🥩 Hygiene, Sanitation and HACCP

Personal hygiene is not a matter of appearance. Every rule in this lesson exists because a specific organism travels a specific route, and the biggest single driver is Staphylococcus aureus, which lives in the human nose and on human skin and hands, especially in infected cuts, boils and sores, and which produces a heat-stable toxin that cooking will not destroy.

Start with hand washing, because it is the discipline that fails most often. The requirement for the station itself is specific: hand-wash basins must provide hot and cold running water, liquid soap and paper towels, and must be non-hand-operated, meaning elbow, knee, foot or sensor operated. The reason is obvious once you see it: a hand-operated tap is touched by a dirty hand before washing and by a clean hand after, which puts the contamination straight back. The premises must also have an adequate and easily accessible supply of hot and cold potable water at all times.

How hot should the water be, and for how long should you wash? Those figures could not be verified from an authoritative source. The international code deliberately says only that the water must be at an appropriate temperature and leaves the number to the operator. If you need a specific figure for an inspection or an assessment, obtain it from your national food-hygiene code. What this course can give you without qualification is when to wash, and that list is unconditional:

1. On entering the production area.
2. After handling raw meat and before handling anything ready to eat.
3. After handling poultry, every time, without exception.
4. After touching your face, hair, nose or a dressing.
5. After using the toilet.
6. After handling waste.
7. After cleaning.
8. After handling money.

That last one deserves its own paragraph. Money and meat must never be handled by the same person without a hand wash between, or the two jobs must be separated by a dedicated till operator. In a small butchery this is the single most commonly broken rule and the easiest of all to fix. Banknotes in general circulation are among the dirtiest objects in a trading area. If you take the money and cut the meat with the same hands, you are inoculating your product with whatever the last hundred people carried.

Now the health rules. There are five, and they should be written on the wall in the language your staff read:

1. No person with diarrhoea or vomiting handles food. They must be excluded, and they must report it.
2. No person with an infected cut, boil, sore or skin lesion handles exposed meat. Any minor wound must be covered with a waterproof, brightly coloured dressing. Blue is the convention, because blue does not occur in meat, so a dressing that comes off is immediately visible.
3. Clean protective clothing, changed daily, not worn outside the premises, and hair covered. Clothing worn to the market and back carries whatever is on the street into your cutting room.
4. No eating, drinking, smoking, chewing or spitting in production areas.
5. No jewellery, watches or false nails on the hands. Rings trap moisture and organic matter underneath, watches cannot be cleaned properly, and false nails come off into product.

The legally required exclusion period after gastrointestinal illness could not be verified from an authoritative source. Forty-eight hours symptom-free is commonly quoted, but this course will not teach it as a rule because it is a legal requirement that varies. Obtain the exclusion period from your national public health or food-safety authority and write it on the same wall as the five rules.

Rule one carries a real management problem that a training manual usually ignores. In a small business a worker sent home is a worker not paid, so workers hide illness, and the rule that looks strongest on paper is the one most quietly broken. If you are the owner, decide in advance how you will handle it. Some options: a small sick-day allowance costed into your labour budget; rotating a worker onto non-food duties such as cleaning the yard or delivery paperwork where that is genuinely non-food; or agreeing the rule openly with staff so they understand that one hidden illness can close the business. What does not work is a poster nobody can afford to obey.

The last discipline is training and record. Keep staff health declarations, meaning a simple signed statement from each person that they will report illness and that they are currently free of the conditions in rule one and two. Keep it dated, keep it renewed, and keep it filed. It costs nothing, it demonstrates that you instructed your staff, and in the event of an incident it is the only evidence you will have that the rule existed before the problem did.

Cleaning and sanitising are two different jobs and most small butcheries do one of them and believe they have done both.

Cleaning removes soil: fat, blood, protein, bone dust and dirt. Sanitising reduces the number of microorganisms on an already clean surface. Sanitiser applied to a dirty surface does nothing at all, because organic matter neutralises it. That single sentence is the most important one in this lesson.

