National Programme 3 NZ: Requirements, Records and Verification

National Programme 3, often shortened to NP3, sets food-safety requirements for specified medium-risk food businesses operating under New Zealand’s Food Act 2014. An NP3 business must be registered, meet the applicable food-safety standards, keep records that demonstrate what it does, and undergo independent verification.

NP3 is the highest of the three National Programme levels, but that does not mean every manufacturer, beverage business or food retailer automatically belongs in NP3. The correct measure depends on the complete scope of activities, products, processes, sales channels and locations. A business should confirm its pathway before registering or relying on a generic list of examples.

This guide explains the main National Programme 3 NZ requirements, which businesses may fall under NP3, the records commonly needed, how registration and verification work, and how to prepare for an NP3 verification.

What Is National Programme 3?

A National Programme is a set of risk-based food-safety requirements for specified lower- and medium-risk businesses under the Food Act. There are three levels. NP1 covers the lowest-risk activities, NP2 covers specified low-to-medium-risk activities, and NP3 covers specified medium-risk activities requiring a more extensive level of control and evidence.

Unlike a Food Control Plan, a National Programme does not require the operator to write a complete business-specific plan for approval. However, the operator still needs to understand and follow every applicable requirement. The verifier will expect the business to explain what it does, demonstrate safe practices and provide records showing that important controls are working.

MPI’s National Programme guidance is the official starting point. AFVA’s National Programme Verification NZ guide provides a broader comparison of NP1, NP2 and NP3.

Which Businesses May Need National Programme 3?

MPI identifies several types of activities that may operate under NP3. Examples can include brewers and distillers, some manufacturers of non-alcoholic drinks or fruit drinks, flour manufacturers, food-additive manufacturers and some retail or food-handling operations. Other specialised activities may also be assigned to NP3.

These examples are not a complete classification tool. A beverage business may carry out additional processing that changes its regulatory measure. A manufacturer may make products across several categories. A business operating multiple sites, importing food, wholesaling, providing food service or processing animal products may have additional or different obligations.

• Brewers, distillers and specified beverage manufacturers
• Specified fruit-drink or non-alcoholic-drink manufacturers
• Flour and certain dry-food manufacturing activities
• Manufacturers of food additives, processing aids, vitamins, minerals or nutrients intended for addition to food
• Specified retailers or businesses that handle food without carrying out higher-risk preparation
• Other activities assigned to NP3 under the applicable Food Act rules

Use MPI’s My Food Rules tool and provide complete, accurate activity information. If the answer is unclear, obtain pathway advice before applying for registration or commissioning unnecessary documents.

How to Confirm Whether NP3 Is Correct

Start with the whole business, not only the main product. Regulatory classification can depend on what ingredients are received, what processing occurs, whether food is packed or repacked, how it is stored, whether it is sold wholesale or directly, and whether any separate importing, exporting, transport or animal-product activities occur.

1. List every food activity. Include manufacturing, packing, relabelling, storage, distribution, retail, online sale, importing and exporting.
2. Describe every product group. Identify ingredients, processing, packaging, storage conditions, shelf life and intended consumers.
3. Check every location. A home kitchen, warehouse, production facility, shop and mobile operation may affect the registration structure.
4. Use current MPI tools. Complete My Food Rules using the real scope rather than selecting answers intended to obtain a preferred outcome.
5. Confirm mixed activities. Some businesses may need more than one registration, a multi-site arrangement or a different regime.

NP3 should not be selected merely because it appears simpler than a Food Control Plan. Conversely, a business should not prepare a custom Food Control Plan when its complete activity is already covered by NP3. See our Food Control Plan vs National Programme guide for the main distinctions.

Main National Programme 3 Requirements

The exact controls depend on the products and activities, but an NP3 operator must be able to show that food is safe and suitable. The business needs practical controls, competent people and reliable evidence rather than documents that are disconnected from daily work.

1. Safe ingredients and approved suppliers

Buy food, ingredients and packaging from suitable suppliers. Keep enough supplier and product information to establish traceability, understand allergens, confirm specifications and respond if an ingredient is unsafe or unsuitable.

2. Suitable premises, equipment and water

The premises and equipment must support hygienic operation. Surfaces should be cleanable and maintained, contamination routes controlled, chemicals managed and pests excluded. Where water can affect food safety, its source and suitability must be understood and supported by appropriate evidence.

3. Process and temperature control

Controls must match the process. Depending on the business, this may involve time and temperature, formulation, pH, water activity, sieving, filtration, foreign-matter control, storage conditions or another validated parameter. Monitoring should be meaningful and linked to corrective action.

4. Cleaning, hygiene and staff competence

Staff must understand the practices relevant to their work, including hand hygiene, illness reporting, protective clothing, cleaning, chemical use, allergen controls, monitoring and action after a failure. Training needs to be demonstrated through competence and records, not only attendance.

5. Allergens, labels and consumer information

Ingredient and allergen information must be controlled from supplier approval through recipe, production and final label approval. Plain-English allergen declarations, product identity, date marking, traceability coding and other mandatory information must meet the requirements applicable to the product.

