EU food law is mandatory, not optional. We get businesses compliant with the General Food Law, the Hygiene Package, and the legally binding food safety culture requirements most businesses do not know exist.
EU food law is the body of European Union regulations that govern food safety, hygiene, labelling and traceability for any food business operating in or supplying the EU market. Unlike certification standards such as ISO 22000 or BRCGS, compliance with EU food law is not optional.
The foundation is Regulation (EC) No 178/2002, the General Food Law, which establishes the European Food Safety Authority and lays down the core principles: food placed on the market must be safe, businesses must be able to trace food one step back and one step forward in the supply chain, and unsafe food must be immediately withdrawn with the relevant authorities informed.
This is supplemented by the Hygiene Package, principally Regulation 852/2004 on the hygiene of foodstuffs, Regulation 853/2004 on specific rules for food of animal origin, and Regulation 2073/2005 on microbiological criteria. Regulation 1169/2011 governs food labelling, including the mandatory declaration of the 14 major allergens.
The most significant recent development is Regulation (EU) 2021/382, which amended Regulation 852/2004 to introduce binding requirements for food safety culture, strengthened allergen cross-contamination controls, and provisions for food redistribution. Most food businesses are unaware that food safety culture is now enforceable hygiene law, assessed during routine inspections through observation and staff interviews as well as document review.
EU food law is built up in layers. Each regulation builds on the General Food Law and addresses a specific area of food safety.
The General Food Law. Establishes the European Food Safety Authority, the requirement for food to be safe, the principle of traceability, and the obligation to withdraw unsafe food and notify authorities.
General hygiene of foodstuffs. Requires HACCP-based procedures for all food businesses except primary production, and sets general hygiene requirements for premises, equipment and personnel.
Specific hygiene rules for food of animal origin, including meat, fish, dairy and egg products. Sets additional requirements for approved establishments handling these product categories.
Microbiological criteria for foodstuffs. Sets food safety criteria and process hygiene criteria for specific pathogens and indicator organisms across product categories.
Provision of food information to consumers. Mandatory nutrition declaration, ingredient lists, and the declaration of the 14 major allergens, including for non-prepacked food.
Amends 852/2004 to add binding food safety culture requirements, allergen cross-contamination controls for equipment and transport, and provisions for food redistribution and donation.
Since March 2021, Regulation 2021/382 has made food safety culture a binding requirement under Annex II Chapter XIa of Regulation 852/2004. It is enforceable hygiene law, assessed by inspectors through observation and interview, not by reading a policy document.
Food safety information must flow effectively to and from all staff, reaching every level of the operation from the production floor to senior management.
Senior management must demonstrate active commitment to managing food safety, evidenced through resourcing, presence and decision-making.
All staff must understand the food safety hazards relevant to their role and the part they play in controlling them.
The working environment must support the prevention of food safety risks, including how problems are reported and acted upon.
The food safety culture system must be reviewed and adapted continuously to remain effective as the business changes.
Enforcement authorities are explicit: a documented food safety culture policy is not, by itself, evidence of compliance. Inspectors assess culture through staff interviews, observation of behaviour, and review of leading indicators such as near-miss reporting. A business with excellent paperwork can still receive enforcement action if its culture, as observed during an inspection, does not match what is written down. This applies in the UK too, where Regulation 2021/382 was retained as assimilated law and is assessed by the Food Standards Agency under the Food Law Code of Practice.
Unlike certification standards, EU food law applies to every food business operating in or supplying the EU market, regardless of size or sector.
Restaurants, cafes, food manufacturers, retailers, distributors and primary producers operating in any EU member state must comply with the General Food Law and Hygiene Package, including the food safety culture requirements introduced in 2021.
UK food businesses remain subject to equivalent requirements retained as assimilated law post-Brexit, enforced by the Food Standards Agency, including the food safety culture requirements of Regulation 2021/382.
Food businesses outside the EU exporting products to EU member states must meet equivalent hygiene and safety standards as a condition of market access, even where the business itself is not directly regulated by EU authorities.
Meat, fish, dairy and egg processors face the additional specific requirements of Regulation 853/2004, including approved establishment status and additional hygiene controls.
