FDA Reader
A Food Industry Guide to the FDA

Blog

A Food Producer's Guide to FSMA and FDA Regulation
Posts in Guidance Document
HACCP Implementation in a Shared Kitchen Environment

HACCP Implementation in a Shared Kitchen Environment

Outgoing FDA Commissioner Gottlieb released his 2nd letter concerning the legal fate of Cannabidiol (CBD) in the last 6 months

Introduction

This paper examines the challenge of HACCP implementation in a shared kitchen context. The first sections aim to guide a shared kitchen operator in assessing whether they can accommodate user-managed HACCP programs in their facility. The second half of the paper offers recommendations for how a shared kitchen operator may align their operations to support HACCP implementation. These recommendations are also provided in the sections below.

Enter your email below to download the white paper, HACCP Implementation in a Shared Kitchen Environment

FDA Reader

White Paper

Table of Contents

  • Preface

  • A Quick Primer on HACCP

  • The Feasibility of HACCP Implementation in a Shared Kitchen

  • When is a HACCP Plan Required?

  • Liability

  • Recommendations for Shared Kitchen

  • Operators

    • General

    • User Relationships

    • Operations

    • Facility Layout

    • Facility Maintenance

  • Conclusion


Recommendations For Shared Kitchen Operators

General

Comply with applicable regulations The first step in supporting HACCP programs is to comply with all applicable health regulations (federal, state, local). If there are outstanding health-code violations, the operator should consider addressing those first.

Understand HACCP Principles The simplest way to do this is to take a HACCP course (they are available online) and read through several HACCP plans. It is absolutely critical for an operator to have a thorough understanding of HACCP so that they can assess the plans and practices of shared kitchen users.


User Relationships

Appendix  1 lists commonly occurring process steps and hazards found in shared kitchens. Food processors can use this as a guide when building their hazard analysis.

Appendix 1 lists commonly occurring process steps and hazards found in shared kitchens. Food processors can use this as a guide when building their hazard analysis.

Set expectations with prospective users An operator should set clear expectations about how their shared kitchen may (or may not) be able to support HACCP implementation. A comprehensive tour of the space and candid explanation about how operations are conducted will support a prospective user in assessing the site’s suitability for their HACCP implementation. If an operator already has HACCP programs operating in their space, they may be able to offer more practical details about how those programs are effectively managed.

Assess each case individually Since each production process entails unique food safety risks and HACCP supports a risk-based approach, the shared kitchen operator must consider each prospective HACCP program individually. At minimum, the operator should consider the final product, the process steps and the associated hazards. Then, the operator will be able to assess whether effective HACCP implementation is feasible in their facility. Note that this oversight is meant to reduce the shared kitchen’s liability exposure, not to micromanage the user’s operations.

Protect public health and liability If a user is producing illegally without a HACCP plan or is implementing their HACCP program improperly, the operator should immediately suspend that processor’s use of the space until they are able to faithfully enact their HACCP program. This should not be viewed as punitive but rather as an effort to protect the shared kitchen and all of the users operating in the space.


Operations

Good news! HACCP is most easily implemented in shared kitchens where the operator has a “hands off” approach. Here’s why: HACCP requires the food processor to maintain tight control over their process steps and keep records proving that those processes were performed correctly.

If the shared kitchen operator provides services that are related to food safety— for example, cleaning processing areas on a recurring basis— the user working under a HACCP plan cannot (legally) trust that those activities are being performed properly. Instead, the user must confirm that those cleaning activities are effective and verify that they are being performed according to schedule and keep records to prove it. Maintaining this kind of coordination with the shared kitchen operator is sufficiently difficult that most users implementing a HACCP program choose to conduct all sanitation activities themselves— even if the operator is already providing those services. Below are some specific recommendations for building HACCP-aligned operations in shared kitchens:

Define who is responsible for maintaining prerequisite programs (PRPs) Operators should define who is responsible for maintaining prerequisite programs and share this information with users before they begin operating in the space. This way, both the operator and user understand what systems they are accountable for maintaining and where they can demand accountability. PRPs may be grouped into three broad categories:

Operator’s responsibility: This refers to prerequisite programs which the operator is responsible for maintaining and documenting. These programs typically favor centralized management, and may include:

◈ Pest control

When dedicated cold storage spaces are not available, lockable, vented totes can minimize contamination risks.

When dedicated cold storage spaces are not available, lockable, vented totes can minimize contamination risks.

◈ Maintenance of shared equipment

◈ Waste management

◈ Clean water supply

User’s responsibility: This refers to PRPs which the user must enact and maintain on their own. Typically, these programs are unique to each food processor and may include:

◈ Product traceability

◈ Supplier verification

◈ Food handling practices

Overlapping Responsibility: This refers to PRPs that may be maintained by both the operator and the user. For example,

◈ Control of employee health -- both the operator and user have employees who must comply with employee health policies.

◈ Allergen control -- The operator may control allergens through the structural zoning of space while users must maintain allergen control through their production process and storage methods.

◈ Sanitation activities -- The operator may offer a basic sanitation program while the user conducts additional sanitation activities on their own.

By defining responsibilities and enforcing accountability (even among their own staff), the operator protects the kitchen from a “tragedy of the commons” scenario where facility conditions deteriorate over time.

Allow users to retain process control Users should be allowed to pursue a high degree of autonomy so that they can maintain total control of their process and ensure their pre-requisite programs are effective. Any “concierge” services or prerequisite programs offered by the shared kitchen operator should be structured so that a business can “opt out” and conduct those activities themselves, according to their HACCP plan.

Make food safety records available: When the operator performs a prerequisite program related to food safety, a record of that activity should be produced and made available for users to access. This may include:

◈ Sanitation records

◈ Records of equipment maintenance and calibration

◈ Refrigeration logs

◈ MSDS records and product specs for all chemicals/consumables onsite

◈ Pest control reports

◈ Receiving logs (if raw ingredients are received by the operator on behalf of the user)

Strive for operational consistency and communicate changes A processor’s HACCP plan will define not only the details of their specific process but also details pertaining to the overall facility and the prerequisite programs applied by the operator. In the same way that a change to the business’s production process would require them to update their HACCP documentation, so would operational changes implemented by the shared kitchen operator at the site level.

While it is important for operators to continuously improve their systems, it is also important to acknowledge that each user’s HACCP documentation must reflect these changes once they occur. For this reason, the operator should communicate any upcoming changes to food safety systems with the entire user base. This will give users an opportunity to consider those changes and adjust their HACCP plans accordingly.


Facility Layout

Physical separation between workstations is a simple solution for minimizing cross contamination.

Physical separation between workstations is a simple solution for minimizing cross contamination.

The arrangement of workstations, storage, and utility areas in a shared kitchen can be optimized to support HACCP implementation. While it may be prohibitively expensive to undertake large scale infrastructure improvements, an operator may be able to address hazards in the facility layout by adjusting the use-of-space. Fortunately, HACCP is a flexible system that allows a processor to minimize hazards using any method that is safe and effective. An operator may consider the following strategies:

Offer dedicated access processing spaces If possible, an operator should offer dedicated-access processing spaces that a single business can occupy long term. This arrangement allows users to operate with high levels of process control, favoring a simpler HACCP program.

Use distance and barriers to minimize contamination risks in shared spaces If businesses operate in a shared space, an operator can structurally mitigate contamination risk through physical barriers (e.g. partitions) or a buffer zone between processing areas. Avoid layouts where prep tables are directly adjacent to each other and where cross contamination may easily occur.

Zone food processing and storage activities based on risk profile An operator may zone the space based on the types of risks presented by processing activities. This structurally minimizes opportunities for contamination. Types of zoning include:

◈ Allergen-based zoning: This may confine certain allergens to specific zones

◈ Hygienic zoning: Higher risk processing activities are confined to areas where higher standards of hygiene and sanitation are in place.

