Compliance

Food Safety Compliance UK: The Complete Checklist for 2026

9 min read

A plain-English food safety compliance checklist for UK food businesses in 2026. Covers registration, HACCP, allergens, temperature records, training, and what happens when you get it wrong.

TLDR

  • Register your food business with your local authority at least 28 days before opening. It's free, and skipping it is a criminal offence.
  • You need a documented HACCP-based food safety management system: SFBB counts for most small businesses.
  • All 14 major allergens must be declared. Natasha's Law (Oct 2021) extended this to pre-packed for direct sale (PPDS) foods.
  • Temperature records are a legal requirement. Chilled food must stay at 8°C or below. Frozen food at -18°C or below.
  • At least one person on site needs formal food safety training. Level 2 is the minimum for food handlers.
  • Your food hygiene rating is public. In Wales and NI, displaying it is mandatory. In England, customers check it online anyway.
  • Penalties for non-compliance range from improvement notices to unlimited fines and up to two years in prison.

Food safety compliance in the UK sounds complicated. It isn't. There are about a dozen things you actually need to get right. Miss any one of them and your local Environmental Health Officer can shut you down, fine you, or both.

The problem is that the rules sit across multiple laws, agencies, and guidance documents. The Food Safety Act 1990. The Food Hygiene Regulations 2006 (as retained from EU law). Natasha's Law. The FSA's SFBB pack. Nobody put them in one place: until now.

This checklist covers every food safety compliance requirement for UK food businesses in 2026. Whether you run a café, a restaurant, a catering company, or a food manufacturing operation, these are the boxes you need to tick.

In this guide

  1. The food safety compliance checklist: 12 requirements every UK food business must meet
  2. 1. Register your food business with the local authority
  3. 2. Set up a HACCP-based food safety management system
  4. 3. Declare all 14 allergens correctly
  5. 4. Monitor and record temperatures daily
  6. 5. Train every food handler to the right level
  7. 6. Keep your premises clean and pest-free
  8. 7. Ensure a safe water supply
  9. 8. Maintain supplier traceability records
  10. 9. Label food correctly
  11. 10. Handle food waste properly
  12. 11. Prepare for unannounced EHO inspections
  13. 12. Keep all records for at least two years
  14. What happens when you fail food safety compliance in the UK
  15. Food safety compliance requirements at a glance
  16. Paper checklists vs digital food safety compliance systems

The food safety compliance checklist: 12 requirements every UK food business must meet

This is the full list. Each item links to the law or guidance behind it. Tick them off one by one.

1. Register your food business with the local authority

Every food business in the UK must register with its local authority. You need to do this at least 28 days before you start trading. Registration is free.

This applies to restaurants, cafés, takeaways, market stalls, food trucks, home kitchens, and online food sellers. If you handle, prepare, store, or sell food: you register.

You don't need approval to start trading (unless you handle certain animal products). But operating without registration is a criminal offence under the Food Hygiene (England) Regulations 2006.

How to do it: Search 'register a food business' on gov.uk. You'll need your business address, type of food you handle, and your trading name. The form takes about 10 minutes.

2. Set up a HACCP-based food safety management system

UK law requires every food business to have a food safety management system based on HACCP principles. HACCP stands for Hazard Analysis and Critical Control Points. It sounds intimidating, but for most small businesses, the FSA's SFBB pack covers it.

Your system must identify hazards (biological, chemical, physical), set critical limits (like maximum fridge temperatures), and document what you do when things go wrong.

An EHO will ask to see your HACCP documentation during an inspection. 'We do it but don't write it down' is not a defence. Written records are the requirement.

Larger operations and manufacturers typically need a formal HACCP Level 3 qualification for at least one person on the management team.

3. Declare all 14 allergens correctly

UK law lists 14 major allergens that must be declared to customers. These are: celery, cereals containing gluten, crustaceans, eggs, fish, lupin, milk, molluscs, mustard, nuts, peanuts, sesame, soybeans, and sulphur dioxide (above 10mg/kg).