The order is fixed and cannot be shortened:

1. Remove gross soil. Scrape, sweep, squeegee. Get the visible material off and into the waste bin, not down the drain where it will block and breed.
2. Wash with detergent and hot water. Detergent lifts fat; hot water dissolves and carries it. This is the step where the actual cleaning happens, and it needs physical effort.
3. Rinse. Detergent residue interferes with sanitiser.
4. Sanitise, at the correct concentration and for the correct contact time.
5. Air dry. Do not wipe dry with a cloth, because the cloth recontaminates everything you just cleaned. Standing water on a surface is a Listeria site.

Now the sanitisers. Here are published working concentrations for food-contact surfaces:

• Chlorine or hypochlorite: 25 to 200 parts per million, most active at pH 6 to 7.5, used in cold water at a maximum of 46 degrees Celsius.
• Quaternary ammonium compounds, often called QAC or quats: 200 parts per million, effective over a broad pH range and a broad temperature range.
• Iodophor: 25 parts per million, effective at pH 4 or lower, maximum 49 degrees Celsius.
• Peracetic acid: 0.20 to 0.35 percent, broad pH range, cool to warm.

The required contact times for each of these could not be verified from any authoritative source. This matters enormously, because applying a sanitiser and wiping it off immediately achieves nothing whatever. Obtain the contact time from the product label of the sanitiser you actually purchase. The label is the legally binding instruction and it differs between products, even between products containing the same active ingredient at the same strength. Read it, and follow it to the minute.

Chlorine deserves a practical paragraph, because it is cheap and widely available across Africa, which makes it the realistic choice for most small butcheries. Its weaknesses are all manageable if you know them. It is inactivated by organic soil, which is another reason step 1 and step 2 cannot be skipped. It loses strength in storage, so an old drum is not the concentration written on the label. It is less effective outside pH 6 to 7.5. And it is corrosive to some metals, so it must be rinsed off equipment where the label requires it. The consequence of all that is one rule: chlorine strength must be checked with test strips, not assumed. Test strips are cheap. A batch of product cleaned with dead chlorine is not.

What gets cleaned, and when? Build a written schedule with three columns: the item, the frequency, and who does it. As a starting structure:

After every use or every batch: knives, boards, mincer plates and knives, saw blades, tables, scales, hooks, containers, and any tool that moved between raw and ready-to-eat.

Daily: all food-contact surfaces, floors, sinks, waste bins, the mincer and filler stripped down, door handles, tap handles, light switches, and the hand-wash station itself.

Weekly: walls to shoulder height, chiller and freezer interiors, shelving, drains, and under and behind equipment. This is where the persistent organisms live and it is the part everybody skips.

Periodically: ceilings, overhead pipework and light fittings, condenser units, and anything that could drip onto product.

Write the schedule down and sign it off, because cleaning records are a HACCP prerequisite record and because a schedule nobody signs is a schedule nobody does.

Two final points that decide whether all this effort works. First, equipment that cannot be cleaned must be replaced, not cleaned harder. A cutting board with knife scores deep enough to hold water is a Listeria reservoir. Wooden surfaces, cracked plastic boards, rusted steel and porous cement all fail the requirement that food-contact surfaces be smooth, impervious and hard-wearing.

Second, cloths. A cloth used on a raw meat surface and then on a clean surface is a contamination delivery system with a handle. Use single-use paper where you can. Where you use cloths, keep them colour coded to their zone, launder them hot daily, and never move one between raw and ready-to-eat areas.

Water touches meat directly, cleans every surface, makes the ice that keeps a sausage emulsion cold, and washes every pair of hands in the building. Unsafe water contaminates everything downstream of it, which is everything.

The requirement is that the premises have an adequate and easily accessible supply of hot and cold potable water at all times, and that water used for cleaning and sanitising be of a standard appropriate for that specific purpose. Where a non-potable water system exists on site, for example for fire or for cooling, it must be separately addressed and clearly identified so that it can never be confused with the potable supply.

