How long Australian food businesses should keep food safety records: retention periods, why they matter, digital vs paper, what to keep, and the jurisdiction…
There is no single retention period set across the whole Food Standards Code, and requirements vary by state, territory and the type of food safety system you run. As a practical rule of thumb, most Australian food businesses keep routine monitoring records (temperature, cleaning, receiving) for at least 12 months, and keep traceability and recall-related records longer. Note that records made under the Standard 3.2.2A evidence tool generally have a shorter legal minimum. Always confirm the exact period with your local council and state or territory food regulator. Key takeaways: There is no single Code-wide retention period. How long you must keep food safety records depends on your state or territory, whether you run a food safety program under Standard 3.2.1, and which Standard 3.2.2A tool you use - confirm the exact period with your regulator.. Where you rely on the Standard 3.2.2A evidence tool, FSANZ guidance indicates records for prescribed activities generally need to be kept for a minimum of around three months - but many businesses keep at least 12 months as a practical convention (see next point).. Keeping routine monitoring records (temperature, cleaning, receiving, calibration) for at least 12 months is a widely used rule of thumb, so an authorised officer or auditor can review a full annual cycle at an inspection or audit.. Keep traceability and recall-related records - supplier invoices, batch and lot details, distribution lists - for longer, generally at least the shelf life of the product plus a margin, so you can trace product both ways in a recall.. Food safety records that double as business records (invoices, receipts) may also fall under separate tax rules - the ATO generally requires business records to be kept for five years - so the longer period often applies.. Common record retention periods: Record type, Typical retention. Standard 3.2.2A evidence-tool records — Minimum around 3 months (FSANZ guidance); confirm locally. Routine monitoring (temperature, cleaning, receiving, calibration) — At least 12 months (practical convention). Corrective action records — With the related monitoring record, generally 12+ months. Traceability (invoices, batch/lot, distribution lists) — Product shelf life plus a margin, often longer. Records that are also tax records — Five years (ATO general requirement). Recall, withdrawal and serious complaint records — An extended period. Is there a single legal retention period? No. People often expect one national number, but the Food Standards Code does not set a single retention period that applies to every record in every food business. Standard 3.2.2 (Food Safety Practices and General Requirements) and Standard 3.2.2A (Food Safety Management Tools) require certain businesses to make and keep records, but how long you keep them is generally shaped by your jurisdiction and the type of food safety system you operate. Enforcement sits with your local council and state or territory food regulator, and their guidance - or a condition on your licence, registration or food safety program - is what usually fixes the period for you. Because of that, the safest approach is to treat published rules of thumb as a floor, then confirm the actual requirement that applies to your business. Where a food safety program under Standard 3.2.1 applies (for example in Victoria, or for certain licensed higher-risk businesses in other states), the program document itself or the regulator will typically state how long records must be retained. The Code requires records to be made and kept, but does not set one universal retention period. The period is generally set by your state or territory regulator, your licence or registration conditions, or your food safety program. Requirements differ for a records-based Standard 3.2.2A business, a Standard 3.2.1 food safety program, and a low-risk business. Always confirm the exact period with your council and state or territory food regulator. Common retention periods: a practical guide While the legal minimum varies, most Australian food businesses converge on a small set of practical periods. Under the Standard 3.2.2A evidence tool, FSANZ guidance generally indicates that records made for a prescribed activity need to be kept for a minimum of around three months and be available to an authorised officer - but many operators keep more than that. A common baseline for day-to-day monitoring records is to keep at least 12 months of history, so that an environmental health officer (EHO) or third-party auditor can review a full annual cycle at any inspection. Records that support traceability and recalls are usually kept longer, because you may need them well after a product has left your premises. Use the periods below as a starting point and adjust upward to whatever your regulator, auditor or customer specifications require. Standard 3.2.2A evidence-tool records: FSANZ guidance generally sets a minimum of around three months, kept available for your regulator - confirm the current requirement. Routine monitoring records (temperature logs, cleaning and sanitising checklists, receiving records, thermometer calibration): commonly kept for at least 12 months as a practical convention. Corrective action records (what went wrong and what you did): keep alongside the