Natasha's Law (October 2021) extended allergen labelling to pre-packed for direct sale (PPDS) foods. That sandwich you wrap in cling film and label in-house? It needs a full ingredients list with allergens emphasised in bold.

For non-prepacked food (served over a counter), you must tell customers which allergens are present. This can be verbal, but you need a written record of allergens in each dish available on request.

Getting allergens wrong can kill someone. The penalty for a fatal allergen incident is an unlimited fine and up to two years' imprisonment under the Food Safety Act 1990.

4. Monitor and record temperatures daily

The law is clear on temperature limits. Chilled food: 8°C or below (best practice is 5°C). Frozen food: -18°C or below. Hot food on display: 63°C or above.

You must check and record temperatures at least once per day. More frequent checks: every 4 hours for high-risk items: are standard during EHO inspections. Gaps in your records are red flags.

Manual temperature logs (the SC2 form) still work legally. But paper logs can't tell you when a chiller failed at 2am: a pattern we've documented across 602,795 UK establishments in our <a href='/blog/silent-compliance-failure'>Silent Compliance Failure</a> research. Wireless sensors with automatic logging give you 288 readings per day and fire alerts the moment something drifts. Read our guide on UK temperature monitoring legal requirements for the full breakdown.

Your corrective action records matter as much as the temperature readings themselves. When a fridge exceeds 8°C, what did you do? How quickly? Who signed off? Document everything.

5. Train every food handler to the right level

UK food safety law doesn't specify exact qualifications by name. But it requires that food handlers are 'supervised and instructed and/or trained in food hygiene matters commensurate with their work activity.'

In practice, this means Level 2 Food Safety (or equivalent) for anyone who handles food. Level 3 for supervisors and managers. Level 4 for food safety officers in larger operations.

Training must be refreshed every three years. An EHO will ask to see training certificates during an inspection. If you can't produce them, that's a non-compliance finding.

The FSA offers free online training courses. Paid courses from accredited providers (Highfield, CIEH, RSPH) typically cost £20-50 for Level 2 and £100-200 for Level 3.

6. Keep your premises clean and pest-free

Your food premises must be clean, well-maintained, and designed to prevent contamination. That means smooth washable surfaces, adequate ventilation, hot and cold running water, and enough space to separate raw and ready-to-eat food.

Pest control is your responsibility. Mice, rats, cockroaches, and flies are automatic EHO red flags. You need a pest control contract or documented evidence of self-monitoring. Bait stations. UV fly killers. Proofing around pipes and doors.

Cleaning schedules should be written down. 'We clean as we go' isn't evidence. A simple spreadsheet listing what gets cleaned, how often, by whom, and with what chemicals is enough.

7. Ensure a safe water supply

All water that comes into contact with food must be potable (safe to drink). If you're on mains water, this is usually covered. If you use a private supply (borehole, well, rainwater), you need annual testing and records.

Ice machines count. Water used in food preparation counts. Steam used to heat food counts. If water touches food at any point, it must be potable.

8. Maintain supplier traceability records

You must be able to trace every ingredient one step back (who supplied it) and one step forward (who you sold it to). This is the 'one up, one down' rule under EC Regulation 178/2002 (retained in UK law).

Keep supplier invoices, delivery notes, and batch numbers for at least five years. When a food recall happens, and the FSA issues about 150 per year: you need to identify affected stock within hours, not days.

Digital records are fine. Paper records are fine. No records at all? That's a criminal offence.

9. Label food correctly

Pre-packed food needs a full label: product name, ingredients list (with allergens in bold), net quantity, use-by or best-before date, storage conditions, origin (for certain products), nutrition declaration, and your business name and address.

Use-by dates are a legal safety limit. Selling food past its use-by date is a criminal offence. Best-before dates are quality indicators: you can still sell food past its best-before, but it must be safe and clearly marked.

Country of origin labelling is mandatory for beef, pork, lamb, goat, poultry, fish, honey, olive oil, wine, and fresh fruit and vegetables.

