Building a Food Service HACCP Plan

Most kitchens never need a formal HACCP plan. Then a chef wants to vacuum-pack short ribs, cure a house salami or keep sushi rice out on the counter, and the rules change. Those processes can fail in ways that a normal kitchen routine won't catch, so the code asks for a written, science-backed plan, often before you make the first batch.

You already know the seven principles of HACCP, which stands for Hazard Analysis and Critical Control Points. This is about applying them to a real process, defending your choices to a regulator, and checking a plan that someone else wrote.

Section numbers here refer to the 2026 FDA Food Code. That's a model, not a law. Your state or local code is what applies, and it may use an older edition, so confirm each rule with your regulator.

What You Will Be Able to Do

• Decide whether a process needs a HACCP plan, a variance, both or neither.
• Run a hazard analysis and sort out which steps are true critical control points.
• Set critical limits that you can defend, and monitor them.
• Tell validation from verification, and audit a plan's records.
• Know when a plan no longer fits, and when to bring in outside expertise.

When a Plan Is Required

Under section 8-201.13, a HACCP plan is required before you start if the law requires it, if a variance is required for the process, if your regulator decides that the process calls for one, or if you use reduced oxygen packaging under section 3-502.12.

A variance is a written document from your regulator that allows a change to, or a waiver of, a code requirement, because the regulator has decided that no health hazard or nuisance will result. It's permission for one operation and one process. Keep it on site, follow it exactly, and keep your records.

TCS food is food that needs time and temperature control for safety. Reduced oxygen packaging (ROP) means removing or lowering the oxygen in a package, as in vacuum sealing.

No HACCP plan is needed under the Food Code for ROP food that's always labeled with the production time and date, held at 41°F or below, and removed from its package in your establishment within 48 hours of packaging. Anaerobic pathogens aren't considered a significant hazard in so short a time. Check that your code keeps this exemption.

Call your regulator first, and do it before you buy equipment or print a menu. Agencies differ in what they require, how fast they review plans, and whether they accept templates. Some have little experience with these processes, and they may ask for outside data.

What the Plan Must Contain

Section 8-201.14 lists the contents. A plan that's missing any of these will come back to you.

1. General information, such as your name and address.
2. A categorization of the TCS foods in the plan.
3. A flow diagram for each food, with critical control points marked.
4. Ingredients, recipes, equipment and the controls you use.
5. A critical control point summary, showing each hazard, critical limit, monitoring method and frequency, corrective action, and how the person in charge verifies it, with the records kept.
6. Supporting documents: employee training, blank forms, and the scientific data behind your limits.

Write down the process that you really run. A beautiful plan that doesn't match the kitchen is worse than no plan, since your staff will ignore it and the inspector will see that.

Worked Plan: Sous Vide Chicken

A restaurant wants to cook chicken breast in vacuum bags, chill it, hold it and reheat it to order. Sous vide means cooking food in a sealed bag, usually in a water bath. It falls under section 3-502.12, so a plan goes to the regulator before you begin.

Step 1: Draw the Flow

Receive chicken, then store cold, portion and season, vacuum-seal, cook in the bath, chill, store cold, reheat, and serve. Walk the line with the person who does it. Plans drawn up in an office often miss real steps, such as the 40 minutes when raw portions wait for the sealer.

Step 2: Analyze the Hazards

For each step, ask what could go wrong, how likely it is, and how bad it would be. A significant hazard is one that's reasonably likely and could cause illness or injury if it isn't controlled. Consider these types:

The key hazard is the one that vacuum sealing creates. Cooking kills most bacteria, but spore-formers survive. With little oxygen in the bag and no competing bacteria, Clostridium botulinum can grow and make toxin in food that looks and smells normal. Listeria monocytogenes can keep growing at refrigerator temperatures. The Food Code's guidance notes that there may be no other barriers to these two in a cook-chill or sous vide product, which is why temperature control has to be so tight.

