1. What does HACCP stand for?
HACCP stands for Hazard Analysis and Critical Control Points. It is a systematic, science-based approach to identifying and controlling food safety hazards — biological, chemical, and physical — at specific points in the food production process, before those hazards can cause harm to consumers.
The key word is prevention. Rather than inspecting finished products at the end of a production line and hoping for the best, HACCP forces food businesses to think ahead: where in my process could something go wrong, and what specific controls will I put in place to prevent it?
That shift in mindset — from reactive inspection to proactive, documented prevention — is what makes HACCP the global benchmark for food safety management, and the framework that underpins Kenya's food safety regulatory direction.
A hazard in HACCP terms is any biological, chemical, or physical agent in food that has the potential to cause an adverse health effect. A Critical Control Point is a step in the production process where a control measure can be applied to prevent, eliminate, or reduce that hazard to an acceptable level.
2. Where did HACCP come from?
HACCP was developed in the 1960s through a partnership between NASA, the United States Army Natick Laboratories, and the Pillsbury Company. The challenge they faced was remarkable: how do you ensure that food produced for astronauts in space is completely free from pathogens and physical hazards, when there are no medical facilities available and no way to perform end-product testing in zero gravity?
The answer was to move quality assurance upstream — to design safety into the production process itself rather than inspect it out at the end. The system they developed proved so effective that it was adopted by the broader food industry, and by the 1990s it had been formalised by the Codex Alimentarius Commission — the joint FAO/WHO body that sets international food standards — as the global recommended approach to food safety management.
Today HACCP forms the backbone of every major international food safety certification scheme including ISO 22000, FSSC 22000, BRCGS, SQF, and IFS — all of which are required by food retailers and buyers across the EU, UK, Middle East, and US. In Kenya, HACCP is referenced explicitly in the National Food Safety Policy of 2021 as the standard against which Kenyan food safety law must be modernised.
3. Why HACCP matters for Kenyan food businesses
Kenya's food industry is one of the most dynamic on the continent. The country is a significant exporter of fresh produce — avocados, French beans, mangoes, passion fruit, and cut flowers — to the European Union and United Kingdom. It has a growing domestic food processing sector covering dairy, meat, flour milling, beverages, packaged foods, and aquaculture. And it has millions of smallholder farmers and cooperatives feeding the domestic market.
In every segment of this industry, the consequences of food safety failure are serious:
A single phytosanitary or food safety failure can destroy years of investment. Documented examples in Kenya include avocado exporters losing millions of shillings in rejected EU shipments due to pesticide residue violations, dairy processors facing KEBS enforcement actions for microbiological non-compliance, and grain processors dealing with aflatoxin contamination — one of the most significant food safety risks in the East African region. HACCP is the framework that prevents these failures before they happen.
Consumer health and legal liability. Contaminated food causes illness, hospitalisation, and in severe cases death. Aflatoxin contamination of maize and groundnuts, pathogenic bacteria in dairy products, pesticide residues on fresh produce, and foreign body contamination in processed foods are all documented food safety risks in the Kenyan context. A food business operator whose product causes consumer harm faces not only reputational damage but legal liability under the Public Health Act Cap 242 and the Food, Drugs and Chemical Substances Act Cap 254.
Market access — domestic and export. The EU's stringent food safety requirements are enforced at the border — produce that fails inspection is rejected and destroyed. UK supermarkets require HACCP-based certification as a baseline trading condition. Kenya's major domestic supermarket chains are increasingly demanding food safety certificates from their suppliers. Without HACCP, the doors to premium markets — local and international — are effectively closed.
Regulatory compliance. KEBS, KEPHIS, the Kenya Dairy Board, the Agriculture and Food Authority, and county public health departments all conduct inspections and audits. A documented HACCP system is the most defensible evidence that a food business operator is taking food safety seriously and systematically.
Operational efficiency. A well-implemented HACCP system reduces waste, rework, and product recalls — all of which have direct cost implications. Businesses that implement HACCP typically discover process inefficiencies and hazard points that were costing them money without their knowledge.
