Ask any food business owner which food safety standard they need and the conversation usually narrows to two acronyms: HACCP and ISO 22000. They sound similar, often appear on the same compliance docs, and are mistaken for each other every day. This article spells out the difference clearly so you can choose the right one.
HACCP - the legal baseline
HACCP is mandatory for every food business in Ireland under EC Regulation 852/2004. It is not a certification; it is an operating discipline. Your local authority's Environmental Health Officer assesses how well you implement HACCP at every inspection. You do not pay for "HACCP certification" - you pay to train your staff and document your system.
ISO 22000 - the voluntary international standard
ISO 22000 is a Food Safety Management System standard issued by the International Organisation for Standardisation. It is voluntary, but several large customers - retail chains, foodservice procurers, exporters - require their suppliers to be ISO 22000 certified before placing orders. Certification is awarded after a third-party audit by a notified body.
Side-by-side comparison
| Factor | HACCP | ISO 22000 |
|---|---|---|
| Legal status in Ireland | Mandatory | Voluntary |
| Issued by | EU regulation, FSAI guidance | ISO + accredited certification bodies |
| Scope | Hazard analysis & control | Full management system + HACCP + PRPs + ISO 9001 elements |
| Audit | EHO inspection | Third-party certification audit |
| Cost | Training + records only | Audit fees, manual development, surveillance audits |
| Time to implement | 1-4 weeks | 6-12 months |
| Renewal | Continuous; refresher training every 1-2 years | 3-year cycle with annual surveillance |
Which one do you actually need?
You need only HACCP if: you run a cafe, restaurant, takeaway, deli, butcher, bakery, school canteen, hospital catering unit, hotel kitchen or food truck and your customers are end consumers. The legal floor is HACCP plus FSAI guidance.
You also need ISO 22000 if: you supply a major retailer or exporter that requires it, you ship product abroad, you sell into hospitals or large institutional buyers, or you are a contract manufacturer chasing private-label business.
How they relate
ISO 22000 contains HACCP; you cannot pass an ISO 22000 audit without a working HACCP plan. So even if you need both, the right sequence is HACCP first, then ISO 22000. The HACCP system you build is the engine of the ISO 22000 manual.
Training is the common base
Whichever path you take, every food handler in your business needs a current HACCP qualification. The shortest, lowest-friction route in Ireland is a HACCP course online with same-day certificate. Once that base is in place, supplementing with internal-auditor training adds the ISO 22000 layer without duplicating effort.
Cost / value bottom line
For a typical Irish small or medium food business, HACCP training and a tight monitoring routine costs a fraction of an ISO 22000 audit cycle and delivers 90% of the food safety value. Add ISO 22000 only when a customer demands it - it is a sales unlock, not a safety upgrade.