◈ Ingredient-based zoning: The use of certain ingredients are confined to specific zones, based on associated microbiological hazards

Offer dedicated-access storage spaces An operator may offer dedicated-access storage spaces to protect stored goods from interference or contamination. Possible solutions may include individually lockable storage closets or cages. In cold storage, dedicated reach-in refrigerators allow for individual temperature control, product security, and minimization of contamination risk from other users’ products.


Facility Maintenance

Implementing a HACCP program requires the food processor to assess any risk that may occur— including hazards that originate from the building itself. Even in a conventional food processing facility, it is common for the renter to assess a hazard that the only the building owner can repair, such as a leaky roof. In the shared kitchen environment, the user has even less control over facility conditions than a food processor operating in a conventionally rented space, and this may be the cause of some anxiety. Below are some ways that a shared kitchen operator can support HACCP programs through effective facility maintenance.

Conduct professional repairs Repairs should be conducted by professionals and DIY-fixes (e.g. duct-taped pipes) should be avoided. Because these types of temporary repairs may introduce a food safety hazard, users operating under a HACCP plan will be unable to use that piece of equipment until it is completely repaired and the hazard is eliminated.

Align facility conditions with cGMPs In order to create a safe environment for food processing, operators should meet the Current Good Manufacturing Practices outlined in the Code of Federal Regulations. Regardless of whether the users in the space are FDA-regulated, this section provides a widely accepted set of standards for safe food processing. Below are several linked guides and the original text of the regulation:

Additional Resources

FDA Reader Guides:

Plants & Grounds

Sanitary Operations

Equipment & Utensils

Regulation Summary

Source Texts:

Code of Federal Regulations §117 CGMPs

 
Introduction to the FSMA Produce Safety Rule

Introduction to the FSMA Produce Safety Rule

Produce Safety Rule Image Post.jpg

Introduction

The produce safety rule is a section of FSMA which provides standards for the growing, harvesting, packing, and holding of fruits and vegetables. The regulation acknowledges that farms may not be currently implementing these practices and it aims to educate before strictly enforcing these provisions. 

It includes six requirement areas, which are described below:

  • Agricultural Water

  • Biological Soil Amendments

  • Sprouts

  • Domesticated and Wild Animals

  • Working Traning and Health and Hygiene

  • Equipment, Tools, and Buildings

Exemptions

For an overview of exemptions to the Produce Safety Rule see this flowchart



Requirement Areas


Agricultural Water:

The Produce Safety Rule regulates water based on how it will be used. There are several different uses for water in agricultural contexts — for example irrigation water versus water used in produce washing —  and each of them has specific requirements for quality and testing. There is no expectation that a farm achieve a perfect result in every test. Rather, the goal is to understand water quality over time and support farms in accessing viable long term water sources.

Requirements for Water used in Produce Processing 

This includes water used for produce washing, hand washing, and cleaning food contact surfaces. Any water used after harvesting that could reasonably contaminate produce product is held to this standard. The requirements are

  • All water used for these purposes must be treated (e.g. you cannot use un-treated well-water) 

  • There can be no detectable presence of E. coli in these water types.

  • If any E. coli is detected, that water use must be immediately discontinued.

Requirements for Water used in Growing Produce

This refers to water which is directly applied to growing produce (e.g. irrigation water). There are two values that are used to determine whether this use of water achieves the requirement. Collectively, these two figures are referred to as “microbial water quality profile”: 

  • Geometric Mean (GM) Test: There must be an average of fewer than 126 E. Coli CFU (a.k.a. colony forming units, which is how bacteria is commonly quantified) per 100ml of water. 

  • Statistical Threshold Value (STV) Test: The maximum STV is 416 E. Coli CFU per 100ml of water. You can think of the STV as the level at which 90% of samples fall below this value.

What Happens When You Receive a Failing Result?

This section demonstrates the flexibility of the regulation. Corrective action is required “as soon as possible” and no later than the following year. Examples of corrective action that a farm may take after receiving a positive E Coli test result include,

  • Treating the water supply

  • Implementing a time interval between last irrigation and harvest (which allows bacteria that may have been present in irrigation water to die off)

  • Using washing or other commercial activities to reduce microbe levels

Testing Water Supply

This section describes testing requirements based on water source.


Public Water: This is typically the safest source of water, insofar as it aligns with national water standards. There is no requirement to test agricultural water drawn from a public water supply.

Untreated Surface Water: This is considered the most vulnerable type of water supply. When untreated surface water is applied to growing produce, farm must order tests for GM and STV (see above) using the following timeframe:

  1. Initial survey: twenty samples must be taken at a time that is as close to harvest as possible. These samples may be taken over the course of 2-4 years.

  2. Annual surveys: five new samples must be taken annually to replace the oldest results.

Untreated Ground Water (For Direct Application to Growing Crops: When untreated water is applied to growing crops, the following testing procedure is required:

  1. Initial survey: four samples must be taken at a time that is as close to harvest as possible. These samples must be taken during the growing season (i.e. in a single year)

  2. Annual survey: one new sample must be taken annually to replace the oldest result.

Untreated ground Water Used in Food Processing (where there is a zero-tolerance threshold for E. coli), a different testing schedule applies. 

  1. Initial survey: four samples must be taken at a time that is as close to harvest as possible. These samples must be taken during the growing season (i.e. in a single year)

  2. Annual survey: If the initial survey results meet the “no detectable E. coli” standard, then only one annual sample is required. If the initial result does not meet the standard (or any subsequent result) then four samples must be tested the following year.

Biological Soil Amendments (e.g. Compost)

Use of Raw Manure:

While the FDA regulations are still being developed as of 2019, there are two general requirements:

  1. Raw manure must be applied in a way that does not contact the produce when it is applied. 

  2. The farmer minimizes the potential for contact between manure and produce.

In the absence of clearer regulation, the FDA recommendation is that farmers adopt the standards outlined in the USDA’s national Organic Program. These call for:

  • 120 day interval between application of raw manure on crops that contact the soil (e.g. melon)

  • 90 day interval between the application of raw manure on crops that do not contact the soil (e.g. tomatoes)

Stabilized Compost:

For compost which has been processed to reduce pathogens, there are specific threshold levels for soil-based pathogens. This section offers guidance for how a farm may choose a suitable method for treating their soil amendments


Sprouts

Sprouts are particularly vulnerable to the growth of dangerous microbes because of the conditions required to grow them — warm moist environments. The major requirements for farming sprouts includes:

  • Treating seeds that will be used as sprouts (or sourcing pre-treated seeds)

  • Re-collecting and testing the water which was used to irrigate sprouts. Sprouts may not legally enter commerce until negative results are achieved.

  • Environmental testing for Listeria.

  • Taking appropriate corrective action if any tests come back positive.


Domesticated and Wild Animals


This section acknowledges that farms may have animals onsite. At the same time, fecal contamination from livestock is a frequent source of produce contamination.  Although the rule does not mandate that animals be excluded from outdoor growing areas it does describes some requirements for managing animals reduce the contamination hazard. They describe:

  • All farming areas and produce must be inspected for sources of contamination.

  • When contamination has occurred (from either wild or domestic animal droppings), these areas should be marked and corrective action taken.

  • Although it is not required, the FDA recommends that farms implement waiting periods between when land is grazed on and when produce is harvested from that land.


Worker Training, Health and Hygiene

This section outlines measures to prevent contamination of produce by sick employees. To reduce this risk, may exhibit the following programs (you can also read about them in our Personnel guidance)

  • Using basic hygiene practices (e.g. hand washing)

  • Implementing an employee health policy which requires sick food handlers to notify their employers if they may have a contagious disease which could contaminate food.

  • Training farm workers to safely handle produce.


Equipment, Tools, & Buildings

This section of the rule describes the standards for equipment, tools and buildings. This may cover areas such as greenhouses, germination areas, and also toilet/hand washing facilities and outlines specific requirements for

  • Design and construction requirements

  • Recommendations for toilet and hand washing facilities

  • Pest control

  • Maintenance of sewage systems

  • Plumbing requirements

  • Waste disposal requirements 

To access those requirements in detail, consider the guidance document for this chapter.


