HACCP temperature monitoring: what records the law requires and when an automatic logger pays off
Regulation (EC) 852/2004 requires every food business to keep the cold chain unbroken, monitor the critical control points it has identified, and keep documents and records proportionate to the size of the business for an appropriate period. It does not say how often to write the fridge temperature down. That is set in your own HACCP plan, and an automatic logger is the way to make the plan hold on the day nobody had time for the clipboard.
In short
- Article 5 of Regulation 852/2004 requires HACCP-based procedures with monitoring at critical control points and records; Annex II Chapter IX requires the cold chain not to be interrupted.
- The regulation sets no fixed logging interval. Twice-daily manual checks are common practice; the inspector checks that you did what your plan says.
- Manual logs fail in two ways: the gap (Sunday, holiday, staff shortage) and the copied number (4 °C every day for a year). Both are visible to an inspector.
- An automatic logger with alarms costs about the same as one written-off fridge of stock, and gives a continuous record instead of two points a day.
What the regulation actually says
Regulation (EC) No 852/2004 on the hygiene of foodstuffs is the framework for every food business in the EU, from a school canteen to a distribution warehouse. Three provisions concern temperature. Article 5 obliges operators to put in place, implement and maintain procedures based on HACCP principles, including monitoring at critical control points, corrective actions, and documents and records commensurate with the nature and size of the business. Annex II Chapter IX requires raw materials and food to be kept at temperatures that do not result in a risk to health, and the cold chain not to be interrupted, with limited periods outside temperature control allowed only for practical handling.
What the regulation does not do is prescribe a logging interval, a thermometer type or a record format. Those are decided in the operator's HACCP plan and checked by the inspector against that plan. If your plan says "fridge temperatures recorded at 08:00 and 16:00 daily", an inspector looks for exactly that, and a missing Sunday is a non-conformity even if the fridge was fine.
Temperature as a critical control point
Cold storage is the most common critical control point in a food business, because it is the step where a failure cannot be corrected later. The usual critical limits are 5 °C or below for chilled food (national rules vary between 4 and 8 °C for specific products), -18 °C or below for frozen food, and 63 °C or above for hot holding. The monitoring procedure must say what is measured, how, how often, by whom, and what happens when the limit is exceeded.
| Control point | Critical limit | Manual practice | Automatic logger |
|---|---|---|---|
| Chilled storage | ≤ 5 °C | Read and write twice daily | Every 5–15 min, alarm above 5 °C after delay |
| Frozen storage | ≤ -18 °C | Read and write daily | Continuous, alarm above -15 °C |
| Hot holding | ≥ 63 °C | Probe thermometer each service | Probe logger in bain-marie |
| Delivery receipt | Per product | Probe on arrival, written | Manual still needed |
Delivery checks stay manual: someone has to open the van and probe the box. Storage is where automation earns its keep.
Where manual logs go wrong
Inspectors know the two failure modes of a paper log, and look for both. The first is the gap: the weekend, the bank holiday, the week the only trained person was off sick. A gap in the record is a gap in the HACCP plan, whatever the fridge did. The second is the copied number. A sheet that reads 4 °C at every entry for eleven months is not a record of the fridge; it is a record of the pen. Real fridges drift, cycle and react to deliveries, and a log with no variation is treated as unreliable.
There is a third failure that inspectors do not see but the business does: the fridge that failed at 19:00 on Friday and was found at 07:00 on Monday. Two manual readings a day cannot catch it. The cost of that event, stock plus disposal plus the risk of having served from it, is the number to weigh against the price of a logger.
What an automatic logger changes
- The record is continuous. A reading every five minutes for every unit, exportable to CSV or XLSX for any period the inspector names. No gaps, no copied numbers.
- The failure is caught the same evening. An alarm by e-mail from the device, plus SMS or push through a cloud app, reaches the manager at 19:20 rather than the cook at 07:00 on Monday.
- The plan becomes easier to write. "Continuous automatic monitoring, alarm above 5 °C sustained for 20 minutes, corrective action per procedure X" is a cleaner CCP than a sheet and a schedule.
- Manual checks do not disappear entirely. Most plans keep a daily visual check that the logger is running and a weekly review of the alarm log. That is a two-minute task, not a twice-daily round.
Use a buffered probe, a sensor in a glycol vial or aluminium block inside the fridge, so the record shows the food temperature and not the air spike from every door opening. Set an alarm delay of 15–20 minutes so service-time openings never trigger and a failed compressor still does within the hour.
A setup for a kitchen, canteen or small store
One logger per two cold units is the usual arrangement: a device with up to four inputs takes two temperature probes and still has inputs for a door contact on the walk-in and a leak sensor under the ice machine. A WiFi logger such as EnviSensor WiFi avoids running cable through a kitchen; a LAN logger suits the back office. Each device serves its readings on a local web page, sends e-mail alarms on its own, and can report to the free tier of CE MonitorApp for the phone notifications and a shared view of several sites.
For a canteen with three fridges, a freezer and a walk-in cold room, that is two or three loggers, five probes, one door contact, and hardware in the range of EUR 400–600 net. For an operator serving a hospital, a school or a military unit under a contract that requires documented HACCP compliance, the export function and the alarm log are the items that get checked; make sure both are demonstrated before the first audit, not during it.
Frequently asked questions
How often does HACCP require fridge temperatures to be recorded?
Regulation 852/2004 sets no interval. Your HACCP plan does, and the inspector checks compliance with the plan. Twice daily is common manual practice; an automatic logger records every few minutes and removes the question.
Is an automatic data logger accepted as a HACCP record?
Yes. The regulation requires records commensurate with the business and does not prescribe paper. An exportable electronic log with an alarm history is a stronger record than a hand-written sheet, provided the plan describes it and the instrument is checked.
What temperature must a food fridge stay below?
Typically 5 °C or below for chilled food and -18 °C or below for frozen food, with national rules ranging between 4 and 8 °C for specific products. Your HACCP plan sets the critical limit for each unit.
Do I still need manual checks with an automatic logger?
A short daily check that the logger is running and a weekly review of the alarm log are usually kept in the plan. Delivery temperature checks remain manual because someone has to probe the goods on arrival.
How long must HACCP temperature records be kept?
The regulation says "for an appropriate period"; national guidance and most plans keep them for at least one year, longer for products with a long shelf life. Electronic exports make long retention free.
Related pages
EnviSensor WiFi
Wireless logger for kitchens, up to four sensors.
Cold chain monitoring
Warehouse and transport requirements.
Retail chains
Monitoring for stores and food retail.
Need monitoring at your site?
We will help you choose sensors and the way they run — locally on your LAN, in your own monitoring system or in the CE MonitorApp cloud.