6. Traceability, recall and incident response

The business must be able to identify affected ingredients and finished products, determine where products went and respond promptly to an incident. Mock-recall exercises help confirm that records and contact arrangements work before a real event occurs.

7. Corrective action and ongoing review

When a requirement is not met, the business should control the affected food, correct the immediate problem, investigate the reason, prevent recurrence and record the decision. Repeated failures can indicate that a procedure, training programme or monitoring system is not effective.

What Records Does an NP3 Food Business Need?

NP3 does not require every business to complete an identical folder of forms. Records should reflect the actual risks and requirements of the operation. They must be accurate, legible, protected and easy to retrieve during verification or an incident.

MPI provides downloadable National Programme record forms. A business may use suitable electronic or customised records, provided they capture the necessary information and can be retrieved when required.

How to Register a National Programme 3 Business

1. Confirm NP3 eligibility and scope. Complete My Food Rules and retain the outcome or other classification evidence.
2. Select a recognised verifier. NP businesses generally need to contact a suitable verifier before applying for registration and obtain confirmation where required.
3. Identify the registration authority. A business operating in one local area commonly registers with the local council. MPI may register certain multi-area or other eligible operations.
4. Submit the application. Provide the legal operator, trading name, sites, scope of operations, verifier information and required supporting material.
5. Check the certificate. Confirm that names, addresses, programme level and activities are accurate. Keep the registration current and renew before its expiry date.

MPI’s Food Act registration guidance explains whether a business should apply through a council or MPI. Our food-business registration process gives a practical overview.

What Happens During NP3 Verification?

Verification is an independent check of whether the business is following the applicable National Programme requirements and producing safe and suitable food. It is not limited to looking at the premises. The verifier compares written information, records, staff explanations and actual practices.

A new business generally needs its initial verification within the timeframe specified by the registration and current rules. MPI guidance indicates a six-week timeframe for many new Food Act businesses, while different arrangements can apply to an existing operation. Confirm the actual due date shown by the registration authority and verifier rather than relying on a generic calendar.

Ongoing verification frequency is performance-based. Good compliance and timely correction can support a longer interval within the applicable framework. Serious or repeated problems, an unacceptable outcome or failure to close non-compliances can result in closer regulatory attention and more frequent verification.

The verifier may examine:

• registration scope, activities and changes since the previous verification;
• staff understanding, hygiene and food-safety practices;
• premises, equipment, maintenance, pest control and cleaning;
• supplier, ingredient, allergen and label controls;
• process monitoring and action when a limit or requirement is not met;
• traceability, recall procedures and mock-recall evidence;
• complaints, incidents, unsafe or unsuitable food and regulatory notifications;
• records selected across an appropriate period, not only the most recent day; and
• closure and effectiveness of previous corrective actions.

Review MPI’s verification guidance and AFVA’s food-business verification process before the visit.

How to Prepare for National Programme 3 Verification

1. Confirm that the registration certificate reflects every current site and food activity.
2. Review the current NP3 guidance and identify every section applicable to the operation.
3. Gather records for a representative period and check for unexplained gaps.
4. Trace one recent batch or product from supplier information through production and sale.
5. Complete a mock recall and document the result, timing, quantities and corrective actions.
6. Check allergen information and one current label against the approved recipe and supplier specifications.
7. Confirm measuring equipment is suitable, working and checked as required.
8. Inspect cleaning, maintenance, pest-control and chemical-storage arrangements.
9. Ask staff to explain their tasks, monitoring and actions after a problem.
10. Close previous findings with evidence that the correction remains effective.

Common NP3 Problems Found During Verification

• Incomplete registration scope: new products, processing or sites were added without reviewing the regulatory pathway.
• Records completed retrospectively: monitoring forms are filled in later and do not reliably show what occurred.
• Unclear corrective action: a failed check is recorded but the affected product, cause and prevention are not addressed.
• Weak allergen control: recipes, supplier information, production practices and labels do not remain aligned.
• Poor traceability: batch codes, ingredient lots and customer records cannot be connected quickly.
• Ineffective mock recall: the exercise does not reconcile quantities or demonstrate who would be contacted.
• Staff knowledge gaps: procedures exist, but employees cannot explain the controls relevant to their work.
• Repeated findings: the immediate issue was fixed after the previous visit, but the underlying cause remained.

How AFVA Can Help an NP3 Food Business

Access Food Verification & Auditing Limited provides National Programme verification and practical compliance support for New Zealand food businesses, subject to recognition, scope and independence requirements. Support may include:

• reviewing the proposed activities and likely regulatory pathway;
• explaining registration and verifier-confirmation steps;
• providing recognised NP verification within applicable scope;
• reviewing records, traceability and mock-recall readiness;
• assessing verification readiness and common evidence gaps;
• supporting corrective-action and non-compliance close-out; and
• helping the business understand when separate technical, laboratory, labelling or specialist support may be needed.

Consulting and recognised verification are different functions. Independence requirements may limit which services can be provided to the same business. AFVA will clarify the applicable role before work begins.