 
Environmental Monitoring in Food Processing

Introduction: Environmental Monitoring Program

Environmental monitoring post image.png


As food processor’s grow and face increased scrutiny from auditors and inspectors, they begin to wonder about environmental monitoring and whether they should implement this type of program in their facility. This section aims to answer those questions.

What is environmental monitoring in food processing?

Environmental monitoring is a process used in facilities that produce ready-to-eat (RTE) foods that assesses how effectively the plant is being cleaned.

This typically means swabbing various surfaces (e.g. cutting blades, tables, conveyers) for pathogens and sending those samples out to a lab for analysis. 

The goal is to determine whether any pathogens (e.g. listeria, salmonella) are living in facility and to respond accordingly if a positive result is found. 

It’s important to recognize that a clean test result doesn’t confirm that your food is safe, rather it verifies that your cleaning processes are effective. 


Do I need an environmental monitoring program in my food facility?

Legally, the FDA leaves this decision up to the food processor. GFSI-aligned 3rd party audits typically require environmental monitoring programs to be in place for producers of ready-to-eat food that are exposed to the environment post-kill step.

An easy way to determine whether you need an environmental monitoring program is to answer the following questions (a “yes” would suggest that you may need one)

  1. Does your process have a kill-step (e.g. cooking)

  2. Is your product exposed to the environment after the kill step and before packaging?

  3. Is your product a collection of ready-to-eat products combined to produce a ready-to-eat food that doesn’t include a kill-step?

  4. If your product is refrigerated, is it one that is conducive to the growth of listeria monocytogenes (e.g. deli meat, raw cheese/milk, seafood, sprouts)

Because ready-to-eat foods are typically not processed by the consumer before consumption, it’s important to know that there’s no chance they might be contaminated by pathogens in an unclean facility.

While testing the product itself can may inform you about the safety of that sample, testing the facility verifies that your cleaning activities are working and that each batch is being produced in a pathogen-free environment.


Am I ready to implement an environmental monitoring program?

If you’ve already confirmed that you should have an environmental monitoring program, consider the following questions before diving into a plan:

  • Do you have a thorough sanitation program? Your environmental monitoring program is a test of your cleaning, so if you have doubts about the thoroughness of your sanitation practices, address those first.

  • Do you have the resources to enact it faithfully? Once you launch your program, it’s important to follow it. If you doubt your ability to adhere to the program you’ve created or respond appropriately to a test result, then you should address those gaps prior to implementing the program.


What pathogens should I test for in my environmental monitoring program?

The most common pathogens which can be found living in the nooks and crannies of a facility are

  • listeria monocytogenes

  • salmonella

  • E. coli.


You may test for these directly or indicator microorganisms that represent each pathogen.

Additionally, you may conduct environmental monitoring for specific allergens to confirm that there is no allergen residue in your space. This would only be a consideration if you were processing both allergen containing and non-allergen containing products on the same equipment.


What does an environmental monitoring program actually consist of?

Environmental monitoring program typically includes the following components:

  • A risk assessment of the hazards you’ve identified: Looking at your ingredients and the nature of your operation, you should be able to identify the specific pathogens that may exist in the environment. You may have started this in your hazard analysis.

  • Your methodology

    • A map of your facility separated into hygienic zones (e.g. Zone 1 is the highest risk part of the production process and Zone 4 is the office)

    • A process for exactly how you will collect your samples 

    • A description of how often you will conduct your environmental monitoring (see below)

    • A description of where you will swab. These should be the highest risk areas where bacteria may be hiding and could get into your product.

  • A description of how you will have the tests analyzed (most likely by an external party, but it also may be in an in-house lab). You must list the specific lab conducting the analysis and confirm they’re properly accredited.

  • Corrective Action procedures, i.e. how you will respond if you receive a positive result.


How often should I conduct environmental monitoring? 

The frequency of environmental monitoring is determined by your process and the hazards you identified in your hazard analysis.

Raw Foods Example: Let’s say your facility produces snack packages of raw carrots and ranch dressing. Since the product will be consumed raw, you’ll want to have extremely high standards of hygiene in your space. After conducting initial, pre-operation environmental monitoring, you may choose to conduct monitoring activities weekly in high risk zones (e.g. blades, conveyers, tables) and monthly in lower risk zones  (walls, floors, drains). Ultimately, the decision of “how often” is up to you — you simply have to be able to justify that your frequency of sampling and testing is sufficient to determine that your sanitation efforts are effective.

Still not sure? Consider researching industry standards for environmental monitoring in plants producing products similar to yours. Start with that and then you can use historical data from your own site once your program is operational.You may only have to conduct environmental monitoring one time, such as when you move into a new facility and after you’ve completed a deep clean. This result would just be to confirm that you’re starting with a clean, pathogen-free space.


What happens if a pathogen is discovered in the test result?


If you get a positive hit in your environmental monitoring you will enact the corrective actions you’ve outlined in your plan. Depending on the type of result received, this may include re-cleaning, re-testing, holding product, and possibly a product recall. Check out This article to learn about hygienic zoning in an EMP and developing corrective actions


 
Getting Started: Small Food Importers

What You Need to Know:

There are reduced requirements for small food importers. Here’s how to answer critical questions and determine the requirements for your business:

Step 1: Determine the Foreign Supplier Verification Requirements for Your Business

All food import businesses are required to confirm that their foreign supplier is handling food in a way that does not pose a risk to the consumer in the US. This burden falls on the importer and is called Foreign Supplier Verification (you can check out our guide, here)

However, certain business types, including very small importers are exempt from the bulk of foreign supplier verification program (FSVP). requirements.

To qualify as a Very Small Importer, you must import <$1mm in food product value (or $2.5mm for animal feed).

In this case, you are subject to modified requirements as it relates to verifying your suppliers. You can see those modified requirements in our guide to FSVP or in the federal regulation in 21 CFR §1.512

If not, then another exemption might apply, or else you will be required to conduct a more robust Foreign Supplier Verification Program (FSVP). If are looking to implement this type of program, we have a step-by-step guide

Step 2: Determine the FDA Requirements for the Other Activities you Conduct

If your business warehouses, re-packs, processes, distributes or arranges transport for the food that you import, then those activities are likely subject to additional FDA regulation. See below to learn how specific activities are regulated.

Transportation

If you transport or arrange for someone else to transport your product, then you are subject to the Sanitary Transport Rule. The requirements are contingent upon your role in the process:

  • If you ship a product for someone else to transport then you are accountable for specifying the conditions (e.g. frozen, refrigerated) under which your product is shipped. This can be as simple as a written agreement with the company transporting your business (i.e. the carrier), This is not required when using postal services as your carrier.

  • If you load a product (e.g. you put product onto your own or someone else’s trucks) then you must ensure that the truck is suitable for transporting products.

  • If you receive product, then you’re required to make sure it arrives in safe condition (e.g. temperature and quality)

  • If you are the carrier for a food product (i.e. you operate the trucks which transport the product), then you must ensure the product is kept safe (e.g. temperature, quality) throughout the transportation process.

Warehousing

Warehousing refers to the storage of fully packaged foods. If you store your product in the US, then you’ll need to align your space with the FDA standards. This typically entails keeping your facility reasonably clean and keeping refrigerated product sufficiently refrigerated.

Check out our FSMA for Food Distributors guide for more details.

Re-Packing or Processing

If you modify the food after it has been imported — even repacking the product into new containers— then you will be required to meet the requirements for a normal food processor.

The basic operational requirements for a food operation are known as Current Good Manufacturing Practices (cGMPs), and they are summarized in our guides below:

You can also see our Guide to 117 Subpart B for a more comprehensive guide to cGMPs,

Next, there are requirements related to maintaining a safe supply chain and managing risks in your production process. Businesses which conduct under $1mm sales per year (they are called Very Small Businesses) typically qualify for the Qualified Facility Exemption. If you apply for the exemption and notify the FDA, then you don’t need to worry about the sections below. If you are not a qualified facility, then you’ll need to consider these sections:

1. Hazard Analysis and Risk Based Preventive Controls If your imported product is refrigerated, frozen, or requires any sort of control (e.g. cooking, sanitizing) before consumption, then you are likely required to implement a food safety plan. Writing and implementing a food safety plan is a comprehensive process that requires an employee who has been certified to author this plan.

