Compliance

Closing the Gap: A Practical Guide to Correcting HACCP Non-Conformities in the UK and EU

2025-12-12

Finding a non-conformity in your HACCP system is stressful. Failing to correct it properly is what triggers escalation. This guide covers the four-step corrective action process, root cause analysis, grading by severity, and the verification evidence auditors actually require.

Closing the Gap: A Practical Guide to Correcting HACCP Non-Conformities in the UK and EU

Finding a non-conformity (NC) in your HACCP system—whether flagged by an internal audit, a BRCGS surveillance visit, or an Environmental Health Officer—is a stressful moment. However, in the eyes of UK and EU regulators, the presence of a non-conformity is less damaging than the failure to correct it.

The difference between a "Minor" observation that closes quietly and a "Major" that escalates to enforcement lies entirely in your Corrective Action process. This article outlines the definitive, compliant methodology for correcting HACCP non-conformities under Regulation (EC) No 852/2004 and UK Food Safety legislation.

Step 1: Immediate Correction vs. Root Cause Analysis

The most common mistake businesses make is confusing Correction (the band-aid) with Corrective Action (the cure).

  • Correction (Immediate Action): This is the stop-gap. Scenario: The blast chiller log shows the temperature was 10°C instead of the critical limit of <4°C. Correction: Move the product to a working fridge. Re-chill safely if within time limits, or quarantine and dispose.
  • Corrective Action (Long-Term Fix): This is what the EHO actually wants to see in your next audit. It answers Why? — Why did the chiller fail? (Door seal broken? Staff left door open? Compressor fault?) Why was the deviation not caught sooner? (Monitoring every 4 hours? Records not reviewed until next day?)

Step 2: The Formal HACCP Correction Process

To satisfy UK Local Authority and EU Food Safety Authority expectations, every non-conformity must be documented using the following four-step structure. A note on a whiteboard is not sufficient.

Step A: Identification and Immediate Quarantine

  • Action: Segregate affected product or batch immediately.
  • Documentation: Log in the Corrective Action Log or Non-Conformance Register. Include the date, time, product batch code, and specific CCP affected.
  • UK/EU Specific Note: Under Regulation (EC) No 178/2002 (Traceability), you must be able to identify "one step forward, one step back." If product has already been dispatched, you are now in Recall territory, not just Correction.

Step B: Root Cause Analysis — The "5 Whys"

An auditor will reject corrective actions that state: "Root Cause: Staff error. Action: Retrained staff." You must dig deeper.

Bad RCA: "Chef forgot to fill in the cooking temperature log."

Good RCA (Using 5 Whys):

  1. Why was it blank? The probe was broken.
  2. Why was it broken? It was dropped last week.
  3. Why wasn't it replaced? We didn't have a spare.
  4. Why no spare? It's not on the weekly maintenance check.
  5. Root Cause: Inadequate equipment maintenance and spares holding procedure.

Action: Update the Prerequisite Program (PRP) for Maintenance and Calibration.

Step C: The Corrective Action Plan

This must be SMART — Specific, Measurable, Achievable, Relevant, Time-bound.

  • Non-Conformity: Allergen swab tests positive for almond protein on a "Nut-Free" production line.
  • Correction: Line stopped. Deep clean completed. Three successful swabs taken before restart.
  • Corrective Action:
    • Action: Review and amend Changeover Cleaning Procedure (CCP for Allergens).
    • Responsibility: Hygiene Manager.
    • Deadline: End of week.
    • Verification: Increased swab frequency to daily for the next two weeks.

Step D: Verification of Effectiveness

This is the step required by Codex Alimentarius Principle 6 that most businesses skip. You must prove the fix worked.

  • Bad Verification: "All staff trained." (This is an action, not proof.)
  • Good Verification: "Post-training competency quiz scores 100%. Audit of next five production batches shows zero temperature deviations and 100% record completion."

A senior manager (HACCP Team Leader) must sign the form to close the NC.

Step 3: Handling Different Grades of Non-Conformity

Type of Finding Regulatory Expectation (UK/EU) Correction Deadline
Minor NC Isolated lapse in record keeping (e.g., missing signature) Fix immediately. Trend analysis over 3 months.
Major NC Systemic failure (e.g., no allergen matrix; HACCP plan not reviewed for 3 years) 28 days typically given via Improvement Notice. Root cause evidence required.
Critical NC Imminent health risk (e.g., sewage leak in prep area; failure of cook step validation) Immediate stop. Voluntary closure or Hygiene Emergency Prohibition Notice.

Step 4: Special Considerations for BRCGS, IFS, and UK Retail Standards

If you hold BRCGS, IFS, or SALSA certification, correcting a HACCP NC requires an extra layer of documented evidence.

  • The BRCGS "28-Day Rule": For Major non-conformities raised during a BRCGS audit, you have 28 calendar days to upload Objective Evidence to the portal.
  • Evidence Must Include:
    • Photos of the fixed issue (e.g., new temperature probe mounted on wall).
    • Scanned copies of updated HACCP documents with version control dates.
    • A Statement of Verification showing that the root cause analysis was robust. Without this, the certificate is suspended.

Step 5: Common Pitfalls That Turn Corrections Into Enforcement Actions

  • The Pencil Whip: Correcting the record before the inspector sees it, but leaving the original false record in the file. Result: Fraud investigation. This is a criminal offence under UK Food Law (Section 15, Food Safety Act).
  • Fixing the Wrong Document: Updating the HACCP Plan but forgetting to update the Work Instruction on the factory floor. The staff member continues the old, non-compliant method. Result: Repeat Major NC.
  • Training as the Only Fix: "Retrained the staff" is rarely accepted as a standalone corrective action unless it is backed by a change in process or equipment (e.g., visual aids, timers, alarms). Regulators view this as blaming the worker for a system problem.
Audit Tip: In the UK and EU, the regulator's mantra is "Trust, but Verify." They do not expect perfection. They do expect a demonstrable, auditable system for finding errors and fixing them permanently.

The Audit Starts After You Find the Problem

A well-handled non-conformity—one with a clear root cause, a closed loop, and verified effectiveness—actually strengthens your HACCP system. It proves that your food safety culture is proactive, not reactive.

The goal is not a clean audit report with no findings. The goal is a clean process with no risk.

Related reading

Keep building the same cluster

Continue into related HACCP, audit, and operational compliance topics instead of dropping back to the archive.

Closing the Gap: A Practical Guide to Correcting HACCP Non-Conformities in the UK and EU | PinkPepper