Here’s an analogy we use in training: HACCP is the roof. GMP is the foundation. You can have the most sophisticated HACCP plan in the world, but if your Good Manufacturing Practices are weak — dirty equipment, untrained staff, no pest control — that HACCP plan is sitting on sand.

We’ve audited plants with beautiful HACCP documentation and floors you wouldn’t want to eat off. The paperwork said “controlled.” The reality said otherwise. Auditors see through this immediately, because GMP is what they observe with their own eyes during the facility walkthrough — before they ever open your HACCP binder.

This guide covers what GMP actually requires, how it differs from HACCP, the most common audit findings, and how to build a program that works in practice, not just on paper.

GMP vs HACCP: the distinction that matters

The key insight: GMP handles the general conditions. HACCP handles the specific hazards. You need both. A plant with excellent GMP but no HACCP might miss a critical hazard. A plant with HACCP but poor GMP is trying to control specific hazards in a generally uncontrolled environment — which doesn’t work.

In ISO 22000 terminology, GMP falls under Prerequisite Programs (PRPs). In Codex, they’re part of Good Hygienic Practices (GHP). Different names, same concept: the basic conditions that must be in place before HACCP can work.

The pillars of GMP

1. Facility design and maintenance

The building itself is your first line of defense. Key requirements:

• Floors, walls, and ceilings that are cleanable (no cracked tiles harboring bacteria, no flaking paint)
• Adequate drainage — no standing water (standing water breeds Listeria)
• Proper ventilation to prevent condensation (condensation dripping onto product is a classic audit finding)
• Separation of raw and cooked/RTE areas — physical barriers, not just lines on the floor
• Doors and windows that prevent pest entry

What we’ve seen: A plant with a beautiful production area and a loading dock door that didn’t close properly. Pigeons roosted above it. Droppings on pallets. The production manager said “that’s just the warehouse.” The auditor didn’t see a warehouse — they saw a pest harborage 20 meters from food production. GMP doesn’t stop at the production room door.

2. Equipment design and maintenance

Food contact equipment must be:

• Made of food-grade materials (typically 304 or 316 stainless steel)
• Designed for cleaning — no dead spots, crevices, or hollow areas where biofilms form
• Maintained in good repair (no worn gaskets shedding particles, no rust)

The sanitary design principle: If you can’t clean it, you can’t control it. We’ve seen Listeria persist for months in a hollow conveyor roller that looked clean from the outside. The internal void was a bacterial incubator. Sanitary design isn’t aesthetic — it’s microbiological.

3. Personnel hygiene

People are the number one source of contamination in food plants. GMP requirements include:

• Handwashing: proper technique, at the right times (after breaks, after touching non-food surfaces, after handling raw materials)
• Protective clothing: clean uniforms, hairnets/beard nets, no jewelry (except plain wedding bands in most standards)
• Health screening: exclusion of ill workers, especially with gastrointestinal symptoms, infected wounds, or jaundice
• Training: not just “wash your hands” but why — understanding drives compliance

What we’ve seen: Handwashing stations without soap. We’ve seen it multiple times. The SOP said “wash hands.” The dispenser was empty. Nobody had checked. The simplest GMP requirement, failed at the most basic level. Auditors always check soap and paper towels — it’s a two-second test of whether your program is real.

4. Cleaning and sanitation

Not the same thing. Cleaning removes visible soil (detergent). Sanitation reduces microbes to safe levels (sanitizer). You must clean before you sanitize — sanitizer doesn’t work through a layer of grease.

A GMP sanitation program needs:

• Master cleaning schedule (what gets cleaned, how often, by whom, with what chemicals)
• Validated procedures for allergen cleaning (if applicable)
• Correct chemical concentrations (too weak = ineffective; too strong = chemical contamination risk)
• Verification: visual inspection, ATP swabs, microbial swabs

The concentration trap: We’ve tested sanitizer solutions in plants that were supposed to be 200 ppm quaternary ammonium. Actual readings: 50 ppm (too weak to work) and 800 ppm (chemical contamination risk). If you’re not verifying concentration with test strips, you don’t know what you’re applying.

