HACCP in school canteens: requirements, documents and DSSU inspections

Every month, 70 schools and kindergartens google "HACCP for school canteen." Law No. 771/97-VR requires every catering operator to have a working system in place — schools and kindergartens included. Fines start at 50,000 UAH, and during the ongoing school meal reform, the State Service of Ukraine on Food Safety and Consumer Protection (DSSU, Derzhprodspozhyvsluzhba) is checking educational institutions deliberately.

Over recent years, the Ekontrol team has guided more than 50 HACCP rollouts in schools, kindergartens (DNZ), and lyceums across Ukraine. This article is built from real DSSU inspections in educational institutions, from inspectors' findings, and from typical penalty rulings. No academic phrasing, no "we'll set up your HACCP in one day" promises.

What follows is to the point: which documents an inspector will ask for, what equipment and temperature regimes you need in the food prep area, how much rollout costs for a small versus a large school, and what to do if the inspection is already scheduled for next week.

HACCP for a school canteen is a food safety management system that's mandatory for every school and preschool catering operator in Ukraine under Law No. 771/97-VR. The system rests on 7 principles and 12 steps of Codex Alimentarius and is fully adapted to school menus and children's age groups.

For a school, this means a simple shift in mindset: you don't rely on "the cook does fine because she's been doing it for 15 years." Instead, the kitchen analyzes the process — from the moment milk arrives at the warehouse to the second a finished dish hits the serving line — and pinpoints where hazards can appear. The usual suspects are storage temperature for perishables, heat treatment of chicken and eggs, and reuse of dishes after groups suspected of infection.

HACCP doesn't demand that you buy new equipment to satisfy paperwork. It demands a working plan, monitoring logs, and clear actions when something goes off-spec. When the DSSU inspector arrives, the first things they check are whether records are kept, whether the actual fridge temperature matches what's in the log, and whether the cook actually knows what they're monitoring.

Law No. 771/97-VR treats every educational institution with its own kitchen as a food business operator. That means HACCP is mandatory for:

• General secondary schools, gymnasiums, and lyceums with their own canteen.
• Kindergartens (DNZ) of all ownership types, including private ones.
• Boarding schools and sanatorium institutions for children.
• Vocational schools and colleges with dormitories.
• Summer camps, even if they only operate 21 days per season.
• Inclusive education institutions with organized meals.

There's a separate case: schools that use a catering company. Then the certified HACCP belongs to the caterer, and that's the plan the inspector checks first. But the school is still obliged to control food intake, serving temperature, and hygiene in the dining hall. So a partial system is needed even when there are no cooks on staff. This often surprises principals — they genuinely think "we don't cook anything" and keep zero logs. The DSSU inspector fines for this without mercy.

In practice, the inspector asks for two documents first: the principal's order on HACCP implementation and the appointment of a responsible person (usually the head cook or deputy principal for facilities), and the HACCP plan with the list of Critical Control Points (CCPs). If either is missing, the inspector starts recording violations from there.

It's also worth understanding how HACCP relates to DSanPiN — the traditional sanitary rules for schools that run in parallel. DSanPiN sets specific norms (room square footage, banned products, meal schedules by age group), while HACCP is the management system that shows how those norms are actually controlled day to day. The inspector checks both. So "but we follow DSanPiN" isn't an answer that lands.

The seven HACCP principles are the same across every food business, but their application in a school kitchen is very specific. Here's how each principle looks in practice in a typical school of 300 children.

1. Hazard analysis. Review every stage from product intake to serving. For a school canteen, the typical hazards are: salmonella in chicken eggs, listeria in hard cheeses, mechanical impurities in grains, cross-contamination with allergens (nuts, gluten, milk).

2. Identifying Critical Control Points (CCPs). A typical school canteen has 4–6 CCPs: dairy intake by temperature, meat and fish storage in the fridge, heat treatment of pasteurized milk, heat treatment of cutlets and casseroles, and storage of ready dishes before serving.

3. Setting critical limits. Milk at intake no higher than +6°C, the center of a meat dish during cooking no lower than +75°C for 30 seconds, hot dishes at serving no lower than +65°C, cold salads no higher than +14°C.

4. Monitoring. The cook fills out a temperature log daily: morning fridge readings, dish temperature at serving. Product intake has its own log with actual unloading temperatures.

