Standard 3.2.2A in plain English: Category 1 vs 2, the three food-safety management tools, Food Safety Supervisor, training and substantiation — and the records to keep.
Standard 3.2.2A is the Food Standards Code's food-safety management standard. Since it commenced in December 2023, many food-service, caterer and retail businesses must use a set of food-safety management tools — a Food Safety Supervisor, food-handler training, and (for higher-risk businesses) substantiation that key controls are working. Exactly what you must do depends on whether your business is Category 1 or Category 2 — confirm your classification with your state or territory regulator. Who it applies to: Category 1 vs Category 2. Standard 3.2.2A sorts affected businesses by risk: Category 1 — businesses that process unpackaged, potentially hazardous, ready-to-eat food (for example cooking then serving, or handling ready-to-eat food that won't be cooked again). They must implement all three management tools, including substantiation. Category 2 — businesses that handle unpackaged, potentially hazardous, ready-to-eat food but don't process it in the Category 1 sense. They must have a Food Safety Supervisor and trained food handlers . Some lower-risk activities fall outside 3.2.2A. Classification depends on your actual activities, so confirm where your business sits with your regulator rather than assuming. The three food-safety management tools. Food Safety Supervisor (FSS) — a trained, nominated person reasonably available during food handling. Food-handler training — staff who handle food have the skills and knowledge to do it safely. Substantiation — for Category 1, evidence that your critical controls (like cooking, cooling and cold holding) are actually working. Food Safety Supervisor. Most affected businesses must nominate an FSS, certified through approved training. Requirements and certificate validity vary by jurisdiction (commonly five years). See the full Food Safety Supervisor guide , and confirm your state's rules with the regulator. Food-handler training. Food handlers must have appropriate skills and knowledge for the tasks they do — safe temperatures, cleaning and sanitising, cross-contamination, allergens and personal hygiene. In-app training modules with assessments are an easy way to build and evidence this for every staff member. Substantiation: showing your controls work. For Category 1 businesses, substantiation means being able to demonstrate that your key food-safety controls are effective — usually through records. That's cooking and reheating to a safe core (≥ 75°C), cooling within the two-stage rule (60°C → 21°C in 2 hours, then → 5°C in a further 4 hours), cold holding at ≤ 5°C and hot holding at ≥ 60°C, plus the corrective actions you took when something was out of range. The records to keep. Whether you're Category 1 or 2, timestamped records are how you prove compliance at an inspection: Temperature checks (fridge, freezer, cooking, cooling, hot holding). Cleaning and sanitising sign-offs. Corrective actions for any failed check. Food-handler training and the FSS certificate (with its expiry). How FoodSafety HQ meets 3.2.2A. FoodSafety HQ turns each requirement into a daily routine: guided checks log temperatures against the right limits, a failed check raises a corrective action automatically, training and FSS certificates are tracked with expiry reminders, and everything exports as a council-ready report. It helps you keep the records 3.2.2A expects — it doesn't replace your Food Safety Supervisor. When did Standard 3.2.2A start? Standard 3.2.2A commenced in December 2023. Affected businesses are expected to have the relevant food-safety management tools in place; confirm current requirements and any transition details with your state or territory regulator. Does Standard 3.2.2A apply to my business? It depends on your activities and classification. Businesses handling unpackaged, potentially hazardous, ready-to-eat food are commonly covered (as Category 1 or 2); some lower-risk activities are not. Confirm your classification with your regulator. What's the difference between Category 1 and Category 2? Category 1 businesses process unpackaged, potentially hazardous, ready-to-eat food and must implement all three tools, including substantiation. Category 2 businesses must have a Food Safety Supervisor and trained food handlers. Does 3.2.2A replace a HACCP food safety program? For many businesses the 3.2.2A tools are a more practical alternative to a full documented HACCP program, but some higher-risk or licensed businesses still need a food safety program. Confirm what applies to you with your regulator. Do I need to keep records under 3.2.2A? Category 1 businesses need to substantiate that key controls work, which in practice means records. Keeping timestamped temperature, cleaning, corrective-action and training records is the simplest way to show compliance at an inspection.
Frequently asked questions
When did Standard 3.2.2A start?
Standard 3.2.2A commenced in December 2023. Affected businesses are expected to have the relevant food-safety management tools in place; confirm current requirements and any transition details with your state or territory regulator.
Does Standard 3.2.2A apply to my business?
It depends on your activities and classification. Businesses handling unpackaged, potentially hazardous, ready-to-eat food are commonly covered (as Category 1 or 2); some lower-risk activities are not. Confirm your classification with your regulator.
What's the difference between Category 1 and Category 2?
Category 1 businesses process unpackaged, potentially hazardous, ready-to-eat food and must implement all three tools, including substantiation. Category 2 businesses must have a Food Safety Supervisor and trained food handlers.
Does 3.2.2A replace a HACCP food safety program?
For many businesses the 3.2.2A tools are a more practical alternative to a full documented HACCP program, but some higher-risk or licensed businesses still need a food safety program. Confirm what applies to you with your regulator.
Do I need to keep records under 3.2.2A?
Category 1 businesses need to substantiate that key controls work, which in practice means records. Keeping timestamped temperature, cleaning, corrective-action and training records is the simplest way to show compliance at an inspection.