Food safety management

Food Safety Management System: The Law, Simplified

Every UK food business needs one. Here's what it means, how HACCP and SFBB relate, and why digital records make compliance automatic.

The legal requirement

What is a food safety management system?

A food safety management system (FSMS) is the set of procedures, records, and checks that prove your business handles food safely. It is a legal requirement under EU Regulation 852/2004, retained in UK law. Every food business in the UK must have one — from a corner cafe to a 200-cover restaurant.

The system covers four things: (1) identifying what could go wrong with food safety in your business, (2) putting controls in place to prevent those things from happening, (3) keeping records to prove the controls are working, and (4) reviewing the system regularly to make sure it still works.

Your EHO does not inspect your food directly. They inspect your system — because a working system means safe food. A broken system means unsafe food, even if everything looks clean on the day of the visit.

HACCP vs SFBB

Do you need HACCP or SFBB?

This is the most common point of confusion. HACCP (Hazard Analysis Critical Control Points) is the international standard for food safety management. It requires you to identify every hazard in your process, determine critical control points, set limits, monitor them, and keep records for every step. It's thorough — and it's designed for food manufacturers and large-scale operations.

SFBB (Safer Food Better Business) is the FSA's simplified version of HACCP, designed specifically for small independent food businesses. It covers the same principles but in a practical, checklist-based format. If you run a restaurant, cafe, takeaway, pub, or care home, SFBB is what your EHO expects to see.

The distinction matters because trying to implement full HACCP in a small kitchen is unnecessary and impractical. Your EHO is not looking for a 50-page HACCP plan — they're looking for completed daily records that prove your system is working. SFBB gives you exactly that, without the complexity.

For a deeper comparison, see our guide: SFBB vs HACCP — which one do you need?

The four pillars

What your food safety system must include

Whether you use HACCP or SFBB, your system must cover these four areas. Missing any one of them will cost you points on inspection:

Hazard identification

What could go wrong in your kitchen? Biological hazards (bacteria, viruses), chemical hazards (cleaning products, allergens), and physical hazards (glass, metal, plastic). You must show you've identified these and put controls in place.

Monitoring records

Daily temperature checks (fridge, freezer, cooking, hot-holding), cleaning schedule sign-offs, and opening/closing checks. These are your proof that controls are working. Without records, there is no proof. <a href="/sfbb-temperature-records" style="color:var(--brand)">See our temperature records guide</a>.

Corrective actions

What happens when something goes wrong? Fridge at 9°C instead of 5°C? Food not reaching 75°C? You need documented corrective actions, not just a note that something was wrong. The EHO wants to see what you did about it.

Regular review

The mandatory 4-weekly review (SFBB) or scheduled HACCP review. This checks that your system is still working. Are temperatures consistently in range? Are cleaning tasks being signed off? Are staff following procedures? <a href="/sfbb-4-weekly-review" style="color:var(--brand)">How to run a proper 4-weekly review</a>.

Digital systems

Why digital is replacing paper

The FSA explicitly allows electronic SFBB records. More businesses are switching to digital because paper systems have fundamental weaknesses that digital solves:

Paper gets lost. Pages tear out, get covered in grease, or end up in the bin. Digital records are stored in the cloud, searchable by date, and never lost. Paper has no memory. You can't set a reminder on a ring binder. A digital system pings you three days before your 4-weekly review is due. Paper can't auto-flag. A paper temperature log doesn't tell you that 9°C is out of range. A digital system highlights it immediately and prompts for corrective action.

Paper can't export. When the EHO arrives, you need to hand them a complete, dated set of records. With paper, that means rifling through folders and hoping nothing is missing. With digital, it's one tap.

The law hasn't changed — your obligations are the same. What's changed is that digital tools now exist that make compliance easier than paper ever could. Start your free trial and see the difference.

Your system, digitised. Your inspection, ready.

Free 14-day trial. No card required. Replace your paper SFBB today.

Start free trial