Food hygiene is not a set of rules about being clean. It is a legal duty to produce food that is safe to eat, and to be able to prove you took reasonable care. That second half is what catches businesses out. Plenty of spotless kitchens fail inspections, because “we always do it properly” is not evidence and an environmental health officer cannot inspect a habit.
This guide sets out what UK food hygiene law actually requires, what an inspection looks at, and where the duties come from — with links to the detail on each topic.
The legal framework, in four pieces
UK food hygiene law is often described as complicated. It rests on four things:
- The Food Safety Act 1990 — the primary Act. Makes it an offence to sell food that is unsafe, or not of the nature, substance or quality demanded.
- Regulation (EC) No 852/2004 — the hygiene regulation, retained in UK law after Brexit. Sets the operational requirements: premises, equipment, personal hygiene, training, and HACCP.
- The Food Safety and Hygiene (England) Regulations 2013 — enforces the above in England and adds the temperature control rules. Scotland, Wales and Northern Ireland have their own equivalent regulations.
- Food Information Regulations 2014, as amended — allergen information, including the PPDS labelling rules known as Natasha’s Law.
Note the devolved picture: the core duties are consistent UK-wide, but specific numerical requirements and the rating schemes differ between England, Scotland, Wales and Northern Ireland. This guide is written primarily for England and flags the differences where they matter.
Registration — the step people skip
If you run a food business, you must register with your local authority at least 28 days before you start trading. Registration is free, and it cannot be refused. It applies far more widely than people expect — home bakers selling to the public, market stalls, mobile catering, childminders providing meals, and online food businesses all need to register.
Trading without registering is an offence, and it is the first thing an officer checks.
HACCP — required, but proportionate
Article 5 of Regulation 852/2004 requires every food business to put in place, implement and maintain permanent procedures based on HACCP principles — Hazard Analysis and Critical Control Point.
This is a genuine legal requirement, not best practice. But it is meant to be proportionate: a sandwich shop does not need the documentation a meat processor needs. For most small businesses the FSA’s Safer Food, Better Business pack is a recognised way of satisfying it without building a system from scratch.
Full detail: HACCP explained in plain English — the seven principles, why Article 5 makes it mandatory, and the difference between a critical control point and a prerequisite programme.
The 4 Cs — where most food poisoning actually starts
The FSA groups the practical controls into four headings, because the overwhelming majority of foodborne illness traces back to one of them:
- Cleaning — two-stage cleaning, correct contact times, and the difference between visibly clean and disinfected
- Cooking — reaching a core temperature that destroys pathogens, and checking rather than assuming
- Chilling — keeping food out of the range where bacteria multiply fastest
- Cross-contamination — separating raw and ready-to-eat, in storage, preparation, equipment and hands
Full detail: The 4 Cs of food hygiene.
Temperature control
These are the numbers an officer will ask you to demonstrate, in England:
| Control | Requirement |
|---|---|
| Chilled storage | 8 °C or below (industry commonly works to 5 °C for margin) |
| Hot holding | 63 °C or above |
| Cooking | 70 °C for 2 minutes core, or an equivalent combination |
| Cooling | FSA guidance: to chilled temperature within 90 minutes |
| Hot food on display | Below 63 °C for a maximum of 2 hours, once |
| Chilled food on display | Above 8 °C for a maximum of 4 hours, once |
Scotland’s regulations are structured differently and do not mirror the 8 °C figure in the same way — check the Food Hygiene (Scotland) Regulations if you operate there.
Full detail: Food temperature control: the UK rules explained, including probe calibration and the records to keep.
Personal hygiene
Annex II, Chapter VIII of Regulation 852/2004 requires food handlers to maintain a high degree of personal cleanliness and to wear suitable, clean protective clothing.
The single most consequential rule is the exclusion rule: anyone suffering from — or carrying — a disease likely to be transmitted through food must not handle food. In practice this means 48 hours symptom-free after vomiting or diarrhoea before returning to food handling. Businesses that let staff return early are taking a serious risk, and it is one of the failures that turns into an outbreak.
Full detail: Personal hygiene rules for food handlers.
Allergens
There are 14 regulated allergens in UK law. Requirements differ by how the food is sold:
- Prepacked for direct sale (PPDS) — since October 2021 must carry a full ingredients list with allergens emphasised. This is Natasha’s Law.
- Loose or made-to-order food — allergen information must be available, and how it is available must be signposted.
- Prepacked food — standard labelling rules apply.
Cooking does not destroy allergens. Neither does dilution. Allergen management is a separation-and-communication problem, not a heat problem.
Full detail: Natasha’s Law and allergen labelling explained.
Training — what is actually required
Annex II, Chapter XII requires food handlers to be supervised, instructed and/or trained in food hygiene matters commensurate with their work activity. No level is named in law, and no certificate is named.
The industry convention that has grown up around this:
- Level 1 — low-risk roles, pre-wrapped food, front-of-house without handling open food
- Level 2 — anyone handling open food. The default for most food handlers.
- Level 3 — supervisors and managers, and whoever owns the food safety management system
Full detail: Level 1 vs Level 2 vs Level 3 · Level 2 food hygiene certificate: who needs it · What a food hygiene certificate is and how to get one · Do I legally need one?
Food hygiene ratings
The Food Hygiene Rating Scheme (FHRS) covers England, Wales and Northern Ireland and scores businesses 0 to 5. Scotland runs a separate Food Hygiene Information Scheme with a Pass / Improvement Required outcome.
