Lesson 1: Food safety law and who is responsible
The World Health Organization estimates that in 2021 about 866 million people, almost 1 in 9 worldwide, fell ill from contaminated food. Good food hygiene prevents this.
The main EU laws
- Regulation (EC) No 178/2002, the General Food Law: basic principles, unsafe food, traceability, withdrawal and recall. It also set up the European Food Safety Authority (EFSA), which gives scientific advice. EFSA does not inspect businesses.
- Regulation (EC) No 852/2004 on the hygiene of foodstuffs: general hygiene rules for all food businesses, including HACCP. The EU hygiene rules have applied since 1 January 2006.
- Regulation (EU) No 1169/2011 on food information to consumers, including allergen information.
- Regulation (EU) 2017/625 on official controls (inspections) by national authorities.
EU regulations apply directly in every Member State, but each country names its own competent authorities, which register businesses, carry out official controls and enforce the law. Each country sets the penalties, which must be effective, proportionate and dissuasive. Countries can also add national rules, for example on training or on how allergen information is shown. Always check the rules where you work.
Who is responsible
EU law says the food business operator has the primary responsibility for food safety. This is the person or company responsible for making sure food law is followed in the business they control. A food business is any undertaking, for profit or not, public or private, at any stage of production, processing or distribution of food, from restaurants and shops to school canteens and charity kitchens. Food handlers must follow the hygiene rules and the business's procedures and report illness and problems.
The operator must notify the competent authority of each establishment so it can be registered, and must keep the authority informed of significant changes, such as closing.
Unsafe food, traceability and recalls
- Food is unsafe if it is harmful to health or unfit for human consumption. Unsafe food must not be placed on the market.
- Traceability: every business must be able to identify who supplied it and which other businesses it supplied (not each shopper). Food must be labelled or identified so it can be traced.
- Withdrawal: if a business believes food it has supplied is unsafe, it must act at once to withdraw it from the market and inform the competent authorities.
- Recall: if the food may have reached consumers, the business must tell them why and recall the food if needed.
- The Rapid Alert System for Food and Feed (RASFF) lets food safety authorities quickly share information on health risks from food. It began in 1979.
Training and food safety culture
Annex II of Regulation 852/2004 says food handlers must be supervised and instructed and/or trained in food hygiene matters to match their work. People who develop and maintain the business's HACCP-based procedures must be trained in HACCP principles. Businesses must also follow any national training rules for their sector. Your employer must train you in the procedures at your own workplace.
Since 2021, the EU hygiene rules also require a food safety culture. The operator must set up, keep and be able to show it. It includes management commitment and leadership, awareness of hazards, open communication so anyone can raise a concern, and enough resources.
Food sectors write national and EU guides to good hygiene practice to help businesses follow the rules. Using them is voluntary.
Lesson 2: Food hazards and allergens
EU law defines a hazard as a biological, chemical or physical agent in food, or a condition of food, that could harm health. Risk combines how likely harm is and how serious it would be.
| Type | What it is | Examples |
|---|---|---|
| Biological (microbiological) | Living things such as bacteria, viruses, yeasts and moulds | Salmonella spreading from raw chicken to a salad |
| Chemical | Substances that should not be in food | Cleaning products, pest control products, pesticides; acrylamide, which can form in some foods during processing |
| Physical | Objects in food | Glass, packaging, jewellery, screws, pest droppings |
| Allergenic | Unintended presence of one of the 14 EU allergens | Sesame from a shared knife getting into a sesame-free dish |
Bacteria to know
- Campylobacter causes the most frequently reported foodborne illness in the EU. The most common source is undercooked chicken, and it also spreads when ready-to-eat food touches raw chicken.
- Salmonella causes the second most common zoonotic disease in the EU. It is most often found in eggs and raw meat from pigs, turkeys and chickens.
- Listeria monocytogenes is found in foods such as smoked fish, meats, soft cheeses and raw vegetables. Unlike many bacteria, it can multiply even at fridge temperatures. Illness is rare but often severe. Older people, pregnant women, newborns and people with weak immune systems are most at risk.