4. HACCP and Kenyan law — what KEBS requires
The Kenya Bureau of Standards (KEBS) is Kenya's national standards body, established under the Standards Act Cap 496 of the Laws of Kenya. Its mandate covers the development and promotion of standards across sectors including food safety, quality assurance, and consumer protection. KEBS is also Kenya's national Codex Alimentarius contact point, meaning it represents Kenya in the development of international food standards and translates those standards into the Kenyan context.
| Law / Standard | Relevance to HACCP | Enforced by |
|---|---|---|
| Standards Act, Cap 496 | Mandatory product certification for all locally manufactured food products. HACCP expected as part of the quality management system. | KEBS |
| Food, Drugs & Chemical Substances Act, Cap 254 | Controls food safety and quality. Public Health Officers enforce compliance at production level. | Ministry of Health / County Governments |
| Public Health Act, Cap 242 | General food hygiene requirements. Basis for food premises inspections by Public Health Officers. | Ministry of Health |
| National Food Safety Policy, 2021 | Explicitly calls for Kenyan food laws to be revised and adapted based on HACCP and GMP. Sets the regulatory direction. | Ministry of Agriculture |
| Dairy Industry Act, Cap 336 | Governs milk processing. HACCP implementation expected by Kenya Dairy Board for licensed processors. | Kenya Dairy Board / KEBS |
| Meat Control Act, Cap 356 | Governs abattoir and meat processing operations. HACCP is the expected food safety framework. | Directorate of Veterinary Services |
| KS 1758 (Fresh Produce) | Kenya's national fresh produce standard — food safety, environmental sustainability, social accountability. HACCP principles embedded throughout. | AFA / Horticultural Crops Directorate / KEBS |
KEBS does not currently mandate standalone HACCP certification for all food businesses as a legal requirement. However, HACCP is deeply embedded in the GMP certification scheme, is explicitly referenced in the 2021 National Food Safety Policy as the direction for regulatory reform, and is effectively mandatory for any business selling into regulated domestic or export markets. The question for Kenyan food businesses is not whether to implement HACCP — it is when.
5. The 7 Principles of HACCP explained
HACCP is built on seven principles, defined by the Codex Alimentarius Commission and adopted globally. Here is each principle explained — with a Kenyan food industry example to make it concrete.
List every step in your production process — from receiving raw materials to finished product dispatch — and identify the potential food safety hazards at each step. Hazards fall into three categories: biological (bacteria, moulds, viruses, parasites), chemical (pesticide residues, cleaning agents, allergens, aflatoxins, veterinary drug residues), and physical (metal fragments, glass, bone, plastic, stones).
🇰🇪 Kenyan example: A maize flour miller identifies aflatoxin contamination (biological/chemical) from incoming grain as a significant hazard, and metal contamination from milling equipment as a physical hazard.A Critical Control Point is a specific step in your process where a control measure can prevent, eliminate, or reduce a food safety hazard to an acceptable level. The Codex decision tree helps determine which steps qualify as CCPs. Not every step is a CCP — only those where loss of control creates an unacceptable food safety risk that cannot be corrected at a later stage.
🇰🇪 Kenyan example: For a pasteurised milk processor, pasteurisation is the CCP for biological hazards (pathogenic bacteria). The cold store is the CCP for controlling microbial growth after pasteurisation.Every CCP must have measurable critical limits — the boundaries between safe and unsafe at that control point. Critical limits are based on scientific evidence, regulatory standards, or validated industry practice. They must be specific and measurable: a temperature, a time, a pH level, a water activity value.
🇰🇪 Kenyan example: For milk pasteurisation, the Kenya Dairy Board requires a minimum of 72°C for 15 seconds (HTST). That is the critical limit. If temperature drops to 68°C, the CCP is out of control and corrective action is required immediately.Once critical limits are set, you need a real-time system to monitor them. Who measures it? How often? With what calibrated equipment? Where are the readings recorded? Monitoring is the daily operational heartbeat of HACCP — without it, you cannot demonstrate control and you cannot detect a loss of control in time to prevent harm.
🇰🇪 Kenyan example: A meat processing plant assigns a designated quality officer to record internal cooking temperatures of every batch of processed meat using a calibrated probe thermometer, logging readings every 30 minutes with their name and timestamp.When monitoring shows that a critical limit has been breached, what happens next? HACCP requires pre-planned, documented corrective actions for every CCP — so that your team knows exactly what to do in the moment, not hours later when memory is fuzzy and product has moved on. Corrective actions include stopping production, isolating the affected product, identifying the root cause, and verifying that the process is back under control before resuming.
