HACCP checklist for food safety reviews

How to use this HACCP checklist

A temperature check is missed during a busy shift. The next entry looks normal, so nobody follows it up. Weeks later, an internal review finds the blank record, but the team can no longer confirm what happened to the affected product or whether the control was working.

HACCP gaps often begin this way: a small break in monitoring, ownership, or evidence that becomes difficult to explain after the fact.

Use this HACCP checklist as a structured review of the plan and the records that prove it is working. Walk through it with the HACCP team and the people responsible for production, food safety, engineering, sanitation, supplier approval, and training. For every gap, record the risk, immediate action, owner, due date, and evidence required for closure.

This is an operational review aid, not a completed HACCP plan. Adapt it to the site, process, products, consumers, legal requirements, and current food safety guidance.

What a HACCP review should prove

A HACCP review should do more than confirm that a plan exists. It should show that the plan still matches the real operation and that the controls are being followed consistently.

The evidence should help the team answer practical questions:

• Does the process flow match what happens on site?
• Are significant hazards identified and controlled?
• Are critical limits measurable and supported?
• Are monitoring checks completed at the required frequency?
• Do deviations lead to immediate, traceable corrective action?
• Does verification show that the system continues to work?
• Can records be retrieved and understood by someone outside the usual process?

If the team cannot answer one of these questions with current evidence, the review has found a gap worth investigating.

Cover the seven HACCP principles

Use the checklist to review the areas covered by the FDA HACCP principles and application guidelines: hazard analysis, critical control points, critical limits, monitoring, corrective actions, verification, and record keeping. For UK teams, the same review should also be adapted to current UK food safety management and HACCP guidance. Each principle should connect to an owner, a defined method, current records, and a review schedule.

Why HACCP systems drift

HACCP plans can become outdated even when the original plan was well designed. Food operations change continuously, and the documentation does not always change with them.

The documented process no longer matches the site

A new ingredient, supplier, product, piece of equipment, layout, or production method can change the hazard profile. If the flow diagram and hazard analysis are not reviewed, controls may be based on an operation that no longer exists.

Monitoring becomes a routine form-filling exercise

Repeated checks can lose meaning when staff focus on completing the record rather than observing the control. Identical entries, unexplained blanks, late checks, or missing supervisor review can all signal that monitoring needs attention.

Corrective actions stop at the immediate fix

A product may be held or disposed of, but the cause of the deviation is never investigated. Without root-cause follow-up and verification, the same problem is likely to return.

Supporting evidence expires

Calibration certificates, training records, supplier approvals, specifications, pest-control reports, and maintenance evidence all have their own review cycles. When no one owns the next date, supporting controls quietly become stale.

Review monitoring records for signals, not just completion

Sample records across different products, shifts, days, and operators. Look for patterns that a simple completion check can miss:

• Missing, late, altered, or repeated entries.
• Results recorded exactly at the critical limit every time.
• Deviations without a linked product decision.
• Corrective actions with no owner or follow-up.
• Checks completed by staff without current competency evidence.
• Supervisor reviews completed long after the monitoring date.

The purpose is not to find fault with individual operators. It is to test whether the monitoring process produces trustworthy evidence and whether staff know what to do when a limit is missed.

Check corrective actions from deviation to closure

A useful corrective action record tells the full story. It identifies the deviation, affected product, immediate control, product disposition, root cause, preventive action, owner, and verification of effectiveness.

“Temperature corrected” may describe the immediate fix, but it does not explain what happened to the product or why the deviation occurred. Strong closure evidence should make both decisions traceable.

Turn recurring HACCP evidence into reminders

Some checklist findings are one-off actions. Others reveal records that need a recurring schedule. Common examples include:

• HACCP plan and flow-diagram reviews.
• Calibration and maintenance certificates.
• Refresher training and competency checks.
• Supplier approvals and specification reviews.
• Pest-control, sanitation, and environmental checks.
• Verification activities and internal audits.
• Corrective action follow-up.

Assign a named owner and backup, set the next review date, and define the evidence needed for completion. Reminder timing should reflect the risk and the time required to complete the work.

Run a traceability and retrieval test

Select a recent production batch or monitoring period and trace it through the relevant records. Confirm the team can retrieve the applicable plan, monitoring results, deviations, product disposition, verification evidence, and supporting certificates.

This exercise tests whether the system works as a connected whole. It often exposes gaps that are invisible when each record is reviewed separately.

Common HACCP review gaps

• Flow diagrams that do not match the current process.
• Hazard analyses that were not reviewed after a change.
• Critical limits with no clear validation basis.
• Monitoring records with blanks or missing review.
• Deviations without traceable product disposition.
• Corrective actions that fix the event but not the cause.
• Expired calibration, training, or supplier evidence.
• Old versions of the HACCP plan still available to staff.

Key takeaways

• A HACCP checklist should test whether controls work in practice, not simply whether a plan exists.
• Process changes should trigger a review of the flow diagram, hazards, controls, and supporting evidence.
• Monitoring records are most useful when reviewed for patterns and linked to clear deviation actions.
• Corrective actions need product decisions, ownership, follow-up, and proof that the fix worked.
• Recurring evidence should have named owners, review dates, and reminders.

FAQs

What is a HACCP checklist?

A HACCP checklist is a structured review tool used to check the hazard analysis, control points, critical limits, monitoring, corrective actions, verification, and recordkeeping that support a HACCP system.

Is this checklist a HACCP plan?

No. It is a review aid for organizing HACCP-related evidence and recurring checks. A complete HACCP plan should be built for the specific process and site.

What HACCP dates should teams track?

Teams may need to track plan reviews, calibration and maintenance checks, training renewals, supplier approvals, specification reviews, verification activities, internal audits, and corrective action follow-up. The right dates depend on the process, risk, and applicable requirements.

When should a HACCP plan be reviewed?

Review the plan on its scheduled cycle and whenever a change could affect food safety. Triggers can include new products, ingredients, suppliers, equipment, layouts, processes, complaints, incidents, or new guidance.

What should happen when monitoring finds a deviation?

The team should control the affected process or product, record what happened, decide the product disposition, investigate the cause, assign corrective action, and verify that the action was effective.

What records support a HACCP review?

Useful records can include the current plan, hazard analysis, flow diagram, monitoring logs, deviation and corrective action records, verification results, calibration certificates, training evidence, supplier approvals, sanitation records, and internal audit findings.