10. Handle food waste properly

Food waste must be stored away from food preparation areas in lidded containers. Commercial food businesses need a licensed waste carrier: you can't use domestic bins.

Used cooking oil needs separate collection. Pouring it down the drain blocks sewers and breaks environmental regulations. Most waste carriers collect used oil separately.

If you produce more than 5kg of food waste per week, the Environment Act 2021 requires separate food waste collection (being rolled out across England by local authorities through 2025-2026).

11. Prepare for unannounced EHO inspections

Environmental Health Officers can visit your premises at any reasonable time without notice. They check everything on this checklist: plus your staff's practical food safety knowledge.

Your EHO inspection checklist should be ready at all times, not assembled the night before a rumoured visit. Officers look at three things: hygiene standards (how clean), structural compliance (the building), and confidence in management (your systems and records).

After inspection, you receive a food hygiene rating from 0 (urgent improvement required) to 5 (very good). In Wales and Northern Ireland, displaying this score is mandatory. In England, it's voluntary, but customers check online. A rating below 3 costs you business.

If you fail, the EHO can issue a hygiene improvement notice (you get time to fix it), an emergency prohibition notice (immediate closure), or prosecution. Unlimited fines apply in the Crown Court.

12. Keep all records for at least two years

Temperature logs, cleaning schedules, training certificates, HACCP reviews, pest control reports, supplier records, allergen documentation: all of it needs to be stored and accessible.

The minimum retention period for most food safety records is two years. Traceability records should be kept for five years. HACCP plans should be reviewed and updated at least annually or whenever you change your menu, equipment, or suppliers.

Paper records work but create a problem: they can be lost, damaged, or incomplete. Digital records are easier to search, harder to lose, and simpler to hand over during an EHO inspection. Whichever system you use, the EHO needs to see it within minutes of asking.

What happens when you fail food safety compliance in the UK

The penalties are serious. Here's the escalation ladder.

Hygiene improvement notice: Fix the problem within a set deadline (usually 14 days). Failure to comply is a criminal offence.

Hygiene emergency prohibition notice: Immediate closure. Used when there's an imminent risk to health. You stay closed until a court lifts the order.

Simple caution: A formal warning that goes on your record. It stays on file and can be cited in future proceedings.

Prosecution: Magistrates' Court can impose fines up to £20,000 per offence and six months' imprisonment. Crown Court can impose unlimited fines and up to two years' imprisonment.

The Sentencing Council published specific guidelines for food safety offences. Fines for organisations start at £1,500 for low-culpability/minor harm and go up to £3 million or more for deliberate/fatal outcomes.

Your best defence is Section 21 of the Food Safety Act 1990: the due diligence defence. To use it, you must prove you took all reasonable precautions and exercised all due diligence. That means records. Proper, dated, comprehensive records.

Food safety compliance requirements at a glance

Here's every requirement in one table with the law behind it and the minimum evidence you need.

RequirementKey Law / RegulationMinimum Evidence
Business registrationFood Hygiene (England) Regs 2006Registration confirmation from council
HACCP / FSMSRegulation (EC) 852/2004 (retained)Written HACCP plan or completed SFBB pack
Allergen declarationFood Information Regs 2014 + Natasha's LawAllergen matrix for every dish, labels for PPDS
Temperature monitoringFood Hygiene (England) Regs 2006Daily temperature logs (paper or digital)
Staff trainingRegulation (EC) 852/2004 (retained)Training certificates for all food handlers
Premises hygieneFood Hygiene (England) Regs 2006Cleaning schedules, pest control records
Water safetyPrivate Water Supplies Regs 2016Annual test results (private supply only)
TraceabilityRegulation (EC) 178/2002 (retained)Supplier invoices, delivery notes, batch records
Food labellingFood Information Regs 2014Compliant labels on all pre-packed food
Waste disposalEnvironmental Protection Act 1990Licensed waste carrier contract
Inspection readinessFood Safety Act 1990All documents accessible within minutes
Record retentionVarious (see above)2 years minimum; 5 years for traceability

Paper checklists vs digital food safety compliance systems

Paper works. It's legal. But it has three problems that digital systems solve.