The microbial guideline is simple and absolute. For water directly intended for drinking, for treated water entering the distribution system, and for treated water within the distribution system, E. coli or thermotolerant coliform bacteria must not be detectable in any 100 millilitre sample. Not low. Not acceptable levels. Not detectable. If E. coli is detected, immediate investigative action is required, and E. coli is the more precise indicator of faecal contamination than thermotolerant coliforms generally.

Chemical guideline values, for arsenic, fluoride, nitrate, lead and others, exist but could not be verified in this research. Obtain the WHO Guidelines for Drinking-water Quality, fourth edition including the first and second addenda, if you need them.

Now the practical rules for a butchery drawing on a borehole, a well, rainwater or a tanker, which describes most small butcheries in Africa.

1. Test it. Municipal supply is not automatically potable at the tap after storage in a rooftop tank, because the tank is the contamination point. Borehole water is not potable because it is clear. Clarity tells you nothing about faecal contamination.
2. Test frequency and which accredited laboratory to use could not be verified and are jurisdictional. Obtain them from your national water authority or national food-safety authority.
3. Keep the test certificates. They are a HACCP prerequisite record and a buyer will ask for them.
4. Ice is water. Ice made from non-potable water contaminates every sausage batch it chills, and in emulsion sausage the ice is a formulation ingredient that goes into the product and stays there. Ice machines and ice stores are themselves a Listeria risk and must be on the cleaning schedule.
5. Storage tanks must be covered, cleaned, and on a written schedule. An uncovered rooftop tank is an open-air contamination route with bird droppings, dust and insects entering directly.
6. If the supply is not reliably potable, treat it, and understand that the treatment then becomes a control point with its own monitoring, such as a residual chlorine check, rather than a one-off action you took last year.

Premises next. The structural requirements are stated as principles rather than numbers. Surfaces must be smooth, impervious and hard-wearing, and easy to clean and disinfect. Premises must have adequate natural or mechanical ventilation. Facilities must permit storage of meat at temperatures that achieve the safety and suitability requirements. Cutting-room ambient should not exceed 12 degrees Celsius in the worked regional example.

What fails that standard, in practice: wooden surfaces, cracked plastic boards, rusted steel and porous cement. All four are common and all four are non-compliant, because none of them can be cleaned to a reliable standard once damaged.

The numeric premises requirements, meaning lighting in lux, floor fall and drainage gradient, wall-to-floor coving radius, and ventilation air-change rates, could not be verified. They are set in national premises regulations. Obtain your national abattoir or butchery premises regulation, and note that licensing and premises approval usually involve both the national food-safety authority and your local or municipal health authority, so you will normally have to satisfy two.

Waste last, because waste is where pest control actually happens. Waste, condemned material and inedible offal must be segregated, held in identified covered containers, and removed frequently enough that it never accumulates in or beside a production area. Waste holding is the primary pest attractant, so pest control is mostly waste management, plus proofing, meaning screens, door seals and no gaps, plus removing standing water.

One specific failure deserves naming because it is common and it is a documented cause of contamination: condensate dripping from ceilings and pipes onto product. It is a spoilage-organism route and a classic Listeria route, and it is invisible unless you deliberately look up.

The requirements for disposal of condemned meat and animal by-products, and the categories into which by-products must be separated, could not be verified. This is strictly jurisdictional, and some countries prohibit certain by-products entering animal feed entirely. Obtain the rules from your national veterinary services or the animal by-products regulation. Getting this wrong is not just a hygiene matter, it can be a criminal one.

Cross-contamination is the transfer of organisms from one thing to another by something that touched both. That something is a hand, a knife, a board, a cloth, a container, an apron or a surface. Separation is the discipline that stops it, and it is the highest-value control in a small butchery relative to what it costs.