Any business handling, transporting or storing the 14 major allergens must meet the cross-contamination controls for equipment, vehicles and containers introduced by Regulation 2021/382.
Charities, food banks and businesses donating surplus food benefit from the clarified provisions in Regulation 2021/382 covering hygiene requirements for food redistribution, including conditions for freezing meat for donation.
We help businesses meet the legal baseline of EU food law, with particular focus on the food safety culture requirements most businesses are not yet addressing.
A review of your food business against the General Food Law, the Hygiene Package, allergen labelling and management requirements, and the food safety culture requirements of Regulation 2021/382. Produces a written action plan covering the legal baseline.
Implementation of the five mandatory pillars under Annex II Chapter XIa: communication, leadership commitment, staff awareness, supportive environment and continuous review. Includes a framework for generating the behavioural evidence inspectors look for.
Compliance with allergen labelling requirements under Regulation 1169/2011 and the cross-contamination controls for equipment, vehicles and containers introduced by Regulation 2021/382, covering all 14 major allergens.
Development of traceability systems meeting the one-step-back, one-step-forward requirement of Regulation 178/2002, and product withdrawal and recall procedures including authority notification protocols.
Development of HACCP-based procedures required under Regulation 852/2004, scaled appropriately to the size and nature of the business, from simplified approaches for small operators to full HACCP plans for manufacturers.
Support with the additional requirements of Regulation 853/2004 for businesses handling meat, fish, dairy and egg products, including approved establishment requirements.
Review of testing programmes against the food safety and process hygiene criteria of Regulation 2073/2005 for relevant product categories.
For businesses trading between the UK and EU, we identify where assimilated UK law and EU law currently align and where divergence is emerging, helping you maintain compliance in both markets.
Preparation for routine food safety inspections, including mock inspections that specifically test food safety culture through observation and staff interview, replicating how enforcement officers now assess compliance.
Our food hygiene training courses at all levels build the staff awareness required by Regulation 2021/382. We also offer allergen awareness training and food safety culture training for management teams.
Achieving and demonstrating compliance follows a defined sequence. Our part of the process typically takes a few weeks.
| Stage | What happens | Our role | Duration |
|---|---|---|---|
| 1. Gap assessment | Your business is reviewed against the General Food Law, Hygiene Package, allergen requirements and food safety culture obligations under Regulation 2021/382. | We conduct the assessment and deliver a written action plan. | 2 to 3 days |
| 2. HACCP and hygiene documentation | HACCP-based procedures and supporting hygiene documentation are reviewed, developed or updated as required by Regulation 852/2004. | We write or review documentation in collaboration with your team. | 1 to 2 weeks |
| 3. Allergen and labelling review | Allergen labelling is reviewed against Regulation 1169/2011 and cross-contamination controls against Regulation 2021/382. | We review labels, recipes and handling procedures and identify any gaps. | 3 to 5 days |
| 4. Food safety culture framework | A framework addressing all five pillars of Regulation 2021/382 is developed, including mechanisms for generating observable evidence. | We design the culture framework and supporting tools, such as briefing formats and reporting mechanisms. | 1 to 2 weeks |
| 5. Traceability and recall | Traceability records and recall procedures are reviewed against the one-step-back, one-step-forward requirement. | We review and document traceability and recall procedures. | 2 to 3 days |
| 6. Implementation | Staff are briefed and the system runs in practice, generating the records and behavioural evidence inspectors will look for. | We provide implementation support and review early evidence. | 2 to 4 weeks |
| 7. Mock inspection | A mock inspection replicates how an enforcement officer would assess compliance, including observation and staff interview for food safety culture. | We conduct the mock inspection and issue a written findings report. | 2 to 3 days |
| 8. Ongoing compliance | Regular review as regulations evolve, particularly as UK assimilated law and EU law may diverge over time. | We provide a retainer covering regulatory updates and periodic review. | Ongoing |
Most businesses have never been assessed against the food safety culture requirements introduced in 2021. Our gap assessment covers the full legal baseline, including this often-overlooked area.
Our EU food law gap assessment reviews your business against Regulation 178/2002, the Hygiene Package, allergen labelling and management requirements, and the food safety culture requirements of Regulation 2021/382. Because food safety culture is assessed through observation and interview and not documentation, this part of the assessment includes direct engagement with staff at all levels.
