Regulators are not guessing anymore. They are showing up with specific questions, and if your paperwork cannot answer them, your stock walks out the door in their van.

Food crime across Ireland and the UK has shifted in character over the past three years. It is no longer limited to individual rogue operators swapping labels in a back room. Organised substitution fraud, undeclared allergens passed off as compliant products, and falsified country-of-origin documentation are now showing up in mainstream supply chains. The Food Safety Authority of Ireland has responded by raising what it expects food businesses to document, and the Environmental Health Officers enforcing those expectations have new tools and sharper mandates. The era of "we kept a rough record" is over.

The businesses getting caught are not always the ones doing something wrong. Some are simply buying from suppliers who are, and they cannot prove otherwise because their records are too thin. That distinction collapses in front of a magistrate.

What the Law Actually Requires

EU Regulation 178/2002 is the foundation. It requires all food business operators to be able to identify any person who has supplied them with food, and any business to whom they have supplied food. One step back, one step forward. That is the legal minimum, and it has not changed.

What has changed is how strictly "identify" is being interpreted. An FSAI inspector now expects more than a supplier name and a phone number. They want invoice dates, batch codes, quantities received, and evidence that the food matched what the label said. If you are buying beef, they want to trace it to the farm. If you are buying fish, they want the vessel and catch area. Vague supplier details are treated as a gap. Gaps invite further scrutiny.

Food crime is becoming bolder and the documentation burden on legitimate businesses is rising as a direct result. That is not fair, but it is the reality.

The Five Records You Need Right Now

Supplier verification documents. A signed supplier declaration stating their registration or approval number, the regulatory framework they operate under, and confirmation they carry product liability insurance. Update this annually at minimum. If a supplier refuses to provide it, that refusal is itself information worth recording.

Goods inward logs. Date of delivery, supplier name, product description, batch or lot number, quantity, and the name of the person who accepted the delivery. Temperature on arrival for chilled or frozen product. Any visible defect or packaging damage noted at the time, not reconstructed later. Courts and inspectors can tell the difference.

Specification sheets and certificates of conformity. For every product category you buy: a current specification showing declared allergens, country of origin, and any treatment the product has undergone. For meat, poultry, and fish this is non-negotiable. For processed ingredients it matters almost as much.

Non-conformance records. Every time a delivery does not match the spec, or a supplier sends a substitution, write it down and what you did about it. Inspectors treat a clean non-conformance log with more suspicion than one with entries. No business operates without problems. The question is whether you caught them.

Disposal and withdrawal records. If you removed something from sale, why, when, and where it went. If it was returned to the supplier, get a signed receipt. If it was destroyed, document that too. Stock that disappears without explanation is a red flag that invites allegations of further distribution.

HACCP and Traceability Are Not Separate Systems

This is where a lot of smaller food businesses go wrong. They treat HACCP as the hygiene documentation and traceability as an admin task. They are the same system. Your critical control points include the point of sourcing. If you cannot verify what came in, you cannot verify what went out.

Your HACCP plan should name specific high-risk ingredients, identify the traceability controls applied to each, and assign responsibility for checking them. A plan that says "buy from reputable suppliers" is not a control. It is a wish.

An Environmental Health Officer inspection will look at whether your HACCP plan reflects your actual operation. If you added a new supplier six months ago and the plan still references the old one, that mismatch raises questions. Keep the plan current or expect to explain why it is not.

Supplier Audits Are No Longer Optional for Higher-Risk Operations

If you are a restaurant buying whole carcasses, a caterer supplying hospitals or schools, or a food manufacturer putting your name on a finished product, spot-checking supplier documents is not enough. You need a supplier audit programme.

This does not require a full quality team. It means visiting key suppliers at least once a year, reviewing their food safety management documentation, and keeping a written record of what you found. If you cannot visit, a completed questionnaire with supporting evidence is better than nothing. An approved third-party audit certificate is better still, but verify that it covers the products you are actually buying.

What Confiscation Actually Looks Like

An EHO with a reasonable suspicion that food is unsafe or fraudulently described can detain it on the spot under the Food Safety Authority of Ireland Act 1998. They issue a detention notice. You cannot sell it, move it, or use it until the notice is lifted. If the investigation confirms a problem, the food is seized and destroyed. You absorb the cost.

The businesses that lose stock and then lose nothing else are the ones who can show clean records. The businesses that lose stock and then face prosecution are the ones who cannot demonstrate where the food came from or cannot show they acted on warning signs.

Documentation is not bureaucracy. It is the difference between an incident and a conviction.

The Turn

Stricter traceability enforcement is not the enemy of a well-run food business. It is the enemy of the operators undercutting you on price because they are sourcing from wherever is cheapest and hoping no one looks too closely. Get your records in order and you are both compliant and protected. That is a reasonable return on an afternoon of admin work.

Start with your top five suppliers by volume. Pull the current documentation for each. If there are gaps, fill them before the next delivery arrives.