Why it matters that much: separation of raw meat from ready-to-eat food, and of poultry from red meat, is the primary control for Campylobacter, which cannot grow on chilled meat but infects at very low numbers, and a major control for Salmonella and E. coli O157:H7. It is also one of the four controls for Listeria.

Colour coding is the standard method. Be honest about what it is: colour coding is a widely used industry convention, not a single international standard, and schemes differ between countries and between suppliers. A commonly used scheme is red for raw meat, blue for raw fish, yellow for raw poultry, green for salad and fruit, brown for cooked and root vegetables, and white for bakery and dairy.

An authoritative regulator-published colour-coding standard could not be verified. So teach the scheme this way: pick one scheme, write it on the wall, and never deviate from it. What matters for safety is that raw and ready-to-eat never share a board, a knife or a surface. The specific colours are arbitrary. What is not arbitrary is that everyone in the building uses the same scheme and that a visitor can read it off the wall in ten seconds.

Separation comes in three forms and a small butchery usually needs a mix of all three.

Separation by space is the strongest. Different rooms, or at minimum different benches, for raw and for ready-to-eat. Poultry with its own bench, its own boards, its own knives and its own container. If you have the room, this is the answer.

Separation by time is the fallback where space does not exist. Do all the ready-to-eat work first, on a clean sanitised bench, before any raw meat comes out. Then do red meat. Then do poultry last, because poultry contaminates everything and you want it followed by a full clean, not by another product. The full clean between blocks is what makes time separation work; without it, it is not separation at all.

Separation by equipment runs through both. Dedicated boards and knives, colour coded. Dedicated containers, and containers stored so that a raw one can never be stacked on top of a clean one. Dedicated cloths, or single-use paper. Storage order in the chiller, with ready-to-eat product on the top shelves and raw meat below it so nothing can drip down onto product that will not be cooked. That last rule costs nothing and prevents a whole category of failure.

Now the knife register, which is a different kind of control. The published guidance for small meat plants requires a knife register as an essential record. Every knife in the plant is numbered and accounted for at the start and end of every day. This is not about theft. It is the physical hazard control against a broken blade tip reaching a customer inside a piece of meat. A chipped blade discovered at the end of the shift tells you which batches to check; a chipped blade nobody noticed tells you nothing until a customer bites it.

The register is a sheet with a numbered row per knife, a start-of-day count, an end-of-day count, and a signature. It takes two minutes and costs the price of a paper. Include saw blades, cleavers, steels and any scraper, and inspect each one for damage when you count it. If a knife is missing or a blade is chipped, stop and search for the fragment before any more product moves.

Physical hazards more broadly run beyond knives. Bone fragments from the saw, packaging material, staples, jewellery, false nails, pen tops, and anything glass or hard plastic above an open product. The published hazard analysis for a small meat plant lists metal, bone fragment, blade chip and packaging as physical hazards throughout the process. The controls are the knife register, a policy that nothing glass is permitted above open product, the no-jewellery rule, and a pre-production check that the equipment is intact.

Allergens are the other carry-over hazard and they belong in this lesson. If you add binders or extenders to sausage, soy protein, milk protein, non-fat dry milk and wheat flour are all major allergens in most labelling regimes. A butcher who adds them must know it, must be able to tell a customer, and must prevent carry-over from an allergen-containing batch to one sold as free of it, which in practice means running non-allergen batches first and cleaning fully between. The national allergen declaration requirements could not be verified and must be obtained from your national food labelling authority.

The test of whether your separation actually works is simple. Follow one piece of ready-to-eat product backwards through your day and list every surface and hand it touched. If any of them touched raw meat since the last full clean, your separation is theoretical.

HACCP is not paperwork. It is this: decide where things can go wrong, decide the one number that tells you it has not, check that number, write it down, and know what to do when it fails. Everything else is administration around those five things.

The first thing to get right is that HACCP sits on top of prerequisite programmes, not instead of them. The prerequisites are the hygiene, premises and water disciplines in the previous three lessons. A HACCP plan built on a dirty premises with unsafe water is a lie on paper. If your water is untested and your boards are scored, do not start writing a HACCP plan. Fix the prerequisites, then write the plan.

