"What exactly does my food business need to comply with HACCP?" This guide answers that with a clear checklist of HACCP requirements in Ireland - the law behind it, the system and records you must hold, the training your staff need, and what an Environmental Health Officer checks when they visit.
The legal basis
Since 1998 every food business in Ireland has been required to have a food safety management system based on HACCP. The current law is Regulation (EC) No 852/2004, transposed by S.I. No. 369/2006, with the FSAI enforcing it through EHOs. Read EC 852/2004 explained simply.
What every food business must have
- Prerequisite programmes - cleaning, pest control, hygiene, maintenance, traceability.
- A documented HACCP-based system - hazard analysis, control points, limits and corrective actions.
- Trained staff - food handlers at Level 1 and 2, a supervisor at Level 3.
- Records - monitoring logs, training certificates, calibration and corrective actions.
The training requirement
Article 4 requires food handlers to be instructed and trained in food hygiene commensurate with their work. See is HACCP training required in Ireland and certify with the HACCP Course.
What an EHO checks
Inspectors look at your HACCP documentation, temperature and cleaning records, training certificates, and the kitchen itself. Our FSAI inspection checklist shows how to prepare, and what an EHO inspection covers.
Flexibility for smaller businesses
The FSAI allows proportionate compliance - for some lower-risk businesses, strong prerequisites and tools like the Safe Catering pack may meet much of the requirement. See the FSAI Code of Practice explained.
Registering your food business
Before HACCP even comes into play, most food businesses must register with their local authority (or be approved, for certain manufacturers) at least 28 days before opening. Registration is free and is the legal starting point - operating without it is an offence. Once registered, you are on the EHO's radar for inspection, so your HACCP system needs to be ready from day one, not bolted on later. Opening a new premises? Our restaurant setup checklist walks through it.
Documentation: how much is enough?
A common worry is that HACCP means mountains of paperwork. It does not. The requirement is proportionate to your risk: a small cafe needs a manageable, practical system, not a corporate manual. What matters is that your documents reflect what you actually do, are kept up to date, and are backed by real records. Over-complicated paperwork that nobody follows is worse than a simple system that the team uses every day. The FSAI's templates and Safe Catering pack keep it realistic.
Records: what to keep and for how long
Records are the proof your system works. Keep temperature logs (delivery, fridge, freezer, cooking, hot holding), cleaning sign-offs, training certificates, supplier and traceability information, and any corrective actions taken. Most businesses retain records for a rolling period - commonly a year or more - so you can demonstrate ongoing control. Our record-keeping guide sets out exactly what to log and how long to keep it.
How requirements scale with risk
The depth of your HACCP requirements scales with what you do. A business serving high-risk cooked food to vulnerable groups (a hospital or nursing home kitchen) carries more obligations than one selling low-risk packaged goods. Higher-risk operations need more critical control points, tighter monitoring and stronger documentation. Matching your effort to your actual risk - more where it is high, proportionate where it is low - is the heart of a sensible, compliant system.
Common compliance gaps the FSAI sees
Across Irish inspections, the same shortfalls come up repeatedly. Knowing them tells you where to focus:
- A HACCP plan that exists but is not actually followed or reviewed.
- Missing or back-filled temperature and cleaning records.
- Staff handling high-risk food without Level 2 training.
- Weak allergen information and control.
- Poor structural hygiene - pest entry points, hard-to-clean surfaces.
- No named person responsible for the food safety system.
Most are inexpensive to fix and entirely within your control once you know to look for them.
How to get and stay compliant
Compliance is a routine, not a one-off project. The practical path: register your business, put your prerequisite programmes in place, write a proportionate HACCP plan that reflects what you actually do, train and certify every food handler, and start keeping daily records from day one. Then keep it alive - review the plan when anything changes, renew training before it lapses, and check your own records regularly. A business that does these things treats inspection as a confirmation of good practice rather than a threat. Our FSAI inspection checklist ties it all together.
Your compliance checklist
- Prerequisite programmes documented and working.
- A written HACCP-based food safety management system.
- Every food handler trained and certified.
- Daily records kept and retained.
- A named supervisor owning the system.
Frequently asked questions
What are the HACCP requirements for an Irish food business?
A food business needs prerequisite programmes, a documented HACCP-based food safety management system, trained and certified staff, and proper records. A named supervisor should own the system.
What law sets HACCP requirements in Ireland?
Regulation (EC) No 852/2004, transposed by S.I. No. 369/2006, requires all food businesses to have a food safety management system based on HACCP. The FSAI enforces it through Environmental Health Officers.
Is there flexibility for small businesses?
Yes. The FSAI allows proportionate compliance. For some lower-risk businesses, strong prerequisite programmes and tools like the Safe Catering pack may meet much of the requirement.