The assessment is designed to mirror how a regulatory inspector would assess your business, so the findings reflect what you would face during a routine inspection, including the elements a desk-based documentation review alone would miss.
We review HACCP documentation, allergen labelling, traceability records and any existing food safety culture policy against the relevant regulations.
We observe operations and staff behaviour to assess food safety culture, allergen handling and hygiene practice as an inspector would.
We speak with staff at different levels to assess awareness, communication and the supportive environment required under Regulation 2021/382.
We produce a written gap assessment with a prioritised action plan covering all areas of the legal baseline.
If your business is also pursuing certification such as ISO 22000, BRCGS or FSSC 22000, this legal baseline assessment aligns directly with the regulatory compliance elements of those standards.
The same gaps appear across food businesses of every size, particularly around the requirements introduced since 2021.
Most food businesses are unaware that Regulation 2021/382 made food safety culture binding hygiene law in 2021. Many have no documentation addressing it at all, and those that do often have a policy that has never been operationalised or assessed against the five required pillars.
Where a food safety culture policy does exist, it is often a document that staff have never seen or discussed. Inspectors assess culture through observation and interview, and a policy with no behavioural evidence behind it does not meet the legal requirement.
The 2021 amendment added specific requirements for equipment, vehicles and containers used to handle allergens. Many businesses have allergen labelling in order but have not reviewed or documented controls for shared equipment and transport.
Businesses can often trace ingredients back to suppliers but struggle to demonstrate where products went after leaving the premises. Both directions are required under Regulation 178/2002.
Small businesses sometimes adopt overly complex HACCP documentation copied from larger operations, while larger businesses sometimes retain overly simplified systems from when they were smaller. Documentation must reflect the actual size and complexity of current operations.
Some UK businesses assume that EU regulations no longer apply post-Brexit. In fact, regulations such as 2021/382 were retained as assimilated law and continue to be enforced by the Food Standards Agency, including the food safety culture requirements.
EU food law is the mandatory legal baseline. Certification standards are voluntary but often commercially required. Here is how they relate.
| EU food law | HACCP | Certification standards | |
|---|---|---|---|
| Legal status | Mandatory, directly applicable | Mandatory under Regulation 852/2004 | Voluntary, often commercially required |
| Examples | Regulation 178/2002, 852/2004, 2021/382 | Hazard analysis and CCPs | ISO 22000, BRCGS, FSSC 22000, IFS Food |
| Enforced by | National competent authorities | National competent authorities, as part of EU food law | Independent certification bodies |
| Consequence of non-compliance | Enforcement action, fines, closure | Enforcement action, as part of EU food law | Loss of certification and commercial relationships |
| Our consulting | EU food law | HACCP | All certification standards |
What drives the timeline and cost of EU food law compliance work. We provide a written proposal with a fixed fee after the initial consultation.
Timeline
How long our consulting work takes
Cost factors
What drives the consulting fee
A review of an existing, broadly compliant operation with targeted updates needed, particularly around food safety culture. Our consulting work typically takes 3 to 7 days.
A small catering operation requires less work than a multi-site manufacturer or a business handling animal-origin products under Regulation 853/2004.
A new food business with no existing HACCP documentation, allergen controls or culture framework. Our consulting work typically takes 2 to 4 weeks.
Businesses handling animal-origin products or operating across multiple EU member states have additional requirements that increase the scope of work.
For businesses with otherwise compliant systems who need to address the food safety culture requirements specifically. Our consulting work typically takes 1 to 2 weeks.
A gap assessment only, a full compliance build, or an ongoing retainer each carry different fees. All scopes are defined in writing before work begins.
Businesses trading in both markets require review against both UK assimilated law and current EU law, which adds to the scope but is often combined efficiently with a shared underlying system.
EU food law compliance overlaps significantly with the regulatory elements of ISO 22000, BRCGS and other standards. Where combined, this work is scoped within the broader certification engagement.
Answers to the questions we hear most often from businesses addressing their legal compliance baseline.
