not a thick folder. It is being able to say, for any given day, what was checked, by whom, and what was found — and to produce that record in under two minutes.