The 14 allergens
Allergic reactions can make people very ill and can sometimes cause death. EU law lists 14 allergens that must always be declared:
- Cereals containing gluten (wheat, including spelt and khorasan, rye, barley, oats)
- Crustaceans, eggs, fish, peanuts, soybeans, milk (including lactose)
- Tree nuts: almonds, hazelnuts, walnuts, cashews, pecans, Brazil nuts, pistachios and macadamia nuts
- Celery, mustard, sesame seeds, lupin and molluscs
- Sulphur dioxide and sulphites above 10 mg/kg or 10 mg/litre
Giving allergen information
- Prepacked food: allergens must be emphasised in the ingredient list, for example in bold, so they stand out.
- Non-prepacked food (restaurants, cafés, deli counters, food packed for direct sale): allergen information is mandatory. Each Member State can set how it must be given.
- Example from Ireland: FSAI guidance says to give allergen information in writing, using the word "contains", naming the cereal (such as wheat) and each nut (such as almonds), so customers can find it without having to ask.
- A "may contain" statement must never replace prevention. Use it only where a risk of cross-contact cannot be controlled, and never in a misleading way.
Preventing allergen cross-contact
- Since 2021, EU law says equipment, transport and storage containers used for an allergen must not be used for allergen-free food unless they are cleaned and checked for at least visible debris of that allergen.
- Use separate equipment where you can, for example a toaster used only for gluten-free bread.
- Clean surfaces after preparing allergen foods, and clean up spills straight away.
- Wash your hands after touching allergen foods, and change gloves and aprons if they are contaminated.
- Keep ingredient labels with food, even after decanting, and tell staff when a recipe changes.
Practical exercise: check the allergens in three dishes
You are preparing the written allergen information for a café's menu. Use the EU list of 14 allergens to answer the questions.
| Dish | Ingredients (from recipes and supplier labels) |
|---|---|
| 1. Chicken satay | Chicken, peanut sauce (peanuts, soy sauce made from soybeans and wheat), rice |
| 2. Caesar salad | Lettuce, croutons (wheat bread), parmesan cheese, dressing (egg yolk, anchovies, mustard, oil) |
| 3. Vegetable soup | Carrots, celery, onion, potato, cream, salt and pepper |
Which allergens are in dish 1?
Mostra la risposta
Peanuts, soybeans and a cereal containing gluten (wheat). Wheat is easy to miss because it is hidden in the soy sauce.
Which allergens are in dish 2?
Mostra la risposta
Cereal containing gluten (wheat), milk (parmesan), eggs, fish (anchovies) and mustard.
Which allergens are in dish 3?
Mostra la risposta
Celery and milk (cream).
Lesson 3: Personal hygiene and handwashing
Hands, hair and clothes can carry harmful bacteria and viruses to food. EU law says everyone working in a food-handling area must keep a high degree of personal cleanliness and wear suitable, clean and, where necessary, protective clothing.
Handwashing facilities
Food businesses must have enough handwashing basins, in the right places, used only for washing hands. Each must have hot and cold running water and materials for cleaning and drying hands. Where needed, there must be a separate sink for washing food. Never wash food in a handwash basin and never block it.
When to wash your hands
- Before starting work
- After using the toilet
- After breaks
- After handling raw materials, such as raw meat, poultry, eggs or unwashed vegetables
- Between tasks, especially when moving from raw food to ready-to-eat food
- After touching allergen foods and before handling other food
- After handling waste, and after coughing or sneezing
How to wash your hands
- Wet your hands under warm running water.
- Apply soap and work it into a lather.
- Rub all parts of your hands for at least 20 seconds: palms, backs, wrists, fingers and fingernails.
- Rinse off all the soap.
- Dry your hands well with a clean towel. Wet hands pick up and spread bacteria more easily.
Clothing, jewellery and gloves
- Wear clean protective clothing with as few pockets as possible, and use hair covers where your workplace requires them.
- Do not wear jewellery or watches. Jewellery can fall into food (a physical hazard) and traps dirt.
- Protective clothing should preferably not be worn in the toilets.
- Disposable gloves are used once and changed between tasks. Gloves do not replace handwashing: wash your hands thoroughly before and after using them.
