A health inspection rarely lasts more than two hours. The inspector looks at three things: your records, your training certificate and the actual state of your premises. The HACCP method is what ties the three together. Here is what the law requires of a restaurant, and how to keep the system running without losing your evenings to it.
HACCP in restaurants: a legal duty, not best practice
The legal basis is European regulation EC 852/2004, which took effect on 1 January 2006. It requires every food business operator to put in place a control system based on HACCP principles. So this is not a voluntary standard like ISO: it is an obligation that applies from the very first cover you serve.
In France, the regulation is backed up by the order of 21 December 2009, which sets storage temperatures for animal-based foodstuffs and the rules for direct sale to consumers. Decree no. 2011-731 on food hygiene training completes the picture, and has applied since 1 October 2012.
In practice, the law does not tell you how to work. It asks you to identify the hazards specific to your business and to prove that you control them. A food truck, a pizzeria and a fine-dining kitchen will not have the same plan. That is the whole point of the approach: it scales to what you actually do.
Failure to comply brings escalating consequences: a warning, then a formal notice, a fine, and finally administrative closure. Since 2017, inspection results have been published on the Alim'confiance website, where your customers can see them.
The HACCP method: what the acronym means, and the 7 principles
HACCP stands for Hazard Analysis Critical Control Points. The full term, HACCP, Hazard Analysis Critical Control Points, describes an approach born in the American space programme in the 1960s, before it was adopted across the entire food chain.
The method has 7 principles, applied in this order:
- Carry out a hazard analysis covering biological, chemical and physical hazards.
- Identify the critical points, or critical control points, where control is essential.
- Set critical limits for each of these control points — a temperature or a holding time, for example.
- Put a monitoring system in place for those limits.
- Define the corrective actions to take when a limit is breached.
- Verify regularly that the system works.
- Keep the documents and records that prove it.
These 7 principles rest on a step-by-step hazard analysis critical review: delivery, storage, preparation, cooking, chilling, service. A well-run analysis critical control never ends up with more than five or six genuinely decisive points. Beyond that, the plan becomes unmanageable and nobody keeps it up.
The 3 hazard types and the 5 hygiene rules to know
The three families of hazards
The biological hazards come first: salmonella, listeria, staphylococci, viruses. They account for the bulk of the collective food poisoning outbreaks reported each year in France — around 1,500 of them. Next come chemical hazards, linked to badly stored cleaning products, residues or non-food-grade packaging materials. Physical hazards bring up the rear: glass, metal, plastic, jewellery.
The five day-to-day hygiene rules
The trade often sums them up as the 5 Ms. They give structure to the whole team's hygiene practices.
- Manpower: handwashing, clean uniforms, keeping sick staff off the floor.
- Materials: checking goods on delivery, respecting use-by dates, batch traceability.
- Machinery: a written cleaning schedule, equipment in good order, calibrated probes.
- Milieu: linear workflow, clean and dirty areas kept apart, pest control.
- Method: written procedures, known and applied the same way by everyone.
These hygiene rules apply to customer information too. Ingredient traceability feeds straight into your duties on allergens and Regulation (EU) 1169/2011 in restaurants, checked by the same inspectors.
HACCP training for restaurants: who, how long, how much
Food hygiene training is compulsory for every commercial catering business. At least one person present on site must hold the certificate. The course lasts 14 hours — two days — and is taken with a training body registered with the prefecture.
Budget roughly 200 to 500 euros per person, depending on the region and the format. Remote sessions are accepted provided they follow the official syllabus. The training can be funded through the OPCO schemes or, for self-employed operators, through the training insurance fund.
Two situations exempt you from the course: a level V qualification or above in catering, or at least three years' professional experience as a manager or operator in the food sector. Be careful, though — the exemption attaches to the person, not the business. If they leave, someone else has to be trained.
On the ground, the certificate is nearly always there. What's missing is the last three months of records.
The HACCP plan: building your food safety management system
The food safety management plan — the PMS in French — is the folder that holds your entire approach. Plenty of restaurateurs go looking for a ready-made HACCP plan template in PDF. That's a fine starting point, as long as you adapt it: a generic document copied across as-is is spotted within thirty seconds during an audit.
Your plan has three parts. Good hygiene practices first: cleaning schedule, waste management, staff training, water potability. Then the HACCP plan itself, built from your own hazard analysis. Traceability last, covering the handling of non-compliant products and withdrawal and recall procedures.
The minimum daily checklist runs to just a few lines:
- Cold room temperatures, morning and evening: 0 to +4 °C for highly perishable foods, -18 °C for frozen storage.
- Hot holding temperatures at service, kept at a minimum of +63 °C.
- Rapid chilling: from +63 °C down to +10 °C in under 2 hours.
- Goods inwards: date, supplier, recorded temperature, condition of the packaging.
- Frying oils, cleaning of workstations, reference samples kept for 5 days.
These records must be kept for at least a year. They are the only proof you have that a check really did take place last Tuesday.
HACCP apps for restaurants: is it worth going digital
Nothing obliges you to keep your records on paper. The law asks for dated, reliable and readily available records; the format is up to you. That explains the rise of HACCP apps over the past few years, particularly in kitchens running several services a day.
| Criterion | Paper folder | HACCP app |
|---|---|---|
| Daily time spent recording | 15 to 20 minutes | 3 to 5 minutes |
| Missed records | Frequent, spotted too late | Automatic reminder |
| Finding data during an inspection | Leafing through the folder | Instant export |
| Annual cost | Next to nothing | 200 to 600 euros |
| Risk of loss | High (damage, moving premises) | Online backup |
Going digital is no substitute for discipline: an app that nobody fills in is worth as much as an empty folder. What it does do is timestamp every entry, which makes the data hard to dispute. Some connected models read the temperature of your cold storage continuously and alert you before the cold chain is broken.
The same logic applies to the rest of the house. A restaurateur who has already moved to a digital restaurant menu handles updates and mandatory notices from the same phone as their temperature records. Less paper, fewer gaps between what's advertised and what's served.
HACCP inspections and audits: what the inspector actually looks at
Inspections are carried out by the DDPP, without notice. The officer starts with the visible points: cleanliness of surfaces, separation of zones, labelling of opened products, no break in the cold chain. Then they ask for your food safety management plan and your records.
The most common findings are always the same: food left unprotected or undated, uncalibrated probes, no cleaning schedule, cleaning products stored above food. None of them are hard to fix. They get expensive because they're left to drift.
A quarterly internal audit, run by you against the same checklist the authorities use, is enough to hold a steady standard. Note the gaps, date the corrective actions, check they worked next time round. That is exactly what the regulations expect from a professional: not perfection, but a demonstration that you have day-to-day control of your food safety.
The same burden of proof applies to consumer information: origin of meat, the "fait maison" homemade label, restaurant price display rules. Hygiene and transparency are checked by the same services, often on the same day.