If you run a restaurant, hotel kitchen, café, catering company, or any business that prepares or serves food in the European Union, the answer to the most common question owners ask is short and unambiguous: yes, HACCP training is a legal requirement. The detail is more interesting than the headline — and it is where most operators go wrong.
The rule lives in Regulation (EC) No 852/2004, the cornerstone of EU food hygiene law. Article 5 requires every food business operator, with very limited exceptions, to put in place and maintain a permanent food-safety procedure based on the principles of HACCP — Hazard Analysis and Critical Control Points. HACCP is the structured method for identifying where food can go wrong in your operation, deciding how you will control those points, and proving that you do. Annex II, Chapter XII then sets the training rule. Food handlers must be supervised, instructed or trained in food hygiene matters proportionate to their work, and the person responsible for developing and maintaining your HACCP procedure must have received adequate training in the application of HACCP principles.
The Regulation reaches almost everyone in food service. Restaurants of every format, hotel kitchens and room service, catering companies, cafés, bakeries, takeaways, delivery and dark kitchens, food trucks, market stalls, school and hospital canteens, care homes, michelin star restaurants, pubs serving food — if you handle food for someone else to eat, you are almost certainly in scope. Member State law fills in the local detail, but the EU-wide floor is the same.
What trips operators up is the word "adequate." Regulation 852/2004 is deliberately principles-based, which gives flexibility but leaves no clear bright line. The European Commission's official guidance makes four things clear in plain terms. Training does not have to be a formal classroom course; on-the-job training, supplier demonstrations, digital learning and national guides to good practice all count. The depth of training must match the role, so someone preparing open high-risk food needs more than someone clearing tables. The person who designs the HACCP plan needs a deeper, structured HACCP qualification than the team executing it. And whatever you do, you must be able to evidence it — training records, refresher schedules and competency checks are how inspectors verify that "adequate" actually means adequate. Some Member States go further: France, for example, requires food service establishments to have at least one person who has completed a 14-hour HACCP training programme. Always check the local rules in every country you operate.
The consequences of getting this wrong escalate quickly. Enforcement starts with a written warning and an improvement notice, but it moves through fines, suspension of operations, and in serious cases full closure of the establishment. The most serious breaches carry criminal liability for the food business operator personally. Beyond the regulator, the reputational damage from a public hygiene downgrade and the civil-liability exposure from a foodborne-illness incident traced to a training gap tend to hurt more than the fine itself. Compliant training almost always costs less than a single enforcement event.
The takeaway for operators is simple. HACCP training is mandatory, the standard is principles-based, and the burden of proof sits with you. A modern, documented, role-proportionate training programme — refreshed annually and recorded for every staff member — turns a regulatory obligation into an operational asset.
Lexstream Academy's HACCP and food safety course is built for restaurants, hotels and caterers operating across the EU. It is digital-first, multilingual, and designed to produce the documented competence inspectors look for. Explore the HACCP training course.