HomeResourcesArticles › Food & Consumer
Article · 8 min read

Product Recall Readiness: What Your Food Safety Plan Must Actually Include

Most food manufacturers have documented recall procedures. Most have never tested them at the speed a real consumer safety incident demands. The gap between a BRCGS-compliant withdrawal procedure and a functional recall capability is measured in hours and millions.

Published May 2026Food & ConsumerProduct Recall Food Safety BRCGS FSSC 22000
Executive Summary

A food product recall is one of the most operationally and reputationally damaging events a food manufacturer can experience. The average cost of a food recall in the UK and EU exceeds £10 million when direct costs, brand damage and regulatory consequences are combined. The difference between an organisation that manages a recall effectively and one that does not is almost entirely determined by preparation done before the event occurs.

£10M+Average total cost of a food product recall in the UK and EU — including direct costs, brand damage and supply chain disruption
72 hrsFSA and EFSA regulatory notification requirement from the point at which a recall decision is made
Class IMost serious recall classification — applied where there is a reasonable probability of serious adverse health consequences or death

Why Most Food Safety Plans Are Not Recall Plans

FSSC 22000, BRCGS, SQF, ISO 22000 and HACCP all require documented withdrawal and recall procedures. Most food manufacturers have them. Most have never tested them. And the gap between a documented procedure and a functional capability that works under the time pressure of a real recall event is enormous.

Food safety regulators — the UK Food Standards Agency, EFSA, and national competent authorities across the EU — are increasingly assessing not just whether recall procedures exist, but whether organisations can demonstrate they have been tested, that traceability systems have been validated, and that decision-making structures are clear enough to execute at the speed consumer safety requires.

The Five Recall Capability Gaps That Appear in Every Crisis

Traceability systems that cannot deliver in time

The regulatory requirement is that you must identify every product containing a recalled batch within four hours of a recall decision. This means traceability from raw material lot through every stage of production to finished product, distribution centre, and individual store. Most traceability systems can trace product in principle. Most cannot do it in four hours, under pressure, when the team managing the system is simultaneously dealing with a crisis response. Traceability speed under pressure must be tested, not assumed.

Contact lists that have not been updated

A recall contact list last verified two years ago will contain mobile numbers that have changed, email addresses that bounce, and contacts who have left their roles. Retailer recall contacts change frequently. Regulatory liaison contacts rotate. Contact lists — regulators, retailers, distributors, legal, insurance, communications — must be reviewed every six months and verified tested annually.

No documented decision-making authority

The most time-consuming element of an unplanned recall is the decision-making process. Who has authority to initiate a product hold? Who declares a withdrawal? Who declares a recall? Who authorises the media statement? In organisations without pre-documented decision authority, these questions consume hours while consumers may be at risk.

Allergen incidents treated as generic recall events

Allergen incidents — undeclared allergens, label errors, cross-contamination — are among the most serious food safety events and the most frequent triggers for Class I recalls. They also have specific regulatory and consumer communication requirements that differ from microbial contamination recalls. Generic recall procedures applied to allergen incidents are a known failure mode.

Communications not integrated into recall response

A product recall that is publicly visible will generate consumer and media enquiries within hours. Organisations without pre-prepared communication templates and a designated spokesperson will improvise under pressure — generating inconsistent messaging, social media amplification of worst-case fears, and regulatory concern about transparency.

The traceability exercise we run annually takes four hours when everything is working normally. In the middle of a real recall, with half the team dealing with retailer calls and the other half finding raw material certificates, it takes twice as long. Recall planning must account for crisis conditions, not just normal operating conditions.