- Visitors and contractors, such as repair technicians, should wash their hands and wear the protective clothing the business provides.
Illness and wounds
EU law says a person who has, or carries, a disease that can spread through food, or who has, for example, infected wounds, skin infections, sores or diarrhoea, must not handle food or enter a food-handling area if there is any chance of contaminating food. They must report the illness or symptoms to the food business operator at once. The manager then decides on exclusion or suitable protection.
How long you must stay away from food work after symptoms stop is set by national guidance and your employer's policy. Follow your manager's instructions.
Lesson 4: Temperature control: chilling, cooking and storage
Harmful bacteria multiply fastest in warm food, so temperature control is one of the most important controls in any kitchen.
What EU law says
- Raw materials, ingredients and food that could let harmful bacteria grow or toxins form must not be kept at temperatures that could risk health.
- The cold chain must not be interrupted. Short periods outside temperature control are allowed for practical reasons, such as preparation, transport and display, if they do not risk health.
- There must be enough space to store raw and processed materials separately, with enough separate refrigerated storage.
- Food that will be kept or served chilled must be cooled as quickly as possible after cooking.
- Food must be thawed in a way that keeps the growth of harmful bacteria and toxins to a minimum, and run-off liquid must be drained if it is a risk.
- Quick-frozen food must be kept at -18 °C or colder at all points, with brief rises of no more than 3 °C during transport (Directive 89/108/EEC).
Apart from rules like the one for quick-frozen food and some rules for specific products, the general EU hygiene rules do not set one number for each step. The values come from national law, national guidance and sector guides, so they vary between countries.
Example: guidance from Ireland (FSAI)
| Step | FSAI guidance |
|---|---|
| Fridge | Keep food between 0 °C and 5 °C (fridges are often set at 3 °C or 4 °C) |
| Freezer | -18 °C or colder |
| Cooking | Core reaches 75 °C, or an equivalent such as 70 °C for 2 minutes |
| Hot holding | Above 63 °C; if not, use within 2 hours of cooking |
| Cooling | Into the fridge within 2 hours |
| Reheating | Core 70 °C or higher; reheat only once |
| Danger zone | 5 °C to 63 °C; bacteria grow best at about 25–40 °C |
Using a probe thermometer
- Clean and disinfect the probe before and after use, and put it into the thickest part of the food.
- FSAI advises a probe accurate to at least ±0.5 °C, checked at least twice a year: in iced water it should read between -0.5 °C and +0.5 °C, and in boiling water between 99.5 °C and 100.5 °C.
- Record readings and any action taken.
Practical exercise: review a temperature log
This café uses the FSAI values in its food safety plan: fridge 0–5 °C and cooking to a core of 75 °C. Review the week's log.
| A | B | C | D | E | |
|---|---|---|---|---|---|
| 1 | Day | Fridge 1 at 08:00 (°C) | Fridge 1 at 16:00 (°C) | Chicken curry core (°C) | Action taken |
| 2 | Mon | 3 | 4 | 78 | |
| 3 | Tue | 4 | 5 | ||
| 4 | Wed | 3 | 8 | 68 | |
| 5 | Thu | 4 | 4 | ||
| 6 | Fri | 2 | 6 | 76 |
Which fridge readings are outside the plan's range?
Mostra la risposta
Two: Wednesday at 16:00 (8 °C) and Friday at 16:00 (6 °C). Tuesday's 5 °C is still inside the 0–5 °C range.
Which batch of chicken curry did not reach the critical limit?
Mostra la risposta
Wednesday's batch, at 68 °C. It is below 75 °C and below the 70 °C equivalent, so it must keep cooking until it reaches the limit.
What should have been written in the "Action taken" column on Wednesday?
Mostra la risposta
For example: "16:05 fridge at 8 °C; moved food to fridge 2, called repair. Curry cooked further to 77 °C." Food that may be unsafe is discarded as the plan says.
Friday's 16:00 reading has no action recorded. Is that acceptable?
Mostra la risposta
No. 6 °C is above the plan's 0–5 °C range, so someone must act (for example, check the door seal and the food temperatures) and record it. The log should also have a column for the initials of the person who checked.
