Who is responsible for food safety in a restaurant?

This blog explains who’s legally responsible for food safety in a restaurant, from the food business operator down to individual staff, and what that responsibility entails. 

Ask many restaurant owners who’s responsible for food safety, and they’ll probably say the chef, or whoever’s in the kitchen that day. 

It feels true, because the kitchen is where food gets handled. But it’s legally incomplete, and it’s the kind of assumption that lets everyone else in the business, from the owner and manager down to the front-of-house staff, think it’s not their problem.

The law doesn’t attach responsibility for food safety to a job title. It attaches it to a legal entity, the food business operator (FBO), and from there it can reach individual people inside that business, including directors who might never have set foot in the kitchen.

This blog explains who’s legally responsible for food safety in a restaurant, from the FBO down to individual staff, and what that responsibility entails.

What ‘food business operator’ means

Under EU Regulation 178/2002 (assimilated into UK law) and the Food Safety Act 1990, a food business operator is the natural or legal person responsible for ensuring food law requirements are met within the business they control. That’s a deliberate definition. It doesn’t say ‘the chef’ or ‘the person handling raw chicken’. It says whoever controls the business.

In practice, that can play out differently depending on how the business is structured. If you’re a sole trader, you’re the FBO. If your restaurant is a limited company, the company is the FBO, though as we’ll get into, that doesn’t shield individual directors from personal liability. 

The picture gets more complicated for franchises and multi-site groups, because the FBO is usually the entity registered with the local authority for that specific premises, which may or may not be the parent brand.

Three core duties sit on the FBO, and everything else in this piece hangs off them. Food must not be adulterated in a way that damages health. It must be of the nature, substance and quality a customer would reasonably expect. And it must not be labelled, advertised or presented in a way that’s false or misleading.

Responsibility doesn’t stop at the top

The FBO carries ultimate legal accountability for food safety, but that works in practice only if that accountability gets delegated downward, with each layer of the business understanding what they’re responsible for. In a typical restaurant, that might look something like this:

• The owner or director sets the food safety policy, resources it properly, and answers for it if things go wrong, regardless of whether they were on site. 

• The general manager owns the day-to-day operational side, making sure training records are current, checks are being completed, and the food safety system is actually being followed. 

• The head chef or kitchen manager owns what happens in the kitchen, from temperature control and supplier checks to HACCP procedures in practice.

• Individual food handlers, servers and front-of-house staff are responsible for following the procedures they’ve been trained in, including personal hygiene, correct food handling and giving customers accurate allergen information.

In addition to the above, the FSA and local authorities expect a named, appropriately trained, designated food safety supervisor who has day-to-day oversight of food hygiene and can answer an environmental health officer’s (EHO) questions with authority. The Chartered Institute of Environmental Health recommends at least one Level 3-trained person per site. 

Nobody in that chain gets to opt out by pointing at someone else. An owner can’t say they trained the chef and it’s on him now, just like a kitchen porter can’t say nobody told him. 

The legal test is whether the business took all reasonable precautions, and that’s judged as a whole system, rather than finding a single person to blame.

<h2>What food safety training does the law require?

Under Regulation 852/2004, all food handlers must be supervised, instructed or trained in food hygiene in a way that’s commensurate with their work. It doesn’t name a course or a certificate. It requires training appropriate to the risk of what that person does.

In practice, the industry has settled on a fairly consistent structure. Level 1 covers minimal food contact roles, such as front-of-house staff mainly handling wrapped goods. It gives a general induction to food safety. 

Level 2 is the benchmark for anyone preparing, cooking, handling or serving open food, and staff in that position should have training equivalent to the RSPH Level 2 award in Food Safety & Hygiene within three months of starting. Level 3 is for supervisors and managers who need a broader understanding. It’s also the level that satisfies the requirement for adequate HACCP training.

