Food Safety for Small Food Manufacturers

Small food manufacturers in Australia generally need a documented, HACCP-based food safety program, compliant packaged-food labelling (including Plain English Allergen Labelling), and batch traceability that lets you recall product fast. Requirements vary by product, jurisdiction and audit scheme, so confirm your obligations with your state or territory food regulator and, where relevant, your certifier before you scale production. Key takeaways: Most Australian food manufacturers are expected to run a documented, HACCP-based food safety program built around hazard analysis and critical control points (CCPs) with monitoring records — some sectors (dairy, meat, seafood, eggs) have mandatory programs under state law.. Packaged food you sell must comply with FSANZ labelling rules, and since 25 February 2026 all retail packaged food (including older stock) must meet the Plain English Allergen Labelling (PEAL) format and naming requirements — the stock-in-trade period has now ended.. Batch coding and traceability (one-step-back, one-step-forward) are the backbone of a fast, targeted recall — poor lot control turns a small problem into a whole-production recall.. Scaling up multiplies risk: new equipment, longer shelf life, wider distribution and shared allergen lines all need controls re-validated, not just copied from your kitchen-scale process.. Customers and third-party audit schemes (HACCP, SQF, BRCGS, FSSC 22000) often drive stricter requirements than the law alone — confirm what your buyers demand before you commit to a market.. The seven HACCP principles: Principle, What it involves. 1. Hazard analysis — Map the process and identify biological, chemical, physical and allergen hazards at each step. 2. Determine CCPs — Find the critical control points where control is essential. 3. Establish critical limits — Set measurable limits, e.g. core cook temperature and time, or maximum chill time. 4. Monitoring — Check each CCP on a schedule and log every reading. 5. Corrective actions — Define what happens when a critical limit is breached. 6. Verification — Confirm the system works via record review, internal audits and testing. 7. Record keeping — Keep complete, legible, honest records. What makes food manufacturing different Manufacturing is not a bigger kitchen. Where a cafe cooks to order and serves within minutes, a manufacturer produces batches that may be stored, transported and eaten weeks or months later, often by consumers you will never meet. That distance between production and consumption is exactly what raises the stakes: a single contaminated or mislabelled batch can reach thousands of people across multiple states before anyone notices. The distinctive risks of your sector cluster around a few things. First, shelf-stable and chilled ready-to-eat products depend on process controls — cook temperatures, pH, water activity (aw), cold-chain — that must actually deliver a safe product, not just look right. Second, packaged goods carry a label that becomes a legal promise: get an allergen or a date mark wrong and you have a recall regardless of how clean your factory is. Third, shared processing lines create allergen and cross-contamination pathways that a single-menu kitchen never faces. Australian manufacturers are generally governed by FSANZ Standard 3.2.2 (food safety practices and general requirements), Standard 3.2.3 (food premises and equipment), the labelling requirements in Chapters 1 and 2 of the Code, and — for many businesses — a food safety program requirement under Standard 3.2.1 or commodity-specific standards. Which apply depends heavily on your product and where you operate, so confirm exactly what covers you with your state or territory regulator. Long shelf life and wide distribution mean errors scale and travel. Process controls (temperature, pH, aw, cold-chain) must be validated, not assumed. Packaged labelling is a legal statement that can trigger recalls on its own. Shared lines create allergen and cross-contact risks kitchens rarely have. Build a HACCP-based food safety program A HACCP (Hazard Analysis and Critical Control Points) program is the core document that most manufacturers, buyers and auditors will expect. Even where a formal food safety program is not legally mandated for your specific product and jurisdiction, many customers and retail chains will require one, and it is the most defensible way to show you are managing risk. A HACCP plan follows seven principles: conduct a hazard analysis; determine the critical control points (CCPs); establish critical limits; set up monitoring; define corrective actions; verify the system works; and keep records. In practice that means mapping every step of your process on a flow diagram, then asking at each step what biological, chemical, physical or allergen hazard could occur and how you control it. A CCP is a step where control is essential to prevent, eliminate or reduce a hazard to an acceptable level — for example, a cook step with a validated time-and-temperature limit, a metal detector, or a chilling step that must hit a target temperature within a set time. Underneath HACCP sit your prerequisite programs — cleaning and sanitation, pest control, supplier approval, staff hygiene, calibration and maintenance. These are the