🇰🇪 Kenyan example: A juice processor whose pasteurisation temperature drops below the critical limit diverts the batch to a holding tank, recalibrates the equipment, identifies and fixes the cause, then re-pasteurises the held batch before releasing it — all documented in real time.Verification answers a different question from monitoring: is the HACCP system as a whole actually working as intended? Verification activities include periodic calibration of monitoring equipment, product microbiological testing, internal HACCP audits, review of monitoring and corrective action records, and validation of critical limits. Verification is typically done weekly, monthly, or quarterly depending on the activity.
🇰🇪 Kenyan example: A dairy processor sends finished pasteurised milk samples to an accredited laboratory monthly for microbiological testing. KEBS inspections also serve as independent external verification of the HACCP system.HACCP generates paperwork — and that is entirely intentional. Your HACCP plan, CCP monitoring logs, corrective action records, calibration certificates, verification results, and staff training records all constitute the evidence trail that proves your food safety system is real, operational, and effective. Good documentation is your protection during audits, your tool for tracing any problem, and your institutional memory when staff change.
🇰🇪 Kenyan example: A Nairobi packhouse maintains daily temperature logs for all cold stores, a corrective action register with root causes and sign-off dates, and calibration records for all thermometers — all available for inspection by KEBS or any buyer audit team within minutes.6. Who in Kenya needs HACCP?
HACCP applies across every segment of the food and agribusiness value chain in Kenya. If your business handles, processes, stores, or sells food — HACCP is relevant to you.
| Business Type | Key Hazards | Primary Driver |
|---|---|---|
| Dairy processors (milk, yoghurt, cheese, UHT) | Pathogens (Listeria, Salmonella, E. coli), antibiotic residues, adulterants | Kenya Dairy Board, KEBS, export buyers |
| Meat processors and abattoirs | Pathogenic bacteria, cross-contamination, temperature abuse | Meat Control Act, DVS, KEBS |
| Grain millers and cereal processors | Aflatoxin, metal contamination, moisture-related mould growth | KEBS mandatory certification, market access |
| Beverage manufacturers | Microbial contamination, chemical residues, foreign bodies | KEBS, domestic retail buyers |
| Fresh produce packhouses | Pesticide residues, microbial contamination, cold chain breaks | KS 1758, KenyaGAP, EU/UK export requirements |
| Fish and aquaculture processors | Histamine, pathogens, chemical contamination | Kenya Fisheries Act, EU export requirements |
| Food cooperatives with processing | Dependent on product — same as above categories | KEBS, cooperative market buyers |
| Hotels and catering | Pathogenic bacteria, cross-contamination, temperature abuse | KEBS KS 2573 hygiene certification, county inspections |
7. HACCP vs GMP vs ISO 22000 — what is the difference?
These three frameworks are frequently mentioned together, and understanding how they relate to each other is essential for any Kenyan food business planning its food safety journey.
GMP (Good Manufacturing Practices) is the foundation. It covers the basic hygiene, housekeeping, and operational standards that every food business must have in place before more advanced systems can work. GMP addresses: facility design and maintenance, pest control, personal hygiene, water quality, waste management, cleaning and sanitation, and staff training. KEBS offers GMP certification. Think of GMP as building the road before you drive on it.
HACCP builds on GMP. It adds the systematic, product and process-specific hazard analysis and control point management that GMP does not provide. GMP says "keep the facility clean" — HACCP says "at this specific step in this specific process, this specific hazard will be controlled in this specific way, with this critical limit, monitored by this person, at this frequency." HACCP is the structure built on the GMP foundation.
ISO 22000 integrates HACCP into a broader management system framework aligned with ISO's Plan-Do-Check-Act approach. It adds formal management commitment requirements, internal and external communication systems, emergency preparedness, and a structured continual improvement cycle. ISO 22000 certification is internationally recognised and accepted by most global food buyers as evidence of a mature food safety management system.
The typical progression for Kenyan food businesses is: GMP → HACCP → ISO 22000 → sector-specific GFSI scheme (FSSC 22000, BRCGS, SQF) for premium export markets. Most businesses start with GMP and HACCP simultaneously, then move to ISO 22000 as they mature. DESMA Consult can help you assess where you are on this journey and build a practical roadmap forward.
