Metal detection after sealing: CCP or OPRP?
A 45-person plant makes chilled beef lasagne and vegetable lasagne for retail. The hazard analysis classified the in-line metal detector after tray sealing as an OPRP, with action criteria of Fe 2.0 mm, non-Fe 2.5 mm and stainless steel 3.0 mm. The food safety team argued that magnets, sieves and supplier declarations already control foreign matter, so a CCP was unnecessary. There is no later step that would remove metal from the sealed tray; product goes directly to cold storage and despatch. In the last 12 months there were two detector test failures: one at start-up, where the tray was rejected and re-tested, and one mid-shift where 40 trays had passed before the failed check was noticed. The plant released those 40 trays after a visual inspection. During a customer audit, the auditor said the control should be a CCP and that the release decision was not supported. The technical manager wants to keep the OPRP classification to avoid adding a CCP and extra monitoring.
1. Evaluate whether the metal detector should be classified as a CCP or an OPRP. Justify your answer using ISO 22000 logic and HACCP principles, not just the auditor's opinion.
Read the worked answer
Reasoning. Both CCPs and OPRPs control significant hazards. The difference is not severity alone: a CCP is a step where a control measure is essential, a critical limit can be set, and measurement allows correction before or at the step. An OPRP uses action criteria rather than critical limits and is typically used where the control is further from the immediate product hazard or where exceeding the criterion does not automatically make the product unsafe.
Here, several facts point to CCP:
- The detector is the last barrier before despatch; no later step removes metal.
- A measurable limit exists (Fe 2.0 mm, non-Fe 2.5 mm, SS 3.0 mm).
- Failure means potentially unsafe product can reach the market.
The earlier argument confuses PRPs and supplier assurance with critical control. Magnets and sieves reduce the likelihood of metal entering, but they do not validate the detector as a non-critical control. Supplier declarations are not a downstream removal step. If the team can show a validated later control, an OPRP might be defensible; on these facts it is not. The correct classification is CCP.
A defensible answer should also say the classification must be documented in the hazard analysis, the HACCP plan must specify monitoring, critical limits, correction and verification, and the change must be validated before implementation.
2. What should the plant do about the 40 released trays and the OPRP classification now? Address product disposition, traceability, records and communication.
Read the worked answer
Product disposition. Visual inspection is not a validated method for detecting 2.0 mm metal in a sealed tray. The release decision therefore lacks a scientific basis. The plant should reconstruct the lot identification for the 40 trays, place any remaining stock on hold, and assess whether any product was despatched. If despatched, it should notify the customer and decide on withdrawal or recall based on the hazard and the quantity involved. A negative visual check does not justify release.
Classification. Reclassify the detector as a CCP, update the hazard analysis and HACCP plan, and define critical limits, monitoring frequency, correction, verification and record review. The change should be validated (test-piece sensitivity, challenge tests, detector performance) and communicated to the food safety team and operators.
Records and investigation. The deviation record should show the lot code, time window, quantity, disposition and rationale. The root cause of 40 trays passing before the failed check needs investigation: was the monitoring frequency adequate, was the reject mechanism working, was the test piece check performed at the required interval? Corrective action should address the cause, not just retest the detector.
Communication and review. The customer audit finding and the release decision should be treated as a nonconformity, with corrective action tracked and its effectiveness verified. Management review should see the incident because it affects product safety and customer confidence.
3. What does this case reveal about the food safety team's hazard analysis and validation? Give three specific weaknesses.
Read the worked answer
Control measure selection was not risk-based. The team treated existing PRPs and supplier declarations as if they removed the need for a last-barrier control. Hazard analysis should assess whether each control measure is essential and whether failure at that step leads directly to an unacceptable hazard.
No validation of the release decision. Visual inspection was used as a correction without evidence that it can detect the hazard at the stated size. Validation should precede use of a control or release method, and verification should confirm ongoing capability.
Monitoring and correction design were weak. The fact that 40 trays passed before a failed check was noticed suggests the monitoring frequency, reject bin control or operator response was not designed to limit affected product. The hazard analysis should link the monitoring interval to the amount of product at risk.
The wider lesson is that classification labels are not cosmetic. Calling a step an OPRP does not reduce the need for validated control when it is the last barrier. The team should document the rationale for CCP/OPRP decisions so that an auditor can follow the logic.