HACCP for restaurants in Ireland: the legal duty, the seven principles and Safe Catering

In Ireland, HACCP isn't an optional extra for big kitchens. The FSAI is plain about it: since 1998 every food business has had to run a food safety management system based on the principles of HACCP (Hazard Analysis and Critical Control Point). That includes the 30-cover bistro, the hotel bar serving toasties and the pub that does a carvery on Sundays.

The good news is that "HACCP" in a small Irish kitchen usually means a completed Safe Catering plan and a handful of daily records kept honestly, not a 60-page consultant's binder.

Where the HACCP requirement comes from

The rule today is in Regulation (EC) No 852/2004 on the hygiene of foodstuffs. For businesses registered with and supervised by the HSE (restaurants, cafés, pubs serving food, caterers), it is given effect in Irish law by the European Communities (Hygiene of Foodstuffs) Regulations 2006 (S.I. No. 369 of 2006), as amended.

Two parts of that law matter in a kitchen:

• Prerequisites. Article 4 and Annex II set out the basic hygiene requirements every food business must meet: premises, equipment, water, waste, personal hygiene, training and so on.
• HACCP-based procedures. On top of the prerequisites, a business that prepares, cooks or processes food must put in place, run and maintain procedures based on the seven HACCP principles.

The FSAI notes there is some flexibility. A business doing only low-risk activities may find its prerequisites control every hazard, with no need for full HACCP-based procedures. A restaurant that cooks raw meat, cools stocks overnight or reheats sauces is not in that group. The FSAI's Guidance Note 11 (Assessment of HACCP Compliance, Revision 2) is the detailed reference if you're unsure where you sit.

Prerequisites first: the base HACCP sits on

The FSAI says most hazards are controlled by prerequisite programmes (PRPs), so get these right before you write a single critical limit. For a restaurant, the FSAI's list translates to:

• Premises and structure: a layout that lets food move one way from delivery to plate, good lighting, a wash-hand basin used only for handwashing.
• Equipment: fridges, freezers and probes that work, are maintained and are calibrated.
• Cleaning and sanitation: a written cleaning schedule that is actually followed.
• Zoning: keeping raw and ready-to-eat food apart, and controlling allergen cross-contact.
• Supplier control: buying from registered suppliers and checking deliveries.
• Pest control: proofing the building and acting at once on any sign of pests.
• Personal hygiene and fitness to work: procedures for staff with vomiting, diarrhoea, infected cuts and similar.
• Training and supervision: staff trained to suit their job.
• Cold chain and allergens: the FSAI calls out both as things your PRPs must cover.

If these are weak, no HACCP plan will save you. The reasons the FSAI gives for closure orders regularly include basic prerequisite failures such as pest infestations, poor hygiene and unsafe food storage, not just a missing column on a form.

The seven principles in a small kitchen

The FSAI sets out the seven principles. Here they are with a typical Irish restaurant dish: a slow-cooked beef and stout stew, made in the morning, held for lunch and cooled for the evening.

The temperatures in the table are the FSAI's own figures for caterers. The FSAI also gives an example of principle 5 for fridges: if food in a fridge rises to 10°C because of a fault, discard the food and repair the fridge until it holds 5°C again.

On principle 7, the FSAI makes a point worth repeating to any chef who hates paperwork: the aim is to keep control without generating excessive paperwork. Record what proves the controls work. Don't record for the sake of it.

The Safe Catering Pack: the usual route for Irish caterers

The FSAI says you can meet the HACCP requirement by following a recognised guide to good practice or by developing your own procedures. For most small caterers the practical answer is the FSAI's Safe Catering Pack, which the FSAI developed with the food industry and Environmental Health Officers and which is based on HACCP principles.

The pack contains:

• a safe catering plan you complete for your own business, working through each step (delivery, storage, preparation, cooking, cooling, reheating, hot holding and so on);
• the hygiene requirements that must be met;
• a Declaration of Completion and Review, which must be filled in and signed to show you're meeting the legal requirement to have a food safety management system;
• recording forms and checklists for your checks, training and allergen management.

The FSAI has added newer sections on allergens, acrylamide, food safety culture, food donations and water supply, which can be downloaded free. The pack itself costs €100 including postage and ships only to addresses in the Republic of Ireland. The recording forms (SC1 to SC9) are free to download and print. Our guide to the Safe Catering Pack and its record sheets goes through each form.