5. Corrective actions. If the fridge temperature exceeds +6°C, pull the products from circulation, move them to a backup fridge, call the technician. If the cutlet center is under +75°C, continue heat treatment until the norm is reached and log it.

6. Effectiveness verification. Quarterly, the responsible person reviews every CCP, runs an internal mini-audit, and takes equipment swabs for microbiology at an accredited lab.

7. Documentation. All logs are kept for a minimum of 1 year (perishables) or 3 years (everything else). During an inspection, the DSSU officer asks for archived logs, not just current ones. More detail on each principle is in our article 7 HACCP principles: a detailed breakdown with examples.

The key difference between a school canteen and an ordinary restaurant is age groups. The tech card for the same dish (say, cutlets) has different recipes and portion sizes for children aged 3–6, 7–10, and 11–18. This affects cooking time, the temperature in the center of the finished product, and ingredient quantities. The inspector may ask the cook to demonstrate how exactly they distinguish these three versions on one line — and not every cook can explain that off the cuff. The HACCP principles used in restaurants and cafes work on different logic, because there it's one menu for adult customers.

The list of documents a DSSU inspector asks for during an inspection of a school kitchen. This minimum has been validated across 50+ real inspections and has stayed stable since 2022. Ready-made sample HACCP documents for kindergartens and schools are in a separate guide of ours.

Beyond this list, DSSU may request extra documents if the school has specific processes: dietary tables for children, gluten-free menus, meals for children with inclusion. In that case, prepare separate tech cards and an allergen control log.

In practice, items 4, 5, and 11 are the ones that fail most often. Temperature logs are filled in formally (the same numbers day after day), and lab swabs aren't taken quarterly. The inspector spots this pattern instantly: opens the log on a random page, sees a steady +4°C all year, asks why. In reality, the fridge swings ±2°C — that's normal, and that natural variation in the log is what reads as honest. More detail on the rollout process itself is in our complete HACCP guide.

Equipment for a school canteen under HACCP doesn't mean "buy a new combi-steamer for 200 thousand." Most schools pass inspections with ordinary Soviet and post-Soviet equipment, as long as it works and meets temperature regimes. Here's the minimum set for a typical school canteen.

The storage principle in a school kitchen is called FIFO (First In, First Out): products that arrived earlier are used first. This isn't advice, it's a DSSU requirement. The inspector checks it two ways: looks at shelf labels and picks a random package to compare the production date with the intake date in the log.

Every item, once accepted, must be labeled: intake date, package opening date, expiry date. A regular marker and paper tag is enough. Label everything: an opened can of condensed milk, a sliced head of cheese, frozen fillet after defrosting. Without labels, the inspector records a FIFO violation even if everything is fresh.

Products banned in school catering (per DSanPiN and sanitary rules for educational institutions): blood sausage and headcheese, homemade pâtés, mushrooms (except cultivated champignons and oyster mushrooms), dry-cured sausages, raw-salted fish, raw sour cream creams, non-alcoholic energy drinks, factory-made chips and crackers with flavor enhancers, carbonated drinks with sweeteners.

Eggs are accepted only with a veterinary service certificate, marked "C0–C3," without cracks or contamination. Mandatory pre-use treatment: washing under running water, then in 1% soda ash solution, then disinfection, then rinsing. The inspector may ask the cook to recite this sequence verbally — and it's a classic "failed" question, because not every cook remembers all four steps by heart.

Kitchen storage is split into zones: dry (grains, flour, sugar, canned goods), cold (dairy, meat, fish separately), freezer, vegetable washing zone, and ready-dish serving zone. Each zone has its own inventory and its own cleaning schedule. Cutting boards are color-coded: red — raw meat, blue — fish, green — vegetables, yellow — poultry, white — ready products. This isn't a nod to cooking-show aesthetics; it's a requirement to separate flows of raw and ready product, written into the HACCP plan.

A separate story is shelf life after opening. Industrial milk after opening keeps no more than 24 hours even in the fridge. An opened can of condensed milk keeps 48 hours in a glass container (not the can!). Sliced butter keeps 5 days at +2…+6°C. All these terms must live in the kitchen's tech instructions, and the cook needs to know them for the top 10 products used daily.

School kitchen staff get mandatory medical exams once a year (head cook and cooks) and twice a year (for those in direct contact with ready food). The health booklet is kept by the school nurse or in HR, with a copy held by the worker. Without a current health booklet, kitchen access is denied — and DSSU fines for this without warning.