Paper can't alert you. A paper temperature log records what happened. A digital sensor with alerts tells you what's happening right now. When your walk-in chiller fails at midnight, paper records the failure the next morning. A WiFi sensor sends a text at 12:01am.

Paper can be faked. EHOs know this. They look for suspiciously consistent handwriting, round numbers, and logs filled in all at once rather than throughout the day. Digital records with timestamps and device IDs are harder to dispute.

Paper gets lost. Ask any restaurant manager who's been through a flood, a fire, or just a busy service where someone used the clipboard as a chopping board rest. Digital records survive in the cloud.

The shift from paper to digital food safety compliance isn't mandatory yet. But the direction of travel is clear. The FSA's Achieving Business Compliance programme is moving toward risk-based, data-driven inspections. Businesses with digital records will be lower risk. Lower risk means fewer inspections.

Common mistakes

  • Registering late, or not at all. Some businesses assume they only need to register if they have a physical shop. Online food sellers, home bakers, and market traders all need registration.
  • Treating HACCP as a one-time exercise. Your food safety management system needs reviewing at least annually and updating whenever you change your menu, equipment, or suppliers.
  • Relying on verbal allergen communication without a written backup. An EHO will ask for your allergen matrix. If you don't have one, that's a non-compliance finding: even if every staff member knows the allergens by heart.
  • Filling in temperature logs at the end of the day instead of at the time of checking. EHOs spot this instantly and it undermines your due diligence defence.
  • Assuming a food hygiene rating of 3 is 'good enough.' Customers increasingly filter by 4 and 5. Delivery platforms may delist businesses below 3.
Paper checklists prove intent. Flux proves compliance.
Command (from £49/month) turns your daily temperature readings into hash-chained audit trails, auto-generates HACCP evidence packs, and produces Section 21 due diligence bundles on demand. Stop scrambling before inspections — start running compliance on autopilot.

FAQ

What food safety compliance do I need for a small food business in the UK?

You need local authority registration (free, 28 days before trading), a HACCP-based food safety management system (SFBB for most small businesses), allergen documentation for all 14 major allergens, daily temperature records, staff training (Level 2 minimum for food handlers), clean premises with pest control, supplier traceability records, and correct food labelling. All of this must be documented and available for inspection at any time.

How much are food safety fines in the UK?

In the Magistrates' Court, fines go up to £20,000 per offence with up to six months' imprisonment. In the Crown Court, fines are unlimited and prison sentences can reach two years. The Sentencing Council guidelines start at £1,500 for low-culpability offences and scale to £3 million or more for serious corporate failures. An emergency prohibition (forced closure) doesn't require a conviction — an EHO can apply for one if there's imminent risk to health.

How often do EHO inspections happen in the UK?

Inspection frequency depends on your risk rating and food hygiene score. High-risk businesses (rating 0-2) get inspected every 6-12 months. Medium-risk (rating 3) every 12-18 months. Low-risk (rating 4-5) every 18-36 months. But EHOs can visit at any time without notice if they receive a complaint or have reason to believe there's a food safety risk.

Do I need food safety compliance for a home food business?

Yes. The same rules apply whether you cook in a commercial kitchen or your own home. You must register with your local authority, follow HACCP principles, manage allergens, maintain temperature records, and ensure your preparation area meets hygiene standards. Some local authorities require a home inspection before you start trading.

What is the Section 21 due diligence defence?

Section 21 of the Food Safety Act 1990 lets you argue that you took all reasonable precautions and exercised all due diligence to avoid committing an offence. It's your safety net in court. To use it, you need evidence: temperature logs, training records, HACCP documentation, supplier checks, cleaning schedules. Without comprehensive records, Section 21 is almost impossible to claim successfully.

Keep exploring

Recommended tools

Sources