Step one is the hazard analysis: what can go wrong, where. Here is a worked hazard list for a small butchery.

• Receiving carcasses or meat: pathogens already present, meaning Salmonella, E. coli O157:H7 and Campylobacter, and meat arriving warm. Biological.
• Chilled storage: growth of Listeria, Salmonella and E. coli during storage. Biological.
• Cutting and boning: cross-contamination from hands, knives, boards and aprons. Biological.
• Mincing: redistribution of surface pathogens through the mass, plus temperature rise. Biological.
• Sausage making: nitrite overdose, allergen carry-over, temperature abuse. Chemical, allergen and biological.
• Cooking: survival of pathogens. Biological.
• Cooling cooked product: Clostridium perfringens germination and growth. Biological.
• Curing and drying: insufficient water activity reduction, Staphylococcus aureus toxin formation. Biological.
• Display and sale: temperature abuse, cross-contamination between raw and ready-to-eat. Biological.
• Throughout: metal, bone fragment, blade chip, packaging. Physical.

A published guide for small meat manufacturing plants identifies critical control points across seven production processes: slicing, dicing and marinating raw meat; minced meat production; sausage production; burger production; cured raw meat production; pudding production; and cooked meat production. If you make any of those, that is where your critical points will be.

Step two is deciding which of those steps are actually critical control points. A critical control point is a step where loss of control means the hazard reaches the customer with nothing downstream to catch it. Cross-contamination at boning is a serious hazard, but if the product is minced beef that the customer will cook to 71 degrees Celsius, the cook is the critical point. If the product is sliced cooked ham, there is nothing downstream at all, and the slicing step is critical.

Step three is the critical limit, and this is where most plans fail. A critical limit must be a number you can measure now, not a description. Here is a worked set, each with its origin, and each of which must be replaced by your national figure where one exists.

1. Chilled storage of red meat: 7 degrees Celsius or below, offal 3 degrees Celsius or below. Regional regulation example.
2. Chilled storage of poultry: 4 degrees Celsius or below.
3. Chilled storage of minced meat: 2 degrees Celsius or below.
4. Chilled storage of meat preparations: 4 degrees Celsius or below.
5. Frozen storage: minus 18 degrees Celsius or below.
6. Cutting-room ambient: 12 degrees Celsius or below.
7. Cooking, minced and emulsion products: 71 degrees Celsius internal or above.
8. Cooking, poultry products: 74 degrees Celsius internal or above.
9. Cooking, whole-muscle red meat: 63 degrees Celsius internal plus a 3-minute rest.
10. Cooling of cooked product: 54 to 27 degrees Celsius in no more than 1.5 hours, and 27 to 4 degrees Celsius in no more than 5 hours.
11. Shelf-stable dried product: water activity below 0.85, which is the threshold used in one regulatory system.
12. Nitrite addition: your national legal maximum ingoing limit, which this course cannot supply because it is jurisdictional and legally binding, and because nitrite is acutely toxic at modest overdose.

Step four is monitoring, covered in the next lesson.

Step five is corrective action, and there is a fixed sequence:

1. Stop. Segregate and label the affected product. Do not sell it while you are deciding.
2. Fix the cause, by repair, reload or re-set, so the next batch is not lost as well.
3. Decide on the product. Ask whether the deviation was within the growth limits of the relevant pathogen, and for how long. A short excursion above 7 degrees Celsius on chilled meat is a different question from cooked product held four hours at 30 degrees Celsius.
4. Record the deviation, the decision and the reason.
5. If the decision cannot be justified against a sourced limit, condemn the product. Do not guess in favour of the till.

The published guidance puts it plainly: products must be checked and evaluated, and if non-compliant, designation decisions determine whether products are moved to functioning equipment or disposed of appropriately.

