ISO 22000 Clause 8.9: Controlling Potentially Unsafe Products

Background, Systemic Rationale, and Affected Roles

Under DS/EN ISO 22000:2018, Clause 8.9 establishes the mandatory operational framework for managing product and process nonconformities. Quality managers, compliance leads, and internal auditors must navigate these requirements to prevent nonconforming or contaminated items from reaching consumers. The systemic rationale of Clause 8.9 is to maintain strict operational control over food safety hazards while enforcing transparent root cause analysis and controlled product disposition.

When a critical limit at a Critical Control Point (CCP) is breached or an action criterion for an Operational Prerequisite Programme (OPRP) is not met, a nonconformity occurs under Clause 3.28. Clause 8.9.1 requires organizations to ensure that monitoring data from CCPs and OPRPs are evaluated by designated, competent personnel with defined authority to initiate corrections and corrective actions. Failing to control nonconforming processes or releasing unverified batches introduces direct legal, regulatory, and public health risks across the food chain.

Corrections, Corrective Actions, and Root Cause Analysis

Clause 8.9.2 mandates that organizations establish and maintain documented procedures to identify, assess, and handle affected products when critical limits or action criteria are not met. Under Clause 3.9, a correction is an immediate action taken to eliminate a detected nonconformity, which includes quarantining potentially unsafe products. For OPRP action criteria failures, Clause 8.9.2.3 specifically requires evaluating the cause of failure and determining food safety consequences prior to product handling.

While corrections address the immediate symptom, Clause 8.9.3 mandates corrective actions to eliminate the root cause and prevent recurrence. The organization must evaluate the need for corrective actions when critical limits at CCPs or action criteria for OPRPs are exceeded. Under Clause 8.9.3, the root cause analysis process must systematically review customer complaints, regulatory inspection reports, and monitoring trends that indicate a loss of process control. Internal auditors must verify that documented corrective actions include verifying action effectiveness and returning the process to controlled boundaries.

Handling Potentially Unsafe Products and Evaluation for Release

Under Clause 8.9.4.1, an organization must retain affected products under its control until evaluation and disposition are completed. The standard prohibits potentially unsafe products from entering the food chain unless the organization can demonstrate that hazards are reduced to defined acceptable levels, will be reduced prior to entry, or remain within acceptable levels despite the nonconformity. Clause 8.9.4.2 establishes strict rules governing product release evaluations based on whether the nonconformity occurred at a CCP or an OPRP.

When products fail release evaluation, Clause 8.9.4.3 requires one of three disposition actions: reprocessing or further processing to reduce hazards to acceptable levels, redirecting for alternative use without affecting food safety, or destruction and waste disposal. Documented information of product disposition must record the approving authority. If potentially unsafe products leave organizational control, Clause 8.9.4.1 and Clause 8.9.5 mandate immediate notification of interested parties and activation of withdrawal or recall procedures by designated competent personnel. Furthermore, Clause 8.9.5 mandates periodic verification of withdrawal effectiveness through mock recall testing.

What to do now

• Appoint competent personnel with explicit authority to evaluate monitoring data and initiate corrections under Clause 8.9.1.
• Update nonconformity procedures to ensure CCP critical limit breaches automatically trigger product quarantine and prevent release per Clause 8.9.4.2.
• Establish written protocols for OPRP failure evaluations under Clause 8.9.2.3, ensuring consequence assessments and cause analyses are fully documented.
• Review root cause analysis workflows under Clause 8.9.3 to incorporate trend analysis of monitoring data, customer complaints, and regulatory reports.
• Conduct periodic mock recall tests under Clause 8.9.5 to verify the responsiveness of withdrawal systems and report results to management review under Clause 9.3.2.

Reference documents

• DS/EN ISO 22000:2018 Food safety management systems – Requirements for any organization in the food chain
• DS/ISO 22003-1:2022 Food safety – Part 1: Requirements for bodies providing audit and certification of food safety management systems
• DS/ISO 22003-2:2022 Food safety – Part 2: Requirements for bodies providing evaluation and certification of products, processes and services, including an audit of the food safety system