5. Pest control

A documented Integrated Pest Management (IPM) program:

• Prevention first: seal entry points, manage waste, eliminate harborage
• Monitoring: traps, bait stations (mapped and numbered), regular inspections
• Licensed pest control operator (PCO) with service reports
• No pesticides stored near food; no bait inside production areas (traps only)

What auditors check: They’ll look at your pest sighting log. If it’s empty for two years, they won’t think “great pest control” — they’ll think “nobody’s reporting.” A healthy program has occasional sightings with documented corrective actions. Zero sightings usually means zero monitoring.

6. Water quality

Water used in food production must be potable. This includes:

• Water used as an ingredient
• Water for cleaning food contact surfaces
• Ice (ice is food — made from potable water, handled hygienically)
• Steam in direct contact with food

Municipal water is usually fine, but private wells need regular testing. And backflow prevention — we’ve seen mop sink hoses submerged in buckets, creating a cross-connection that could siphon contaminated water into the potable supply. A $15 backflow preventer fixes it.

7. Waste management

Waste attracts pests, harbors microbes, and creates cross-contamination risks. GMP requires:

• Covered, labeled waste containers
• Regular removal (not overflowing)
• Separation of waste streams
• Waste storage areas away from production, with pest control

Common GMP audit findings (and how to avoid them)

Based on what we’ve seen across audits, the top findings are:

1. Condensation — dripping onto product or food contact surfaces. Fix: improve ventilation, insulate cold pipes, adjust HVAC.
2. Poor chemical control — unlabeled spray bottles, wrong concentrations, chemicals stored above food. Fix: central chemical storage, labeled secondary containers, test strips at every mixing station.
3. Inadequate handwashing — no soap, no towels, poor technique, wrong timing. Fix: check supplies daily, post technique guides, train on when (not just how).
4. Pest evidence — droppings, gnaw marks, dead insects in traps inside production. Fix: IPM program with prevention focus, not just trapping.
5. Equipment in poor repair — cracked conveyor belts, worn gaskets, rust. Fix: preventive maintenance schedule with food safety criteria.
6. No allergen segregation — allergenic and non-allergenic ingredients stored together, shared scoops. Fix: dedicated storage, color-coding, labeled utensils.

Ask yourself: if an auditor walked into your plant right now, unannounced, what would they see? That’s your real GMP status — not what’s in the binder.

Frequently asked questions

What is GMP in food manufacturing?

Good Manufacturing Practices are the basic hygienic and operational conditions required for safe food production — covering facility design, equipment, personnel hygiene, sanitation, pest control, water quality, and waste management. They form the foundation (prerequisite programs) that HACCP builds on.

What’s the difference between GMP and HACCP?

GMP covers general hygienic conditions applicable to all food production. HACCP is a targeted system for controlling specific identified hazards at critical control points. GMP is the foundation; HACCP is the targeted intervention built on top of it. You need both.

Is GMP mandatory?

Yes, in most jurisdictions. The EU requires food businesses to implement procedures based on HACCP principles and maintain good hygienic practices (Regulation 852/2004). The US FDA’s Current Good Manufacturing Practices (21 CFR 117, Subpart B) are legally binding. Most GFSI schemes (BRCGS, SQF, FSSC 22000) audit GMP as prerequisite programs.

What is the difference between cleaning and sanitizing?

Cleaning removes visible soil using detergents. Sanitizing reduces microorganisms to safe levels using heat or chemicals. You must clean before sanitizing — sanitizers cannot penetrate food residues effectively. A surface that looks clean but wasn’t sanitized may still harbor pathogens.

How often should GMP be audited?

Internal GMP audits should be conducted regularly — monthly for high-risk operations, quarterly at minimum. Many companies do weekly GMP walkthroughs (short, focused) plus comprehensive monthly audits. Third-party GMP audits are typically annual as part of certification schemes.

Want to test your GMP knowledge? Try our Food Safety quizzes — 20 questions on hygienic design, sanitation, pest control, and personnel practices.