How Long to Keep Food Safety Records

How long must food safety records be kept in Australia? Understand the Standard 3.2.2A evidence requirement and why program and jurisdictional rules can differ.

In Australia there is no single national number for how long every food safety record must be kept. Under Standard 3.2.2A, food service and retail businesses that use record keeping to show their controls are working must retain that evidence and make it available to an authorised officer, but the exact retention period can depend on your food safety program and your state or territory rules. As a practical baseline, many businesses keep records for a rolling period and retain anything tied to an incident, complaint or corrective action for longer. Always check the specific requirement that applies to your business and jurisdiction. This uncertainty trips up a lot of operators. The safest approach is to keep records long enough to demonstrate ongoing control, to cover any program requirement, and to be available if a problem surfaces weeks or months later. Below we explain what the national standard expects and why the answer can differ depending on where and how you operate. What does Standard 3.2.2A say about keeping records? Standard 3.2.2A sets food safety management tools for certain higher-risk food service, catering and retail businesses. One way to demonstrate that key controls are managed is to keep evidence, and where records are used they must be retained and produced when an authorised officer asks. The standard focuses on showing that critical steps, such as cooking, cooling, reheating and cold storage, are under control. Food Standards Australia New Zealand supports this with practical resources, including its food safety evidence tool , which helps businesses understand what evidence shows a control is working. The tool reinforces the principle that records exist to prove safety, not to tick a box, which is a useful lens when deciding how long to keep them. Why is there no single retention number? Standard 3.2.2A applies to particular business classes, not all food businesses. States and territories administer food regulation and can set their own requirements. A registered food safety program may specify its own retention period. Local councils administer inspections and may have expectations for how records are kept. How long should you keep different types of records? Because requirements vary, it helps to think in terms of purpose. Routine monitoring records prove ongoing control and are usually kept for a rolling recent period. Records tied to a specific event, such as a customer complaint, a suspected outbreak or a significant corrective action, are worth keeping longer because they may be needed if the matter is investigated later. Training and Food Safety Supervisor evidence is generally kept for as long as the person is employed and often beyond. Record type Purpose Practical retention approach Temperature and monitoring logs Show ongoing control Keep a continuous rolling period per your program Cleaning and sanitising records Show maintained hygiene Keep alongside monitoring logs Corrective actions and incidents Show problems were fixed Retain longer, especially if linked to a complaint Training and Food Safety Supervisor Show skills and knowledge Keep while employed and beyond Receiving and supplier records Show safe sourcing Keep to support traceability Whatever period you choose, consistency matters. An unbroken, dated history is far more convincing to an Environmental Health Officer than a patchy set of records with unexplained gaps. Continuous temperature monitoring and dated logs make it easy to show any timeframe an inspector requests. Where should records be stored, and in what format? Records can be kept on paper or electronically, provided they are accurate, complete and readily available when an authorised officer asks. Paper works, but it fades, gets lost and is slow to search. Cloud-based digital records solve the retention problem neatly: they are time-stamped, backed up, easy to filter by date, and impossible to misplace in a drawer. This matters most when a request arrives for records from several months ago. Storing records in the cloud also protects you if paper is destroyed by fire, flood or simple mess. Keeping your audit records and corrective actions in one secure system means the retention question largely takes care of itself, because nothing is thrown out by accident. How do you find the exact rule for your business? Because retention can differ by jurisdiction and program, confirm the specific requirement that applies to you rather than relying on a single national figure. Good starting points are your state or territory health department, for example the Victorian health department or the equivalent in your state, your local council, and the national resources on the FSANZ website . If you operate under a registered food safety program, the program document itself usually states how long records must be kept. For plain-language explainers on records and compliance, see our food safety guides . What happens if you cannot produce records when asked? If you are required to keep records and cannot produce them, an inspector may treat it as a sign that controls are not being managed, which can lead to closer scrutiny. Keeping records for a sensible period, in a format you can retrieve quickly, is the simplest way to avoid this. How do you set a practical retention policy for your business? Because no single national number applies, the sensible move is to write your own retention policy that comfortably meets or exceeds every requirement you are subject to, then apply it consistently. A written policy removes the weekly guesswork about what to keep and what to bin, and it gives an Environmental Health Officer a clear answer when they ask how you manage records. It does not need to be long; it needs to be deliberate. Start by listing every requirement that touches your business, then set your retention period to the longest of them so a single rule keeps you covered on all fronts. Check your food safety program. If you operate under a registered program, it usually states a retention period. That figure is your floor. Check your state or territory rule. Food regulation is administered by each state and territory, so confirm the requirement that applies where you trade. Ask your local council. Councils administer inspections and may have expectations about how records are kept and presented. Set one period to rule them all. Adopt the longest requirement across those sources as your standard retention period, so you never have to remember which record follows which rule. Extend for anything unusual. Keep records linked to a complaint, a suspected illness, a recall or a significant corrective action well beyond your routine period, because they may be needed if the matter is investigated later. Write the policy down in a sentence or two, note who is responsible for archiving, and make sure new managers know it. A common approach for a small Australian cafe is to keep routine monitoring, cleaning and receiving logs for a rolling recent period defined by the program, retain training and Food Safety Supervisor evidence for the length of employment and beyond, and archive anything tied to an incident indefinitely. The real advantage of a cloud system here is that you do not have to enforce disposal manually: records are time-stamped and preserved automatically, so the retention question shifts from remember to delete the right thing to keep everything and retrieve on demand. Keeping your audit records in one place means the policy runs itself, and your logs are ready for any date range an inspector requests. Frequently asked questions Is there a national rule for how long to keep food safety records in Australia? There is no single national number that covers every record. Standard 3.2.2A requires certain businesses to keep and produce evidence that controls work, but exact retention periods can depend on your food safety program and your state or territory. Confirm the rule that applies to you. Do I have to keep records if I am not under Standard 3.2.2A? Even where record keeping is not mandatory, keeping monitoring, cleaning and corrective action records is strongly recommended because it demonstrates control and protects you if a complaint or inspection arises. Can I keep food safety records digitally? Yes. Electronic records are acceptable as long as they are accurate, complete and readily available to an authorised officer. Cloud storage also protects records from loss and makes retrieval fast. How long should I keep records linked to a complaint or incident? Keep incident and corrective action records longer than routine logs, because they may be needed if the matter is investigated later. A continuous digital archive removes the guesswork. Should I write down my record retention policy? Yes. Check your food safety program, your state or territory rule and your local council, then adopt the longest requirement as a single standard period so one rule covers everything. Note who is responsible for archiving and keep incident-related records for longer. A short written policy stops the weekly guesswork and gives an inspector a clear answer. The retention question gets much simpler when your records never expire in a drawer. FoodSafety HQ stores every log securely in the cloud, time-stamped and easy to retrieve for any date range an inspector asks about. Explore our cloud record storage and audit tools , or start a free trial from our pricing page .