If you’re looking to move quickly, a 3rd party consultant (like us) can be the best choice.

Learn more in our Guide to Subpart C Hazard Analysis and Risk Based Preventive Controls

2. Supply-Chain Program: If your process involves non-foreign suppliers, then you may have to conduct the same types of supplier verification activities described above for your domestic suppliers.

Learn more in our Guide to Subpart G

Step 3: Register Your Food Facility

If you have a site where you are holding, packaging, or processing food (including the food that you import), then you must register it with the FDA. Don’t worry, this won’t trigger an inspection, it just let’s the FDA know where you are operating from, what you’re doing, and that someday they’ll want to stop by and make sure you’re following the rules.

Check out our guide to learn more about facility registration

 
 

This applies to you if…

∆ You import food for consumption in the uS

∆ The value of products you import/process is <$1mm

More


FDA or USDA Jurisdiction?

What You Need to Know:

  • The USDA regulates the production of meat, poultry and egg products. USDA-regulated businesses are required to have a USDA inspector onsite at all times.

  • The FDA regulates the production of everything else (non-meat foods, unusual meats, and fish products). No inspector is required onsite during production.

  • A business that conducts activities falling under both umbrellas is regulated by both agencies.

  • Food produced and sold in a retail environment (i.e. restaurant, deli) is not typically regulated by either the USDA or the FDA.

How to determine food business jurisdiction: Start with USDA. If you can’t positively identify how it falls under USDA jurisdiction, then it’s regulated by the FDA.

Determining USDA Jurisdiction

The USDA typically regulates the following business types:

  • Slaughterhouses

  • Meat Processors*

  • Poultry Processors*

  • Egg Processors

  • Food processors whose products contain meat*

Food products with the following characteristics are regulated by the USDA.

  • Contains >2% cooked meat

  • Contains >3% raw meat

  • Contains >2% cooked poultry meat

  • Contains >10% cooked poultry skins

*For more detail, see the tables below


Examples of Business Regulation

Business Description of Operations Federal Jurisdiction
Meat Product Processor Producer of frozen meat pies, bone broth, steak delivered via mail USDA
Poultry Product Processor Poultry processor USDA
"Egg Product" Processor Producers dried, frozen, or liquid eggs USDA
Egg processing plant Egg washing, sorting, packing FDA
Slaughterhouse Slaughter and processing of carcasses for sale. *Slaughter for personal consumption is not regulated by the USDA USDA
Commissary for retail outlets A commissary produces deli meats to sell at multiple delis, all owned by the same company. Products are shipped ready-to-eat. FDA
Restaurants and retail establishments Retail establishment that sells meat to typical consumers in retail quantities. Not typically regulated by the federal government
:

Examples of Food Product Regulation

Misc Products Regulator
Spaghetti Sauce (2% meat) FDA
Sliced Egg sandwich (closed face) FDA
Shrimp flavored instant noodles FDA
Venison Jerky FDA
Closed Face Sandwiches FDA
Open face sandwiches USDA
Pork Sandwich (open faced) USDA
Corndogs USDA
Frozen Beef pot pie USDA
:
Meat Products Regulator
Cow USDA
Sheep USDA
Pig USDA
Horse USDA
Mules USDA
Goat USDA
Domesticated Birds (chicken, turkey, ducks, geese, guineas, geese) USDA
Wild Birds FDA
Rabbit FDA
Bison FDA
Game animals FDA
Deer, Elk, Moose FDA
Zoo animals FDA
:
Egg Related Products Regulator
Dried Eggs USDA
Frozen Eggs USDA
Liquid Eggs USDA
Egg Substitutes FDA
Dried Custard Mixes FDA
Egg Nog Recipes FDA
Egg Noodles FDA
Milk and Egg Dip FDA
Cake Mixes FDA
French toast Sandwiches Containing Egg FDA
Products containing egg FDA
:

FAQ

What does the USDA inspector do?

The USDA inspector inspects:

  • Slaughtered animals to confirm they were healthy

  • Sanitation conditions of a plant

  • Operations to confirm that they align with the firm’s HACCP plan

  • Product is correctly labeled and packaged to be transported

What it FSIS?

The Food Safety and Inspection Service (FSIS) is the inspection arm of the USDA. So if you see the term FSIS, think USDA.

 
 

This article applies to you if…

∆ You are unsure whether your product is regulated by the FDA or the USDA.

References

USDA Inspection Requirements Overview

USDA Inspection Requirements Overview

FDA vs. USDA Jurisdiction Guide

FDA vs. USDA Jurisdiction Guide


More About Supply Chain


More Posts


Standards of Identity: How Do We Name Innovative Foods?

What You Need to Know

What Are Standards of Identity?

A “standard of identity” is an agreed upon legal definition for what a food actually is. Standards of identity were introduced as a means of consumer protection. Although “common name” is the most applicable facet of Standards of Identity, there are actually three components to consider:

  1. Common Name (Identity): The standardization and definition of common food names ensures that consumers know what a food product actually is. Typically, the common name is required to be written on the label of a food container.


    Example: A food marketed as “canned tuna” must legally be tuna and not some other fish

  2. Standard of Quality: The food meets certain quality standards described in the regulations for that standardized food. (This doesn’t apply to most foods).

    Example: A food marketed as canned tuna cannot contain ingredients or additives that the consumer would not typically associate with canned tuna

  3. Standard of Fill of Container: The packaging contains a minimum fill defined for that standardized food. This doesn’t apply to most foods)

Example: If canned tuna is advertised as 8oz of canned tuna in broth, then you are getting 8oz of tuna and not 7oz of broth and 1oz tuna.

Does My Food Product Have a Standard of Identity?

The best way to find out what the regulatory requirements are for your particular food product is to understand exactly which one of the following groups it falls into:

1. Foods for which there categorically is no definition or standard of identity

According to the FD&C act, no standard of identity or definition may be established for:

  • Fruits (fresh and dried)

  • Vegetables (fresh and dried)

  • Avocados,

  • Cantaloupes

  • Citrus fruits

  • Melons

This means there’s no specific definition for what is an apple and it means there’s no regulation that the word “apple” must appear on an apple that is being sold. If you produce a product that falls into this category, then you don’t need to be particularly concerned about misbranding your product due to standards of identity/definitions.

2. Non-standardized foods subject to specific requirements

These foods don’t have standards of identity per se, but they are subject to some requirements. You can quickly review this small list of foods in 21 CFR Part 102.

If the food you produce falls into this category, then it’s important to understand these requirements, but otherwise your product is not a standardized food.

3. Standardized Foods (Foods which have a standard of identity)

These are foods that the FDA has decided to define because there is a public expectation of what that food is . Anyone who makes a” standardized” food must make sure it satisfies the standards outlined for that food. These requirements range from mandated ingredients to packaging standards, to banned ingredients.

The categories for all standardized foods are listed in the sidebar to the right.You can also access these categories in CFR Parts 131-170

4. Non-standardized foods

These are foods that simply are not addressed in any of the sections referenced above. Since they are non-standard then they don’t have specific requirements for calling your food that name. Non-standardized foods must be labeled using the common or usual name for that food.

Many innovative products fall into this category. However, if you wish to market your product as something for which there is a standard of identity, then you must adhere to those standards or market your product differently.

For example, if you make a fermented chia-seed snack food that you wish to market as Chia Yogurt, then you must comply with the standards of identity definition for “yogurt” —since that’s how you are marketing the product. If your product is categorically unfit to meet the definitions of yogurt, then you may consider marketing it using descriptive terms (i.e. “fermented, plant-based snack food).