8. Fresh produce: HACCP and Kenya Standard KS 1758
For Kenya's horticulture sector — fresh produce growers, packhouses, aggregators, exporters, and domestic retailers — the primary food safety standard is Kenya Standard KS 1758: the Code of Practice for the Horticulture Industry.
KS 1758 is a government standard developed by KEBS in partnership with the Agricultural and Food Authority (AFA), the Retail Trade Association of Kenya (RETRAK), and the horticulture private sector. It is benchmarked to GlobalGAP and covers food safety, environmental sustainability, and social accountability across the fresh produce value chain. It is divided into two parts: Part 1 for flowers and ornamentals, and Part 2 for fruits and vegetables.
HACCP principles are embedded throughout KS 1758 — particularly in requirements for:
- Traceability — every batch of produce must be traceable from farm to retail shelf
- Pesticide management — application records, Maximum Residue Levels (MRLs), worker protection, and pre-harvest intervals aligned with PCPB-approved chemicals
- Post-harvest handling — temperature management in packhouses and cold stores
- Water quality — irrigation and packhouse wash water must meet microbiological standards
- Worker hygiene — personal hygiene practices during harvest and packing
For exporters targeting the European Union, KenyaGAP — enforced by the Horticultural Crops Directorate (HCD) under AFA and benchmarked to GlobalGAP — provides the additional layer of compliance required for phytosanitary certification. In 2024, the HCD certified 1.8 million metric tonnes of fresh produce valued at KSh 158 billion in export earnings, supporting 1.2 million smallholders. Compliance with HACCP-embedded standards is the entry ticket to that market.
The EU's Rapid Alert System for Food and Feed (RASFF) tracks all food safety notifications from import rejections. Kenya's fresh produce sector has featured in RASFF notifications for pesticide residue violations and microbiological issues. Each notification damages Kenya's reputation as an exporter and triggers increased border checks. Robust HACCP implementation at farm and packhouse level is the most effective way to stay off that list.
9. How to get started with HACCP in your Kenyan food business
HACCP implementation does not have to be overwhelming. Here is a practical, sequenced approach designed for the Kenyan food business context:
- Train your food safety team. At minimum, your HACCP team leader needs formal training in HACCP principles and application. DESMA Learn offers a free HACCP Fundamentals course covering all seven principles with Kenyan industry examples — mobile-first, self-paced, and certificate-bearing.
- Establish your prerequisite programmes (PRPs). Before you can run HACCP, your GMP must be in order. Conduct an honest GMP gap assessment of your facility. Fix the basics — pest control, cleaning and sanitation, personal hygiene, water quality, waste management — before building HACCP on top.
- Form a cross-functional HACCP team. HACCP cannot be a solo exercise or a quality department document. Assemble a team that includes representatives from production, quality/laboratory, engineering/maintenance, and senior management.
- Describe your product and process fully. Document exactly what you produce, its intended use and customers, its shelf life and storage conditions, and how it is distributed. Draw a complete process flow diagram from raw material receipt to consumer.
- Conduct the hazard analysis (Principle 1). Work through your process flow step by step with your HACCP team, identifying biological, chemical, and physical hazards at each step, and assessing their significance.
- Identify CCPs and set critical limits (Principles 2 and 3). Use the Codex decision tree systematically. Set evidence-based critical limits for each CCP.
- Build your monitoring, corrective action, and verification systems (Principles 4, 5, and 6). Design the operational heart of your HACCP plan. Make sure the people responsible for monitoring know exactly what they are doing and why.
- Document everything (Principle 7). Build your record-keeping system. Simple paper-based forms work fine to start. Digital systems come later.
- Implement, then review. A HACCP plan on a shelf is not HACCP. Implement it on the production floor, train all relevant staff, and conduct a full review after 90 days to identify gaps and improvements.
Ready to implement HACCP in your food business?
DESMA Tech Limited provides both the training and the hands-on advisory support you need — built for the African food industry context.
DESMA Tech Limited is a Nairobi-based food safety consultancy and digital learning platform serving Africa’s agri-food industry. We offer food safety training through DESMA Learn, hands-on implementation support through DESMA Consult, digital compliance management through DESMA Comply, and market linkage through DESMA Connect.