One last discipline. Write the plan for the products you actually make, not for the products in a template. A two-page plan that describes your real process and that your staff follow is worth more than a forty-page document copied from somewhere else, which will be wrong in detail and ignored in practice.

A control you cannot prove is a control you do not have. Records are what turn a plan into a system, and they are the first thing anybody who inspects or audits you will ask to see.

The essential records identified in published guidance for a small meat plant are these:

1. Chilled and frozen temperature records.
2. Pre-production, metal control and knife register records.
3. Goods-inwards records.
4. In-process traceability records.
5. Cooking and cooling records.

To those, for a small African butchery, add: nitrite and cure weighing records, batch by batch; water activity records for any dried product; cleaning records signed against the schedule; staff health declarations; water test certificates; and thermometer calibration records.

Take the ones that need explanation.

Temperature records: at least twice daily for chilled and frozen storage, with one check before production starts, so that an overnight failure is discovered before you cut into the stock. Record date, time, unit, reading and initials.

Goods inwards: every delivery, with date, supplier, product, weight and the temperature you measured on arrival with your own probe. Without the arrival temperature you have no defence and no supplier leverage.

Traceability: you must be able to say which carcass a given batch of mince came from and on which day it was sold. Without that, a single complaint means condemning everything, because you cannot show what is unaffected. The simplest system that works is a batch number written on the container, in the day book, and on the label.

Cure weighing: the weight of cure recorded against the weight of meat, every single batch. This is a safety record and not administration, because nitrite is acutely toxic at modest overdose.

Monitoring depends entirely on the instrument, and here the course must again stop and hand you to someone else. Every probe thermometer must be checked regularly against a known reference, but the required calibration frequency and method could not be verified from any authoritative source. Obtain them from your national food-safety authority's guidance and from the manufacturer's instructions for the thermometer you own. A HACCP plan monitored with an uncalibrated thermometer controls nothing. It produces numbers that mean nothing and a confidence that is worse than knowing you have none.

Now the rule that governs every record in this module. Records must be signed, dated and kept, and they must be made at the time. A record made after the fact is worse than no record, because it destroys the credibility of every genuine record beside it. An inspector who catches one backdated entry has grounds to disbelieve the entire file, including the pages that were honestly written, and so does a customer's lawyer. Never write up a week of temperatures on a Friday afternoon. If a reading was missed, write missed and the reason. A gap you have explained is defensible; a fiction is not.

Verification is what turns the file into management information. It has two parts.

First, re-check that the plan still describes reality. Walk the process with the plan in your hand and see whether what is written is what happens. Re-read the hazard analysis whenever a product changes, a piece of equipment changes, a supplier changes, or a member of staff changes. A plan written for the process you had two years ago controls a process you no longer run.

Second, review records for patterns rather than individual readings. The chiller that reads 7.5 degrees Celsius every Monday morning is telling you something about weekend loading or about a compressor beginning to fail, and it is telling you now, while the repair is cheap. A slow upward drift across six weeks is a gas leak or a dirty condenser. A spike on delivery days is a door propped open. None of that is visible in one reading and all of it is obvious in a month of them. Do this monthly, with the sheets in front of you, and write one line of conclusion at the bottom.

What an audit or an inspection actually looks at, in roughly this order: whether your premises and equipment meet the smooth, impervious and hard-wearing standard; whether your water is tested and the certificates are present; whether your staff can tell the inspector when they wash their hands; whether your temperature records exist, are current and are signed; whether your critical limits match the national regulation; whether your corrective actions are recorded with reasons; and whether your thermometer is calibrated. Notice how much of that is prerequisites rather than the plan itself.

Finally, the commercial argument, because it is the one that gets records started. Hotels, lodges, restaurants, mines, schools and hospitals increasingly require temperature and traceability records as a condition of supply, and they ask for history, not promises. The butcher who already holds three months of signed sheets wins the contract. The butcher who offers to start keeping them does not. The file you began in order to control your stock is the same file that opens the accounts your competitors cannot reach.