Identity Labeling Requirements

Packaged foods must be labeled with the product’s identity (common name). The requirements are as follows:

  • The statement of identity must be presented in bold type on the Principal Display Panel

  • If the food is marketed in multiple forms (i.e. whole, sliced, diced) then the form of the product is deemed to be part of the statement of identity

Formatting:

  • The text must be bolded and in a size “reasonably related to the most prominent printed matter on the panel”

  • The wording must be parallel to the base of the packaging so it reads normally when displayed (not sideways or upside down).

Less Common Requirements:

  • Dietary supplements must be identified in the identity statement in one of three ways:

    • Using the term “dietary supplement”

    • Using the convention “[nutrient name] supplement” (i.e. “Iron supplement)

    • Using a descriptive term indicating the ingredients in the product (i.e. herbal supplement with vitamins)

  • Substitution or imitation foods must be identified as such in the identity statement (i.e. imitation crab) A substitute food resembles another food and is meant to substitute it. An imitation food is the same except that it is nutritionally inferior to the food it imitates.

Source: 21CFR 101.3

FAQ


What if My Product Doesn’t Have A common Name Because It’s an Innovative PRoduct?

In that case, you may use a descriptive term in the identity statement

What if My Product falls under a Standard of Identity but fails to meet the regulated standard?

A food producer may apply for a Temporary Marketing Permit (TMP) which allows them to sell their product for 15 months even though it may not confirm to some art of the applicable “standard of identity”.

For example, according to the FDA, Canned Pacific Salmon can only contain pacific salmon, water, and salmon oil.

In 1988, Bumblebee applied for a TMP which would allow them to add a tasteless, odorless preservative called sodium tripolyphosphate to the product. Normally, Bumblebee would not be allowed to sell the product as Canned Pacific Salmon, since the product would not fit the standard of identity.

However, the TMP gave them the permission to temporarily circumvent the standard of identity and sell their product (it’s worth nothing that sodium tripolyphosphate was an allowable food additive at that point.)

 
Guide to Developing a Foreign Supplier Verification Program (FSVP)

To learn more about Foreign Supplier Verification Programs overall, see our introduction article

02_supply_chain.png

How Do I Develop a Foreign Supplier Verification Program?

If you import products for consumption into the US, you likely are required to develop a foreign supplier verification program (FSVP).


Below is a step by step guide to developing and implementing an FSVP.


1. Determine your Qualified Individual

First, The FSVP must be prepared by a "qualified individual" who has the education, training or experience necessary to perform the activity. If this person is a 3rd party or consultant, that's fine. However, note that supplier verification is an ongoing process and it must always be completed by a qualified individual. For most companies, the easiest solution is to have someone on staff undergo a 2 day training course on developing a Foreign Supplier Verification Program.

Source 21 CFR 1.503


2. Decide How Your Program Works

Before you begin approving suppliers, you must establish the procedures you will use to approve suppliers. The goal is to provide assurance that hazards in the food you import are being prevented.

You can rely on a 3rd party to conduct your supplier verification if you review and assess the documentation yourself and document your review and assessment of the materials.

Examples of appropriate verification activities:

  • Onsite audit by a qualified individual

  • Sampling & testing

  • Review of foreign suppliers food safety records

  • Other appropriate supplier verification activities


3. Conduct Your Verification Activities

This step is the bulk of the process: collecting information from your suppliers, reviewing it, and documenting your review process.

You may rely on a 3rd party to conduct supplier verification activities (i.e. a 3rd party audit) if you assess their documentation with appropriate frequency. You must document your review and assessment of the activities and document that the activities were performed by a qualified individual.

The following are common verification methods for approving suppliers:

Hazard Analysis

You are required to review a hazard analysis for each type of food you import. Hopefully, each of your foreign suppliers has completed one and can provide this to you. If not, then you must conduct a hazard analysis to determine whether there are any hazards requiring a control. This hazard analysis must be written and contain an evaluation of environmental hazards.

Some key points about the hazard analysis:

  • You must either conduct a hazard analysis for each type of food you import OR use a supplier hazard analysis.

  • If you are importing Raw Agricultural Commodities (RACs) then no biological hazards need be considered in the Hazard analysis.

  • If you are reviewing a hazard analysis supplied by the supplier or a 3rd party, then you must document your review of the hazard analysis and confirm that it was conducted by a qualified individual.

  • If no hazards are identified which require a preventive control, then no verification is required for those products. Still you must have a hazard analysis on file to show that this has been determined. This provision does not apply to produce.

Subpart L  - FSVP for Food Importers

Onsite Audit

Certain importers may wish to independently conduct onsite audits of the foreign supplier. Or, they may simply review the audit results conducted by a reputable 3rd party auditor.

An audit is required as part of the supplier verification process when there is "reasonable probability that exposure to the hazard will result in serious adverse health consequences or death" you must conduct or obtain documentation of an onsite audit at least annually. (1.506 (d) (ii) (2)

In this case, an audit may be replaced by written inspection results by the FDA, USDA, or a food safety authority of a country whose food safety system is equivalent to that of the US.

Sampling & Testing of Food

If you choose to use product testing and sampling as part of your verification, you must retain documentation of the following:

  • The number and type of samples tested

  • identification of the food tested (lot numbers)

  • tests conducted and the methods of the testing

  • Any corrective action taken into detection of hazards

  • Information identifying the lab

  • Documentation that the tests were performed by a qualified individual.

Review of Foreign Supplier's Food Safety Records

The most common method of supplier verification is the review of a foreign supplier's food safety records.

If you choose to use your foreign supplier's food safety records as part of your verification, you must retain the following information:

  • The records reviewed

  • Dates of review

  • General nature of the records reviewed

  • Conclusions of review

  • Any corrective actions taken in response to significant deficiencies identified.

  • Documentation that the review was conducted by a qualified individual.

You may not allow on the foreign supplier to conduct supplier verification activities for their own business.

Final Considerations:

Hazards Not Controlled by the Foreign Supplier

Does a 3rd party control one of the hazards on behalf of your supplier (i.e. your overseas milk supplier has their pasteurization completed offsite by another company.) If so, you must collect this verification data from the 3rd party or have your supplier send it to you.

Supplier Performance & History

It is perfectly acceptable to take into consideration your supplier's history, procedures, practices, storage, transportation, etc as part of your verification activities.

Document Your Verification Activities

Remember, it's not enough to simply collect these documents from your foreign suppliers -- you have to assess them and document that assessment.

For example, let's say I'm an importer of Ned's Italian Tomato Sauce and they send me their most recent audit result. Beyond having that audit result on file, I need to record that I reviewed that audit, that it showed me they controlling the hazards in their process, and that my review occurred on such-and-such date.

The Whole Picture

For fear of stating the obvious, you must approve your foreign suppliers on the basis of your evaluation. In other words, you must consider all the information you gather in your approval process and cannot discount any piece of information simply because it is contrary to the result that you're looking for.

This doesn't mean that one failed audit in your supplier's history means you cannot approve them. However, you must acknowledge this information if it is revealed in your verification activities or outside of them.

Source 21 CFR -- 1.504


4. Approve your Suppliers and Maintain the Program

Once you have completed your verification activities, you may add the relevant supplier's to your approved supplier list and begin sourcing product from them. At that point, the program should require only occasional ongoing maintenance

Keeping Records of Your Foreign Supplier Verification Program (FSVP)

Your records should comply with the following provisions:

  • They must be originals, photocopies or digital records

  • You must keep them for 2 years unless otherwise specified

  • They must be available for review by the FDA

  • You do not need to have a specific copy of each record for the FDA (e.g. you can have one copy of a record to satisfy both a state requirement and a federal requirement)

Source 21 CFR §1.510

There are several exemptions to Foreign Supplier Verification Requirements. This section applies to:

Taking Corrective Actions

You must take corrective actions if you determine that the food you are receiving is not meeting the requirements of the FDA regulations. Simply put, if the food you receive could cause harm to a consumer or is unsafe, then you must take some type of corrective action. This determination could be based on customer complaints or verification activities that you conduct (i.e. records review or viewing an inspection result.)

The appropriate corrective action to take could include discontinuing your use of that supplier until the hazards have been addressed.

