The UK Food Business Compliance Checklist for 2026

Why compliance matters — and what this checklist covers

Food law in the UK is enforced primarily by local authorities through Environmental Health Officers (EHOs), backed by the Food Standards Agency (FSA) as the central authority. The consequences of getting it wrong range from a poor food hygiene rating that quietly costs you customers, through improvement notices and fines, to prosecution and, in the most serious cases, closure of your business. The vast majority of these outcomes are avoidable with a methodical approach.

The good news is that compliance is not a mystery. It breaks down into a finite set of well-defined areas, and most small food businesses can satisfy them with free FSA tools and good record-keeping habits. This guide covers the nine areas every UK food business should work through: registration, your food hygiene rating, food safety management (HACCP and SFBB), allergen management, Natasha's Law labelling, traceability, insurance, due-diligence records, and the cluster of "other" duties such as food handler training, waste, weights and measures, water and pest control. Each section ends with what you actually have to do; the big checklist table near the end pulls it all together.

1. Register your food business with the local council

The first legal step for almost every food business in the UK is registration with the local authority (your council) for the area in which you operate. You must register at least 28 days before you start trading. Registration is free, it cannot be refused, and you do not need to wait for any kind of approval before you begin once the notice period has passed. The council uses your registration to know you exist so it can include you in its inspection programme.

Registration applies far more broadly than many new owners expect. It covers home-based bakers, market and event stalls, online and mail-order sellers, mobile units and food vans, and businesses for which food is only a secondary activity. If you operate from more than one premises you generally register each one, and if you move premises you register the new location. You can find and register with your council through the official FSA route below.

Register a food business — Food Standards Agency. For a fuller view of the early steps, see our guide on how to start a food business in the UK.

What you must do: register with your local council at least 28 days before trading; register each premises; keep a copy of your confirmation.

2. Your food hygiene rating (FHRS)

Once registered, your premises will be inspected by an EHO, who assigns a Food Hygiene Rating under the FSA's Food Hygiene Rating Scheme (FHRS). The rating runs on a scale from 0 (urgent improvement necessary) to 5 (very good). It is based on three elements assessed at the visit: hygienic food handling (how food is prepared, cooked, cooled, stored and handled), the condition and cleanliness of the structure (the premises, layout, lighting, ventilation and facilities such as handwashing), and confidence in management — how well the business understands and manages food safety, which is judged largely on your documented procedures and records.

That third element is where many otherwise tidy kitchens lose marks. An immaculate kitchen with no records and no documented food safety management system will not score a 5, because the EHO cannot have confidence that the standards are maintained when they are not watching. This is why good record-keeping (covered below) is so closely tied to your rating.

Display rules differ across the UK. In Wales and Northern Ireland it is a legal requirement to display your rating sticker at the premises. In England, displaying the rating is currently voluntary, though it is strongly encouraged and customers, landlords and delivery platforms increasingly expect to see it. Scotland operates a separate Food Hygiene Information Scheme with a Pass / Improvement Required outcome rather than a 0–5 number.

3. Food safety management — HACCP and Safer Food, Better Business

Every UK food business is legally required to put in place and maintain a documented food safety management system based on the principles of HACCP (Hazard Analysis and Critical Control Points). HACCP is a structured way of identifying the food safety hazards in your process, deciding where the critical control points are, setting limits (such as cooking and chilling temperatures), monitoring them and acting when something goes wrong.

For most small caterers, bakers and retailers you do not need to write a complex bespoke HACCP plan from scratch. The FSA publishes a free pack called Safer Food, Better Business (SFBB), which is built on HACCP principles and contains ready-made templates: a daily diary for opening and closing checks, cleaning schedules, cooking and chilling guidance, and supplier records. Completing and maintaining an SFBB pack satisfies the legal requirement for a documented food safety management system based on HACCP for most small businesses, and EHOs widely accept it as evidence of compliance. Larger or more complex food manufacturers may need a fuller, formally written HACCP plan.

The crucial word in the law is "maintain". A plan filled in once and left in a drawer does not satisfy the requirement — you have to keep using it day to day. For a deeper walkthrough, see our guide to building a HACCP plan for a small UK food business.

What you must do: operate a documented food safety management system based on HACCP (SFBB for most small businesses); keep it up to date and use it daily.

4. Allergen management and the 14 allergens

Allergen management is one of the highest-risk areas of food compliance because the consequences of an error can be fatal. Under the Food Information Regulations 2014 (FIR 2014), which implement the EU Food Information for Consumers Regulation in UK law, food businesses must provide accurate information about the presence of 14 regulated allergens. The 14 are: cereals containing gluten, crustaceans, eggs, fish, peanuts, soybeans, milk, nuts (tree nuts), celery, mustard, sesame, sulphur dioxide and sulphites, lupin and molluscs.

For food sold loose or made to order, you must be able to provide accurate allergen information to customers on request and signpost that it is available. For packaged food, the rules are stricter (see Natasha's Law below). Good allergen management means more than a leaflet: it requires an accurate, recipe-level allergen matrix showing which allergens are present in each dish, staff training so everyone gives consistent answers, and physical controls to avoid cross-contamination (the unintended transfer of an allergen from one food to another — for example using the same utensils or surfaces without cleaning between).

For the detail of each allergen and where it hides, see our guide to the 14 major allergens under UK law, our overview of allergen management for food businesses, and the underlying rules in FIR 2014 explained.

This is an area where FoodCore is built to help directly. Because allergen data is attached to every ingredient, FoodCore generates a recipe-driven allergen matrix automatically — when an ingredient's allergens change, every dish that uses it updates, so your matrix never drifts out of date. You can see this in the allergen matrix software.

