HACCP and food safety for Irish food businesses (2026)

If you run a restaurant, café, takeaway, pub kitchen, deli, bakery, catering business or any operation that prepares or sells food in Ireland, food safety is not optional and it is actively inspected. The framework is built around HACCP — a structured way of identifying and controlling the hazards in your food process — and it is enforced by environmental health officers who can, in the worst cases, close you down on the spot. This guide explains who regulates food safety in Ireland, the legal requirement to base your system on HACCP, what an inspection looks for, and the records that keep you on the right side of it.

Who regulates food safety in Ireland

The Food Safety Authority of Ireland (FSAI) is the national body responsible for food safety. It works through service contracts with agencies that carry out inspections on the ground — most commonly the environmental health officers (EHOs) of the Health Service Executive (HSE), and in some sectors local authority and other officers. For most restaurants, cafés and similar businesses, it is an HSE environmental health officer who will walk through your door. The FSAI also publishes the guidance and legal notices the sector relies on, and it operates the enforcement-order register that makes closures public.

You must be registered

Before trading, a food business generally must be registered with the relevant official agency (typically the HSE for the common food-service sectors). Registration is the baseline: operating an unregistered food business is itself a breach, and it is one of the first things an officer will check.

The legal requirement to use HACCP

European food hygiene law — principally Regulation (EC) No 852/2004, which applies directly in Ireland — requires food business operators to put in place, implement and maintain permanent procedures based on the principles of HACCP (Hazard Analysis and Critical Control Points). In plain terms, you must look systematically at your food process, work out where the hazards are — microbiological, chemical, physical, and allergenic — decide the critical points where they must be controlled, set limits and checks at those points, and keep records showing the system is working. For smaller businesses the FSAI provides simplified, sector-specific tools and guides so that HACCP does not have to mean a fat manual, but the underlying obligation to have a functioning, documented food safety management system based on HACCP applies to essentially every food business.

The HACCP principles in practice

Applied to a typical kitchen, HACCP translates into the everyday controls officers expect to see working: temperature control through the whole chain — deliveries, cold storage, cooking, hot holding, cooling and reheating — with records to prove it; separation and practices that prevent cross-contamination, especially between raw and ready-to-eat foods; cleaning and sanitising to a schedule; pest control; safe sourcing and traceability of ingredients; and personal hygiene and staff health rules. The paperwork is not the point in itself — it is the evidence that the controls are actually happening consistently, day in and day out, rather than only when someone is watching.

Food safety training

Staff who handle food must be trained and supervised in food hygiene to a level appropriate to their work, and those responsible for developing and maintaining the HACCP-based procedures need appropriate training in HACCP itself. The FSAI sets out the food safety skills expected at different levels. As with every other area, the business needs to be able to show who has been trained, to what level, and that new staff are trained promptly rather than left to pick it up.

Allergens — a specific and heavily checked duty

Allergen information is a distinct legal requirement and a frequent focus of inspections. Under the EU Food Information to Consumers Regulation (No 1169/2011), and the Irish rules on non-prepacked (loose) food, food businesses must provide accurate information on the 14 named allergens in the food they serve. For loose foods sold in restaurants and takeaways, that information must be available to the customer. Getting allergens wrong is not only a compliance failure — it is a genuine danger to life — so officers scrutinise how you identify, record and communicate allergen information, and how you prevent cross-contact in the kitchen.

What an EHO inspection looks for, and can do

An environmental health officer can arrive unannounced, inspect the premises, observe practices, check temperatures, and ask to see your food safety management system and records. Where they find problems, they have a graded set of enforcement tools under the food safety legislation: they can require improvements, and in more serious cases serve an Improvement Notice specifying what must be corrected. Where there is a risk to public health, they can serve a Closure Order (closing all or part of the business immediately) or a Prohibition Order, and these are published on the FSAI website — a reputational hit on top of the operational one. In the most serious cases, prosecution follows. The through-line, again, is that the officer will ask to see your system and records, so their state largely determines how the visit goes.