EU food law refers to the body of European Union regulations governing food safety, hygiene, labelling and traceability. Its foundation is Regulation (EC) No 178/2002, the General Food Law, which establishes the core principles of food safety, traceability, and the obligation to withdraw unsafe food from the market. It is supplemented by the Hygiene Package, principally Regulations 852/2004 and 853/2004, the labelling regulation 1169/2011, and more recent amendments including Regulation 2021/382, which introduced legally binding food safety culture requirements.
Regulation (EC) No 178/2002, known as the General Food Law, lays down the general principles and requirements of EU food law. It establishes the European Food Safety Authority, requires that food placed on the market is safe, establishes the principle of traceability one step back and one step forward in the supply chain, and requires food business operators to immediately withdraw unsafe food from the market and inform the relevant authorities. It applies to all food businesses operating in the EU, regardless of size.
The EU Hygiene Package is a group of regulations supplementing the General Food Law. Regulation 852/2004 sets general hygiene requirements for all food businesses and requires HACCP-based procedures. Regulation 853/2004 sets additional specific hygiene rules for food of animal origin, such as meat, fish and dairy. Regulation 2073/2005 sets microbiological criteria for foodstuffs. Together these regulations form the legal hygiene framework that every EU food business must comply with.
Yes. Regulation (EU) 2021/382, which amended the Annexes to Regulation 852/2004, introduced a new Chapter XIa to Annex II making food safety culture a binding legal requirement, effective from March 2021. Food business operators must establish, maintain and provide evidence of an appropriate food safety culture covering five specific areas. This is enforceable hygiene law and not voluntary guidance, and enforcement authorities are expected to assess it through observation and staff interviews during inspections, going beyond a review of a written policy.
Annex II Chapter XIa of Regulation 852/2004, as amended by Regulation 2021/382, requires food business operators to address five areas: communication of food safety information to and from all staff. Leadership commitment to managing food safety. Staff awareness of food hazards and their roles in controlling them. An environment supporting the prevention of food safety risks. Continuous review and adaptation to keep the system effective. Enforcement authorities assess these through observation and interview, and a documented policy alone is not considered sufficient evidence of compliance.
Regulation 2021/382 added specific requirements to Regulation 852/2004 covering equipment, vehicles and containers used to handle, transport or store the 14 major allergens listed in Regulation 1169/2011. These items must not be used for non-allergen-containing foodstuffs unless they have been cleaned and checked for the absence of visible allergen residues. This applies at every stage of the food chain, from primary production through to processing, transport and storage, and is directly enforceable as part of general hygiene law.
EU food law that applied in the UK before Brexit was retained in domestic law as assimilated law, including Regulation 2021/382 and its food safety culture requirements. UK food businesses remain subject to equivalent food safety culture obligations enforced by the Food Standards Agency under the Food Law Code of Practice. Businesses trading between the UK and EU need to comply with both UK assimilated law and EU law as it continues to evolve, as the two frameworks may diverge over time.
An EU food law gap assessment reviews your food business against the General Food Law, the Hygiene Package, allergen labelling and management requirements, and the food safety culture requirements of Regulation 2021/382. It checks whether your HACCP-based system, traceability records, allergen controls and culture evidence meet the legal minimum, and produces a written action plan for any gaps. This is the mandatory legal baseline that applies regardless of whether a business pursues voluntary certification.
Non-compliance with EU food law can result in enforcement action by national competent authorities, ranging from improvement notices and fines to closure of the business in serious cases. Food safety culture non-compliance under Regulation 2021/382 is now assessed during routine inspections, meaning a business with otherwise good documentation can still receive enforcement action if culture is found to be inadequate during observation and staff interviews.
Yes. Gap assessments, documentation review, allergen management programme development and food safety culture framework design are all available remotely. We work with clients in any EU member state and in the UK. On-site visits are available where a physical review of operations is needed, particularly for food safety culture assessment, which relies on direct observation.
You can commission any of these on their own, with an agreed scope and a written quote, without taking on ongoing consulting. See all food safety services.
To check the whole operation against the law of each market.
Read about A regulatory compliance review →To check a label against the information law of each market.
Read about A food label compliance review →To confirm every substance is permitted in your category.
Read about An ingredient and additive review →Tell us about your business and where you operate. We will tell you exactly what EU food law requires and where you stand.