Fundamentals

The Invisible Threat: Biological Hazards in HACCP — Examples, Vectors, and Critical Controls

2025-12-14

Biological hazards are the primary reason HACCP exists. This guide covers the Big Four pathogens, their specific HACCP critical limits, the role of PRPs, corrective actions, and the microbiological verification UK and EU law requires.

The Invisible Threat: Biological Hazards in HACCP — Examples, Vectors, and Critical Controls

Of the three primary hazard categories in a HACCP plan—Physical, Chemical, and Biological—biological hazards are universally recognised as the highest risk for causing widespread public health incidents. Unlike a piece of metal that affects one consumer or a chemical contaminant that causes acute illness, biological hazards can multiply exponentially under the right conditions, turning a single contaminated ingredient into a mass outbreak.

Under Regulation (EC) No 852/2004 and the UK Food Safety Act, the primary legal duty of a food business operator is to ensure food is not "injurious to health." This article details the specific types of biological hazards, provides concrete examples of where they are found, and outlines the HACCP controls expected by UK Environmental Health Officers (EHOs) and EU competent authorities.

Part 1: The Hierarchy of Biological Hazards

Biological hazards are living organisms (or the toxins they produce) that cause illness when consumed. In the UK/EU HACCP context, they are categorised by size and behaviour.

Category Examples Severity in UK/EU Context Common HACCP Vector
Bacteria Salmonella, Listeria monocytogenes, Campylobacter, E. coli O157 High / Critical Undercooked poultry, raw milk, RTE salads, minced meat
Viruses Norovirus, Hepatitis A High (Outbreak Potential) Infected food handlers, sewage-contaminated shellfish
Parasites Anisakis (fish worm), Cryptosporidium, Trichinella Moderate / Regional Raw/undercooked fish, unwashed vegetables, wild game
Prions BSE (Mad Cow Disease) agent Regulatory Ban Specified Risk Material (SRM) in beef

Part 2: Detailed Hazard Examples and Specific HACCP Controls

Below are the "Big Four" biological hazards that feature most prominently in UK/EU enforcement and recall data, along with the exact controls expected in a compliant HACCP plan.

Hazard 1: Salmonella spp.

  • Source: Poultry, eggs, raw meat, contaminated seeds and spices.
  • Pathology: Infective dose can be very low. Symptoms: diarrhoea, fever, vomiting (12–72 hours).
  • HACCP Controls:
    • Cooking CCP: Achieve core temperature of >75°C (or time/temperature equivalent, e.g., 70°C for 2 minutes). This is a Critical Limit.
    • Cross-Contamination: Separation in space or time. Where the same prep area is used for raw chicken and ready-to-eat food, a validated cleaning procedure must be in place and documented between tasks.
    • Eggs (UK): Use of British Lion Code eggs or pasteurised liquid egg in care homes is a standard Prerequisite Program (PRP) control.

Hazard 2: Listeria monocytogenes

  • Source: Soft cheeses, pâté, pre-packed smoked salmon, ready-to-eat sliced meats.
  • Pathology: Listeriosis. Severe risk for pregnant women, the elderly, and the immunocompromised. Mortality rate ~20–30% in vulnerable groups.
  • Regulatory Context: The most scrutinised pathogen under Regulation (EC) 2073/2005 (Microbiological Criteria).
  • HACCP Controls:
    • Chill Chain CCP: Critical Limit ≤ +5°C (ideally ≤ +3°C for high-risk RTE production).
    • Shelf-Life Validation: You must scientifically demonstrate that Listeria cannot grow to >100 cfu/g within the product's "Use By" date.
    • Environmental Monitoring: Swabbing drains and floors for Listeria spp. is a verification activity required by BRCGS and by EU law for RTE facilities.

Hazard 3: Clostridium perfringens

  • Source: Large joints of meat, stews, gravies, large batches of rice and pasta.
  • Pathology: Known as "the catering bug" — caused by slow cooling allowing spores to germinate into toxin-producing cells.
  • HACCP Controls:
    • Cooling CCP: UK FSA guidance uses a two-stage standard as the legal baseline — ≥63°C to ≤21°C within 2 hours, then ≤21°C to ≤5°C within a further 4 hours (6 hours total). For blast chiller operations, best practice is ≥63°C to ≤3°C within 90 minutes. Document the limit that matches your equipment and justify it in the HACCP plan.
    • Hot Holding CCP: Critical Limit: hold at >63°C.
    • Portion Control: Cut large meat joints in half before cooling to facilitate rapid heat loss from the core.

