Global Food Safety Certifications: HACCP, ISO 22000, and Beyond

Food safety certifications vary dramatically around the world. While the US relies on ServSafe and state-specific food handler permits, the rest of the world operates under a patchwork of international standards (HACCP, ISO 22000), private certification schemes (BRC, SQF, FSSC 22000), and country-specific requirements. For food businesses expanding internationally — or simply operating in countries outside the US — understanding and tracking these certifications is essential to avoiding regulatory action, losing market access, or compromising consumer safety.

The global food safety certification landscape is governed by the Global Food Safety Initiative (GFSI), which benchmarks and recognizes certification schemes that meet its requirements. GFSI-recognized schemes include BRC, SQF, FSSC 22000, and IFS, among others. Major retailers and food service companies increasingly require suppliers to hold a GFSI-recognized certification. Understanding which certifications apply in which markets — and tracking them across your workforce and facilities — is a fundamental operational requirement for any food business with international ambitions.

International Food Safety Standards

HACCP (Hazard Analysis Critical Control Points) is the universal foundation of food safety management worldwide. Developed originally by NASA and the Pillsbury Company in the 1960s for space food safety, HACCP is now required by law in the European Union, Canada, Australia, New Zealand, and many other countries. HACCP is not a certification in itself but a systematic approach to identifying, evaluating, and controlling food safety hazards. Most other food safety standards (ISO 22000, BRC, SQF) are built on HACCP principles, so understanding HACCP is the starting point for any global food safety program.

ISO 22000 is the international food safety management system standard, published by the International Organization for Standardization. It's applicable to any organization in the food chain, from farm to fork — including feed producers, primary producers, food manufacturers, transport and storage operators, retail and food service outlets, and even producers of equipment, packaging, and cleaning agents. ISO 22000 combines HACCP principles with ISO management system requirements (similar to ISO 9001 for quality), providing a comprehensive framework that can be audited and certified by third-party certification bodies.

FSSC 22000 (Food Safety System Certification 22000) builds on ISO 22000 by adding additional prerequisite programs and requirements specific to different sectors of the food chain. FSSC 22000 is recognized by GFSI, which makes it widely accepted by major retailers and food companies. BRC Global Standard for Food Safety, developed by the British Retail Consortium, is widely used in UK and European supply chains and is also GFSI-recognized. SQF (Safe Quality Food) is popular in North America and Australia and covers both food safety and quality in a single audit. Each of these schemes has its own audit cycle, certification validity period, and training requirements.

Country-Specific Requirements

In the United Kingdom, the Food Safety Act 1990 requires all food handlers to be trained in food hygiene appropriate to their role. The standard training levels are Level 2 Award in Food Hygiene (basic, required for all food handlers), Level 3 Award in Food Hygiene (for supervisors and team leaders), and Level 4 Award in Food Safety Management (for managers and directors). These qualifications are offered by accredited training providers and are typically valid for 3 years, though the law requires employers to ensure training remains current and refreshed as needed.

The European Union requires food handlers to be trained in food hygiene under EC Regulation 852/2004, but specific requirements vary by member state. Germany requires a Belehrung (instruction certificate) from the local health department. France requires a HACCP training certificate for anyone handling food. Spain requires a Carnet de Manipulador de Alimentos. The lack of standardization across EU member states makes tracking certifications for a pan-European food operation particularly challenging — each country has its own certification type, validity period, and accreditation body.

In Australia, the Food Standards Code requires every food business to appoint at least one Food Safety Supervisor who holds a Food Safety Supervisor Certificate from a registered training organization. In Canada, food handler certification is regulated at the provincial level, with each province having its own requirements and accredited training providers. In the UAE and broader Middle East, municipalities issue food handler cards that require regular renewal, and HACCP certification is mandatory for food establishments. Each of these country-specific requirements adds to the tracking burden for international food businesses.

Tracking Multi-Standard Compliance

Many food businesses need to maintain certifications under multiple standards simultaneously. A food manufacturer based in the UK that exports to European retailers likely needs BRC certification (required by most UK supermarkets), while also meeting local UK food hygiene training requirements for their workforce. If they also export to the US, their American retail customers may require SQF or FSSC 22000 certification. Maintaining multiple certifications means managing multiple audit schedules, multiple training requirements, and multiple sets of documentation.

Each standard has its own audit cycle and certification validity period. BRC audits are conducted annually, with the option for unannounced audits that can occur at any time within the certification period. ISO 22000 has a 3-year certification cycle with annual surveillance audits. FSSC 22000 follows the same 3-year cycle as ISO 22000 but adds additional unannounced audit requirements. SQF audits are annual. Missing any of these audit dates can result in suspension or withdrawal of your certification, cutting off access to the markets that require it.

Employee training certifications under each standard have different validity periods and requirements. A BRC-audited facility needs to demonstrate that food handlers have received appropriate training and that training records are maintained. An ISO 22000-certified facility must show competency evidence under clause 7.2. Internal auditor qualifications for each standard are separate — an ISO 22000 internal auditor certification doesn't automatically qualify someone to audit against BRC. Tracking all of these overlapping requirements manually is a recipe for gaps and non-conformities.

Setting Up Global Food Safety Tracking

Start by creating certification types in CertTracker for each standard and country-specific requirement that applies to your operations. For organizational certifications (ISO 22000 for a facility, BRC for a production site), create cert types with the appropriate audit cycle and set reminders well in advance of audit dates — 90 days for scheduling the audit, 30 days for final preparation. For individual certifications (food handler cards, food hygiene training, internal auditor qualifications), create cert types with the specific validity period for each country.

Map which employees need which certifications based on their role and location. A food handler in your UK operation needs Level 2 Food Hygiene, while a food handler in your Australian operation needs a Food Safety Supervisor Certificate (or needs to work under someone who has one). Supervisors need higher-level qualifications. Internal auditors need standard-specific auditor training. By mapping these requirements systematically, you ensure no one falls through the cracks when audit time comes.

CertTracker lets you track both organizational certifications (the facility's ISO 22000 or BRC certificate) and individual certifications (each employee's food handler card or hygiene training certificate) in a single platform. Set up reminders aligned with each standard's renewal cycle, and use the compliance dashboard to see at a glance which certifications are current, which are expiring soon, and which have already lapsed. For food businesses operating across multiple countries and standards, this consolidated view is the difference between confident compliance and audit-day surprises.