In Poland a food business must be approved by the state sanitary inspection before it starts operating, and the approval covers one address and one declared type of activity, not the company. Separately the operator runs a HACCP-based system: name the hazards, set control points with measurable limits, monitor them, and keep records an inspector can read.
What is approved is the room at an address and the activity declared inside it
An owner registers a company, signs a lease, and assumes the permission belongs to the business. It does not. The application names three things: who applies, the type and scope of the activity including the type of food, and the location of the establishment or the place where the activity is carried on (Dz.U. 2023 poz. 1448, consolidated text as at 28.10.2025, art. 64, Sejm ISAP, 28.08.2026). Two of those three are the subject of this page, and neither is the company name.
Approval of an establishment — a decision of the sanitary inspection that a specific room at a specific address is fit for a specific kind of food activity. It attaches to the address and the declared activity, not to the firm.
Competence follows the same logic: for fixed premises it is the office for the seat of the establishment or the place of activity, and for mobile and temporary equipment the act splits the cases and again points at where the thing physically operates (art. 62).
A second address is a second path, not an amendment
A second site has its own application, its own decision, its own entry in the register. That costs money before it costs paperwork: an owner who budgets the second opening as a copy of the first meets the approval work in the week he wanted to sell dinners. It is neither cost of goods nor floor labour, which is why it lands nowhere in the usual cost structure — see restaurant prime cost.
One list of activities needs no approval at all, only an entry in the register: direct supplies, vending machines, agritourism, pharmacies, retail of packaged microbiologically stable food, intermediation in distance selling (art. 63 ust. 2). A restaurant kitchen is not on it.
Who approves, and on what legal basis
The state district sanitary inspector, or the state border sanitary inspector, is competent in matters of registration and of approval, conditional approval, extension of conditional approval, suspension and withdrawal of approval (art. 61).
State sanitary inspection — the authority the Polish food safety act names as the one that approves a food establishment and supervises it afterwards.
The same office keeps the register, issues the decisions on approval and on refusal of entry, decides on removal, and issues the certificate of entry (art. 62 ust. 1). Withdrawal and suspension are separate decisions carrying immediate enforceability (art. 66). Supervision does not end at opening: among the control tasks the act lists, for the sanitary inspection, the correctness of the application of HACCP principles in supervised establishments (art. 73 ust. 1) — not the existence of a document, the correctness of the application.
HACCP is not a binder, it is an analysis and the points where hazards get caught
The act carries its own definition, and it never mentions paper.
HACCP — a hazard analysis and critical control point system: conduct aimed at securing food safety by identifying and estimating the scale of hazards from the point of view of the health requirements applying to food and the risk of hazards arising during all stages of production and trade in food; the system also aims to determine methods of eliminating or limiting hazards and to establish corrective actions (art. 3 ust. 3 pkt 41).
Critical control point — a step at which a hazard can be eliminated or reduced to an acceptable level and at which a measurable limit exists.
Record — a line with a date, a value and a signature. The instruction says how it should be; the record says how it was. The second one gets checked.
A step without a measurable limit is not a control point
A team writes down twelve points because twelve steps feel important, and nine have no number attached: check the delivery, watch the fridge, keep the boards apart. A step with no limit cannot be exceeded, so it cannot be monitored, so its corrective action can never fire. Three points with real limits beat twelve that are opinions.
Where the HACCP requirements themselves come from
The act creates the duty and hands the construction over. Operators must observe the hygiene requirements laid down in Regulation 852/2004 (art. 59 ust. 1), and the penalty provision points at the same place: whoever fails to implement procedures based on HACCP principles, contrary to the obligation in article 5 of that regulation, is liable to a fine (art. 100 ust. 1 pkt 8). The act prints no amount for that fine, and neither does this page.
The regulation holds the seven working items in one article: identify hazards to be prevented, eliminated or reduced; identify the critical control points; establish limits separating acceptable from unacceptable; establish effective monitoring; establish corrective actions when a point goes out of control; establish verification procedures applied regularly; and establish documents and records proportionate to the nature and size of the food business, showing that the other six work (Regulation (EC) 852/2004, art. 5, EUR-Lex, 27.08.2026).
Proportionate to the nature and size of the food business decides how heavy your system becomes. A twenty-seat bistro is not required to carry the paperwork of a central production kitchen, and building it anyway is not caution — it is a shift that stops writing by the third week. The same article also says to keep the procedure documents up to date and retain other records for an appropriate period. That is the wording; no number of months is given there, so none is quoted here.
What is prepared before the application, and what starts after
Approval is granted on the operator's application, and the establishment may start operating after approval or conditional approval, or in the listed cases after entry in the register (art. 63 ust. 1). That fixes the order of the project: everything describing the place is upstream of the application, everything producing evidence starts on the day the doors open.
| Step | Before the application | After approval |
|---|---|---|
| Address and activity | declared in the application | change means a new procedure |
| Layout and flows | built | maintained |
| Hazard analysis | written for this kitchen | reviewed on change |
| Limits at control points | named with numbers | monitored |
| Training | delivered before the first shift | repeated |
| Records | forms exist, still empty | filled every shift |
A procedure proves an intention; a filled form proves a fact. Only the second survives a control visit. And approval itself sits downstream of a physical look at the place: establishments are approved following at least one on-site visit (Regulation 852/2004, art. 6).