The failings that come up again and again

Recurring findings include: no functioning HACCP-based system, or one written once and never used; temperature records missing or filled in retrospectively; poor separation of raw and ready-to-eat foods; inadequate cleaning; pest issues; staff not trained in food hygiene; and — very commonly and very seriously — inadequate allergen information for loose foods. Many of these are not about equipment or premises but about consistent daily record-keeping and habits.

Keeping it live

Food safety compliance is a daily discipline: temperature checks, cleaning schedules, deliveries, staff health declarations, training renewals and allergen updates, all of which have to actually happen and be recorded. The businesses that pass cleanly are the ones for whom the records are a by-product of doing the job properly, kept in one place and reviewed, rather than a panic before an inspection. Complys helps food businesses keep that discipline — tracking food safety training and renewals, temperature and cleaning records, supplier and allergen information and staff health declarations with reminders — so the evidence an EHO asks for is always there and current.

The seven HACCP principles in detail

HACCP is often quoted but rarely spelled out, so it helps to see the seven principles that a proper system is built on. First, conduct a hazard analysis — identify the biological, chemical, physical and allergenic hazards at each step of your process. Second, determine the critical control points (CCPs) — the steps where control is essential to prevent or eliminate a hazard, such as cooking or chilling. Third, establish critical limits for each CCP — the measurable boundary, such as a core cooking temperature. Fourth, establish monitoring — how and how often you check each CCP stays within its limit. Fifth, establish corrective actions — what you do when a limit is breached, such as continuing to cook or discarding a batch. Sixth, establish verification — checks that the system as a whole is working, such as review and calibration. Seventh, establish documentation and record-keeping — the evidence that all of the above is happening. For a small business the FSAI's simplified tools express these in plain, practical terms, but every functioning food safety system traces back to these seven ideas.

Food safety training levels

Training is not one-size-fits-all; it scales with the role. The FSAI describes food safety skills at levels, broadly: induction skills for all new food handlers before they start; additional skills for those handling food more extensively; and management-level food safety and HACCP training for those who develop and maintain the food safety management system. In practice this means a new kitchen porter needs basic hygiene induction promptly, while the chef or manager responsible for the HACCP system needs proper HACCP training. Being able to show the right level of training for each role, kept current, is exactly what an environmental health officer checks.

Registration, and when approval is needed instead

Most food businesses — restaurants, cafés, takeaways, shops — need to be registered with the relevant official agency before trading. A smaller set of businesses, typically those handling products of animal origin for supply to other businesses (certain manufacturing and wholesale operations), may instead require approval, a more involved process. For the great majority of food-service operators the duty is registration, and it must be in place before opening; operating unregistered is itself a breach and an easy one for an officer to spot.

The daily records that prove the system works

HACCP lives or dies on records, because they are the only evidence that the controls actually happen rather than merely being written down. The everyday records an officer expects to see include: delivery checks (temperature and condition of incoming food); fridge and freezer temperature logs; cooking, hot-holding, cooling and reheating temperature records at the critical points; cleaning schedules signed off; probe thermometer calibration; supplier and traceability information; staff training and fitness-to-work (health) records; and a log of corrective actions taken when something went outside its limit. Records completed contemporaneously and honestly are worth far more than a perfect-looking set filled in all at once — officers are practised at spotting the latter.

Temperature control and cross-contamination in practice

Two everyday areas cause a large share of real risk and of findings. Temperature control runs the length of the process: keeping cold food cold and hot food hot, cooking to safe core temperatures, cooling cooked food quickly, and reheating thoroughly — each with the checks to prove it. Cross-contamination control means keeping raw and ready-to-eat foods separated in storage and preparation, using separate or properly sanitised equipment and surfaces, and rigorous hand hygiene — and, critically, preventing allergen cross-contact, which can turn a safe dish into a dangerous one. These are not abstract principles; they are the concrete daily habits that a HACCP system exists to make routine.

The bottom line

Every Irish food business must be registered and must run a food safety management system based on HACCP under Regulation 852/2004, with specific and heavily checked duties around allergens under the Food Information to Consumers rules. Environmental health officers, working under the FSAI, inspect without warning and can close a business that puts the public at risk. Keep HACCP genuinely running, keep the daily records honest and current, and get allergens right, and an inspection is routine; treat it as paperwork for the officer's benefit, and it will not hold up.