5. Natasha's Law and PPDS labelling

Natasha's Law governs the labelling of food that is prepacked for direct sale (PPDS). PPDS food is food that is packaged on the same premises from which it is sold, before the customer orders it — the classic example being a sandwich, salad or cake made and wrapped in the morning and put on a shelf or in a chiller for customers to pick up. Since 1 October 2021, every PPDS item must carry a label showing the name of the food and a full ingredients list, with the 14 regulated allergens emphasised within that list — typically in bold type.

It is important to be precise about what is and is not PPDS. Food cooked or assembled to order and handed straight to the customer (for example a burger made when ordered) is not PPDS, and food packed by a different business and supplied to you for resale follows prepacked rules instead. But the moment you package your own food in advance for direct sale, full PPDS labelling applies. Getting the boundary wrong is a common compliance failure. Our refresher on Natasha's Law in 2026 covers the edge cases.

What you must do: identify which of your products are PPDS; label each with the food name, full ingredients list and allergens emphasised; keep the labels accurate as recipes change.

6. Traceability — one step back, one step forward

UK and retained EU food law requires food businesses to maintain traceability: you must be able to identify, for any food you handle, your immediate supplier (one step back) and, if you supply other businesses, your immediate customer (one step forward). The purpose is speed: if a safety problem emerges, affected product must be capable of being traced and then withdrawn or recalled quickly, with the local authority and FSA notified where required.

In practice this means keeping delivery notes, invoices and batch or lot information from your suppliers, and — if you sell to other businesses such as shops or wholesalers — records of what you supplied and to whom. You also need a simple, written procedure for how you would withdraw or recall product if you had to. For most small businesses this is straightforward, but it must actually exist on paper or in your records before you need it, not be improvised during an incident.

What you must do: keep supplier records (one step back) and, where relevant, customer records (one step forward); have a documented withdrawal/recall procedure.

7. Insurance

Insurance for food businesses falls into two categories. Public liability and product liability insurance are, in most cases, not a strict legal requirement, but they are firmly considered good practice and are very often required contractually — markets, event organisers, landlords, wholesalers and retailers frequently insist on a minimum level of cover before they will work with you. Public liability covers injury or damage to third parties (a customer slips at your stall); product liability covers claims arising from the food itself.

Employer's liability insurance is different: it is a legal requirement if you employ staff, with only very limited exceptions, and you can be fined for trading without it. If you take on even one employee, you almost certainly need it.

What you must do: hold public and product liability cover appropriate to your trade and to your clients' requirements; hold employer's liability insurance if you employ anyone.

8. Due-diligence records

The Food Safety Act 1990 provides, at Section 21, a statutory due-diligence defence: if you are charged with a food safety offence, you can defend yourself by showing you took all reasonable precautions and exercised all due diligence to avoid committing it. In practice, that defence stands or falls on your records. Without contemporaneous, dated evidence, it is almost impossible to prove you did everything reasonable.

The records that support a due-diligence defence — and that EHOs look for when judging confidence in management — typically include:

• Temperature logs — fridges, freezers, cooking, cooling and hot-holding.
• Cleaning schedules — what was cleaned, by whom and when.
• Opening and closing checks and delivery checks.
• Supplier specifications and ingredient information.
• Allergen information and label versions — so you can show what a product's label said on a given date.
• Staff training records and pest control reports.

The decisive word is contemporaneous: records must be completed at the time, not reconstructed the night before an inspection. Our detailed guide to food safety due diligence in the UK covers the thresholds and the record set in depth.

What you must do: keep dated, contemporaneous records across temperatures, cleaning, suppliers, labels, allergens and training; retain them so they are available for inspection.

9. Other duties: training, waste, weights and measures, water and pests

Several further obligations apply depending on your activities:

• Food handler training — anyone handling food must be trained and supervised commensurate with their role. Level 2 Food Hygiene training is the widely expected standard for food handlers, and keeping certificates supports your records.
• Waste and recycling — businesses have a duty of care for commercial waste, must use a licensed waste carrier, and must follow rules on food/animal by-product waste; separate recycling requirements increasingly apply.
• Weights and measures — if you sell by weight or make quantity claims, you must comply with weights and measures law and ensure any scales used for trade are accurate and, where required, verified.
• Water and pest control — premises must have an adequate supply of potable water, and you must have effective pest control proportionate to the risk, with records of any treatments.

If you run a home-based operation, our guide to running a food business from home in the UK covers how these apply in a domestic kitchen.

The UK food business compliance checklist 2026

Work through the table below. The "Done?" column gives you a checkbox to tick off each requirement. This is a practical summary — always confirm the detail against current FSA guidance and your local council.

Where FoodCore fits — and where it does not

FoodCore is kitchen-management software for small UK food businesses. It is genuinely useful for several of the requirements above: it builds a recipe-driven allergen matrix that updates automatically, generates PPDS / Natasha's Law labels with the 14 allergens auto-bolded, keeps a label version history and audit trail that helps support due-diligence records, and handles recipe costing so your specifications and pricing live alongside your allergen data. Plans start at £19/month for Essentials and £55/month for Core, with a 7-day free trial and no card required at signup.foodcore.io.

Be clear about the boundary, though. FoodCore is a tool, not a compliance authority. It helps you manage labelling, allergens and records — but it does not register your business, write or run your HACCP/SFBB system for you, provide your insurance, or stand in for your EHO obligations. Compliance always remains your responsibility, and you should verify everything against current FSA guidance and your local council. See get started to try it.

Further resources

• FSA — Register a food business
• HACCP plan for a small UK food business
• Food safety due diligence in the UK
• Natasha's Law in 2026: a PPDS compliance refresher
• The 14 major allergens under UK law
• FIR 2014 — Food Information Regulations explained
• Allergen management for food businesses
• FoodCore Natasha's Law labelling software
• FoodCore allergen matrix software

Frequently asked questions