FDA HACCP Requirements for US Food Businesses

What is FDA HACCP?

HACCP (Hazard Analysis and Critical Control Points) is a systematic, science-based food safety management system required by the U.S. Food and Drug Administration (FDA) for most food businesses operating in or exporting to the United States. Under the FDA Food Safety Modernization Act (FSMA), HACCP principles are embedded into the Hazard Analysis and Risk-Based Preventive Controls (HARPC) requirements, making a robust food safety plan a legal obligation for US food businesses.

Why FDA HACCP Compliance is Mandatory for US Food Businesses

• Legal requirement: FSMA's Preventive Controls for Human Food rule (21 CFR Part 117) mandates written food safety plans based on HACCP principles for most food facilities registered with the FDA.
• Market access: US retailers, distributors, and foodservice operators require HACCP compliance as a minimum supplier requirement.
• Export compliance: Food businesses exporting to the US must meet FDA HACCP standards regardless of their country of origin.
• Reduce liability: A documented HACCP system significantly reduces the risk of FDA enforcement actions, product recalls, and legal liability.
• Consumer protection: HACCP ensures systematic identification and control of biological, chemical, and physical hazards throughout the food production process.
• Certification readiness: HACCP is the foundation of FSSC 22000, SQF, BRCGS, and other GFSI-recognized certifications accepted by US retailers.

FDA HACCP vs FSMA Preventive Controls: Key Differences

The 7 HACCP Principles Required by FDA

1. Conduct a Hazard Analysis — Identify all reasonably foreseeable biological (pathogens), chemical (pesticides, allergens), and physical (metal, glass) hazards at each step of your process.
2. Identify Critical Control Points (CCPs) — Determine the specific process steps where controls are essential to prevent, eliminate, or reduce food safety hazards to acceptable levels.
3. Establish Critical Limits — Define the maximum and minimum values (temperature, time, pH, water activity) that must be met at each CCP.
4. Establish Monitoring Procedures — Define how each CCP will be monitored, the frequency of monitoring, and who is responsible.
5. Establish Corrective Actions — Document what actions will be taken when a CCP is not under control, including product disposition and root cause correction.
6. Establish Verification Procedures — Confirm the HACCP system is working effectively through testing, calibration, and record review.
7. Establish Record-Keeping and Documentation — Maintain complete records demonstrating the HACCP system is operating correctly and consistently.

FDA HACCP Implementation Steps for US Food Businesses

Step 1: Assemble Your HACCP Team

Form a multidisciplinary team with knowledge of your products, processes, and food safety hazards. At least one team member must have completed a HACCP training course recognized by FDA.

Step 2: Describe Your Products and Intended Use

Document full product descriptions including ingredients, processing methods, packaging, shelf life, storage conditions, and intended consumer (including vulnerable populations).

Step 3: Construct a Process Flow Diagram

Map every step in your production process from raw material receipt to finished product distribution. Verify the flow diagram on-site.

Step 4: Conduct the Hazard Analysis

For each process step, identify potential hazards and assess their severity and likelihood. Determine which hazards require a preventive control.

Step 5: Determine CCPs and Preventive Controls

Apply the CCP decision tree to identify Critical Control Points. Under FSMA, also identify process controls, allergen controls, sanitation controls, and supply chain controls.

Step 6: Establish Critical Limits and Monitoring

Set scientifically validated critical limits for each CCP. Establish monitoring procedures with defined frequency, method, and responsible personnel.

Step 7: Develop Corrective Action and Verification Procedures

Document corrective actions for each CCP deviation. Establish verification activities including calibration, product testing, and HACCP plan review.

Step 8: Implement Record-Keeping System

Establish a complete record-keeping system. FDA requires records to be retained for at least 2 years (or the shelf life of the product if longer).

Step 9: Validate and Review the HACCP Plan

Validate that your HACCP plan effectively controls identified hazards. Review and update the plan whenever there are changes to products, processes, or new hazard information.

FDA Registration and HACCP: What Food Businesses Must Know

Under FSMA, most food facilities that manufacture, process, pack, or hold food for consumption in the US must register with the FDA and renew registration every two years. Registered facilities are subject to FDA inspection and must have a written food safety plan based on HACCP principles. Failure to comply can result in warning letters, import alerts, facility suspension, or mandatory recalls.

Which US Food Businesses Need FDA HACCP Compliance?

• Food manufacturers and processors — All facilities producing food for US consumption
• Seafood processors — Subject to 21 CFR Part 123 (mandatory HACCP since 1997)
• Juice processors — Subject to 21 CFR Part 120 (mandatory HACCP since 2002)
• Meat and poultry processors — Regulated by USDA FSIS under 9 CFR Part 417
• Foreign food exporters to the US — Must meet equivalent HACCP/FSMA standards
• Dietary supplement manufacturers — Subject to GMP regulations with HACCP elements

Get FDA HACCP Compliant Faster with Ready-Made Documentation

Building a complete FDA-compliant HACCP system from scratch can take hundreds of hours. Our FDA HACCP document pack includes fully editable, audit-ready templates covering all 7 HACCP principles and FSMA Preventive Controls requirements — HACCP plan templates, hazard analysis worksheets, CCP monitoring logs, corrective action records, verification checklists, and more. Download, customize, and implement in a fraction of the time.