related monitoring record, generally at least 12 months. Supplier approval and traceability records (invoices, delivery dockets, batch and lot numbers): often kept for at least the shelf life of the product plus a margin, and frequently longer. Staff training and Food Safety Supervisor certificates: keep while the person is employed and for a reasonable period afterwards. Recall, withdrawal and serious complaint records: keep for an extended period as evidence of how the incident was handled. Records that are also tax or business records: the ATO generally requires these to be kept for five years. Why retention periods matter Records are only useful if you still have them when you need them, and the moments you need them most tend to arrive without warning. Keeping a solid history is the practical way a food business demonstrates due diligence - that it was systematically controlling food safety, not just hoping for the best. If a customer complains, a batch is implicated in illness, or a regulator investigates, contemporaneous records are often the strongest evidence you can produce. Retention also underpins traceability. In a recall you may need to trace a specific batch back to its supplier and forward to every customer who received it, sometimes months after despatch. Longer-kept traceability records make that possible. Finally, a year or more of monitoring data lets you spot trends - a fridge that drifts warm each summer, a cleaning task that is regularly skipped - so you can fix systemic problems before they cause harm. Evidence of due diligence if there is a complaint, illness cluster, investigation or prosecution. Traceability in a recall or withdrawal - back to suppliers and forward to customers. Trend analysis to catch failing equipment or recurring process gaps. Proof of compliance for council inspections and third-party audits. Support for insurance claims and to protect the business against liability. What records to keep (and for how long) The exact records you must keep depend on your food handling activities and your food safety system, but most commercial kitchens generate a similar core set. Match each type to a retention period, write it into your food safety documentation, and apply it consistently. As a general principle, monitoring records need to survive long enough to cover an audit cycle, while anything that identifies product or handles an incident should be kept longer. Temperature records - cold holding, hot holding, cooking, cooling, reheating and receiving temperatures. Cleaning and sanitising schedules and sign-offs. Thermometer and probe calibration records. Receiving and supplier records - who supplied what, when, and its condition on arrival. Supplier approval documents and product specifications. Traceability records - batch and lot numbers, and distribution or customer lists. Pest control service reports and internal monitoring logs. Staff training records and current Food Safety Supervisor certificate details. Corrective action logs - the problem, the action taken and who signed off. Complaint, recall and withdrawal records, including any communication with the regulator. Digital vs paper records Both digital and paper records are generally acceptable in Australia, and the Code does not force you to choose one format. What matters to an EHO is not the medium but whether the records are genuine, complete, legible and available when requested. Paper works well for small operations but is easy to lose, coffee-stain or forget, and it is harder to search when you need a specific date. Digital systems (apps, spreadsheets or dedicated food safety software) make records easier to complete, timestamp, search and back up, and they reduce the 'pencil-whipping' problem of logs filled in all at once. Whatever you choose, the record must be retrievable within a reasonable time when an authorised officer asks. For digital records that means reliable backups, protection against accidental loss or tampering, and a way to produce them on site - a system nobody can log into during an inspection is effectively no record at all. If you switch from paper to digital, keep the historical paper records for the remainder of their retention period rather than binning them on changeover. Digital or paper is generally fine - the test is that records are genuine, legible, complete and available on request. Digital systems add automatic timestamps, easy searching, backups and trend reporting. Back up digital records and protect them against loss, corruption and unauthorised change. Make sure records can be produced on site during an inspection, not only from a head-office login. When moving to digital, retain existing paper records until their retention period ends. Jurisdiction and program differences Retention requirements are one of the areas where Australian food regulation is genuinely not uniform, so a period that applies in one state may differ in another. Standard 3.2.2A (Food Safety Management Tools) became enforceable from December 2023 and applies to many higher-risk food service, catering and retail businesses that handle unpackaged, ready-to-eat, potentially hazardous food. Where you rely on the records-based evidence tool, you must make the required records for prescribed activities and keep them available for your regulator - FSANZ guidance generally indicates a minimum retention of around three months, though your regulator or auditor may expect longer. Separately, Standard 