Does an official "HACCP certification" exist? What French law actually says
Search for “certification HACCP” and you will find dozens of offers promising an “official certificate”, sometimes presented as “mandatory before opening a restaurant”. The problem: that certification does not exist. No French or European text provides for an “HACCP certification”. Here is what the regulation actually requires, what the certificates sold online are worth, and how to obtain — if you genuinely need one — real third-party recognition.
What the regulation requires: a method, not a certificate
HACCP (Hazard Analysis Critical Control Point) is a method for analysing hazards and controlling critical points, formalised internationally by the Codex Alimentarius. In Europe, regulation (EC) no. 852/2004 — part of the “hygiene package”, applicable since 1 January 2006 — requires every food-business operator to implement, apply and maintain procedures based on HACCP principles.
Read it carefully: the regulation requires procedures based on the principles of HACCP. Not an exam, not a diploma, not a certificate. In France, those procedures sit inside the plan de maîtrise sanitaire (PMS, the sanitary control plan): the documentation describing how your establishment guarantees the hygiene of its production — good hygiene practice, HACCP-based procedures, traceability and non-conformity management. That is what DDPP inspectors check, not a framed diploma on the wall. Our page HACCP and the sanitary control plan covers the whole mechanism.
The consequence is clear-cut: nobody can “certify you HACCP” in the regulatory sense, because there is no official certification standard, no body appointed to deliver one, and no obligation to hold one.
Where the confusion comes from
Three very real mechanisms feed the misunderstanding:
- The 14-hour food-hygiene training. In commercial catering, the establishment must have at least one person in its staff trained in food hygiene under a regulatory 14-hour syllabus — a course frequently marketed as an “HACCP training”. It delivers a training certificate for a person, not a certification of the establishment. See our page food-hygiene training and our article on which restaurants the obligation covers.
- Voluntary certifications that embed HACCP. ISO 22000, IFS and BRCGS certify a food safety management system in which HACCP is one building block. These are genuine third-party certifications — but voluntary, paid for, and designed for industry and its clients, not required by regulation.
- Short awareness courses. Many providers sell one-day or e-learning HACCP courses, “certificate” included. Training your team is excellent practice (and documenting it feeds your sanitary control plan); believing the certificate equals compliance is a mistake.
What the certificates are worth (and not worth)
Let’s be precise, because not everything belongs in the bin:
| Document | What it proves | What it does not prove |
|---|---|---|
| 14-hour training certificate (commercial catering) | The establishment’s training obligation is covered | That the sanitary control plan exists and is applied |
| HACCP awareness certificate (1 day, e-learning…) | A staff-training effort, useful in your file | Any regulatory compliance |
| ISO 22000 / IFS / BRCGS certificate | A management system audited by an accredited third party | Nothing beyond its scope — and it exempts you from no official inspection |
| “HACCP certification of the establishment” sold online | Nothing regulatory | Everything else |
Beware, finally, of dishonest sales arguments: “HACCP certificate required before opening”, “HACCP licence demanded by the DDPP”… If a provider presents HACCP as a certification only they can grant, treat it as a red flag about their entire offer. The pattern is familiar in every regulated field: an obligation that worries business owners, a technical acronym, and sellers who convert that worry into a paid document. The antidote is always the same — go back to what the text actually requires, and spend your money on meeting it rather than on framing it.
What actually counts on inspection day
The DDPP inspector arrives unannounced. They ask for no certificate: they observe your practices, measure temperatures, examine the premises and open your sanitary control plan — temperature logs, signed cleaning schedule, goods-in checks, traceability, your procedures built on the 7 HACCP principles. Since 2017, the outcome of that inspection is published on Alim’confiance, France’s public food-hygiene rating site, on a four-level scale from “very satisfactory” to “to be corrected urgently”.
Research confirms that the real issue is practice, not paper. A study by Eunice Taylor published in 2001 in Food Control, “HACCP in small companies: benefit or burden?”, shows that small businesses rarely fail for lack of will, but because they perceive the method as complex and bureaucratic — and retreat into paperwork for show. Likewise, the work of Fotopoulos, Kafetzopoulos and Psomas published in 2009 in the International Journal of Quality & Reliability Management on the critical factors of effective food safety implementation identifies genuine staff training and management commitment as decisive — far ahead of holding any certificate.
If you need third-party recognition
There is one case where seeking a “certification” makes sense: when your professional customers demand it. Large retailers, industrial clients and export buyers frequently require certified food safety management. The answer is not an “HACCP certificate” but a recognised voluntary certification: ISO 22000 for a management-system approach, IFS or BRCGS for suppliers to retail. All embed the HACCP method and build on your existing sanitary control plan. We compare these schemes with the regulatory obligation in HACCP or ISO 22000.
For a restaurant, an artisan food business or a shop with no industrial clients, these certifications are rarely relevant: your priority is a solid, living sanitary control plan.
Take action
Don’t spend your budget on a worthless certificate: invest it in a sanitary control plan that is actually applied. Our page HACCP and the sanitary control plan details the obligations, the method and the frequent questions — and our free guide walks you through it step by step, from good hygiene practice to the DDPP inspection.
Frequently asked questions
+Does an "HACCP certificate" bought online have any legal value?
Not as such. No French or EU text requires or recognises an 'HACCP certificate'. A certificate can prove that a training course was attended — which matters for the mandatory 14-hour food-hygiene course in commercial catering — but it does not make the establishment compliant: only an applied, documented plan de maîtrise sanitaire (sanitary control plan) does.
+Does the DDPP ask for an HACCP certificate during an inspection?
No. The inspector from the DDPP (the departmental consumer-protection directorate) asks for the sanitary control plan and its records (temperatures, cleaning, traceability), observes practices and premises. They may check that the food-hygiene training obligation is covered within the staff, but they will never request an 'HACCP certificate', which has no regulatory existence.
+How can a business get official third-party recognition of its food safety management?
Through a voluntary certification delivered by an accredited third party: ISO 22000, or GFSI-recognised schemes such as IFS and BRCGS, all of which embed the HACCP method. These schemes mainly serve businesses supplying retailers or industrial clients; they come on top of the regulatory obligation and never replace it.