Two common mistakes with the pack:

1. Buying it and not completing it. An unfilled pack on a shelf is not a food safety management system. The plan has to describe your kitchen, your menu and your steps.
2. Never reviewing it. The FSAI says the plan must be kept up to date, especially when something changes. Start hot holding, add a sous-vide dish or change your fryer oil supplier and the plan needs a look.

Irish Standards: I.S. 340 for catering

The FSAI lists sector-specific Irish Standards from the National Standards Authority of Ireland (NSAI) as guidance on complying with food hygiene law, including prerequisites and HACCP-based procedures. For restaurants the relevant one is I.S. 340:2007, Hygiene in the Catering Sector (I.S. 341:2007 covers food retailing and wholesaling). The FSAI advises all food businesses to use the standard for their sector. It's a detailed reference you buy from the NSAI, not a separate legal duty, and many small kitchens rely on the Safe Catering Pack day to day.

Training for whoever runs the system

The FSAI says that if you are responsible for your business's HACCP system, you must have adequate training in applying HACCP principles. Every food handler must be supervised and instructed or trained in food hygiene to suit the work they do. You don't necessarily have to attend a course: the FSAI's Guide to Food Safety Skills lets you build your own training. Our guide to food safety training in Ireland covers the levels and the records.

What an HSE EHO checks about your HACCP

The FSAI's Guidance Note 1 sets out how HSE Environmental Health Officers inspect food businesses. "Procedures based on HACCP principles" is one of the core elements of every planned inspection, alongside structural and operational prerequisites and management systems. In practice, expect the EHO to:

• ask to see your completed plan and the signed declaration;
• look at your monitoring records and check they match what's happening (a fridge reading of 3°C every day for a month, in the same pen, invites questions);
• watch staff work and ask the person monitoring a step what they'd do if a reading failed;
• check that the person in charge understands the hazards in their own operation.

The absence of a food safety management system based on HACCP principles is one of the reasons the FSAI lists for closure orders served in December 2025. See our EHO inspection checklist for the full visit.

Common mistakes in small kitchens

• A generic plan. Copied from another business or a template that lists a deep-fat fryer you don't own. The EHO will spot it in minutes.
• CCPs with no limits. "Cook thoroughly" is not a critical limit. "Core 75°C" is.
• Records filled in at the end of the week. Identical handwriting and suspiciously round numbers undermine everything else.
• No corrective action written down. A failed reading with nothing next to it looks worse than no reading at all.
• Allergens left out. The FSAI says allergens are a hazard your food safety management system must take into account. See allergen rules in Ireland.
• Staff who don't know the plan exists. Monitoring only works if the people holding the probe know the limit and what to do when it's missed.

A HACCP checklist for an Irish restaurant

• Business notified to the HSE before trading, acknowledgement letter on file
• Prerequisites in place: cleaning schedule, pest control, supplier list, handwashing, training
• Safe Catering Pack (or equivalent) completed for your own steps and menu
• Declaration of Completion and Review signed and dated
• Critical limits written for cooking, cooling, chilling, reheating and hot holding
• Daily records running (fridges, cooking, cooling, hot holding)
• Corrective actions written next to any failed check
• Probe thermometer calibrated at least twice a year
• Allergen information recorded for every dish
• Plan reviewed after any change to menu, equipment or process

Keeping the records without the binder

The plan is a document you write once and review. The daily records are the part that slips: a clipboard that goes missing on a Saturday, a fridge sheet nobody filled in after a late close.

ShiftComplete helps with that daily part. Every fridge, freezer and hot-hold unit gets its own safe range; staff log a reading on their phone or the tablet in seconds; anything out of range is flagged on the dashboard, named and timestamped, with an optional photo. Opening, closing and cleaning checklists can differ by weekday, and every tick shows who did it and when. Your allergen information sits against every menu item, searchable from the floor. When the EHO arrives, a 7-day rolling view of readings and the full audit log are on screen.

It doesn't write your Safe Catering plan for you, and you stay responsible for your food safety system. It helps you keep the records an EHO asks to see. ShiftComplete costs €1.99 per active staff member per month, free for 60 days, no card and no contract. Start a free trial or book a 15-minute set-up call.