Three things are assessed: hygienic food handling, the condition of the structure, and confidence in management. The third is where most ratings are lost, and it is the one most directly improved by having documented procedures and trained staff.
Display of the sticker is mandatory in Wales and Northern Ireland and voluntary in England.
Full detail: Food hygiene ratings explained.
Records — the part that turns practice into evidence
A well-run kitchen with no records looks identical, on paper, to a badly-run one. Keep:
- Fridge and freezer temperature checks
- Cooking and hot-holding temperature checks for high-risk items
- Cleaning schedules, signed off
- Delivery checks — temperature and condition on arrival
- Staff training records: who, what, when, at what level
- Supplier details and traceability, so you can identify what came from where
- Fitness-to-work declarations and any exclusions
- Corrective actions — what went wrong, and what you did about it
Corrective action records are counter-intuitively valuable. A record showing you found a fridge at 11 °C, discarded the stock and called an engineer is stronger evidence of a working system than a month of unbroken green ticks.
What enforcement actually looks like
Officers escalate proportionately:
- Verbal or written advice — most visits end here
- Hygiene improvement notice — specifies what must change and by when. An offence not to comply.
- Voluntary closure — agreed with the business
- Hygiene emergency prohibition notice — immediate closure where there is imminent risk to health, confirmed by a court within three days
- Prosecution — for serious or persistent breaches. Fines are unlimited in the Crown Court, and prison sentences are available for the most serious cases.
Directors and managers can be personally liable where an offence is committed with their consent or connivance, or through their neglect.
Who the rules apply to — wider than most people assume
“Food business” in law is broad. It captures any undertaking carrying out any activity related to the processing, preparation, storage, distribution or sale of food — whether or not it makes a profit, and whether or not it operates from commercial premises.
In practice this pulls in a lot of operations that do not think of themselves as food businesses:
- Home bakers and home caterers selling to the public, including through social media
- Market stalls, street food and mobile catering
- Childminders preparing meals for the children they look after
- Care homes and supported living providing meals to residents
- Schools, nurseries and after-school clubs serving food
- Village halls and community groups where food provision is organised and regular
- Online-only food businesses and dark kitchens
- Offices and workplaces that prepare and serve food beyond simple staff facilities
One-off charity or community events are generally treated more lightly, but “regular and organised” activity brings you in scope. If you are unsure, your local authority’s food team will tell you — asking costs nothing and is a great deal cheaper than being found trading unregistered.
Higher-risk settings need more, not the same
The law’s phrase is “commensurate” — proportionate to what you actually do and who you serve. Some settings carry more risk and therefore more expectation:
- Care homes and hospitals — residents may be elderly, immunosuppressed or on modified-texture diets. The consequences of an infection are far more severe, so controls and record-keeping are scrutinised harder. See our food safety in care course.
- Nurseries and schools — young children are more vulnerable, and allergen management around a fixed group of known children carries specific expectations.
- Food manufacturing — scale multiplies the consequence of a single failure, and traceability requirements are heavier.
- Vulnerable-group catering generally — pregnancy, immunosuppression and age all raise the stakes on listeria and similar pathogens.
Why businesses actually fail inspections
Failures cluster in a small number of recurring areas:
- No working food safety management system. Either absent, or a pack bought once and never filled in. This is the single most common reason for a low confidence-in-management score.
- Records with gaps — or backfilled in one sitting. Officers notice a month of identical entries in the same pen. A genuine gap honestly explained is better than a fabricated run.
- No training evidence. Staff may well be competent, but competence you cannot evidence does not count in an inspection.
- Cross-contamination risk designed into the layout. Raw and ready-to-eat sharing surfaces, storage or sequence, with no separation in time or space.
- Handwashing facilities that are not usable. A basin blocked by boxes, no soap, no hot water, or nothing to dry hands with.
- Structural issues left to recur. The damaged seal, the gap under the door, the extractor. These reappear on every report until they are actually fixed.
- Allergen information that does not match the menu. Especially after a recipe or supplier change that never reached the matrix.
Note how many of these are documentation and process rather than dirt. A visibly clean kitchen with no system is a common and avoidable failure.
If you are starting a food business
A workable order:
- Register with the local authority — at least 28 days before opening, free
- Put a food safety management system in place — Safer Food, Better Business for most small businesses
- Train everyone who will handle food, pitched to what they actually do
- Set up allergen information before the first sale, not after
- Start the records from day one — the first inspection can come early
- Do a dry run against the three FHRS assessment areas before the officer does it for you
Further reading
- FSA — Food hygiene for your business
- FSA — Safer Food, Better Business
- Regulation (EC) No 852/2004
- Food Safety Act 1990
- FSA — Food hygiene ratings lookup
Food hygiene training
Courses matched to the setting you work in: Catering Level 2 · Retail Level 2 · Manufacturing Level 2 · Care settings · Level 1
Also: Food Allergen Awareness · HACCP for Catering Level 2 · Improving Your Food Hygiene Rating
£9 per course. CPD accredited, 100 % online, verifiable e-certificate on completion. Pay for 2, get 3 — any 3 courses for £18.
Please note: these are CPD-accredited courses and general information, not legal advice. They are not Ofqual-regulated qualifications and do not carry RQF credit. They are designed to help food businesses meet the training duty in Regulation (EC) No 852/2004. Where an employer, local authority or contract specifically requires an Ofqual-regulated qualification, that should be obtained from an Ofqual-recognised awarding organisation.