Main explanation
HACCP plans and food safety plans are closely related, but the terms are not identical. A HACCP plan follows the seven HACCP principles: hazard analysis, critical control points, critical limits, monitoring, corrective actions, verification, and records.
A food safety plan under preventive controls expectations may include hazard analysis, preventive controls, supply-chain controls, recall plan, monitoring, corrective actions, verification, validation where applicable, and records. It may be overseen by a preventive controls qualified individual when the rule applies.
For HACCP fundamentals, see the HACCP plan guide for small food businesses.
Practical checklist
When deciding what you need, ask:
- Is the product in a category with specific HACCP requirements?
- Is the facility covered by preventive controls requirements?
- Does a state or local regulator require a written plan?
- Does a customer require HACCP, GFSI, SQF, BRCGS, or another program?
- Does the plan need a recall section?
- Does the plan address allergens and labels?
- Does the plan include supplier controls when needed?
- Are monitoring and verification records defined?
Side-by-side comparison
| Topic | HACCP plan | Food safety plan |
|---|---|---|
| Core framework | Seven HACCP principles | Hazard analysis and risk-based preventive controls |
| Key control term | Critical control point | Preventive control |
| Common use | Product or process safety systems, customer programs, certain regulated categories | Covered food facilities under preventive controls expectations |
| Records | Monitoring, corrective action, verification, validation support when applicable | Monitoring, corrective action, verification, validation where applicable, supply-chain and recall records |
| Oversight | HACCP team or qualified personnel | PCQI involvement may be required when applicable |
Common mistakes
Common mistakes include:
- Assuming the terms are always interchangeable.
- Leaving preventive controls out of a food safety plan.
- Calling every control a CCP.
- Forgetting allergen and sanitation controls.
- Sending a customer a plan that does not match the requested standard.
- Not documenting why a hazard does or does not need a control.
QA perspective
From a QA perspective, the label on the binder matters less than whether the system meets the requirement. Read the customer request carefully. Read the applicable standard carefully. Then make sure the plan uses the expected terminology and includes the records that prove implementation.
FAQ
Can a HACCP plan satisfy a food safety plan request?
Sometimes a customer may accept a HACCP-based plan, but covered preventive controls requirements can include elements that are not always present in a traditional HACCP plan. Verify the exact request.
Which plan should a small business write first?
Start by identifying what applies to the business: product regulations, facility registration status, customer requirements, local rules, and certification programs. Then build the plan format around those expectations.
Do both plans require records?
Yes. Both systems depend on records that show monitoring, corrective action, verification, review, and implementation.