3.2.1 (Food Safety Programs) applies in some jurisdictions and to some licence categories - for example food safety programs are a long-standing requirement for many businesses in Victoria and for certain licensed higher-risk businesses in other states - and the program or the regulator generally specifies the retention period. Because of this patchwork, do not assume a figure you read for one state applies to yours. Check your licence or registration conditions, any food safety program template supplied by your regulator, and the record-keeping guidance published by your state or territory food authority. If in doubt, ask your council's environmental health team directly - they would rather answer the question than find records missing at an inspection. Standard 3.2.2A applies to many higher-risk businesses; FSANZ guidance generally sets a minimum of around three months for evidence-tool records, but specifics can vary by state or territory. Standard 3.2.1 food safety programs (e.g. in Victoria, and for some licensed businesses elsewhere) typically state their own retention period. Licence and registration conditions may impose specific record-keeping and retention obligations. Confirm the period that applies to you with your council and state or territory food regulator. Overlap with tax and business records Some food safety records are also business records, and that can extend how long you keep them. Supplier invoices, delivery dockets and receipts document both food traceability and financial transactions. The Australian Taxation Office generally requires business records to be kept for five years from when they are prepared or obtained, or the transaction is completed, whichever is later - which is often longer than the food safety minimum. Where a document serves both purposes, the longer period usually governs. It is worth mapping which of your records fall into this overlap so you do not accidentally destroy a document that is still needed for tax, even after its food safety retention period has passed. Keeping a simple retention schedule - one line per record type, with its period and where it is stored - avoids both premature disposal and endless hoarding. Invoices, dockets and receipts double as tax records - the ATO generally requires five years from preparation or the transaction, whichever is later. Where a record serves both food safety and tax purposes, apply the longer retention period. Maintain a written retention schedule so nothing is destroyed too early or kept without reason. Confirm tax record obligations at ato.gov.au and food safety obligations with your regulator. Worked examples: An invoice that is also a tax record: A supplier invoice records both food traceability and a financial transaction. Even after its food safety retention period passes, the ATO generally requires business records to be kept for five years. Because the document serves both purposes, the longer period governs, so it is kept for at least five years. Binning logs at year-end: A cafe clears out last year's temperature and cleaning logs each January to save space. At the next inspection it can't produce a full annual cycle, which an EHO or auditor will notice. Keeping routine monitoring records for at least 12 months avoids the gap. Checklist: A written retention schedule lists every record type, its retention period and where it is stored. Standard 3.2.2A evidence-tool records are kept and available for at least the minimum FSANZ period (generally around three months), confirmed with your regulator. Routine monitoring records (temperature, cleaning, receiving, calibration) are kept for at least 12 months as a practical convention. Traceability records (supplier invoices, batch and lot numbers, distribution lists) are kept for at least product shelf life plus a margin, and generally longer. Recall, withdrawal and serious complaint records are kept for an extended period. Digital records are backed up, protected against tampering and can be produced on site during an inspection. Paper records are stored dry, legible, labelled and secure against loss or damage. Records that are also tax records are kept for at least five years (ATO general requirement). The retention period for each record type has been confirmed with your council or state/territory regulator. Historical records are retained through their full period even after switching from paper to digital. Common mistakes: Assuming there is one national retention period - the period varies by jurisdiction, food safety program and record type, so a figure for one state may not apply to yours.. Discarding logs at the end of the month or year without checking the required retention period, leaving gaps an auditor or EHO will notice.. Keeping only current records on site with older ones unavailable, so a full year of history cannot be produced at inspection.. Storing digital records with no backup, or in a system nobody can access during an inspection, which is effectively no record at all.. Throwing out invoices and dockets once the food safety period passes, forgetting they may still be needed as tax records for five years.. Binn
How to set up a records retention system
Walk through a normal week and list each record you generate - temperature logs, cleaning sheets, receiving records, calibration, pest reports, training, corrective actions and invoices. You cannot set retention periods for records you have not identified.
