How long Australian food businesses should keep food safety records: retention periods, why they matter, digital vs paper, what to keep, and the jurisdiction…
There is no single retention period set across the whole Food Standards Code, and requirements vary by state, territory and the type of food safety system you run. As a practical rule of thumb, most Australian food businesses keep routine monitoring records (temperature, cleaning, receiving) for at least 12 months, and keep traceability and recall-related records longer. Note that records made under the Standard 3.2.2A evidence tool generally have a shorter legal minimum. Always confirm the exact period with your local council and state or territory food regulator. Key takeaways: There is no single Code-wide retention period. How long you must keep food safety records depends on your state or territory, whether you run a food safety program under Standard 3.2.1, and which Standard 3.2.2A tool you use - confirm the exact period with your regulator.. Where you rely on the Standard 3.2.2A evidence tool, FSANZ guidance indicates records for prescribed activities generally need to be kept for a minimum of around three months - but many businesses keep at least 12 months as a practical convention (see next point).. Keeping routine monitoring records (temperature, cleaning, receiving, calibration) for at least 12 months is a widely used rule of thumb, so an authorised officer or auditor can review a full annual cycle at an inspection or audit.. Keep traceability and recall-related records - supplier invoices, batch and lot details, distribution lists - for longer, generally at least the shelf life of the product plus a margin, so you can trace product both ways in a recall.. Food safety records that double as business records (invoices, receipts) may also fall under separate tax rules - the ATO generally requires business records to be kept for five years - so the longer period often applies.. Is there a single legal retention period? No. People often expect one national number, but the Food Standards Code does not set a single retention period that applies to every record in every food business. Standard 3.2.2 (Food Safety Practices and General Requirements) and Standard 3.2.2A (Food Safety Management Tools) require certain businesses to make and keep records, but how long you keep them is generally shaped by your jurisdiction and the type of food safety system you operate. Enforcement sits with your local council and state or territory food regulator, and their guidance - or a condition on your licence, registration or food safety program - is what usually fixes the period for you. Because of that, the safest approach is to treat published rules of thumb as a floor, then confirm the actual requirement that applies to your business. Where a food safety program under Standard 3.2.1 applies (for example in Victoria, or for certain licensed higher-risk businesses in other states), the program document itself or the regulator will typically state how long records must be retained. The Code requires records to be made and kept, but does not set one universal retention period. The period is generally set by your state or territory regulator, your licence or registration conditions, or your food safety program. Requirements differ for a records-based Standard 3.2.2A business, a Standard 3.2.1 food safety program, and a low-risk business. Always confirm the exact period with your council and state or territory food regulator. Common retention periods: a practical guide While the legal minimum varies, most Australian food businesses converge on a small set of practical periods. Under the Standard 3.2.2A evidence tool, FSANZ guidance generally indicates that records made for a prescribed activity need to be kept for a minimum of around three months and be available to an authorised officer - but many operators keep more than that. A common baseline for day-to-day monitoring records is to keep at least 12 months of history, so that an environmental health officer (EHO) or third-party auditor can review a full annual cycle at any inspection. Records that support traceability and recalls are usually kept longer, because you may need them well after a product has left your premises. Use the periods below as a starting point and adjust upward to whatever your regulator, auditor or customer specifications require. Standard 3.2.2A evidence-tool records: FSANZ guidance generally sets a minimum of around three months, kept available for your regulator - confirm the current requirement. Routine monitoring records (temperature logs, cleaning and sanitising checklists, receiving records, thermometer calibration): commonly kept for at least 12 months as a practical convention. Corrective action records (what went wrong and what you did): keep alongside the related monitoring record, generally at least 12 months. Supplier approval and traceability records (invoices, delivery dockets, batch and lot numbers): often kept for at least the shelf life of the product plus a margin, and frequently longer. Staff training and Food Safety Supervisor certificates: keep while the person is employed and for a reasonable period afterwards. Recall, withdrawal and serious complaint records: keep for an extended period as evidence of how the incident was handled. Records that are also tax or business records: the ATO generally requires these to be kept for five years. Why retention periods matter Records are only useful if you still have them when you need them, and the moments you need them most tend to arrive without warning. Keeping a solid history is the practical way a food business demonstrates due diligence - that it was systematically controlling food safety, not just hoping for the best. If a customer complains, a batch is implicated in illness, or a regulator investigates, contemporaneous records are often the strongest evidence you can produce. Retention also underpins traceability. In a recall you may need to trace a specific batch back to its supplier and forward to every customer who received it, sometimes months after d
How to set up a records retention system
Walk through a normal week and list each record you generate - temperature logs, cleaning sheets, receiving records, calibration, pest reports, training, corrective actions and invoices. You cannot set retention periods for records you have not identified.