If this determination occurs outside of the scope of your supplier verification activities, then it may reveal that your verification activities are not comprehensive. Simply put -- you didn't catch the mistake in your normal supplier verification practices therefore something is inherently wrong with your process. In this case you are obligated to update your plan so that you are able to adequately verify your suppliers.

Source 21 CFR §1.508

Re-evaluating Suppliers

You must re-evaluate your foreign suppliers (and document it),

  • Every 3 years, at minimum

  • When you learn anything new or when anything has changed that would warrant a re-evaluation.

You may use a 3rd party foreign supplier review as your re-evaluation, insofar as you document your assessment of that evaluation. The evaluation must be performed by a qualified individual.

Source 21 CFR -- 1.504

 
Does the FDA Regulate My Food Business?
07_jurisdiction.png

It’s not always clear where  the FDA has jurisdiction when it comes to food businesses. This table provides an overview of FDA Jurisdiction. Specific examples are provided below.

Regulated By the FDA Not Regulated By the FDA
Foods that enter interstate commerce Food Service Establishments
Most packaged foods Restaurants
Most foods solid online Restaurant Chain
Human and animal food Food Truck
Imported Foods Caterer
Farms (if they grow and process food) Grocery Stores
Food Bank
Cafeterias / Institutions
Markets
Home-Food Processor
Alcoholic Beverages
Butcher Shop
Slaughterhouses (USDA)
Farms (if they only grow food)
:

*Note: Domestic food processors of any kind must still register as a Food Facility even if their products do not enter interstate commerce. This is free and purely for record keeping purposes (it will not subject a business to FDA inspections or oversight)


Examples of FDA Jurisdiction Businesses

FDA Jurisdiction Examples
Food products that enter interstate commerce (i.e. businesses whose foods leave the state) Most foods sold online
Most non-meat products that are made and sold in a package
A central kitchen that prepares and distributes foods to locations in multiple states
A transporter that distributes food nationwide
Any business that processes, packs, transports, distributes, receives, or holds food which crosses state lines.
Imported Foods Food distributor that imports foods and sells it
Food importer that warehouses food
:

Businesses Not Under FDA Jurisdiction

Not FDA Jurisdiction Example Who typically regulates
Restaurant (Individual) Fast Food Restaurant Local/State health dept.
Restaurant (Chain) Chain of frozen yogurt restaurants Each would be regulated individually by its respective local or state health department
Restaurant (Delivery only) Meals are ordered via app/web and delivered hot to the consumer Local/State health dept.*
Food Truck Korean food truck Local/State health dept. *
Caterer Facility where a caterer prepares food for immediate service Local/State health dept.*
Grocery Store Grocery store that also serves some hot food or includes a deli Local/State health dept.
Food Bank Food bank that accepts food donations and distributes that food locally Local/State health dept.
Cafeteria / Institution Hospital cafeteria, School lunch cafeteria Local/State health dept.
Farmers Market Weekly market that offers various prepared foods and ingredients for sale Local / State Health Dept
Seafood Market Retail market that supplies seafood products to consumers Local / State Health Dept
Alcoholic Beverage Producer, Importer, Distributor, Wholesaler Winery, Brewery, Distillery State Health Dept / TTB (Note that alcoholic beverages <7% ABC are subjected to FDA labeling standards)
Butcher Shop Retail market that butchers and retails meat for consumers Local/State Health Dept. OR USDA. (This depends on what level of processing is being done to the meat before it is sold)
Home Food Processor Business conducted from the home that involves making food Local / State – Note that many cities and states prohibit or specifically regulate home processing
Meat Product Processor Frozen meat pies, Bone broth, High-quality cuts of steak delivered via mail USDA
Poultry Product Processor Frozen buffalo wings, Roast Chickens USDA
Processed Egg Products Frozen omelets, Egg whites USDA
:

*If you serve or prepare food in multiple areas you may have to license with the local health department for each of those jurisdictions. If the food is crossing state lines, then FDA regulation would apply.

Still Unsure Whether Your Business is Regulated by the FDA?

Ask a question in the comments and I’ll answer it

Try using this dichotomous key

What’s Next?

Understand about Registering a Food Facility with the FDA

 
Intro to Foreign Supplier Verification Program

For step-by-step instructions, see Guide to Developing an FSVP

Supplier Verification Post Image.jpg

What You Need to Know about FSVP

  • Nearly all food imported into the US must be produced in alignment FDA Regulations

  • Foreign Supplier Verification Program (FSVP) is a major component of FSMA which requires US businesses to only import food products from suppliers they have vetted and approved.

  • Most businesses which import food products for consumption inside the US must verify that the food is produced in alignment with FDA regulations. This is done through the implementation of a Foreign Supplier Verification Program (FSVP). When a certain type of food (i.e. seafood) is subject to specific regulation, a foreign supplier must also comply with those specific standards.

  • The verification process may include, among other methods: an assessment of the supplier's food safety records, a review of an audit report, or a site visit.

 

FSVP post photo.jpg

Applicability and Exemptions

Generally, foreign supplier verification is required for most importers, for most imported foods, and for most foreign suppliers. To better understand what types of businesses and products may not be regulated under Subpart L (Foreign Supplier Verification Program), see the exemptions below:

Very Small Importer Exemption

A "Very Small Importer" is a company that imports $<1mm year in product value for imported human food (or <$2.5mm year in value for imported animal food)

Modified requirements for "Very Small Importers"

  • A very small importer must document that they meet the qualification for this exemption (i.e. be able to prove they are doing less than $1 million in imports)

  • Receive a written assurance from each foreign suppliers, prior to importing any food. The written assurance must be obtained every 2 years and include the following

  1. A brief description of the preventive controls being applied to control hazards in the food. This must be provided for each food that is imported.

  2. A statement that the foreign supplier is compliant with FDA regulations or (when equivalent) the relevant laws of their own country

  • You must take corrective action (such as suspending your import of this food) if you determine that the supplier is not producing food consistent with their assurance.

  • You must keep signed and dated records of these activities for > 2 years.

Foreign Suppliers Requiring No Verification

An importer is not required to conduct verification activities for certain foreign suppliers, including

  • Qualified Facilities, or

  • farms that grow produce and are not covered under part 112, or

  • A shell egg producer that has fewer than 3,000 laying hens.

  • Suppliers operating in countries with an officially recognized or equivalent food safety system

If you are importing products from a foreign supplier that is exempt, the modified requirements are as follows:

  • You must obtain a written assurance of their exemption type (i.e. farm or qualified facility or small shell egg producer)

  • You must initially evaluate your foreign supplier's performance history as it relates to compliance with FDA regulations. You must re-evaluate this if you become aware of any relevant changes or information or ever 3 years at minimum.

  • You must take corrective action (such as suspending your import of this food) if you determine that the supplier is not producing food consistent with their assurance.

  • You must keep signed and dated records of all verification activities for > 2 years.

  • You must approve your foreign suppliers based on the activities described above.

  • You must establish written procedures to ensure that you are using only approved foreign suppliers. You may import from unapproved suppliers on a temporary basis, if you have other, adequate verification prior to import.

Source 21 CFR §1.512

 

Countries with Officially Recognized or Equivalent Food Safety Systems

If you are importing from a country with a recognized equivalent food system, you may be free from the following the majority of FSVP requirements (§1.504-§1.508). As of 2018, the only countries who have achieved this are: Australia, Canada, and New Zealand.

However, your program still must be developed by a qualified individual, your company must be identified upon food import, and you must maintain your FSVP records in compliance with §1.510.

Source 21 CFR §1.513   

Foods Subject to Special Foreign Supplier Verification Regulations:

Certain foods are exempt from Subpart L (the requirements for Foreign Supplier Verification Programs outlined in this article) and are subject to different requirements.

Imported Seafood Products (aka Fish / Fishery Products)

Since seafood products are subject to specific FDA regulations found in Part 123, importers of seafood products are required to verify that the overseas manufacturer is aligned with Part 123. You can read about the specific requirements for verifying a foreign seafood supplier here

Imported Juice Products

Juice products are subject to specific FDA regulations found in Part 120, importers of seafood products are required to verify that the overseas manufacturer is aligned with Part 120 (specifically, that they have and follow a HACCP plan).