Uniforms are their own story. Work coat, apron, cap, non-slip shoes, gloves for handling ready dishes. None of this is brought from home in a backpack. It's stored in school lockers and laundered centrally (at least every 2 working days). For handling raw meat and fish — a separate apron and colored gloves (usually blue or green, so they stand out from skin color and get noticed if they accidentally end up in a dish).

Handwashing is a CCP that often gets underestimated. Workers wash hands with soap and antiseptic on entering the kitchen, after using the toilet, after contact with raw products, before serving ready dishes. Every sink needs liquid soap, single-use paper towels, and 70%+ alcohol hand antiseptic. Cloth hand towels are banned.

Food safety training happens once a year for all staff. This isn't the "one day, certificate handed out" format. It's either internal training with a protocol and signature log, or external training at an accredited center. Mandatory topics: the 7 HACCP principles, personal hygiene, what to do when pests appear, behavior on suspicion of poisoning. New hires get training before they start cooking.

One more thing that gets overlooked — nails and jewelry. Long nails (over 2 mm), artificial nails, nail polish, rings (other than a plain band without stones), bracelets, wristwatches, and dangling earrings are all banned in a school kitchen. These aren't trivia: polish can chip into a dish, a stone ring is a mechanical hazard under HACCP classification. The DSSU inspector pays attention to this during checks, especially if the monitoring log doesn't include a daily staff appearance check before the shift starts.

Illness and staff well-being are a separate block. A worker with ARI symptoms, with pustular skin lesions, or with cuts on their hands without a waterproof plaster — not allowed to work. The nurse or responsible person does this check every morning before the shift starts. The log entry is brief: date, full name, "admitted / not admitted." Feels like bureaucracy, but if a food poisoning outbreak happens, this is the first log the epidemiologist looks at.

School canteens are inspected by DSSU (Derzhprodspozhyvsluzhba) in two formats: scheduled inspections (typically once every 1–2 years depending on the institution's risk level) and unscheduled ones (on parent complaints, after a food poisoning event, on instruction from authorities). There are also joint inspections with representatives from education departments and the sanitary service.

A typical inspection runs 1–3 working days. The inspector first asks for documents (the order, HACCP plan, logs for the past 12 months), then visually surveys the kitchen, warehouse, and dining hall, measures actual temperatures, and takes swabs for microbiology at an accredited lab. The result is recorded in a report listing every violation found.

Typical violations we see in schools: no HACCP plan at all (about 30% of inspections), no temperature monitoring logs (45%), FIFO and labeling violations (50%), one fridge for raw and ready (35%), missing current health booklets for some staff (20%), missing staff training records (40%).

Fines under Article 64 of Law No. 771/97-VR: for sole proprietors and small businesses (including private kindergartens) — from 50,000 UAH. For legal entities (including municipal schools through the education department) — from 100,000 to 170,000 UAH. If the violation repeats within a year, the fine doubles and there's a question of temporarily shutting down the kitchen. In practice, a shutdown means the school closes its canteen and kids switch to bagged meals until violations are fixed.

A case from our practice: a secondary school of 250 students in Kyiv region. First DSSU inspection — 85,000 UAH fine for missing HACCP plan, logs, and health booklets for two cooks. The school ordered rollout support, closed every requirement in 6 weeks, and the follow-up inspection 3 months later went through without remarks. Total cost of the rollout plus audit support came in cheaper than a single fine.

A second example: a private kindergarten of 80 children in Lviv. A parent complaint after a poisoning case (which later turned out to be unrelated to the kindergarten). DSSU arrived for an unscheduled inspection, found no HACCP at all — 50,000 UAH fine plus orders to fix violations in 21 days. If they don't, the kitchen stops. In the end, the kindergarten urgently built a basic HACCP in 3 weeks with our consulting support, added 2 new fridges for zone separation, and trained the staff. It ended well, but the cost of rushing came out roughly 1.7x what a planned rollout would have been.

If an inspection is on the horizon at your school or kindergarten, or one just passed with remarks — reach out to Ekontrol consultants to assess urgency and draft an action plan.

Six questions we hear most from school principals, methodists, and kindergarten directors — with direct answers, no fluff. If you need something more specific to your institution, write to us or start with full HACCP implementation turnkey.