Food Safety Record Keeping: What the Law Actually Requires

The paperwork problem

Every small food producer has the same complaint: the paperwork never ends. Temperature logs, cleaning records, delivery checks, training certificates, supplier forms, HACCP reviews. It feels like you spend more time documenting food safety than actually making food.

But here's the thing most people don't realise - the law is actually less prescriptive about records than you might think. A lot of the paperwork burden comes from certification requirements (SALSA, BRCGS) and best practice guidance, not from legislation itself.

Understanding the difference helps you prioritise. Some records are legally essential. Others are practically essential for certification. And some are genuinely useful for running your business well. Let's separate them out.

What the law actually requires

UK food safety legislation (primarily the Food Safety Act 1990 and EU Regulation 852/2004, retained in UK law) requires food businesses to:

1. Implement and maintain food safety procedures based on HACCP principles - this implicitly requires some documentation, but the law doesn't specify exactly what format your records must take
2. Maintain the cold chain - you must keep food at safe temperatures, which in practice means you need to be monitoring and recording temperatures
3. Ensure traceability - you must be able to identify your suppliers and (for business-to-business sales) your customers. This requires some form of record linking incoming materials to outgoing products
4. Manage allergens - under the Food Information Regulations 2014 and Natasha's Law, you must provide accurate allergen information, which requires documented ingredient and allergen data
5. Train staff - you must ensure food handlers are trained appropriately, and be able to demonstrate this to an EHO

The legislation doesn't say "you must fill in a temperature log twice daily on a paper form with blue ink." It says you must have procedures and be able to demonstrate compliance. How you do that is up to you.

What EHOs expect to see

When an Environmental Health Officer visits, they're looking for evidence that your food safety management system is working. In practice, this means:

• Temperature records - evidence of regular monitoring. Not necessarily a specific form, but consistent, dated records showing actual temperatures.
• Cleaning evidence - either documented cleaning schedules with sign-off, or a demonstrably clean premises. In reality, records make your life much easier during an inspection.
• HACCP documentation - for simple operations (cafes, takeaways), an SFBB pack may suffice. For manufacturers, a formal HACCP plan is expected.
• Training records - certificates, completion records, or a training matrix showing who has been trained and when.

EHOs are pragmatic. They'd rather see simple records that are actually completed than elaborate systems that are half-empty. Consistency matters more than complexity.

What SALSA requires

If you're pursuing SALSA certification, the record-keeping requirements step up significantly. SALSA requires documented evidence for every part of the standard:

1. HACCP plan and associated records - the full plan, monitoring records for every CCP, corrective action records, verification records
2. Temperature monitoring records - fridge, freezer, cooking, delivery, and cooling temperatures with actual readings
3. Cleaning records - signed schedules showing what was cleaned, when, by whom, and verification of effectiveness
4. Traceability records - raw material receipts, production records linking inputs to outputs, dispatch records, and evidence of a successful mock recall
5. Allergen records - supplier specifications, allergen matrices, cross-contamination controls, and labelling verification
6. Supplier records - approved supplier list, risk assessments, certificates, specifications, and monitoring evidence
7. Training records - individual training records for every food handler, including induction, food hygiene, allergens, and HACCP awareness
8. Pest control records - contractor reports or self-monitoring inspection records
9. Maintenance records - equipment servicing, thermometer calibration certificates, and planned maintenance schedules
10. Internal audit records - evidence that you've audited your own systems at least annually
11. Complaints records - a log of customer complaints and how they were resolved
12. Management review records - evidence that senior management reviews the food safety system periodically

That's a lot. But each individual record is straightforward - the challenge is maintaining them all consistently.