Meat Products

The Foreign Supplier Verification Program does not apply to meat products that, at the time of import, are under USDA jurisdiction.

 

Food that cannot be consumed without the hazards being controlled

You aren’t required to conduct an evaluation or foreign supplier verification when:

  • The food can’t be consumed without controlling for the hazard

  • You rely on the customer (who must be subject to 117C) to control the hazards. In this case you must disclose this to the customer and obtain annual assurance that they are controlling for the hazard

  • You rely on a subsequent entity in the supply chain (further downstream from you and the customer) to control for the hazard.

Source 21 CFR §1.507


FSVP FAQ

How must the importer be identified at entry?

You must identify your firm as the importer and include your FDA identification (DUNS) number and email address when filing for entry. The foreign owner or consignee of the food oversees must designate a US representative as the importer as the food.

Source 21 CFR §1.509

What are some consequences of failing to comply with the requirements of this subpart?

  • The food may be inadmissible for import.

  • The importer may be found in violation of federal law.

Source 21 CFR §1.514

What FSVP must I have if I am importing a food subject to certain requirements in the dietary supplement current good manufacturing practice regulation?

Source 21 CFR Section 1.511

Record Keeping

All of our food safety plan templates are aligned with this section.

What You Need To Know

Part 117 Subpart F contains the requirements for record keeping

Part 117 Subpart F contains the requirements for record keeping

  • Keep all of your records related to your food safety lan.

  • Records can be electronic or paper.

  • You must store records onsite for at least 2 years

  • All records must be made available upon request

Record Keeping Requirements

How Records Must Be Kept

  • Records must be kept as originals, true copies (i.e. scans, photocopies) or electronic records.

  • They must contain the actual values and observations, not summaries.

  • They must be accurate, unchangeable (i.e. pen) and legible

  • They must have been created in real-time with the activity being documented.

Required Information on All Records

The following information is required on all records you keep:

  1. information about the plant identity

  2. The date (and time, if necessary)

  3. Signature or initials of the observer

  4. Product name and lot code, if applicable

How long do I need to keep them for?

All records must be retained onsite for 2 years. Additionally, you must be able to retrieve records within 24 hours if an authorized request is made.


 
 

This Article is For You if…

∆ You take any records as part of your food safety plan

∆ You are developing a food safety plan or HACCP plan.

∆ You are any type of FDA regulated food business


Resources

FDA Regulation On Record Keeping

FDA Regulation On Record Keeping


More About Food Safety Plans

More Posts


Validation

What You Need To Know:

  • Validation answers the question “How do you know it works?”

  • You must validate that the preventive controls that you implement actually work.

  • Validation activities includes using scientific and technical evidence (or conducting your own studies)

Example of Validation: Collecting scientific research, and conducting tests to prove that the cooking temperature in your recipe is effective in killing the harmful bacteria in the product.

Hint: you can find information to validate many food processing practices on the FDA website.


What is Validation?

Validation means obtaining and evaluating scientific and technical evidence that a control measure, combination of control measures, or the food safety plan as a whole, when properly implemented, is capable of effectively controlling the identified hazards.

21 CFR 117(c)(1)(i)

When is Validation Required?

You are required to validate every preventive control you are implementing. This means that if you use cooking as a means to kill bacteria, then you need to show that the time and temperature are a valid method for killing that bacteria type. This can often be achieved by referencing FDA guidance materials.

You are not required to validate the following types of preventive controls:

  • Sanitation Preventive Controls

  • Food Allergen Controls

  • Recall Plan

Who Conducts Validation?

All validation activities must be performed by a preventive controls qualified individual.


When do I need to validate my preventive controls?

You must validate your preventive controls:

  • Within 90 days of beginning production or there must be written justification for why if  >90 days after production begins.

  • Whenever a change is made that could impact how a hazard is controlled.

  • Whenever the food safety plan is reanalyzed.

What Part of My Food Safety Plan Require Validation?

Some parts of your food safety plan do not need to be validated. Sanitation activities, for example, do not need to be validated because most people use a small set of scientifically proven processes (i.e. soap and water, common chemical sanitizers). As a result, there is no need to require each business to prove their sanitation practices actually work.

The following activities do not require validation

  • Food allergen controls

  • Sanitation controls

  • Recall plan

  • Supply chain program

  • Other preventive controls if the PCQI prepares the written justification that a validation is not applicable based the nature of the hazard and the preventive control.


 
 

This Article is For You if…

∆ You are developing a food safety plan or HACCP plan.

∆ You have implemented a preventive control or identified a hazard that requires a preventive control


FDA Regulation on Validation


More About Food Safety Plans

More Posts


Verification

If you are unsure whether corrective action is required, see Verification vs. Validation

What You Need To Know

  • Verification means confirming that other parts of the food safety plan have been undertaken as specified.

  • Verification can take the form of a supervisor regularly reviewing records and verifying them with a signature.


What is Verification?

Verification means the application of methods, procedures, tests and other evaluations, in addition to monitoring, to determine whether a control measure or combination of control measures is or has been operating as intended and to establish the validity of the food safety plan.

21 CFR 117(c)(1)(i)

Examples of Verification

Common examples of verification include:

  • Reviewing cooking records to confirm the required temperature and cook time was reached

  • Reviewing refrigeration records to confirm food was held sufficiently cold

  • Observation that employees are following good food-handling practices

  • Calibrating thermometers – this verifies that they are reading properly

  • Sampling your own product for pathogens to verify that your process was faithfully performed

  • Environmental monitoring – testing your production space for pathogens living on surfaces, in drains, etc.

  • Supplier Verification – reviewing a supplier’s records to confirm they are faithful to their food safety practices and claims.

When is Verification Required?

All records which monitor a preventive control must be verified within 7 days of their creation.

All corrective action records must be reviewed within 7 days of their creation.

Other verification records, such as instrument calibration, product testing, and environmental monitoring, must be verified “within a reasonable amount of time” as determined by the producer.

Who Conducts Verification?

All verification activities must be performed by a preventive controls qualified individual (PCQI).


What You Need to Do:

  • Verify that your preventive controls are being implemented and monitored. You can do this by checking that monitoring records were completed.

  • Verify that corrective actions are taken when necessary and that the right decisions are being made in relation to any process deviations.

  • You must keep your verification records on file (digital is fine)


 
 

This Article is For You if…

∆ You are developing a food safety plan or HACCP plan.

∆ You have implemented a preventive control or have identified a hazard that requires a preventive control

∆ You take any records as part of your food safety plan


Resources

Verification Log Template

Verification Log Template

FDA Regulation on Verification

FDA Regulation on Verification


More About Food Safety Plans

More Posts


Corrective Action

If you are unsure whether corrective action is required, see Corrective Action vs. Correction

What You Need To Know:

  • Corrective Action is a response that must be taken if a preventive control is not properly implemented.

  • Corrective Actions must be written and are often completed using a standard form (see our free Corrective Action template)


What You Need to Do:

1. Write Corrective Actions Procedures

You must establish and implement written corrective action procedures. These procedures must describe the steps to be taken to ensure that:

  • Appropriate action is taken to correct a problem associated with a preventive control.

  • Appropriate action is taken to reduce the likelihood that the problem will recur.

  • All affected food is evaluated for safety

  • All affected food is prevented from entering commerce.

2. Take Corrective Action When it is Required

When to Take Corrective Action:

You must take a corrective action if

  • A preventive control fails and a corrective action hasn't been established.

  • A preventive control is found to be ineffective

  • Verification records are found to be incomplete or improper decisions were made about corrective action

3. Keep Records of Your Corrective Actions

All corrective actions taken in this section must be documented. We recommend using a pre-written form so that it’s easy to complete and no details are missing. Check out our corrective action template here

Corrective actions must also be verified (See Verification or §117.155)


 
 

This Article is For You if…

∆ You are developing a food safety plan or HACCP plan.