Frequently asked questions

What does Standard 3.2.2A say about keeping records?

Standard 3.2.2A sets food safety management tools for certain higher-risk food service, catering and retail businesses. One way to demonstrate that key controls are managed is to keep evidence, and where records are used they must be retained and produced when an authorised officer asks. The standard focuses on showing that critical steps, such as cooking, cooling, reheating and cold storage, are under control.

How long should you keep different types of records?

Because requirements vary, it helps to think in terms of purpose. Routine monitoring records prove ongoing control and are usually kept for a rolling recent period. Records tied to a specific event, such as a customer complaint, a suspected outbreak or a significant corrective action, are worth keeping longer because they may be needed if the matter is investigated later. Training and Food Safety Supervisor evidence is generally kept for as long as the person is employed and often beyond.

Where should records be stored, and in what format?

Records can be kept on paper or electronically, provided they are accurate, complete and readily available when an authorised officer asks. Paper works, but it fades, gets lost and is slow to search. Cloud-based digital records solve the retention problem neatly: they are time-stamped, backed up, easy to filter by date, and impossible to misplace in a drawer. This matters most when a request arrives for records from several months ago.

How do you find the exact rule for your business?

Because retention can differ by jurisdiction and program, confirm the specific requirement that applies to you rather than relying on a single national figure. Good starting points are your state or territory health department, for example the Victorian health department or the equivalent in your state, your local council, and the national resources on the FSANZ website . If you operate under a registered food safety program, the program document itself usually states how long records must be kept. For plain-language explainers on records and compliance, see our food safety guides .

How do you set a practical retention policy for your business?

Because no single national number applies, the sensible move is to write your own retention policy that comfortably meets or exceeds every requirement you are subject to, then apply it consistently. A written policy removes the weekly guesswork about what to keep and what to bin, and it gives an Environmental Health Officer a clear answer when they ask how you manage records. It does not need to be long; it needs to be deliberate.

Is there a national rule for how long to keep food safety records in Australia?

There is no single national number that covers every record. Standard 3.2.2A requires certain businesses to keep and produce evidence that controls work, but exact retention periods can depend on your food safety program and your state or territory. Confirm the rule that applies to you.

Do I have to keep records if I am not under Standard 3.2.2A?

Even where record keeping is not mandatory, keeping monitoring, cleaning and corrective action records is strongly recommended because it demonstrates control and protects you if a complaint or inspection arises.

Can I keep food safety records digitally?

Yes. Electronic records are acceptable as long as they are accurate, complete and readily available to an authorised officer. Cloud storage also protects records from loss and makes retrieval fast.

How long should I keep records linked to a complaint or incident?

Keep incident and corrective action records longer than routine logs, because they may be needed if the matter is investigated later. A continuous digital archive removes the guesswork.

Should I write down my record retention policy?

Yes. Check your food safety program, your state or territory rule and your local council, then adopt the longest requirement as a single standard period so one rule covers everything. Note who is responsible for archiving and keep incident-related records for longer. A short written policy stops the weekly guesswork and gives an inspector a clear answer.

How to Manage Food Safety When a Menu or Recipe Changes How to Hand Over Food-Safety Issues Between Kitchen Shifts What Should Be Included in Opening and Closing Food-Safety Checks? Food safety guides All articles
Home Features Free Tools Food Safety Australia Food Safety Glossary Blog Pricing About Contact