HACCP for Small Food Businesses in South Africa: A Plain-English Start

If you run a food business in South Africa you've probably heard "HACCP" thrown around — by an environmental health officer, a buyer, a landlord, or a franchisor — often as if it's a single certificate you either have or don't. It isn't. HACCP (Hazard Analysis and Critical Control Points) is a way of thinking about food safety: a structured method for finding the points in your process where things can go wrong, and controlling them.

This guide explains what HACCP actually is, how it relates to Regulation R638 (the rules your local authority enforces), and the simplest honest way for a small kitchen to start.

HACCP is a method, not a certificate

HACCP was developed to keep astronauts' food safe and is now the basis of food-safety management worldwide. At its heart it's seven principles applied to your own process:

1. Identify the hazards. What could make someone ill or injured — germs, chemicals (cleaning products, allergens), or physical objects (bone, glass, metal)?
2. Find the critical control points (CCPs). The steps where you can prevent or remove a hazard — typically cooking, cooling, hot/cold holding and reheating.
3. Set critical limits. The measurable line at each CCP — for example a safe core cooking temperature, or a maximum fridge temperature.
4. Monitor the CCPs. Check and record that each point stays within its limit — temperature logs, visual checks.
5. Decide the corrective action. What you do when a limit is breached — re-cook, discard, adjust the fridge and re-check.
6. Verify it works. Periodically confirm the whole system is actually keeping food safe — review logs, calibrate the probe thermometer, spot-check.
7. Keep records. Write it down. If it isn't recorded, an inspector treats it as not done.

That's the whole framework. Everything else is applying it to your menu.

How HACCP fits with Regulation R638

R638 is the South African regulation your local environmental health practitioner enforces — it sets the outcome requirements (premises standards, temperature control, hygiene, the certificate of acceptability). HACCP is the management method that helps you meet those requirements consistently and prove it.

You can think of it this way: R638 tells you what "safe" looks like; HACCP is how you organise your kitchen to hit it every day and show your working. Our R638 guide covers the regulation itself; this guide is about the management method.

For a small operation the two overlap heavily. The temperature logs R638 inspectors ask to see are HACCP monitoring records. The point is that a little structure up front saves a painful inspection later.

The simplest honest way to start

You don't need a consultant or a folder of jargon to begin. Start with your actual process, in order, from delivery to service:

1. Write your process flow. For one representative dish, list the steps: delivery → storage → prep → cooking → hot holding or cooling → service. Do this per menu category if they differ.
2. Mark the danger points. Where in that flow could germs grow or survive? Almost always it's the temperature-controlled steps: cold storage, cooking, cooling, reheating, hot holding.
3. Put a number on each. Assign the safe limit you already have to meet — the fridge maximum, the safe core cooking temperature, the hot-holding minimum. (The specific figures come from R638 and your equipment guides; we've linked those below.)
4. Log it. A clipboard per fridge and a cook-temperature log is enough to start. What matters is that it's filled in, every day, and initialled.
5. Decide the "if not" rule now. Before it happens, agree what staff do when a fridge reads too warm or a chicken doesn't reach temperature. Written down, one line each.

That is a working HACCP starter. It won't satisfy a large buyer's full audit on its own, but it's honest, it's documented, and it's the foundation everything else builds on.

Where small businesses over-complicate it

• Buying a generic HACCP folder that doesn't match their menu and never gets filled in. Inspectors spot an unused template instantly.
• Logging temperatures that are never checked. A perfect log filled in once a week in the same pen is worse than an honest patchy one — it shows the records are fabricated.
• Treating it as paperwork instead of practice. The point is the control, not the form. The form is just the proof.

Frequently asked questions

Is HACCP legally required for my small food business in South Africa?

R638 sets the enforceable food-safety requirements for food premises, and your local authority applies it. HACCP itself is the recognised method for managing food safety systematically, and larger buyers and schemes often ask for it by name. Whether it's formally demanded of you depends on your premises and your customers — your environmental health practitioner is the authority for your situation. Either way, the seven principles are simply good practice.

Do I need a HACCP consultant or certificate?

Not to start. A small kitchen can document its own hazards, limits and logs using the steps above. Consultants add value when you're supplying a buyer who audits formally, or when your process is complex. Be wary of anyone selling a "HACCP certificate" as a wall document — the value is the working system, not the paper.

What's the single most important record to keep?

Temperature records — fridge/freezer logs and cook temperatures — because temperature abuse is the most common cause of food-borne illness and the first thing an inspector asks for. If you keep only one log, keep that one, and keep it honestly.

How does this relate to my fridge temperature guide and R638?

They're the two halves. The R638 guide explains the legal requirements; the fridge guide explains the temperature limits and logging in detail; this guide explains the management method that ties them together into a system you can run and show.