How to Develop a HACCP Plan in NZ: Practical Steps and Consultant Support

Developing a HACCP plan for a New Zealand food business starts with understanding the operation, rather than filling in a ready-made list of critical control points. The plan needs to connect your ingredients and process with the significant food safety hazards, justified controls and evidence that staff can use.

This guide explains the development sequence for owners, production managers and quality teams. It is a starting framework for a site-specific study, not a finished plan, a regulatory classification decision or a set of safe processing limits.

Confirm the HACCP plan’s scope before writing

HACCP means Hazard Analysis and Critical Control Point. MPI’s HACCP overview places it within risk-based food safety systems and explains that good operating practice is the foundation. The exact documentation and assessment route depend on the requirements applying to the business.

First identify the plan, programme, customer requirement or certification scheme you are working to. If you already use an applicable plan or template, check what it supplies and what still needs business-specific work before commissioning duplicate documentation. A customer request for “HACCP” also needs clarification: ask what standard, scope and evidence the customer expects.

We recommend recording the products, site, process boundaries, outsourced stages and intended purpose of the study in a short scope statement. Also record what is excluded and why. This makes it easier to assess later whether a new ingredient, line or sales arrangement changes the study.

Prepare the information and hygiene foundation

The current Codex General Principles of Food Hygiene, CXC 1-1969 sets out seven principles supported by preliminary steps. Its 2023 publication incorporates the 2022 revision. Use the current applicable requirements alongside this international guidance; Codex is not itself a substitute for New Zealand law.

Before the detailed study, check the prerequisite programmes that make hygienic production possible. Depending on the operation, these may address cleaning, staff hygiene, maintenance, pest management, supplier controls and allergen management. An elaborate HACCP document cannot compensate for basic procedures that are missing or not followed.

• Bring the right knowledge together. Include people who understand the actual production, equipment, cleaning and food safety controls. Identify who owns the study and obtain external expertise for gaps in the team’s competence.
• Describe the product. Assemble relevant ingredient and allergen information, product characteristics, processing, packaging, shelf life, storage and distribution information. Identify information that is still unverified.
• Describe intended use and users. Consider how the food will be prepared or eaten, who it is intended for, and known ways it may be used differently. Vulnerable consumers can affect the assessment.
• Draw the process flow. Cover the actual sequence and relevant inputs, outputs, outsourced stages and rework. The diagram must be detailed enough to support hazard analysis.
• Check the flow against operations. Confirm it onsite across the relevant stages and operating hours, then amend discrepancies. A diagram that has only been checked at a desk may miss what happens during another shift.

For a separate way to organise the findings from a flow review, see our HACCP process-flow finding record guide. That related article is an administrative log; it does not replace technical flow confirmation.

Apply the seven HACCP principles

The steps below explain how the principles connect. They are not a hazard list or a completed control plan for your product. MPI’s practical HACCP guidance provides the New Zealand implementation context; Codex’s current principle wording expressly includes validated limits and validation of the plan.

1. Analyse hazards and identify control measures

For each relevant ingredient, input and process step, identify potential biological, chemical and physical hazards, including allergen concerns. Be specific about the hazard and how it could arise. Evaluate which hazards are significant, with a documented rationale that considers likelihood, severity, intended use and existing prerequisites.

As a working check, ask whether another competent reviewer could follow why a hazard was included, excluded or controlled by the chosen measure. A generic entry such as “bacteria” rarely explains the decision well enough.

2. Determine the critical control points

A CCP is a process step where control is essential for a significant hazard in the HACCP system. Decide this from the hazard analysis and the control measures, rather than automatically calling every check a CCP. Codex provides decision tools, but they need to be applied to the actual process.

Record the reasoning behind the decision, including how prerequisites and other stages contribute to control. If a significant hazard has no adequate control, revisiting the product or process is necessary; completing a form does not resolve the gap.

3. Establish validated critical limits

Define the measurable or observable acceptance criteria for each CCP and retain the evidence supporting them. The criteria must apply to the relevant food, hazard, equipment and operating conditions. More than one parameter may be important.

Do not copy a cooking, chilling or pH number from another plan and assume it is valid for your operation. Check applicable regulatory criteria, authoritative guidance and other suitable evidence. Obtain specialist support or a study where the available evidence does not establish applicability.

4. Set monitoring that detects loss of control

Specify what is checked, the method, timing or frequency, responsible person, record and escalation route. Monitoring needs to detect a deviation in time to identify and manage potentially affected product. It should be practical for the person performing it.

We recommend trying the proposed form with the actual equipment and staff before approving it. Check that a result can be traced to the relevant production period or batch and that a missed check is visible.

5. Define corrective actions before a deviation occurs

Set out how control is restored, how affected product is identified and managed, and who decides its disposition. Address the cause and reduce recurrence. Record the deviation, decisions and actions. Product decisions may require competent technical assessment.

Restarting equipment or recording a better result does not, by itself, establish the safety of product made earlier. A useful procedure explains the escalation and evidence needed, rather than allowing an operator to guess whether the product can be released.

6. Validate the plan, then verify the system

Validation asks whether the proposed controls and the plan together are capable of managing the significant hazards. Verification checks whether the implemented system is followed and works as intended. Initial operational evidence and later change reviews also matter.