The records that matter most

If you're feeling overwhelmed, focus on these first. They're the records that EHOs check first, SALSA auditors scrutinise most, and that protect you most if something goes wrong:

1. Temperature records - the single most important daily record. If you do nothing else, record your fridge, freezer, and cooking temperatures every day.
2. Cleaning records - evidence that your cleaning schedule is being followed. Critical for both EHO inspections and SALSA audits.
3. Traceability records - if you ever need to recall a product, these are the records that tell you which customers are affected. They're also the records SALSA auditors test live during your audit.
4. Training records - if an EHO asks "are your staff trained?" you need to be able to show certificates and dates, not just say "yes."
5. HACCP monitoring records - the CCP checks that prove your critical controls are working.

Get these five right and you've covered the essentials. Everything else builds on top.

Paper vs digital records

Both are legally acceptable. But they have very different practical characteristics.

Paper records:

• Familiar and require no technology
• Can be lost, damaged, water-stained, or become illegible
• Difficult to search (try finding a specific temperature reading from 3 months ago)
• Can be backdated or altered (auditors know this and look for signs)
• Take up physical storage space
• Can't be compiled into an audit pack automatically
• Need manual review to spot trends or gaps

Digital records:

• Automatically timestamped (can't be backdated)
• Always accessible from any device
• Searchable and filterable
• Can be compiled into audit packs instantly
• Easy to spot trends, gaps, and patterns
• Secure cloud storage (no risk of loss or damage)
• Take less time to complete (no writing, just tapping)

The shift from paper to digital is accelerating across the food industry. SALSA recognises digital record-keeping systems, and many auditors actively prefer them because the data is more reliable and easier to verify.

FoodSafe's digital records work on your phone. A temperature check takes under a minute - tap the record, enter the readings, hit save. The entry is timestamped, stored in the cloud, and linked to your audit pack. Your entire compliance history is accessible from anywhere, anytime.

How to set up a simple record-keeping system

Whether you use paper or digital, the principles are the same:

1. Identify what needs recording - start with the five essentials above, then add based on your certification requirements
2. Create templates - standardised forms or digital templates that capture all required fields (date, time, who, what, result, corrective action)
3. Assign responsibilities - who is responsible for each record? Make it clear.
4. Set a routine - temperature checks at 9am and 3pm. Cleaning sign-off at close. Delivery checks on arrival. Build records into the daily routine, not as an afterthought.
5. Review regularly - check records weekly for gaps, inconsistencies, or emerging trends. Don't wait until audit day to discover three months of missing data.
6. Store securely - paper records in labelled folders in a dry, accessible location. Digital records in a cloud-based system with proper backups.

How long to keep records

There's no single legal requirement, but these are the accepted standards:

• Minimum 12 months for general food safety records (temperature logs, cleaning records, training records)
• Product shelf life plus 12 months for traceability-related records
• 3 years recommended by many auditors for complete audit trail coverage
• Indefinitely for records related to food safety incidents, complaints, or recalls

SALSA expects at least 12 months of records at your audit. If your audit is in September, your records should go back to at least September of the previous year.

Common record-keeping mistakes

1. Starting records the week before an audit. Auditors aren't fooled. They want to see a consistent track record over months, not a pristine week of paperwork.
2. Recording "OK" instead of actual values. Write the number. "Fridge 1: 3.2°C" is useful. "Fridge 1: OK" tells the auditor nothing.
3. Leaving corrective action fields blank. If a temperature was out of range, what did you do? Blank corrective action fields suggest either nobody noticed or nobody cared.
4. Using one person for everything. If only one person fills in records and they're off sick for a week, you have a week of gaps. Cross-train your team.
5. Not backing up paper records. A kitchen flood, a fire, a burst pipe - and months of records are gone. Digital records avoid this entirely.

The bigger picture

Records aren't bureaucracy for the sake of it. They're evidence. Evidence that your food is safe. Evidence that your systems work. Evidence that when something went wrong, you caught it and fixed it.

For a small producer, the goal isn't to generate the most paperwork. It's to maintain the right records, consistently, with minimal friction. A system that takes 10 minutes a day and covers everything is better than one that takes an hour and still has gaps.

Food safety compliance, handled.