HACCP

HACCP exists because finished-product testing is a poor way to make food safe. Testing examines a sample; contamination is rarely uniform; and by the time a test result arrives the product exists and may have moved. HACCP shifts effort upstream, to designing and running a process in which the hazard is controlled as it is made. Testing does not disappear — it becomes one of the ways control is verified, rather than the mechanism of control itself.

In scope terms, the approach requires a business to describe its product and process, identify the hazards reasonably likely to occur, determine which points in the process are critical to controlling them, establish how control is measured and what happens when it is lost, and verify that the whole arrangement works as intended and keep records showing it. Codex sets out these principles and a logical sequence for applying them; both are reproduced in the Codex text and in national instruments, and neither is reproduced here.

A hazard analysis is an argument about a particular operation: this product, this formulation, this equipment, this layout, these suppliers, these people, this intended use, this consumer. Change any of them and the significant hazards, the points at which they can be controlled, and the appropriate monitoring can all change. Two plants making nominally the same product can legitimately arrive at different plans, and both can be right.

This is why generic HACCP templates are treated with suspicion by auditors and authorities alike. A template can structure the work, and sector guides can inform it, but the analysis itself has to be done on the operation it governs, by people who know it, and revisited when the operation changes. A plan that has not changed while the process has is evidence that the analysis stopped.

The Codex text stating the HACCP principles is voluntary, like every Codex text. But HACCP is unusual among the subjects in this section in how thoroughly it has been adopted into binding law. Many jurisdictions require food businesses to operate procedures based on HACCP principles, and requirements often differ by sector, by business size, and by the risk of the product — with exemptions or lighter regimes in some cases.

The honest answer to "is HACCP mandatory?" is therefore: it depends entirely on where you are and what you make, and the question can only be answered against the applicable national law. This page classifies HACCP as voluntary because that describes the Codex text it summarises. It should not be read as a statement that any business is free of a legal HACCP obligation.

There is no such thing as Codex HACCP certification. Where HACCP is assessed, it is assessed either by the competent authority enforcing national food law, or by a certification body auditing against a private scheme — such as a food-safety management system standard or a retailer-recognised scheme — that has incorporated HACCP into its requirements. A "HACCP certificate" issued outside a recognised scheme carries only whatever authority its issuer has.

• Not a quality system — HACCP addresses safety hazards, not commercial quality or grade
• Not a substitute for good hygiene practices — it presupposes them
• Not a guarantee — it manages identified hazards, it does not abolish risk
• Not a Codex certification — Codex certifies nobody
• Not portable — a plan governs the operation it was written for
• Not static — it requires revalidation when the product, process, or hazard picture changes