foundations that make your CCPs reliable. Some sectors have mandatory, audited food safety programs under state legislation (for example dairy, meat, seafood and egg processing), so check whether your commodity is one of them. FSANZ's Safe Food Australia guide explains how the food safety standards apply and is a practical companion when you build your program. Draw an accurate process flow diagram, then hazard-analyse every step. Identify CCPs with measurable critical limits (e.g. core temperature, time). Monitor CCPs on a schedule and log every reading with corrective actions. Support HACCP with prerequisite programs: cleaning, pest control, supplier approval, calibration. Verify regularly — internal audits, record review, and product testing where relevant. Get packaged food labelling right For a manufacturer, the label is compliance made visible. Under the FSANZ Code, most packaged food sold in Australia must carry a prescribed name or description, an ingredient list in descending order by weight, a nutrition information panel, allergen declarations, a date mark (best-before or use-by), storage and directions for use where needed, lot identification, and the name and business address of the supplier. Most food also needs a country-of-origin label, which sits under separate country-of-origin food labelling rules rather than the FSANZ Code itself. Small package sizes and some product-specific exemptions apply, so check the exact requirements for your product format. Allergen labelling deserves special attention. Under the Plain English Allergen Labelling (PEAL) requirements in Standard 1.2.3 and Schedule 9, allergens must be declared using prescribed plain-English names, in bold within the ingredient list, and again in a bold 'Contains' summary statement set apart from the ingredient list. Specific tree nuts must be named (for example 'cashew', not 'nuts'), and wheat, gluten and their sources are handled with specific declarations. The transition ended on 25 February 2026 — the compliance date for newly labelled product was 25 February 2024, and the two-year stock-in-trade period has now concluded, so all retail packaged food should comply. Precautionary statements such as 'may contain' are voluntary and should reflect a genuine, assessed cross-contact risk — not be used as a blanket disclaimer. Because labelling errors are a leading cause of recalls, have labels checked against the Code before you print a large run. Include name, ingredients (descending weight), NIP, date mark, lot code, country of origin and supplier details. Declare allergens in bold in the ingredient list and in a bold 'Contains' statement (PEAL). Name specific tree nuts and handle wheat/gluten declarations correctly. Use 'may contain' only for a real, assessed cross-contact risk. Proof every new or changed label against the Code before printing. Batch coding and traceability Traceability is what turns a potential disaster into a manageable, targeted recall. The Food Standards Code generally requires food businesses to be able to trace one step back (which supplier and batch each ingredient came from) and one step forward (which customers received which finished batch). The tool that makes this work is a unique lot or batch code printed on every unit of finished product. Design your batch code so it links a specific production run to the raw material lots, the process records for that run, the packaging and label version used, and the customers it shipped to. If a supplier notifies you of a contaminated ingredient, or a CCP record shows a cook step failed, you want to identify and isolate only the affected batches within minutes — not recall six months of production because you cannot tell them apart. Keep records legible and retrievable; many businesses keep them for the shelf life of the product plus a margin, but confirm any minimum retention period that applies to you. Test your traceability with a mock recall at least annually: pick a batch code and see how quickly and completely you can account for every unit. Most audit schemes require this drill and measure your recovery percentage. FSANZ and the Australian Food and Grocery Council publish recall guidance you can use to build your recall plan and contact lists in advance. Print a unique lot/batch code on every finished unit. Link each code to raw-material lots, process records, label version and customers. Keep records legible, retrievable and retained for shelf life plus a safe margin. Run a mock recall at least yearly and measure how much product you can account for. Controls when you scale up Scaling from a certified kitchen or small run to volume production is where many manufacturers get caught out. A process that was safe by eye at five kilograms may not be at five hundred. Larger vessels heat and cool more slowly, so a chilling step that easily hit temperature before may now leave product in the danger zone (broadly 5 degrees Celsius to 60 degrees Celsius) too long — you must re-validate the time and temperature, not assume it carries over. New equipment introduces new hazards: metal and plastic fragments, harder-to-clean crevices, and lubricants. Longer shelf life or new pack formats (vacuum packing, modified atmosphere) can change the microbiological risk profile — for example the risk of Clostridium botulinum