Check your licence or registration conditions, your food safety program if you have one, and your state or territory regulator's record-keeping guidance. Note the required minimum against each record type - for example around three months for Standard 3.2.2A evidence-tool records - and default to at least 12 months where nothing more specific applies.
Create a one-page table: record type, retention period, format (digital or paper) and where it is stored. This schedule tells everyone how long to keep each record and prevents both premature disposal and clutter.
Choose digital, paper or a mix. For digital, set up automatic backups and access controls; for paper, use a dry, labelled, tamper-resistant filing system. Make sure current records can be produced on site during an inspection.
Flag any records that are also tax or business records - invoices, dockets, receipts - and apply the longer retention period (the ATO generally requires five years) so you do not destroy something still needed.
Set a recurring date (for example quarterly) to archive completed logs and, once a record is safely past every applicable retention period, dispose of it. Review the whole schedule annually and after any change to your licence or food safety program.
Frequently asked questions
How long should I keep food safety records in Australia?
There is no single national period. Under the Standard 3.2.2A evidence tool, records for prescribed activities generally have a minimum of around three months per FSANZ guidance. As a practical rule of thumb many businesses keep monitoring records such as temperature and cleaning logs for at least 12 months, and traceability and recall records longer. The exact requirement depends on your state, program and licence, so confirm it with your council and food regulator.
Are digital food safety records acceptable, or do I need paper?
Digital records are generally acceptable across Australia - the Code does not require paper. What matters is that records are genuine, legible, complete, protected against loss or tampering, and can be produced promptly when an authorised officer asks. Digital systems add timestamps, backups and easy searching. Whichever format you use, make sure current records can be accessed on site during an inspection.
How long should I keep temperature logs?
Many Australian food businesses keep temperature logs - cold holding, hot holding, cooking, cooling and receiving - for at least 12 months as a practical convention, so an inspector or auditor can review a full annual cycle. The legal minimum can be shorter (around three months under the Standard 3.2.2A evidence tool) or set differently by your regulator or food safety program, so confirm what applies. A year of history also helps you spot equipment that drifts out of range over time.
How long do I need to keep supplier invoices and traceability records?
Traceability records such as supplier invoices, delivery dockets and batch or lot numbers are generally kept longer than routine logs - commonly at least the shelf life of the product plus a margin - so you can trace product in a recall. Because invoices are also tax records, the ATO generally requires them to be kept for five years, and the longer period usually applies.
What happens if I cannot produce records during an inspection?
Missing or unavailable records can be treated as a compliance failure, even if your actual food handling was sound, because you cannot demonstrate that controls were being monitored. It can also weaken a due-diligence defence if there is ever an investigation. Keep current records on site and older records retrievable within a reasonable time, and confirm expectations with your council's environmental health team.
Do the retention rules differ between states and territories?
Yes. Retention requirements are not fully uniform. Standard 3.2.2A applies to many higher-risk businesses and generally sets a minimum of around three months for evidence-tool records, while Standard 3.2.1 food safety programs apply in some jurisdictions and licence categories and often set their own period. Licence conditions can add further obligations. Always check your licence, any food safety program and your state or territory food regulator's record-keeping guidance.
How long should I keep Standard 3.2.2A evidence-tool records?
Where you rely on the Standard 3.2.2A evidence tool, FSANZ guidance generally indicates records for prescribed activities should be kept for a minimum of around three months and be available to an authorised officer. Many businesses keep at least 12 months as a practical convention, so an auditor can review a full annual cycle. Confirm the current requirement with your regulator.
Should I keep a written retention schedule?
Yes. A simple one-page retention schedule, one line per record type with its retention period, format and where it is stored, tells everyone how long to keep each record and prevents both premature disposal and endless hoarding. Review it annually and after any change to your licence or food safety program, and apply the longer period where a record is also a tax record.