Food Safety and FSA Compliance for UK Hospitality Businesses in 2026

The Food Hygiene Rating Scheme — What It Means for Your Business

The Food Standards Agency's Food Hygiene Rating Scheme (FHRS) assigns scores from 0 to 5 to food businesses following inspection by local authority officers. In Wales, displaying your rating is a legal requirement. In England, display is currently voluntary — but the FSA is actively consulting on making display mandatory in England, and the commercial reality is already clear: customers actively check ratings before choosing where to eat.

Inspectors assess three areas, each weighted equally in calculating your overall score:

Confidence in Management — the documentation component — is where most businesses lose points. A spotless kitchen with no written food safety management system will score poorly. Inspectors want to see that you understand food safety, have documented your procedures, and can evidence staff training.

HACCP — The Legal Foundation of Food Safety

Under Regulation (EC) 852/2004, retained in UK law post-Brexit, all food businesses must have a food safety management system based on Hazard Analysis and Critical Control Points (HACCP) principles. For most SME hospitality businesses, this means a documented system covering:

• Hazard identification — what could go wrong at each stage of food preparation
• Critical Control Points (CCPs) — the specific points where controls are essential, typically cooking temperatures and chilling
• Monitoring procedures — how you check that controls are working, including temperature records
• Corrective actions — what you do if a CCP is not met
• Verification — how you confirm the system is working overall
• Record keeping — documentary evidence that the system is being followed

The FSA's Safer Food, Better Business (SFBB) packs provide a simplified HACCP-based system designed for smaller businesses. However, inspectors are increasingly noting where businesses are using SFBB packs without adapting them to their specific menu and operation — a generic pack that does not reflect your actual dishes and processes is not compliant.

Natasha's Law and Allergen Requirements in 2026

Natasha's Law — the Food Information (Amendment) (England) Regulations 2021 — requires full ingredient and allergen labelling on all food prepacked for direct sale (PPDS). This came into force in October 2021, but FSA enforcement data from 2025 shows that a significant proportion of food businesses still do not fully comply, particularly regarding labelling of grab-and-go items, meal deals and pre-packaged sandwiches.

In 2026, the FSA has tightened enforcement focus on:

• PPDS products without full ingredient lists including allergen highlighting
• Staff training records for allergen awareness — inspectors now expect documented evidence of training, not just verbal confirmation
• Written allergen management procedures covering cross-contamination controls, particularly for the 14 major allergens
• Customer communication — how allergen information is provided to customers who ask, including verbal communication procedures and written menus

The 14 Major Allergens

Your allergen management policy must address all 14 major allergens: celery, cereals containing gluten (including wheat, rye, barley and oats), crustaceans, eggs, fish, lupin, milk, molluscs, mustard, peanuts, sesame, soybeans, sulphur dioxide and sulphites, and tree nuts. Controls for each must be documented and understood by all food handlers.

Martyn's Law — New Requirements for Hospitality Venues

The Terrorism (Protection of Premises) Act 2025, known as Martyn's Law, came into force in 2026 and introduces new obligations for public-facing venues. Most hospitality businesses — restaurants, pubs, cafés and hotels — will fall within scope. The Act requires venues to have a documented counter-terrorism procedure covering evacuation, lockdown and communication with emergency services. For most hospitality businesses, this is a document that simply does not currently exist.

The Essential Documents for a Hospitality Inspection

Local authority food safety officers and HSE inspectors expect to see the following documentation immediately available:

• Food Safety and HACCP Policy — specific to your menu and operation
• Allergen Management SOP — covering all 14 allergens with cross-contamination controls
• Temperature monitoring records — fridge/freezer checks, cooking temperatures, chilling records
• Cleaning schedule — daily, weekly and periodic cleaning tasks with sign-off
• Staff food hygiene training records — evidence of Level 2 Award as minimum for all food handlers
• Pest control records and contractor certificates
• Supplier records and delivery checks
• Fire Safety Policy and evacuation procedure
• Health and Safety Policy
• Martyn's Law counter-terrorism procedure (new for 2026)

All documentation should be dated, reviewed within the last 12 months, and accessible to staff — not filed away in a manager's office.

Staff Training — The Most Overlooked Compliance Gap

Food hygiene law does not specify a minimum qualification level for food handlers, but inspectors expect evidence of appropriate training. In practice, most inspectors look for Level 2 Award in Food Safety in Catering as a minimum for all staff handling open food. For managers and supervisors, Level 3 is increasingly expected.

Training records must be documented. A verbal assertion that "all staff have done their food hygiene training" is not sufficient. Inspectors will ask to see certificates or records, and inability to produce them is a direct route to a lower Confidence in Management score.