in low-oxygen packs — and may need shelf-life validation or challenge testing. Adding a second product to a shared line creates allergen cross-contact that did not exist before, so review your allergen matrix and cleaning validation whenever the product mix changes. Wider distribution stretches your cold chain across more handovers. Treat every significant change — new ingredient, supplier, recipe, equipment, pack format or market — as a trigger to revisit your HACCP plan and re-validate the affected controls before the change goes live. Approving new suppliers with specifications and, where appropriate, certificates of analysis protects you from importing someone else's problem. Re-validate cook and chill times when batch or vessel size changes. Assess new equipment for physical hazards and cleanability. Validate shelf life for new pack formats or extended dates. Review the allergen matrix and cleaning validation whenever the product mix changes. Approve new suppliers with specifications and certificates of analysis. Registration, licensing and audits Most food manufacturing businesses must be notified to or registered with a regulator before they operate — usually your local council or, for certain regulated commodities, a state agency. Depending on your products, you may deal with your state or territory health or food authority (for example the NSW Food Authority, Safe Food Queensland for regulated foods, or your council's environmental health team). You generally need to confirm your requirements locally, because registration, licensing categories and any mandatory food safety program differ by jurisdiction and product — the Australian Business Licence and Information Service (ABLIS) is a useful starting point for finding what applies. Beyond government, commercial audits often set the pace. Retailers, distributors and export markets commonly require certification to a GFSI-recognised scheme such as SQF, BRCGS or FSSC 22000, or to a HACCP certification. These audits examine your food safety program, records, premises, traceability and mock-recall performance in detail. Prepare by keeping your documentation current and your monitoring records complete and honest — auditors look hardest at whether your written system matches what actually happens on the floor. Government inspections tend to focus on the practices and premises standards (3.2.2 and 3.2.3): hygiene, temperature control, cleaning, pest management and construction. Whether you are being inspected or audited, the same discipline protects you: do what your plan says, and record that you did it. Confirm registration/licensing with your council and state or territory regulator before operating. Check whether your commodity carries a mandatory, audited food safety program. Expect buyers to require SQF, BRCGS, FSSC 22000 or HACCP certification. Keep monitoring records complete and honest — auditors check that the system matches reality. Worked examples: Scaling a sauce recipe fivefold: A manufacturer moves a sauce from five-kilogram to five-hundred-kilogram batches. Because larger vessels cool more slowly, the chilling step that used to hit temperature easily now risks leaving product in the danger zone too long. Rather than assume the old process carries over, they re-validate the cook and chill times for the larger batch before the change goes live and update the HACCP plan. Checklist: Regulatory obligations confirmed with council and state/territory regulator. Documented HACCP-based food safety program with a current process flow diagram. CCPs identified with measurable critical limits and a monitoring schedule. Corrective actions defined for every critical-limit breach. Prerequisite programs in place: cleaning, pest control, hygiene, calibration, maintenance. Approved-supplier list with specifications and certificates of analysis. Labels compliant with FSANZ rules and PEAL allergen format, proofed before printing. Unique batch/lot code on every finished unit, linked to inputs and customers. One-step-back and one-step-forward traceability records retrievable quickly. Mock recall run within the last 12 months with recovery percentage recorded. Controls re-validated after any change to recipe, equipment, pack format or scale. Monitoring records complete, legible, honest and retained for shelf life plus a margin. Common mistakes: Copying a kitchen-scale process to volume production without re-validating cook and chill times for larger batches.. Treating labelling as an afterthought — printing a large run before checking allergen (PEAL), date marks and ingredient order against the Code.. Using vague batch codes (or none), so a small issue forces a recall of far more product than necessary.. Relying on 'may contain' as a blanket disclaimer instead of controlling and assessing actual allergen cross-contact.. Keeping monitoring records that look perfect but do not match what happens on the floor — a red flag in any audit.. Adding a second product to a shared line without reviewing the allergen matrix and revalidating cleaning.. Assuming HACCP is optional because it is not explicitly mandated, then losing a retail contract that requires certification.. State and territory notes: NSW: Certain regulated foods are overseen by the NSW Food Authority; confirm registration, licensing and any mandat