Food safety is not just good practice — it is the law. Everyone who handles food has legal responsibilities to keep it safe.

This module explains the key legislation, how food safety is enforced, and what happens when the law is broken.

We will cover the legal framework for food safety:

• The law: The key legislation and your legal duties as a food handler.
• Food safety management: HACCP, its seven principles and prerequisite programmes.
• Enforcement: How the law is enforced, inspections, notices and orders.
• Penalties: Prosecution, penalties and the due-diligence defence.

Food safety law exists to protect consumers from harm and to make sure the food sold to them is safe and honestly described.

As a food handler, you share responsibility for meeting these legal duties. Breaking food law can lead to prosecution, closure and serious harm to customers.

The main laws governing food safety in the UK are:

• The Food Safety Act 1990 — the overarching framework for food law in England, Wales and Scotland.
• The Food Safety and Hygiene (England) Regulations 2013 (and equivalents in Scotland, Wales and Northern Ireland).
• Regulation (EC) 852/2004 on the hygiene of foodstuffs: assimilated law in Great Britain; EU law generally applies in Northern Ireland, subject to Windsor Framework arrangements for eligible GB retail goods.
• Regulation (EC) 178/2002, the General Food Law: assimilated law in Great Britain; EU law generally applies in Northern Ireland, subject to Windsor Framework arrangements for eligible GB retail goods.

Since 1 January 2024, retained EU food law is called assimilated law in Great Britain. EU food law generally applies in Northern Ireland, subject to Windsor Framework arrangements for eligible GB retail goods.

The Food Safety Act 1990 is the cornerstone of UK food law. Under it, food businesses must not:

• Add anything to, remove anything from, or treat food in a way that makes it injurious to health.
• Sell food that is not of the nature, substance or quality that consumers expect.
• Label, advertise or present food in a way that is false or misleading.

As a food handler, the law requires you to:

• Keep yourself and your workspace clean and hygienic.
• Protect food from anything that could make it unsafe or unfit to eat.
• Follow your workplace’s food-safety management procedures.
• Report any illness, hazards or unsafe practices to your manager.

The law requires food businesses to have a food-safety management system based on HACCP (Hazard Analysis and Critical Control Points).

HACCP is a system for identifying food-safety hazards and putting controls in place to prevent them. In the UK this is often applied through ‘Safer Food, Better Business’ packs.

HACCP is built on seven core principles:

• 1. Hazard analysis: Identify the biological, chemical, physical and allergenic hazards that could occur.
• 2. Critical control points: Determine the points where a hazard must be controlled (CCPs).
• 3. Critical limits: Set safe limits for each CCP, such as a cooking temperature.
• 4. Monitoring: Establish how each CCP will be monitored and by whom.
• 5. Corrective action: Decide what action to take if a limit is not met.
• 6. Verification & 7. Records: Check the system works and keep documentation to prove it.

HACCP relies on prerequisite programmes being in place first — the everyday good-practice controls that keep food safe. These include:

• Cleaning and disinfection, and pest control.
• Personal hygiene and staff training.
• Waste management and maintenance.
• Supplier control and temperature control.

The Food Standards Agency (FSA) (and Food Standards Scotland) oversee food safety, but the law is enforced locally by Environmental Health Officers (EHOs) from your local authority.

EHOs can enter and inspect food premises at any reasonable time, take samples and photographs, and inspect records. You must cooperate with them.

After an inspection, businesses in England, Wales and Northern Ireland are given a Food Hygiene Rating from 0 (urgent improvement needed) to 5 (very good).

In Scotland, the Food Hygiene Information Scheme awards either ‘pass’ or ‘improvement required’. Ratings reflect hygiene standards, structural condition and food-safety management.

If standards are not met, an EHO can issue:

• A Hygiene Improvement Notice — requiring specific improvements within a set time.
• A Remedial Action Notice — a remedial action notice restricting the use of equipment or a process.
• A Hygiene Emergency Prohibition Notice/Order — closing all or part of a business immediately where there is an imminent risk to health.

Breaking food safety law is a criminal offence. Depending on the seriousness, penalties can include unlimited fines and, in the most serious cases, up to two years’ imprisonment.

A business can also be closed down, and individuals as well as companies can be prosecuted.

If a business is charged with a food-safety offence, it may use the due diligence defence — showing it took all reasonable precautions and exercised all due diligence to avoid committing the offence.

Good records, training and following procedures are essential evidence for this defence, which is why documentation matters.

Do you know where your workplace’s food-safety management records are kept, and your role in keeping them accurate?

Accurate records are not just paperwork — they can be the difference in a due-diligence defence.

In summary, you should remember that:

• Food safety is a legal requirement, not just good practice.
• Businesses must have a HACCP-based food-safety management system.
• The law is enforced through inspections, notices and orders.
• Penalties include fines, closure and imprisonment.
• Good records support a due-diligence defence.