Quiz tematico 4: Temperature control: chilling, cooking and storage
Lesson 5: Cleaning, pests and cross-contamination
Cleaning removes dirt, grease and food waste. Disinfection reduces micro-organisms to a safe level. Disinfection comes after cleaning, on a surface that is already clean. Equipment that touches food must be cleaned and, where needed, disinfected often enough to prevent contamination.
Cleaning and disinfection steps
- Remove visible dirt and food waste.
- Clean with detergent.
- Rinse.
- Disinfect, following the product instructions.
- Rinse again, unless the product instructions say this is not needed.
- A cleaning plan sets out what is cleaned, when, how and by whom.
- Use products according to the manufacturer's instructions. Where products could touch food, use only products suitable for food-contact surfaces.
- Clean from high-risk to low-risk areas, and do not carry dirty equipment back into clean areas.
- Check cleaning with visual checks and, where needed, sampling.
- Food-contact surfaces must be smooth, washable, corrosion-resistant and non-toxic, so they are easy to clean.
Cross-contamination
Cross-contamination is when harmful bacteria or allergens spread from one food or surface to another, for example from raw chicken to salad through hands, boards, cloths or drips.
- Use separate equipment for raw and ready-to-eat food, or clean and disinfect it fully between uses. Wiping a board with a cloth is not enough.
- Zoning: physically separate activities, such as raw and cooked food handling.
- Store raw food separately from ready-to-eat food so raw juices cannot drip onto it, and keep food covered or protected.
- Protect food from contamination at every stage, from delivery to service.
Pests, waste, chemicals and water
- Keep doors closed except when loading or unloading, seal gaps and avoid standing water.
- Have a pest control programme. If pests keep coming back, find and fix the cause. Pest control products must be authorised and stored where they cannot touch food.
- Pets and other domestic animals must not be allowed where food is prepared, handled or stored. In special cases where the authority allows access, it must not lead to contamination.
- Remove food waste from food rooms as quickly as possible into closable containers. Keep waste stores clean and free of pests.
- Cleaning chemicals and other hazardous substances must be labelled and kept in separate, secure containers. Never put them in food containers.
- Have a procedure for breakages of glass, hard plastic or knives, including what to do with food that may be affected.
- Ice that touches food or drinks must be made from potable (drinking) water.
Lesson 6: HACCP: the seven principles in practice
HACCP stands for Hazard Analysis and Critical Control Point. Article 5 of Regulation 852/2004 says food businesses after primary production must keep a permanent procedure based on the HACCP principles. Together with good hygiene practice, it forms the business's food safety management system.
Prerequisite programmes come first
Prerequisite programmes (PRPs), also called good hygiene practice, are the basic conditions and activities that keep a business hygienic. Examples are cleaning, pest control, supplier checks, maintenance, allergen control, waste, water, personal hygiene, temperature control and traceability. In some simple, low-risk businesses, PRPs may be enough on their own.
Preparatory steps
- Form a HACCP team (in a small business, one person with outside help can be enough).
- Describe the product: ingredients, processing, packaging, storage and shelf life.
- Identify its intended use, including vulnerable consumers.
- Draw a flow diagram of every step.
- Confirm the flow diagram on site during working hours and correct it if needed.
The seven principles
| Principle | What it means | Example |
|---|---|---|
| 1. Identify hazards | Find hazards to prevent, remove or reduce | Salmonella from raw chicken; detergent in food; broken glass |
| 2. Identify critical control points (CCPs) | Find the steps where control is essential | Cooking raw chicken thoroughly |
| 3. Set critical limits | Set what separates acceptable from unacceptable | Burger core reaches 75 °C, or 70 °C for 2 minutes (FSAI example) |
| 4. Monitor | Plan observations or measurements to check each CCP | Probe every batch; check the fridge is below 5 °C |
| 5. Corrective actions | Decide what to do when a CCP is not under control | Fridge at 10 °C after a fault: discard the food and repair the fridge |
| 6. Verify | Check regularly, and after changes, that it works | After installing a new oven, probe food to check the settings |
| 7. Documents and records | Keep records suited to the size and nature of the business | Temperature logs, corrective actions, training records |
Key terms
- A hazard is significant if it is reasonably likely to reach an unacceptable level without control.
