HACCP vs HARPC: What Is the Difference?
HACCP is the international method for controlling food safety hazards. HARPC is the preventive-controls approach required by US law for most food facilities. Exporters to the United States need to understand both.
Key points
- HACCP comes from Codex Alimentarius and is used worldwide; HARPC comes from the US Food Safety Modernization Act (FSMA).
- HARPC covers more than critical control points: it includes allergen, sanitation and supply-chain preventive controls and a recall plan.
- A good HACCP system is a strong starting point, but it does not automatically meet the US rule.
HACCP in brief
Hazard Analysis and Critical Control Points is built on seven principles: hazard analysis, critical control points, critical limits, monitoring, corrective action, verification and record keeping. It is the basis of ISO 22000 and of the GFSI-recognised schemes.
HARPC in brief
Hazard Analysis and Risk-Based Preventive Controls is the approach set by the FSMA Preventive Controls for Human Food rule. Facilities that must register with the US Food and Drug Administration need a written food safety plan prepared, or overseen, by a preventive controls qualified individual (PCQI).
The main differences
- Origin: HACCP is an international Codex method; HARPC is a US legal requirement.
- Hazards: HARPC explicitly adds radiological hazards and hazards introduced intentionally for economic gain.
- Controls: HACCP focuses on critical control points; HARPC requires preventive controls for process, allergens, sanitation and the supply chain, whether or not they are CCPs.
- Limits: HACCP sets critical limits at CCPs; HARPC uses parameters and values where they apply.
- Other elements: HARPC requires a written recall plan and reanalysis of the plan at least every three years.
Which one do you need?
If you supply the US market, your importer will expect a plan that meets the preventive-controls rule. If you already have a sound HACCP system, extend it rather than starting again: review the hazard analysis, add the missing preventive controls and the recall plan, and make sure a qualified individual oversees it.