Food handlers in the UK don’t legally need to hold a certificate to prepare or sell food. Training can be delivered on the job, through self-study or evidenced through relevant prior experience. But the burden of proof sits with the business. If an EHO asks how you know your staff are competent, “I assume they picked it up” won’t survive scrutiny. It’s not the absence of a certificate that gets restaurants into trouble. It’s the absence of a demonstrable system. Training records, refresher schedules and evidence of supervision help protect your business.

<h2>Who owns the HACCP system?

Article 5(1) of Regulation 852/2004 requires every food business operator, except primary producers, to implement and maintain a permanent procedure based on HACCP principles. That includes restaurants, cafes and takeaways, not just manufacturers. 

For most small catering businesses, this can be achieved by following the FSA’s Safer Food, Better Business packs or an equivalent system rather than implementing a full industrial HACCP plan, but the underlying obligation is the same.

As we said earlier, the FBO is legally responsible for the system existing and being followed. 

But a competent person, usually the Level 3-trained supervisor or manager, should be the one who maintains it, reviews it when the menu or suppliers change, and makes sure it reflects what happens in the kitchen rather than what happened when it was first written up.

A HACCP plan that was accurate three years ago but hasn’t been touched since the menu changed twice isn’t much use as evidence of due diligence. Courts tend to take a dim view of documented systems that don’t match current practice.

<h2>What about allergens?

Most restaurant food is made to order, so it doesn’t carry the labelling requirements for prepacked for direct sale (PPDS) food that were introduced under Natasha’s Law. Restaurants aren’t caught by this the way grab-and-go retailers are, unless they sell pre-packaged items like boxed meals or pre-wrapped desserts, which fall under the same full-labelling rules as any other PPDS food.

However, the absence of a labelling requirement doesn’t mean the absence of a duty. Restaurants must still make allergen information available, whether on their printed menus or verbally when a customer asks. In March 2025, the FSA updated its guidance to encourage the out-of-home sector to provide written allergen information for loose, non-PPDS food, a clear signal of where expectations are heading.

Responsibility for declaring allergens runs through the same chain as general food safety. Your kitchen needs an accurate, current allergen matrix. Whoever changes a recipe or swaps a supplier needs to update it. And your front-of-house staff need to be trained to check and communicate that information to your diners.

<h2>When it becomes personal

Food safety offences under the Food Safety Act 1990 are strict liability. That means the prosecution doesn’t need to prove intent, only that the offence occurred. 

However, section 21 of the Act provides a statutory defence if the accused can prove they took all reasonable precautions and exercised all due diligence to avoid the offence. This is where everything above ties together, including your training records, HACCP documentation, allergen matrix and supervision. Without them, your evidence base will be on shaky ground. 

Section 36 of the Act makes directors, managers, secretaries and similar officers personally liable where a company’s offence was committed with their consent or connivance, or is attributable to neglect on their part. Incorporating a business doesn’t create a personal shield here. The Tesco v Nattrass case established that due diligence by an employee isn’t enough on its own if the employer wasn’t diligent, too. The standard applies to the system the business built, not just whoever happened to be on shift when something went wrong.

The consequences for major breaches of UK food law can be severe, including unlimited fines from magistrates’ court, up to two years’ imprisonment by the Crown Court, closure orders and personal liability for individuals found responsible.

<h2>Who checks, and what do they assess?

Local authorities enforce compliance through environmental health officers, who inspect premises and can issue guidance or penalties. EHO’s don’t just look at what’s visible on the day, such as cleanliness, cooking and handling procedures and temperature control. They’ll assess what the business can demonstrate, including training records, HACCP documentation, allergen information and supervision processes. Their judgement feeds directly into the food hygiene rating the business must display.

An inspection isn’t really about testing whether the food happens to be safe on the day of the visit. It’s more about testing whether the business has a structure that makes food safety the default outcome.

<h2>How can Beacon Compliance help?

At Beacon Compliance, our team has more than 80 years’ combined industry experience helping restaurants and food businesses build food safety systems that hold up to scrutiny. We can help you define your team’s roles clearly, get your HACCP documentation in order, and prepare for SALSA or BRCGS certification. 

Get in touch to book a free, no-obligation consultation.