Plan suitable record reviews, observations, instrument checks, audits or testing according to the system. Codex recommends verification by someone other than the person doing the monitoring and corrective actions. These within-business activities are distinct from any separate recognised regulatory verification.

7. Maintain documentation and records

Keep the basis for decisions as well as evidence of routine operation. This can include the scope, product descriptions, flow diagrams, hazard analysis, CCP reasoning, validation support, monitoring, deviations, verification and changes. Match the detail to the operation and applicable requirements.

Use a system staff can retrieve and understand. We recommend clear document versions, responsibilities and links between the plan, working forms and completed records. Do not invent results to fill historical gaps; record the limitation and the action being taken.

For the technical detail behind CCP determination, limit validation, deviations and system review, consult Codex sections 19.7–19.12. Review the system periodically and when relevant changes affect hazards or controls; a new version number alone does not demonstrate that a technical review occurred.

Turn HACCP decisions into usable records

The following information cards are our suggested filing checks, not a prescribed official form or a complete HACCP worksheet. Use them to connect the study to its supporting evidence and daily records.

Prepare a useful HACCP consulting brief

Specialist help is useful when the team lacks relevant expertise, the study does not match production, validation support is unclear or a customer/auditor has identified a gap. Explain the decision you need help with, rather than only asking for a “HACCP certificate”. Our guide to engaging a HACCP consultant addresses the service-selection question separately.

For an initial discussion, we recommend sending:

• The site location, products, intended consumers and relevant sales or customer requirements.
• The current plan/programme and the exact standard or customer request, including its version where known.
• Product specifications, ingredients/allergens, current flow diagrams and the existing hazard analysis.
• Available validation information, monitoring forms, recent relevant records and known information gaps.
• Relevant findings or complaints, actions already taken and the confirmed deadline.
• The requested deliverables: a new study, a defined review, implementation help, staff guidance or an agreed combination.

Agree whether the proposal includes an onsite review, document revisions, validation work, training and follow-up. Identify work requiring another specialist or laboratory. AFVA’s guide to comparing food safety consulting quotes and scope helps you frame the budgeting discussion. The cost depends on the agreed work; this development article supplies no HACCP price estimate or AFVA tariff.

Avoid common HACCP development mistakes

• Copying another business’s plan. Similar product names do not establish identical hazards, processes or controls.
• Starting with a predetermined CCP list. Work from the hazard analysis and document the decisions.
• Using unsupported limits. Keep the evidence and its applicability with the limit.
• Leaving product decisions vague. A deviation procedure needs an affected-product assessment as well as restoration of process control.
• Treating a document as implementation. Check staff understanding, operating records and verification evidence.
• Changing the process without a review. Assess relevant changes to ingredients, equipment, packaging, use or distribution before assuming the current study remains suitable.

Frequently asked questions

Does every NZ food business need a separate consultant-written HACCP plan?

Do not assume that a separate document must be purchased. First confirm the requirements applying to the business and what its applicable plan, programme or template already provides. Customer or certification requirements may create additional work. This article does not classify your operation.

Can a HACCP study conclude that there are no CCPs?

Do not invent a CCP to fill a form. A competent hazard analysis may establish that appropriate hygiene controls are sufficient. Retain the reasoning and review it when circumstances change. That conclusion does not remove the need to control hazards or meet the requirements applying to the business.

Are critical limits always temperatures?

No. Criteria depend on the hazard and control measure. They can be measurable or observable, and several parameters may be relevant. The important question is whether the criteria have an appropriate validated basis for the specific application, not whether they resemble a common example.

What is the difference between validation and verification?

Validation establishes that the measures and plan are capable of the intended control. Verification checks the implemented system and its continuing effectiveness. A monitoring result, a finished-product test or a consultant’s document review does not automatically answer every validation and verification question.

Can a consultant take responsibility for running the plan?

A consultant can provide agreed technical support, but the business remains responsible for developing and implementing its HACCP system and producing safe food. Assign internal responsibilities and make sure staff can use the procedures after the project ends.

Does AFVA certify HACCP plans or guarantee an audit pass?

No. AFVA’s service is HACCP consulting, review, documentation and readiness support. Any applicable certification, regulatory evaluation or recognised verification has its own requirements, scope and independence arrangements. Consulting support does not guarantee acceptance or an audit outcome.

Agree the next practical step for your HACCP plan

AFVA’s current HACCP service includes plan development and review, hazard/control review, documentation, implementation support and audit readiness. We can discuss the defined work your team needs and identify information or specialist input that is still missing.

Start with the current study and one clear question: does the plan reflect the operation, are the controls technically supported, or does the team need help implementing it? A defined question makes the first discussion and the eventual scope more useful.

Sources and further reading

• MPI: HACCP overview
• MPI: using HACCP in your business
• FAO and WHO: General Principles of Food Hygiene, CXC 1-1969

General information only: Requirements depend on the complete food activities, products, processes, locations and sales model. Use current official guidance and confirm the requirements applying to the specific business. This guide does not validate a process, prescribe critical limits, approve a plan or replace specialist assessment.