The aim of the food legislation is to ensure the protection of human health. Traditionally, the food legislation requires food business operators to apply good hygiene practices and specific procedures to control foodborne pathogens. These regulations allowed reaching a high level of health protection. The improvement of the system will require risk-based approaches. Firstly, risk assessment should allow the identification of high-risk situations where resources should be allocated for a better targeting of risk management. Then, management measures should be adapted to the health objective. In this approach, the appropriate level of protection is converted intofood safety and performance objectives on the food chain, i.e., maximum microbial contamination to fulfil the acceptable risk level. When objectives are defined, the food business operators and competent authorities can identify control options to comply with the objectives and establish microbiological criteria to verify compliance with these objectives. This approach, described for approximately 10 years, operative thanks to the development of quantitative risk assessment techniques, is still difficult to use in practical terms since it requires a commitment of competent authorities to define the acceptable risk and needs also the implementation of sometimes complex risk models.