Regulation 852/2004 requires a HACCP-based system with critical limits, monitoring, corrective action, verification and records, but sets almost none of the numbers. For temperature CCPs the frequency, the alarm, the calibration interval and the record period are yours to decide, justify and write down.
Why it matters
The law gives the principle and leaves you the numbers
For most food manufacturers, temperature is the control that matters most: cooking kills, chilling holds, and cooling between the two is where things go wrong. HACCP turns that into a system: a limit, a way of watching it, a response when it fails, and proof that the system works.
The law is short on numbers. Article 5 of Regulation 852/2004 sets the principles but no monitoring frequency, logging interval, calibration interval or record period. Those are decisions your HACCP team makes and an EHO or auditor tests, which is why the reasoning behind each one matters as much as the number.
What the rules say
Article 5: limits, monitoring, action, verification, records
Article 5 requires 'a permanent procedure or procedures based on the HACCP principles'. For temperature that means 'establishing critical limits at critical control points', 'effective monitoring procedures', 'corrective actions when monitoring indicates that a critical control point is not under control', verification 'carried out regularly', and 'documents and records commensurate with the nature and size of the food business'. Other records are kept 'for an appropriate period'.
The FSA's food safety management guidance puts it in plain terms: set limits for the CCPs, monitor them, put things right when a CCP fails, and 'keep records of your food safety systems, checks and how you've put things right', because 'if your business is involved in a food safety incident, you will need to show your records as evidence'. Records are also the core of the due diligence defence: proof that you 'took all reasonable precautions and exercised all due diligence'.
On cooling, Annex II, Chapter IX says foods to be held chilled 'are to be cooled as quickly as possible' after heat processing to a temperature that is not a risk to health. No time is given in UK law. Ireland's Guidance Note 20 gives an industrial profile: start chilling within 90 minutes, core from 55 °C to 10 °C within 120 minutes, then to 3 °C within 60 minutes.
- Critical limitA measurable figure with a source, validated for the hazard.
- MonitorA method and frequency that catches loss of control in time.
- Corrective actionFix the cause, decide on the product, record both.
- VerifyReview records, calibrate, audit the plan.
- RecordsKept for a defined period with a reason.
The HACCP principles in Article 5 of Regulation 852/2004, applied to a chill or cooling step.
What certification adds
BRCGS Food Safety Issue 9 fills in detail (paraphrased). Clause 2.10.1 asks for monitoring that can detect loss of control and give information in time to act, with continuous measurement such as thermographs as an option. Clause 2.10.2 says CCP records carry date, time and result, are signed by the person monitoring and verified, where appropriate, by an authorised person; electronic records need evidence they were checked. Clause 6.4 covers calibration at a risk-based frequency, traceable to a national standard where possible, and says calibration uncertainty must be considered when equipment is used to assess critical limits (6.4.3). Clause 6.1.4 adds that in-line monitoring devices controlling a process are linked to a failure alert system that is routinely tested. Clause 3.3.2 sets record retention at shelf life plus 12 months as a minimum.
SALSA Issue 7 asks for the same in shorter form: monitored environmental controls with records (1.5.2), external calibration of probes and recorders at a set frequency (1.5.4) and in-house checks (1.5.5), with records kept for shelf life plus one year.
What good looks like
A CCP that holds up at audit
Write the limit as a number with a source: '≤5 °C product, customer specification clause 4.2', not 'cold'. Allow for the instrument: if your probes are ±0.5 °C, an alarm at the limit means a real reading could already be over it. Choose a monitoring method that would see a failure in time, which for an unattended chill overnight means continuous logging with an alarm, not a morning check.
Verification is the part most often thin. Someone other than the person monitoring should review the records on a set cycle, look for repeats and near-misses, and sign. Calibration certificates, alarm tests and HACCP reviews are verification too, so keep them together.
Worked example
A blast chiller that runs slow
This is an illustrative example; times and readings are invented. A manufacturer of cooked chicken has a cooling CCP: core from 75 °C to 5 °C or below within 4 hours, validated for 10 kg trays, with a probe-in-product logger on one tray per batch.
Tuesday 10:00, a batch goes in. 12:00, the logger alarm fires: the core is at 21 °C, behind the validated curve. The shift lead checks the chiller and finds a blocked evaporator fan. 12:20, the batch moves to a second chiller. 14:30, the core reaches 5 °C, 30 minutes past the limit.
What the site does: treats it as a CCP deviation, holds the batch, and the technical manager assesses it against the validation data and the cooling profile, then decides and records the outcome. What changes: the fan is added to the planned maintenance list and the alarm is moved earlier on the curve, so a slow chill is seen at one hour, not two.
Where it is unclear
How often, how long and who signs
Article 5 is silent on monitoring frequency, logging interval and record period, and on how often electronic records must be reviewed; auditors differ on the last point. Cooling times differ widely between guides, from 'as quickly as possible' in law to 90 minutes in Scotland's ButcherSafe and 150 minutes to 3 °C in Ireland's Guidance Note 15. Retention runs from 'an appropriate period' in UK law to fixed periods in Irish law. These are compared under where the rules differ.
Inspection findings
What EHOs and auditors look for
In England, the Food Law Code of Practice scores 'confidence in management' on knowledge of 'hazard analysis/HACCP and the control of critical points' and on 'satisfactory food safety management-based procedures'; the Brand Standard adds that procedures 'cannot be termed satisfactory... if they are not being properly implemented'. The same Code sets inspection frequency, from every 6 months for category A to every 36 months for category E.
On certification audits, published lists of the most common BRCGS non-conformities are led by hygiene, chemical control and equipment, not temperature: a certification body datasheet covering more than 72,000 audits does not list calibration or storage temperature in its top group. We could not verify how often temperature findings occur.
In summary
The short version
- Article 5 of 852/2004 requires critical limits, monitoring, corrective action, verification and records.
- UK law gives no frequencies, intervals or record periods: each is a documented HACCP decision.
- Allow for instrument accuracy when setting alarms against a critical limit.
- Verification means someone reviews and signs the records, plus calibration and alarm tests.
- BRCGS asks for shelf life plus 12 months of records; SALSA shelf life plus one year.
- Cooling has no time in UK law; validate yours and write it down.