- A decision tree or another logical method can help find CCPs.
- A critical limit must be observable or measurable. It does not always have to be a number.
- Monitoring checks a CCP as work happens. Verification checks, from time to time, that the controls work as intended. Validation is evidence that a control can control the hazard.
Keeping it working
- Review the procedure whenever the product, process or any step changes.
- Be able to show the competent authority that the system works, and keep documents and records up to date. Records can be electronic.
- Flexibility: small businesses may use simpler records (very small businesses may only need to record problems and what they did) and generic sector guides. Flexibility is never applied to the food safety aims and is not meant to reduce the number of CCPs.
- FSAI warns that a plan written by a consultant and left in a folder is not a working food safety management system. You and your staff must be involved.
Practical exercise: a simple hazard analysis table
A sandwich bar cooks chicken each morning for wraps sold from a chilled display. Complete the missing parts.
| Step | Hazard | Control measure | CCP? |
|---|---|---|---|
| 1. Delivery of raw chilled chicken | Chicken arrives too warm, so bacteria grow | Check temperature and packaging; reject if outside the plan's limit | No (PRP: supplier and delivery checks) |
| 2. Chilled storage | Bacteria grow if the fridge is too warm | Fridge kept at the plan's temperature; checked twice a day | No (PRP: temperature control) |
| 3. Cooking | Bacteria such as Salmonella and Campylobacter survive | ? | ? |
| 4. Assembly with salad and sauce | ? | Separate boards and utensils; handwashing; written allergen information | No (PRPs) |
| 5. Chilled display | Bacteria grow if display is too warm | Display kept at the plan's temperature; checked and recorded | No (PRP) |
Step 3: what is the control measure, and is it a CCP?
Mostra la risposta
Cook every batch to the critical limit in the plan, such as a core of 75 °C in Ireland's FSAI guidance. Yes, this is the CCP, because it is the step that kills the bacteria.
Step 3: how is the CCP monitored, and what is the corrective action?
Mostra la risposta
Probe the thickest piece of each batch and record the reading. If it is below the limit, keep cooking until it is reached; if that is not possible, discard the batch and record what happened.
Step 4: which hazards should be written in?
Mostra la risposta
Cross-contamination from raw chicken equipment or hands (biological), and allergens: wheat if the wrap is made from wheat, and any egg, mustard or milk in the sauce. Customers must get correct allergen information.
The bar starts making the wraps the night before. What must happen to the HACCP plan?
Mostra la risposta
It must be reviewed, because the process has changed. Cooling and overnight storage now need controls, such as cooling as quickly as possible.
Fonti
- EUR-Lex: Regulation (EC) No 852/2004 on the hygiene of foodstuffs (consolidated text)
- EUR-Lex: Regulation (EC) No 178/2002, the General Food Law (consolidated text)
- EUR-Lex: Commission Notice on the implementation of food safety management systems (2022/C 355/01)
- EUR-Lex: Regulation (EU) No 1169/2011 on food information to consumers (consolidated text)
- EUR-Lex: Council Directive 89/108/EEC on quick-frozen foodstuffs
- European Commission: Food hygiene
- European Commission: Mandatory food information
- European Commission: Rapid Alert System for Food and Feed (RASFF)
- EFSA: Listeria
- EFSA: Campylobacter
- EFSA: Salmonella
- Food Safety Authority of Ireland: Temperature control
- Food Safety Authority of Ireland: Food safety management system (HACCP)
- Food Safety Authority of Ireland: Types of hazards
- Food Safety Authority of Ireland: Prerequisite programmes
- Food Safety Authority of Ireland: Principles of HACCP
- Food Safety Authority of Ireland: Safe Catering Pack, Allergens section
- safefood: How to wash your hands
- World Health Organization: Food safety fact sheet
- EUR-Lex: Regulation (EU) 2017/625 on official controls
- FAO/WHO Codex Alimentarius: General Principles of Food Hygiene (definitions and cleaning)