Flows inside the premises: raw and ready, clean and dirty
The hygiene rules do not describe your kitchen; they describe what it has to make possible. Layout, design, construction, siting and size must permit adequate maintenance, cleaning and disinfection, protect against dirt accumulation and contact with toxic materials, permit good hygiene practice including protection against contamination, and where necessary provide temperature-controlled conditions designed so that the temperature can be monitored and, where necessary, recorded (Regulation 852/2004, Annex II, Chapter I).
The ability to record a temperature is written into the requirements for the room, not only for the paperwork. A fridge you cannot read is a fridge you cannot monitor. This page does not restate premises requirements as numbers and does not replace a technology design. What the owner carries into that conversation is the pair of separations the flows exist for — raw away from ready, dirty away from clean — and the fact that every crossing which cannot be separated in space has to be separated in time, by a rule someone writes down and someone follows.
The records looked at first: temperatures, goods-in, cleaning
A control does not begin with the binder. It begins with the last few weeks of lines. Three families carry the weight in a restaurant, and they fail in three different ways.
| Record | Frequency | Who keeps it | Where it lives |
|---|---|---|---|
| Cold and hot holding temperature | your own procedure | the person on the station | at the station |
| Goods-in acceptance | every delivery | whoever signs for the pallet | at the goods entrance |
| Cleaning and disinfection | the cleaning plan | the closing shift | in the room being cleaned |
Not one frequency there comes from an act or from someone else's article. Your procedure sets them and has to justify them: a fridge opened forty times a service is not the risk a sealed blast chiller is.
Record completeness over a period
The first number worth keeping is trivial arithmetic and almost never calculated.
Record completeness = Records made ÷ Records expected
Records made— lines actually filled in the period, in pieces;Records expected— control points x checks per day x days in the period, in pieces;- pieces divided by pieces gives a dimensionless share between 0 and 1.
Worked through: 3 points x 2 checks x 30 days = 180 expected; 171 filled gives 171 ÷ 180 = 0.95. That sounds excellent and deserves a second look, because nine missing lines are rarely spread evenly. They cluster — one station, one shift, one weekend — and the cluster is the finding, not the average. The dashboards that make this visible are the same ones that show why a number moved, and the numbers an owner actually looks at is about that difference between a figure and a finding.
Training the shift: who is answerable for a person knowing their own point
A person working in contact with food obtains a medical certificate for sanitary and epidemiological purposes. Fulfilment of the training requirements of Annex II Chapter XII to Regulation 852/2004 is confirmed by documentation of training or instruction given to people working in food production or trade, and to those responsible for implementing and applying HACCP principles; the operator keeps it in personal files, produces it on demand of the official control bodies, and keeps copies at the place where the person works (art. 59 ust. 2-5). Copies at the place of work is the detail owners miss: a file in the office satisfies nobody standing in the kitchen at ten in the morning.
The regulation behind that referral asks two different things: food handlers are supervised and instructed or trained in hygiene commensurate with their work, while those responsible for developing and maintaining the HACCP procedure have received adequate training in applying HACCP principles (Regulation 852/2004, Annex II, Chapter XII). Everyone gets hygiene; the person who owns the system gets HACCP. A restaurant where the owner is the only trained person and never stands a shift has the training in the wrong hands.
Who is on which station and who was trained for it is a scheduling problem before it is a compliance problem — that is what a team and shifts module is for, and turning findings into named work with a due date is what a task list is for. What can sensibly be handed to a system is covered in what a system can actually take over.
A new menu and a new process: when the paperwork has to be touched again
Four separate triggers live here, and mixing them up produces both panic and negligence.
The first is procedural: where any modification is made in the product, the process, or any stage, the operator reviews the procedure and makes the necessary changes (Regulation 852/2004, art. 5). A sous-vide bath, a new supplier of raw fish, a switch from bought stock to stock you cook and cool yourself — each is a modification of the process, and nobody sends a letter about it.
The second is registration data: where data change, the operator submits an application for changes in the register, in writing, within thirty days of the change arising (art. 64 ust. 1a).
The third is the approval itself, and it is the expensive one. Approval was granted for a declared type and scope of activity at a declared location. Adding a printed dish is not that; starting to produce a category of food you did not declare, or opening a second production room, is. A new dish also reaches the label rules, which have their own logic — allergen information in the menu — and a changed process usually reaches the shift plan, where night hours have records of their own: overtime, night work and working time records.
The fourth is the newest in the act and it meets everyone who takes over somebody else's dining room: neither the address nor the menu changes, only the operator running the establishment. In that case the new operator submits an application for changes in the register of establishments, in writing, on the form set under art. 67 ust. 3 pkt 4, within thirty days of the day on which it began to run that establishment (art. 64 ust. 1b). The clock does not start at the signature and does not start at the handover of keys — it starts on the day the establishment begins to be run. This is the thread this page opens with: the register is kept on the operator, so a change of operator is a register event. This paragraph does not exist in the edition as published — every reference to the act on this page points to the consolidated text as at 28.10.2025, and that is the only edition where the paragraph can be seen at all.