Step 3: Find the Critical Control Points

A critical control point (CCP) is a step where you can apply control, and where loss of control may cause an unacceptable health risk. Too many CCPs are almost as bad as too few, because staff stop taking them seriously. For each significant hazard at each step, work through these questions, which follow the same logic as the decision tree used in HACCP training:

1. Is there a control measure for this hazard at this step? If not, and control is needed for safety, change the step.
2. Is this step designed to eliminate the hazard or reduce it to a safe level? If yes, it's a CCP.
3. If not, could the hazard reach an unsafe level here? If not, it isn't a CCP.
4. Will a later step eliminate or reduce it? If yes, this step isn't a CCP. If no, it is.

Run the chicken through this, and you get three CCPs: cooking, chilling and cold storage. Receiving matters, but it isn't a CCP here, because the cook step deals with bacteria on raw chicken. It's handled by a prerequisite program, meaning a routine procedure such as supplier checks, handwashing or cleaning.

CCPs are for safety only. Rotation of stock (first in, first out) is a quality step, not a CCP, unless it also does a safety job. And two kitchens making the same food may reach different CCPs, because their layout, equipment and ingredients differ. This is why copying a plan is risky.

Step 4: Set Critical Limits

A critical limit separates safe from unsafe. It has to be measurable and backed by science. It can come from the Food Code, from other guidelines, from performance standards, or from experiments. "Chef's experience" isn't a source.

If you hold at 41°F or below instead, the limit is 7 days from packaging. Bags also need a label with the product name and the date packaged, and the food must be used on your premises or within your business, as the rule says. Records must be kept for at least 6 months.

Keep your plan to what the code gives you. Suppose the chef wants chicken at 145°F for a softer texture. That's below the code's cooking temperature, so it's no longer covered by the ROP section alone. You'd need a variance based on a HACCP plan that documents, with scientific data, that the lesser time and temperature gives a safe food. Published pasteurization tables can support that, but the regulator decides, and your bath and your thermometers must prove that you can hit it.

Worked example: an operating limit. Your critical limit for storage is 34°F. If your unit normally runs at exactly 34°F, a small drift puts you over the limit. If you set it at 32°F, you have a buffer, and an alarm at 33°F warns you before you have a deviation. An operating limit is a tighter target that you use to act early. Only crossing the critical limit forces a corrective action on the product.

Step 5: Set Monitoring

Monitoring means measuring or observing whether a critical limit is being met. Say exactly who does it, how, how often, and on which form. "Check temperature" isn't enough. "The line lead probes one test bag per batch from the coldest spot in the bath, using a calibrated thermocouple, and logs it on Form 3" is enough.

Continuous monitoring is preferred where you can use it, since it gives the fullest history. If you check at intervals, your interval sets how much product is at risk.

Worked example. You log a cooler every 4 hours. At 2:00 p.m. it reads 39°F, and at 6:00 p.m. it reads 47°F. You can't tell when it failed, so you must assume the worst: up to 4 hours out of range for everything in it. A data logger would show you it failed at 5:10 p.m. That's the difference between keeping food and throwing it away.

Step 6: Write Corrective Actions

Every corrective action has two parts. One deals with the food, and the other deals with the process, so that it doesn't happen again.

Name who decides. A line cook shouldn't have to judge at 10 p.m. whether a batch can be saved. Write the answer in advance.

Step 7: Verify and Keep Records

The person in charge verifies that the plan is being followed. See the next section for what that means.

Validation and Verification

These two words get mixed up, and an inspector will know the difference. In the Food Code's terms, verification is everything other than monitoring that shows whether the plan is valid and is being followed. Validation is the part of verification that asks: if we follow this plan, will it really control the hazards?

Verification activities include watching the person who does the monitoring, reviewing records for accuracy, confirming that checks were done as often as planned, checking that corrective actions happened, and confirming that equipment is calibrated.

Reading Records Like an Auditor

A signed log isn't proof. When you check records, look for these things.

Then watch the task yourself. Ask a cook to show you how she probes a bag. Records also protect you. The Food Code notes that in a foodborne illness case, monitoring and corrective action records can show that reasonable care was taken. A false record does the opposite.

Worked Plan: Sushi Rice

Cooked rice is a TCS food, and Bacillus cereus, a spore-forming bacterium, is the hazard. If you want to hold rice at room temperature without time control, you have to acidify it, which is a special process. That calls for a variance and a HACCP plan.

