Understanding the Intersection of R.638 and FSSC 22000
In the South African food landscape, FSSC 22000 certification represents a gold standard of global food safety excellence. However, this high-level international framework does not exist in a vacuum. It is built upon a mandatory legal foundation: Regulations Governing General Hygiene Requirements for Food Premises, the Transport of Food and Related Matters (R.638). For Quality Assurance leads, the challenge lies in ensuring that FSSC 22000 internal auditor training doesn't just focus on the ISO clauses, but also rigorously enforces these local statutory requirements.
Internal auditing is the most effective tool a Food Safety Manager has to verify that the system is not only "certified" but also "legal." By integrating R.638 into your audit protocols, you ensure that your facility remains compliant with the Department of Health while meeting the stringent requirements of GFSI-benchmarked standards.
Why Statutory Compliance is the Foundation of FSSC 22000
FSSC 22000 (specifically ISO 22000) explicitly requires an organisation to identify and apply applicable statutory and regulatory requirements. In South Africa, R.638 is the primary regulation for any food-handling enterprise. If your facility lacks a valid Certificate of Acceptability (COA) or fails to meet the basic structural requirements of R.638, you are technically in breach of FSSC 22000 requirements. An auditor who only looks for ISO compliance but ignores the state of the delivery vehicles or the specific training records required by the DOH is missing half the picture.
Key R.638 Requirements to Include in Auditor Training
When designing your Introduction to Internal Auditing content, specific R.638 elements must be highlighted. These are the "non-negotiables" that municipal health inspectors look for, and consequently, your internal auditors must be trained to verify them with equal scrutiny.
- The Certificate of Acceptability (COA): Auditors must verify not just the presence of a COA, but its accuracy. Does it reflect the current owner? Is it for the correct premises and activities?
- The "Person in Charge": Under R.638, a specific person must be designated as the responsible party. Auditors should check if this individual has received accredited training in food hygiene.
- Structural Requirements: This includes the cleanability of walls, floors, and ceilings, as well as the provision of adequate hand-washing facilities that are not cross-contaminated by food-handling areas.
- Transport of Food: Often overlooked in ISO audits, R.638 has specific requirements for the temperature and cleanliness of vehicles, including the necessity of a transport permit or COA for the vehicle itself where applicable.
Comparison: R.638 vs. FSSC 22000 (ISO 22000:2018)
It is helpful for internal auditors to see where these two frameworks overlap. Use the table below as a training reference:
| Focus Area | R.638 Requirement | FSSC 22000 / ISO 22000 Relation |
|---|---|---|
| Management Responsibility | Designated "Person in Charge" | Clause 5.1: Leadership and Commitment |
| Training | Accredited hygiene training for food handlers | Clause 7.2: Competence |
| Premises | Structural compliance (Reg 5 & 6) | ISO/TS 22002-1: Prerequisite Programmes |
| Traceability | Basic records of food origin | Clause 8.3: Traceability System |
| Health & Hygiene | Medical fitness and protective clothing | ISO/TS 22002-1: Personal Hygiene |
Practical Auditing: The COA and Person in Charge
A frequent finding in South African audits is the misalignment of the COA. During Advanced Internal Auditing training, delegates should be taught to "audit the paperwork against reality." If the facility has undergone an expansion or changed ownership, the old COA is legally invalid. An auditor must treat this as a major non-conformance, as it impacts the legal right to operate.
"No person shall handle food on food premises in respect of which a certificate of acceptability has not been issued." – R.638, Regulation 3(1).
Developing an Integrated Internal Audit Checklist
To integrate these successfully, you should not have two separate audits. Instead, update your FSSC 22000 checklist to include R.638 specificities. For example, under the "Facilities" section, add a check for the presence of the "No Smoking" and "Wash Hands" signage required by local law. Under the "Personnel" section, ensure the training records meet the specific criteria of Regulation 10.
This approach is particularly effective when implementing Prerequisite Programmes (PRPs). Since PRPs form the foundation of any FSMS, they are the natural home for R.638 compliance points.
Training the Auditor: Beyond the Checklist
Training should focus on the application of knowledge. Use real-world scenarios in your workshops. For example: "You arrive at the receiving bay and notice a third-party delivery vehicle without a COA for food transport. How do you grade this against both R.638 and your Supplier Quality Assurance programme?"
Effective internal auditors need to understand that a breach of R.638 is a breach of the law, whereas a breach of an FSSC requirement might be a breach of a commercial standard. Both are serious, but the legal implication carries additional weight during provincial health inspections.
Common Pitfalls in Integrated Auditing
- Assuming ISO covers R.638: While there is overlap, R.638 has specific administrative requirements (like the exact wording on certificates) that ISO 22000 does not mention.
- Neglecting Pest Control Records: R.638 requires specific records for pest control that might be more prescriptive than a general ISO requirement.
- Ignoring the Transport Sector: Many internal audits stop at the factory gate. R.638 explicitly covers the transport of food, and your auditors must verify these conditions.
If your team struggles with identifying the root causes of these recurring regulatory findings, consider a Root Cause Analysis Masterclass to help them dig deeper than just "employee error."
Conclusion and Next Steps
Integrating R.638 into your FSSC 22000 internal auditor training is not just a compliance exercise; it is a strategic move to protect your business from legal liability and ensure a robust food safety culture. By training your team to see the system through both a regulatory and a global standard lens, you create a more resilient and professional QA department.
Ready to level up your team's auditing skills? Book a consultation with Shilux today to discuss our tailored training programmes that bridge the gap between South African law and international standards.