The Temperature Log That Was Filled in on Friday
A retail butcher's shop keeps a HACCP-style temperature monitoring sheet for its display chiller. The sheet requires a reading every morning and afternoon. A review of the last eight weeks shows all readings between 2°C and 4°C, written in the same handwriting, with no gaps - including two days the shop was closed for a public holiday. The manager says staff 'know the chiller is fine' and that filling the sheet is 'just for the inspector'. The chiller's own digital display shows a current reading of 7°C. There is no record of any corrective action ever being taken.
1. What does this pattern tell you about the HACCP-based system, and which principles are failing?
Read the worked answer
The pattern is a textbook case of a paper system that has decoupled from reality.
What the evidence shows
- Identical handwriting across eight weeks suggests one person completed the records retrospectively.
- Readings on closed days are physically impossible - the records are fabricated.
- Zero variation (always 2–4°C) is statistically implausible for a real chiller.
- No corrective actions ever recorded means the monitoring was never actually used to make decisions.
- The current display of 7°C contradicts the 'fine' narrative.
HACCP principles failing
- Principle 2 (determine CCPs): the chiller is a CCP, but it is being treated as a formality.
- Principle 3 (establish critical limits): a limit exists (e.g., ≤5°C) but is not being applied.
- Principle 4 (monitoring): monitoring must be real, timely and recorded by the person doing it. This is neither.
- Principle 5 (corrective actions): none exist in practice, so the system cannot respond to a deviation.
- Principle 6 (verification): no one has checked that the records are authentic; verification is absent.
- Principle 7 (documentation): records exist but are not evidence of control.
Root cause: the system was designed for the inspector, not for the business. Staff see monitoring as compliance theatre, which is a design and culture failure, not just a dishonest individual.
2. Design a monitoring and verification approach that would prevent recurrence and give the manager a reason to value it.
Read the worked answer
Redesign the monitoring
- Make it meaningful: monitor product temperature as well as air temperature, at a defined frequency, with a calibrated probe. Record the actual reading and the time, signed by the person who took it.
- Make it easy: a simple daily sheet with pre-printed limits and a clear 'if out of limit, do this' box. Remove steps that add no value.
- Automate where possible: a data logger with an alarm removes the temptation to invent numbers and gives the manager useful trend data.
Corrective action procedure
- Define what happens at a breach: move product, assess exposure time, decide disposition (move to a working chiller, use immediately, or discard), record the decision and the reason.
- Name who authorises disposal.
Verification
- Weekly manager review of records against logger data; monthly trend review.
- Periodic independent check (e.g., another site or a consultant) to confirm records match reality.
- Internal audit of the monitoring process at defined intervals.
Winning the manager over
- Frame monitoring as protecting stock value and reputation, not as paperwork: a chiller failure caught early saves product and avoids a recall.
- Show the cost of a real failure (spoiled stock, lost contract, withdrawal) versus the cost of a probe and five minutes a day.
- Involve staff in designing the sheet so they own it.
- Recognise good recording publicly; make accuracy the norm.
Success measure: records that show realistic variation, occasional corrective actions, and a manager who can explain why the numbers matter.