• Critical limit: The Food Code's guidance says that most plans use a pH of 4.2 or less.
• Monitoring: Measure the pH of each batch, after the acid has had time to spread evenly, using a method named in your plan.
• Corrective action: Your plan might allow a set addition of vinegar and a retest, or it might say to discard the batch or treat it as TCS.
• Records: Log the batch, the time, the pH and the calibration of your instrument.

There are two traps. Adding vinegar for flavor, without measuring pH, isn't a special process, so that rice must stay under temperature control or time control. And once rice is combined with other ingredients, the finished roll is usually TCS and needs control again, because acidified rice does little to change raw fish or other fillings.

Ask if you need this at all. Using time as a public health control under section 3-501.19, with written procedures and a 4-hour limit, may be much simpler for a small sushi counter. The best plan is sometimes one you don't need.

The New Food Safety Management System Rule

The 2026 Food Code adds section 8-201.15. It calls for a written food safety management system, which is a set of written procedures, training plans and monitoring records for controlling the steps that contribute to illness. Under the model code, an establishment has four years from the regulator's adoption of the rule to comply, and establishments with minimal risk are excepted. The detailed contents in section 8-201.16 are reserved for now. Adoption takes time and varies by state, so check with your regulator. If you run a HACCP plan, much of that discipline is already in place, but the two aren't the same thing. A HACCP plan covers specific processes, while this system covers the whole operation.

When the Plan No Longer Fits

A plan is only good for the process that it describes. Review it, and tell your regulator if needed, when any of these things changes:

• The recipe, or an ingredient that affects pH or water activity
• A piece of equipment, such as a new sealer, bath or chiller
• The batch size, or the shelf life you want
• The supplier, if it changes the hazard
• The location. A variance doesn't move with you to a new kitchen.
• New science, or a recall or outbreak linked to the product

Bring in outside help for anything beyond routine. That means a food safety consultant, a university extension food science program, or a process authority, who is an expert qualified to evaluate a food process. A lab may be needed to test pH, water activity or shelf life. Cured meats, shelf-stable products and anything packaged to sell are high-risk areas where reading alone isn't enough. Hands-on training is the right next step, and that includes HACCP courses given by accredited or recognized providers.

Common Mistakes

Check Your Understanding

1. A chef wants to vacuum-pack raw marinated steaks for use the next day, and always opens the bags within 24 hours. Does this need a HACCP plan under the Food Code?

Probably not, as long as every bag is labeled with the production time and date, held at 41°F or below, and opened in your establishment within 48 hours of packaging. Confirm it with your regulator, since your local code may differ, and write down how you'll make sure that no bag is missed.

2. A manager wants to list "first in, first out" as a CCP for a sous vide process. What's your response?

Rotation is a quality routine, not a CCP, unless it's doing a specific safety job. For this process, shelf life is controlled through date labels and the storage limit. Too many CCPs make the real ones less clear.

3. A cook records 165°F for every batch for three weeks, including days when the bath was being repaired. What do you do?

Treat the records as unreliable. Find out what happened, watch the cook do the check, and retrain. Check if any food was affected, and decide what to do about it. Fix the system too, for example by reviewing logs each day.

4. Today's test shows a pH of 4.5 on today's rice, and your critical limit is 4.2. Your plan says to discard. The sushi chef says that it tastes the same as usual. What happens?

Follow the plan, since a deviation can't be judged by taste. Discard it or treat it as your plan says, record the deviation, and then find the cause, such as the vinegar measure or the instrument's calibration.

5. Your company opens a second location and wants to use the same variance and plan. Can it?

Not on its own. A variance is issued for an operation, so talk with the regulator for the new location. The equipment and layout will differ, so the plan has to be reviewed. It may also fall under a different agency.

Key Takeaways

• Talk to your regulator before you start any special process.
• A variance is written permission, and a HACCP plan is how you control the process.
• Keep CCPs few, and base critical limits on science that you can show.
• Every corrective action covers the food and the cause.
• Validation asks if the plan is right, and verification asks if you're following it.
• Audit records by looking for what's too perfect, and by watching the task.
• Review the plan whenever the process changes, and bring in expert help for high-risk work.