Food safety programs in Australia: who actually needs one

A Standard 3.2.1 food safety program is a documented, HACCP-based program that is independently audited. The Code applies it only where required for an activity. The national trigger is Standard 3.3.1: businesses providing potentially hazardous food to vulnerable persons at defined facility types — hospitals, aged-care and similar care facilities, and child-care centres — where food is provided to six or more vulnerable persons. Some states extend program requirements to other higher-risk sectors, such as certain catering operations.

The key point for a cafe: 3.2.1 is activity-based, not universal. A neighbourhood cafe serving the general public is not, by default, required to hold an accredited food safety program — and anyone selling you one 'because it's the law for everyone' is wrong.

Since 8 December 2023, Standard 3.2.2A is the broad obligation: category one and two food businesses — which includes most cafes handling unpackaged, ready-to-eat food — must run food safety management tools: a trained food safety supervisor, food handler training, and (for category one) substantiation of critical food safety controls, which is where temperature records come in.

That's the standard our 3.2.2A guide covers in depth, and the one your daily records serve. It is deliberately lighter than a 3.2.1 program — tools, not an audited program document.

Two steps. First, classify your activity honestly: general-public cafe service points to 3.2.2A. A 3.2.1 program is triggered only when Standard 3.3.1's full test is met — potentially hazardous food intended for six or more vulnerable persons in care at a defined facility — or when your state lists your sector. FSANZ's own guide gives the telling example: a cafe inside a hospital serving the public, staff and walk-in patients is NOT captured; the same kitchen preparing meals for six or more patients in care is. Second, confirm with your jurisdiction — implementation and any extensions are set by your state or territory, and your council or state food authority has the final say. Every state and territory page on this site links its regulator directly.