DEFRA + FSA + ISO 22000 + HACCP. One substrate.

Yes. Any business placing fish or produce on the market is a food business operator under FSA rules and must have a documented HACCP plan identifying CCPs (e.g. water quality, harvest, packing). ISO 22000 wraps HACCP into a full Food Safety Management System with prerequisite programmes (PRPs) and interactive communication up and down the chain. MEOK's iso-22000-ai-mcp auto-generates the FSMS docs and the fsa-food-safety MCP monitors CCP thresholds and Natasha's Law PPDS labelling.

Aquatic Pathogen Biosecurity covers notifiable diseases such as KHV, SVC, IHN and VHS. You must operate biosecurity measures, keep movement records, and notify the Fish Health Inspectorate of suspected notifiable disease. Aquaponics systems recirculate water, so a single pathogen can spread fast — AI early-warning detection on sensor data is the practical control. The Aquatic Animal Health (England) Regs 2021 add registration, health certificates and movement compliance on top.

Yes. Fish are protected animals under the Animal Welfare Act 2006, which imposes a duty of care covering suitable environment, diet, the ability to exhibit normal behaviour, and protection from pain and suffering. For aquaponics that means continuous monitoring of dissolved oxygen, ammonia, nitrite, pH and stocking density. AI fish-welfare scoring on sensor and vision data gives you the auditable evidence of duty-of-care that an inspector will ask for.

Water and environmental sensor telemetry is usually not personal data, but as soon as you tie monitoring to identifiable staff, customers or CCTV you are processing personal data and need a lawful basis and, for higher-risk processing, a DPIA. MEOK's gdpr-compliance-ai-mcp and agent-data-residency-mcp keep the lawful-basis register and data-residency controls in the same signed evidence chain as your food-safety and welfare records.