Check your licence or registration conditions, your food safety program if you have one, and your state or territory regulator's record-keeping guidance. Note the required minimum against each record type - for example around three months for Standard 3.2.2A evidence-tool records - and default to at least 12 months where nothing more specific applies.
Create a one-page table: record type, retention period, format (digital or paper) and where it is stored. This schedule tells everyone how long to keep each record and prevents both premature disposal and clutter.
Choose digital, paper or a mix. For digital, set up automatic backups and access controls; for paper, use a dry, labelled, tamper-resistant filing system. Make sure current records can be produced on site during an inspection.
Flag any records that are also tax or business records - invoices, dockets, receipts - and apply the longer retention period (the ATO generally requires five years) so you do not destroy something still needed.
Set a recurring date (for example quarterly) to archive completed logs and, once a record is safely past every applicable retention period, dispose of it. Review the whole schedule annually and after any change to your licence or food safety program.
Frequently asked questions
How long should I keep food safety records in Australia?
There is no single national period. Under the Standard 3.2.2A evidence tool, records for prescribed activities generally have a minimum of around three months per FSANZ guidance. As a practical rule of thumb many businesses keep monitoring records such as temperature and cleaning logs for at least 12 months, and traceability and recall records longer. The exact requirement depends on your state, program and licence, so confirm it with your council and food regulator.
Are digital food safety records acceptable, or do I need paper?
Digital records are generally acceptable across Australia - the Code does not require paper. What matters is that records are genuine, legible, complete, protected against loss or tampering, and can be produced promptly when an authorised officer asks. Digital systems add timestamps, backups and easy searching. Whichever format you use, make sure current records can be accessed on site during an inspection.
How long should I keep temperature logs?
Many Australian food businesses keep temperature logs - cold holding, hot holding, cooking, cooling and receiving - for at least 12 months as a practical convention, so an inspector or auditor can review a full annual cycle. The legal minimum can be shorter (around three months under the Standard 3.2.2A evidence tool) or set differently by your regulator or food safety program, so confirm what applies. A year of history also helps you spot equipment that drifts out of range over time.
How long do I need to keep supplier invoices and traceability records?
Traceability records such as supplier invoices, delivery dockets and batch or lot numbers are generally kept longer than routine logs - commonly at least the shelf life of the product plus a margin - so you can trace product in a recall. Because invoices are also tax records, the ATO generally requires them to be kept for five years, and the longer period usually applies.
What happens if I cannot produce records during an inspection?
Missing or unavailable records can be treated as a compliance failure, even if your actual food handling was sound, because you cannot demonstrate that controls were being monitored. It can also weaken a due-diligence defence if there is ever an investigation. Keep current records on site and older records retrievable within a reasonable time, and confirm expectations with your council's environmental health team.
Do the retention rules differ between states and territories?
Yes. Retention requirements are not fully uniform. Standard 3.2.2A applies to many higher-risk businesses and generally sets a minimum of around three months for evidence-tool records, while Standard 3.2.1 food safety programs apply in some jurisdictions and licence categories and often set their own period. Licence conditions can add further obligations. Always check your licence, any food safety program and your state or territory food regulator's record-keeping guidance.