Quality Director, European Food Manufacturer — AjaCertX Client

The Seven-Element Recall Readiness Programme

  1. Validated traceability with speed testing. Test end-to-end traceability annually — measuring actual time under simulated crisis conditions. A four-hour regulatory expectation must be achievable in crisis conditions, not laboratory conditions.
  2. Decision authority matrix. Define who can initiate holds, withdrawals and recalls — by role, with out-of-hours deputy chain. Include in recall procedure, review annually, test in exercises.
  3. Maintained and tested contact database. Verify all regulatory, retailer, distributor, legal, insurance and communications contacts by telephone every six months. Test the contact cascade in annual exercises.
  4. Class-specific recall procedures. Separate response procedures for allergen incidents, microbial contamination, and physical/chemical contamination — each with specific consumer communication requirements and regulatory timelines.
  5. Pre-approved communication templates. Draft and approve before any incident: retailer notification, FSA/EFSA notification letter, consumer press statement, social media holding statement, website recall notice, employee communication.
  6. Annual end-to-end recall exercise. From trigger event through traceability, decision authority, regulatory notification, consumer communication and stock reconciliation. Identify gaps and address them before the next exercise.
  7. Post-incident review process. After every recall, withdrawal or simulated event — structured review of what worked, what slowed response, what would have been different at larger scale. Track action completion.
Food Safety Recall Readiness Checklist
Traceability system has been tested under timed conditions and completes a full trace within 4 hours
Decision authority matrix is documented — defining who initiates holds, withdrawals and recalls
Recall contact database has been verified and tested within the last 6 months
Allergen-specific recall procedures exist separate from generic recall procedures
Pre-approved communication templates exist for retailer notification, FSA notification, press statement and social media
An end-to-end recall exercise has been conducted in the last 12 months
Recall procedure covers both product withdrawal (supply chain) and consumer recall (public communication) as distinct processes
Our BRCGS / FSSC 22000 / ISO 22000 recall procedure reflects tested capability — not aspirational capability

Frequently Asked Questions

What is the difference between a product withdrawal and a product recall?
A product withdrawal removes product from the distribution or supply chain — without requiring consumer-facing communication. A product recall extends to products that have reached consumers, requiring public communication (FSA product alerts, retailer notices, media statements) and a consumer return mechanism. Most food safety procedures conflate the two, causing either under-response or over-response. The distinction and decision criteria must be documented and understood by everyone in the decision authority chain.
How long do we have to notify the FSA or EFSA?
The legal requirement under EU General Food Law and UK retained legislation is immediate notification once you know unsafe food has been placed on the market. In practice, the FSA expects notification within 24 hours of a recall decision, and most retailers expect notification within two to four hours. The FSA's Incident Management Team is available 24/7. Pre-establishing your regulatory liaison contact before an incident is essential.
Our BRCGS certificate covers recall procedures. Does that mean we are recall-ready?
BRCGS certification confirms your recall procedures meet the standard's requirements. It does not confirm your capability would function effectively in a real event. BRCGS Issue 9 strengthened the tested recall capability requirement — but audit evidence of a recall test is not the same as a real recall. The gap between documented procedure and functional capability is what costs organisations millions when an incident occurs.

How AjaCertX Helps

AjaCertX delivers food safety recall readiness assessments, programme design, exercise facilitation and BRCGS/FSSC 22000 certification support for food manufacturers, retailers and foodservice organisations.

  • Recall readiness gap assessment against BRCGS, FSSC 22000, ISO 22000 and FSA/EFSA expectations
  • Traceability system speed testing and timed simulation exercise design
  • Recall procedure development — class-specific and allergen-specific protocols
  • Communication template development and approval process design
  • Annual recall exercise design, facilitation and post-exercise review
  • BRCGS Issue 9 and FSSC 22000 Version 6 certification support
Is your recall capability genuinely tested?

Food safety and recall readiness specialists. Assessment and proposal within 48 hours.

Conclusion

Food product recall readiness is a capability discipline, not a documentation exercise. The organisations that manage recalls well have built and tested specific capabilities: fast traceability, clear decision authority, maintained contact systems, and pre-prepared communications. They have exercised those capabilities under conditions that approximate real incident pressure, found the gaps, and closed them. The regulatory and retailer scrutiny of recall capability is intensifying. The question is no longer whether you have a procedure — every certified food organisation does. The question is whether your capability would work at the speed a real consumer safety incident demands.

About AjaCertX
AjaCertX is a specialist compliance, certification and assurance partner serving food manufacturers, retailers and foodservice organisations globally. Our Food Safety practice delivers BRCGS, FSSC 22000 and ISO 22000 certification support, food safety audit programmes, allergen management assurance, and recall readiness assessments.
WhatsAppConnect