The calendar before opening counts backwards from one date fixed by law
Exactly one date in this process is named by an act. The application for entry in the register, or for approval together with entry, is submitted in writing at least fourteen days before the day the planned activity is to start (art. 64 ust. 1).
Fourteen days is a floor on submission, not a schedule and not a promise of a decision. So the honest calendar runs backwards from your opening day in steps rather than weeks — no act names weeks, and this page does not invent them:
- Before anything is submitted. The address is fixed, the layout is built or converted, the flows are decided, and the type and scope of activity is written in the words the application will use.
- Still before submission. The hazard analysis exists, the control points have numbers, the monitoring forms exist though empty, and the training documentation is in the personal files with copies already at the workplaces.
- At least fourteen days before opening. The application goes in, in writing, naming the type and scope of activity and the location.
- From the first day of operation. The forms start being filled. Those first weeks are the ones that get read, and the only ones you can never reconstruct later.
Which thresholds a small operation should cross first is the theme of four thresholds to start with, and the fiscal side of opening day has its own authority and its own daily close: the fiscal cash register and closing the day.
Setting the records up so the shift keeps them, not the owner at night
A line written the next morning from memory is not evidence, and everyone involved knows it. That is the second number worth keeping.
Record lag = Timestamp of the record − Moment of the event
Timestamp of the record— when the line was actually written, a point in time;Moment of the event— when the temperature was read or the delivery accepted, a point in time;- a point in time minus a point in time is a duration, in minutes or hours.
Zero means the line was written where the work happened. Hours mean it was reconstructed, and its value as evidence falls accordingly, whatever number it carries. Almost nobody measures this, because it requires the record to carry its own timestamp rather than just a date.
Four design rules follow, and none of them is technology: the form lives where the work is; the person who does the step signs it; the number of lines is set by risk, not by a downloaded template; and a missing line is a finding with a name and a date, not a gap to fill in later.
A system helps with the last rule — collecting lines from the stations that make them, tying a delivery record to the goods it came with, turning a missing line into a task with an owner. That is integration between tills, accounting and stock and reports that assemble themselves. Worth saying plainly which part here is machine work: the two formulas above are a division and a subtraction, with no artificial intelligence in either and none needed. A model earns its place further along, reading a month of lines and pointing at the cluster a human eye slides over.
Waste is the other continuous register a food business keeps, with its own database and rules: waste records and BDO. A warning about doing any of this too early sits in five situations where we advise against automating, and the wider picture is in restaurant automation: bookings, suppliers, reviews.
Frequently asked questions
Who approves a restaurant before it opens in Poland?
The state district sanitary inspector, or the border inspector where that applies. The same office keeps the register of establishments, issues the decision on approval or conditional approval, and afterwards supervises the correctness of how HACCP principles are applied. The regulation expects approval to follow at least one visit to the place where the business will operate.
Is HACCP a binder of documents or a working system?
A working system. The definition in the act speaks about identifying hazards, estimating their scale and the risk of their occurrence at all stages, determining methods of eliminating or limiting them, and establishing corrective actions. Documents appear only as the last of the seven items in the regulation, and there they are proportionate to the nature and size of the food business.
Does the approval follow the company or the address?
The address and the declared activity. The application names the type and scope of activity to be carried on including the type of food, and the location of the establishment or the place of activity. Which office is competent is decided by where the establishment sits or operates. A second site is a second path from the beginning, not an amendment to the first.
What records does an inspection look at first?
Filled monitoring lines from the recent past, rather than the procedure describing them. In a restaurant that usually means temperature monitoring at cold and hot holding, acceptance of goods on delivery, and cleaning and disinfection against the cleaning plan. The frequencies are not set by any act: your own procedure sets them and has to justify them from your own risk.
Do I need to touch the approval if I change the menu?
Usually not the approval, but almost always the procedure. Any modification of the product or the process obliges the operator to review the hazard analysis and change it where necessary. If the data in the register change, an application for changes is submitted in writing within thirty days. The approval is touched only when the declared type or scope of activity, or the location, genuinely changes.
Where does Polish law actually say HACCP is required?
The act obliges operators to observe the hygiene requirements laid down in Regulation 852/2004, and its penalty provision refers directly to failing to implement procedures based on HACCP principles contrary to the obligation in article 5 of that regulation. The duty is Polish and the construction is European: the act carries the obligation and the definition, the regulation carries the seven principles.
How early before opening should the paperwork start?
Earlier than the only statutory date suggests. The application goes in at least fourteen days before the planned start of activity, but that period runs on submission, and everything the application describes — finished layout, hazard analysis, numbered control points, empty forms, training documentation — has to exist before it is submitted.
Write out your own control points and record frequencies on a single sheet, then compare that sheet with what the shift actually filled in over the last thirty days. The gap between the sheet and the folder is the conversation worth having. The rest of what we publish for restaurants is collected in one place: the restaurant section.