Hazard 4: Norovirus and Hepatitis A (Viral Hazards)

  • Source: Human faeces and vomit. Spread via unwashed hands of infected food handlers, or bivalve shellfish (oysters) harvested from contaminated waters.
  • Pathology: Highly contagious. Causes 1–3 days of severe vomiting and diarrhoea.
  • HACCP Controls:
    • Important Note: Viruses are not reliably eliminated by standard cooking temperatures in the same way vegetative bacteria are. The primary CCP is therefore prevention.
    • Employee Health Policy: Critical Limit — 48-hour exclusion from food handling duties following the last symptom of vomiting or diarrhoea. This must be a documented, signed policy.
    • Shellfish Sourcing: Purchase only from Class A designated waters with a valid Registration Document. Batch tags must be retained for 60 days (EU requirement).

Part 3: The Role of Prerequisite Programs in Biological Control

A common HACCP mistake is attempting to control every biological hazard through CCPs. Most biological hazards are managed upstream by Prerequisite Programs (PRPs). Failure in PRPs leads directly to HACCP system failure.

Biological Hazard Vector PRP Control (Not a CCP, but Legally Required)
Pests (mice, flies) Pest control contract and internal monitoring log. Flies carry Campylobacter and E. coli on their feet and represent a significant cross-contamination vector.
Water supply UK: mains water check. EU: potable water testing per Directive 98/83/EC. Private supplies must be tested for E. coli and Enterococci annually.
Cleaning and disinfection Use of BS EN 1276 or BS EN 13697 compliant sanitisers. Note: soil load neutralises sanitiser — surfaces must be cleaned before disinfection.
Personal hygiene Handwashing signage and dedicated handwash sinks separate from prep sinks. An EHO will raise a Major Non-Conformity if a handwash sink lacks soap or hot water.

Part 4: Corrective Action for Biological Hazard Deviations

  • Scenario — Temperature-abused delivery: Frozen chicken arrives at −8°C instead of −18°C. Immediate Correction: Reject the delivery and document.
  • Scenario — Undercooking: A probe test shows chicken breast cooked to 65°C instead of 75°C. Immediate Correction: Continue cooking immediately until 75°C is reached.
  • Scenario — Cooling failure: Food is found in a large pot after 4 hours still at 25°C, placing it outside any defensible cooling limit. Corrective Action: Dispose. Under Article 14 of Regulation (EC) 178/2002, food shall not be placed on the market if it is unsafe. Do not attempt to reheat and serve — the risk of heat-stable toxin from C. perfringens spores cannot be eliminated by subsequent cooking.

Part 5: Verification — Proving Biological Control Works

UK and EU law (specifically Regulation (EC) 2073/2005) mandates microbiological verification. Monitoring records alone are not sufficient; you must demonstrate that controls are actually working.

  • Environmental Swabbing: In high-care areas (sandwich assembly, cooked meat slicing), regular swabs for Listeria spp. are expected. A single positive drain swab is a warning. Two consecutive positives require a deep clean and HACCP plan review.
  • Product Testing: If you produce ready-to-eat food, you must operate a sampling plan testing for Listeria monocytogenes (<100 cfu/g in product throughout shelf life) and Salmonella (absence in 25g).
  • Trend Analysis: Collate swab and product test results over time. Increasing positive rates signal a systemic control failure that cannot be addressed by a single corrective action.
Key Principle: A robust HACCP plan differentiates between spore-formers (requiring time/temperature cooling controls) and infective bacteria (requiring cross-contamination controls). By mapping specific hazards like Listeria and C. perfringens to specific, equipment-appropriate critical limits, a business builds a genuine defence against the invisible threat of foodborne illness.

Related reading

Keep building the same cluster

Continue into related HACCP, audit, and operational compliance topics instead of dropping back to the archive.

The Invisible Threat: Biological Hazards in HACCP — Examples, Vectors, and Critical Controls | PinkPepper