Do sole traders need to implement Food Safety Program where prescribed (Standard 3.2.1)?

Depends on size or structure. Looking in the 4 industries it can reach and every size band, the engine's answer for a sole trader is: depends on size or structure.

Do businesses with 1–5 employees need to implement Food Safety Program where prescribed (Standard 3.2.1)?

Depends on size or structure (1–5 employees, turnover $100K–$1M).

Who must implement Food Safety Program where prescribed (Standard 3.2.1)?

What the obligation is

High-risk food businesses must implement a documented Food Safety Program audited by a recognised food safety auditor.

Standard 3.2.1 of the Food Standards Code requires certain high-risk food businesses (food service to vulnerable populations, raw oyster processing, etc.) to implement a written Food Safety Program audited by a recognised auditor. State implementation varies.

The applicability test

Applies when the business has approved aged care provider status. Where the business has industry: Cafés & restaurants / Hotels, pubs & licensed venues or NDIS services, check whether you serve food to vulnerable persons (FSANZ Std 3.3.1) or your state prescribes a food safety program.

How the regulator frames it: High-risk food businesses + service to vulnerable populations.

What triggers it: Operating a covered category.

Jurisdiction: Commonwealth law, so the test is the same in every state and territory.

Which industries are in or out

Outcome across the 35 industries Rules Mate maps (1 of 35: yes; 3 of 35: only if a further fact applies; 31 of 35: no).

Industry	Answer
Aged care providers	Yes
NDIS providers	Only if a further fact applies
Cafés & restaurants	Only if a further fact applies
Hotels, pubs & licensed venues	Only if a further fact applies
No	31 other industries

Business structure and size

Structure does not change the answer in the 4 industries it can reach: for every structure the answer is "depends on size or structure".

Size does not change the answer in the 4 industries it can reach: at every size band the answer is "depends on size or structure".

Worked examples

Each line is one run of the Rules Mate applicability engine for a single business profile, with the reason the engine gives:

Pty Ltd company in aged care providers with 6–19 employees, turnover $1M–$3M: applies. Aged care provider.
Pty Ltd company in real estate agents with 6–19 employees, turnover $1M–$3M: does not apply. Requires approved aged care provider status.
Pty Ltd company in ndis providers with 6–19 employees, turnover $1M–$3M: check whether it applies. applies only if you serve food to vulnerable persons (FSANZ Std 3.3.1) or your state prescribes a food safety program.

Answers that bring it into scope

Starting from a small or large professional services company that does not otherwise meet the test, each of these single facts changes the engine's answer:

The business is a registered NDIS provider: it becomes worth checking, because it applies only if you serve food to vulnerable persons (FSANZ Std 3.3.1) or your state prescribes a food safety program.
The business is an approved aged care provider: it then applies (approved aged care provider).

When you need to check further

The engine shows this obligation as "check whether this applies" when a business has industry: Cafés & restaurants / Hotels, pubs & licensed venues or NDIS services. It then applies only if you serve food to vulnerable persons (FSANZ Std 3.3.1) or your state prescribes a food safety program. That fact is not something Rules Mate can infer from industry, structure or size.

What you must do, and when

When due: Continuous; periodic audit.
Frequency: Ongoing
Evidence to keep: Food Safety Program document; auditor's report.
Status: Current
Priority: High

Penalty for not complying

Maximum penalty: State-based fines + business closure for serious breaches.

Audit or assurance level

Not determined: check with your adviser. Whether an independent review or audit is required turns on facts about the business, so Rules Mate does not assume either way. The facts that decide it: Do you serve food to vulnerable people (hospital, aged care, childcare, delivered meals)?

Obligations that usually travel with it

What usually applies alongside it

Across the 1,890 business profiles Rules Mate evaluates, these obligations apply to most of the businesses this one applies to, and are far more common among them than among businesses generally:

Where it sits in the corpus

Rules Mate tracks 5 published obligations tagged "food safety", 0 of them rated critical. For a professional services Pty Ltd company with 6–19 employees operating in every state, 0 of those apply outright. This obligation is rated high priority, and is an ongoing duty.

Regulator, legislation and tools

Regulated by Food Standards Australia New Zealand.

FSANZ: Sets the Australia New Zealand Food Standards Code — labelling, allergen, additive, and food safety standards.

Food Standards Australia New Zealand

Free tools that help with this obligation:

Compliance calendar builder

Run the compliance journeyAnswer a short questionnaire about your business and get the obligations that apply to you, with the reason each one applies.

Questions

Who must implement Food Safety Program where prescribed (Standard 3.2.1)?: Applies when the business has approved aged care provider status. Where the business has industry: Cafés & restaurants / Hotels, pubs & licensed venues or NDIS services, check whether you serve food to vulnerable persons (FSANZ Std 3.3.1) or your state prescribes a food safety program.
Do sole traders need to implement Food Safety Program where prescribed (Standard 3.2.1)?: Depends on size or structure. Looking in the 4 industries it can reach and every size band, the engine's answer for a sole trader is: depends on size or structure.
Do businesses with 1–5 employees need to implement Food Safety Program where prescribed (Standard 3.2.1)?: Depends on size or structure (1–5 employees, turnover $100K–$1M).
When is "Implement Food Safety Program where prescribed (Standard 3.2.1)" due?: Continuous; periodic audit.

Sources

Computed by the Rules Mate applicability engine from the published obligation corpus; facts last checked 3 October 2026. Rules Mate is not a law firm and this is general information, not legal advice. Confirm your position with the regulator source or a qualified adviser before acting.