∆ You have implemented a preventive control or identified a hazard that requires a preventive control


Resources

FDA Regulation on Corrective Actions

FDA Regulation on Corrective Actions

Corrective Action Template

Corrective Action Template


More About Food Safety Plans

More Posts


Monitoring

These requirements are a part of our comprehensive Food Safety Plan Guide

What You Need To Know:

  • Monitoring means observing some activity in your production— such as checking the temperature of your walk-in refrigerator

  • Monitoring is required for all preventive controls to ensure they are implemented properly.

  • You must have written procedures for how and how often you will monitor preventive controls.

  • You must monitor preventive controls enough to ensure they are being performed.

Record keeping Requirements

  1. You must document your monitoring actions, store them, and also verify them (see verification)

  2. Exception records are acceptable type of monitoring record (this means records are only taken when a deviation occurs.) For example, a refrigeration log may shows records only when the temperature is outside the acceptable range.


Resources

FDA Regulation on Monitoring Preventive Controls

FDA Regulation on Monitoring Preventive Controls

 
Preventive Controls

These requirements are a part of our comprehensive Food Safety Plan Guide

What You Need To Know:

  • A preventive control is a strategy implemented to eliminate a hazard in a food manufacturing environment

  • You must identify and implement preventive controls when you identify a hazard that is reasonably likely to cause injury to a customer if left unaddressed.

  • Preventive controls include Critical Control Points and other types of controls.

  • Preventive controls must be written

Types of Preventive Controls

Process Controls:

These are procedures and processes that are used to control parameters of processing (i.e. acidifying, refrigerating, cooking.) They must be written in a way that is specific to your process and they must include:

  • parameters associated with controlling the hazard (i.e. if you are using cooking as a process control, then you must include the required cook temperature and cook time)

  • The maximum or minimum values required to control the hazard.


Food Allergen Controls

These include processes to control food allergens. These are implemented to:

  • Protect food from allergen cross contact

  • Label food properly with allergens to ensure it isn't misbranded


Sanitation Controls:

These are practices to ensure the facility is kept clean and to minimize biological hazards. They relate to:

  • Cleanliness of food-contact surfaces (equipment, utensils, tables)

  • Prevention of contamination of food from dirty sources (i.e. dirty people, dirty food, dirty packaging, dirty raw ingredients)


Supply Chain Controls:

Supply Chain Controls are described fully in Part G


Other Controls

You may have other types of controls (i.e. hygiene training and current good manufacturing practices)

What To Do If You Implement a Preventive Control

If you implement one or more preventive controls then you must conduct the following activities for each one:

  1. Monitoring activities

  2. Corrective actions

  3. Verification activities

Circumstances Where Preventive Controls Are Not Required

You aren't required to implement preventive controls if any of the following apply:

  1. The food cannot be consumed without application of an appropriate control (i.e. coffee beans cannot be consumed without pouring boiling water on them, which would kill any bacteria on the bean. By preparing coffee the consumer is inherently applying the necessary control)

  2. You rely on your customer, who is subject to this subpart, to ensure that the hazard is mitigated. You must:

i. Disclose in writing that the food is "not processed to control [identify hazard]" and

ii. Annually obtain written assurance that the customer is following the procedures you have provided, which will eliminate the hazard.

3. You rely on the customer who is not subject to this subpart to eliminate the hazard. You must:

i. Disclose in writing that the food is "not processed to control [identify hazard]" and

ii. Annually obtain written assurance that the customer is following the procedures you have provided, which will eliminate the hazard.

4. You rely on the customer to provide assurance that the food will be processed to control the hazard by a subsequent entity in the supply chain

i. Disclose in writing that the food is "not processed to control [identify hazard]" and

ii. Annually obtain written assurance that your customer will:

A. Disclose in documents accompanying the food that it is "not processed to control [identify hazard]"

B. Will only sell to another entity that agrees in writing that it will mitigate the hazard and obtain similar written assurance from subsequent customers.

5. You have established and implemented a system that ensures control of the hazards in your product, at the distribution step.

Note: You must document any circumstance (related to the section above) that applies to you, including written assurances from customers.


 
 

This Article is For You if…

∆ You manage a facility that makes, holds, or packs food.

∆ You are developing a food safety plan or HACCP plan.

∆ You have identified a hazard in your hazard analysis

∆ You are subject to Part 117 Subpart C (very small businesses are exempt from this requirement)


Resources

Food Safety Plan Templates

Food Safety Plan Templates


More About Food Safety Plans

More Posts


References

Hazard Analysis

These requirements are a part of our comprehensive Food Safety Plan Guide

Hazard analysis Post Thumbnail.png

What you need to know:

  • A hazard analysis is the process of identifying all of the hazards present in your process that could potentially cause a customer injury.

  • Creating a Hazard Analysis is the first step in developing a food safety or HACCP plan.

  • You can read the requirements below or just use our self-guided hazard analysis template

Requirements for a Hazard Analysis:

  1. You must conduct a hazard analysis for each type of food manufactured, processed, packed, or held at your facility.

  2. Your hazard analysis must be written.

Steps in Creating a Hazard Analysis

1. Download our Hazard Analysis Template

It’s available for free here, and it will be much easier if you can follow along.

Example Process Flow - Each box corresponds to a process step.

Example Process Flow - Each box corresponds to a process step.

2. Identify the steps in your process from start to finish.

It’s important that you have every step in your process identified so that you don’t miss anything in your hazard analysis. Often, it’s easiest to conduct a process flow diagram to identify all of the steps in your process.

3. Conduct a Hazard Identification:

In this step, you review all of your process steps and identify if there are any hazards present at each step. For each step, you will consider 3 types of hazards:

  • Biological Hazards (bacteria, parasites, etc.)

  • Chemical hazards (i.e. toxins, pesticides, food allergens)

  • Physical hazards (i.e. stone, glass, metal fragments)

Your hazard identification should also include hazards that could be present in the food because:

  • The hazard occurs naturally (i.e. toxins in fish)

  • The hazard may be accidentally introduced (jewelry from employee falls into food)

  • The hazard may be introduced intentionally for economic gain (i.e. sabotage by a competitor)

4. Conduct Hazard Evaluation

The hazard evaluation is the last step in creating your Hazard Analysis. Here, you must evaluate each hazard that you identified to assess the probability that it would occur if left unaddressed.

If the probability is high that this hazard would cause an injury if unaddressed, then you must implement a “preventive control”.

You also must consider the effects of these things in your hazard evaluation.

  • Formulation of the food

  • Condition and design of the facility

  • Raw materials and other ingredients

  • Transportation practices

  • Processing procedures

  • Packaging and labeling activities

  • Storage and distribution

  • Intended use of the product

  • Sanitation, including employee hygiene

  • Any other relevant factors (i.e. weather, natural toxins)

  • Environmental pathogens whenever a ready-to-eat (RTE) food is exposed to the environment before packaging.


 
 

This Article is For You if…

∆ You manage a facility that makes, holds, or packs food.

∆ You are developing a food safety plan or HACCP plan.

∆ You are subject to Part 117 Subpart C (very small businesses are exempt from this requirement)


Resources

Hazard Analysis Template

Hazard Analysis Template


More About Food Safety Plans

More Posts


References

Facility Requirements

These requirements are a part of the Current Good Manufacturing Practices that relates to Facility Requirements. You can see the full guide to cGMPs here

Plants & Grounds

Grounds must be kept in a condition that protects against contamination. Methods include:

1. Eliminate conditions for breeding/harboring pests
2. Maintain roads, yards, parking lots
3. Drain areas (i.e. puddles) that may breed pests or contribute to food contamination
4. Even if the grounds aren’t in your control, you must still mitigate contamination hazards.


Plant Construction and Design

20180711_115335.jpg

The space must be suitable in size, construction and design for food production.

1. Must have adequate space for equipment and storage.

2. Must allow you to take precautions which reduce allergen contamination and food contamination (for example -- by chemicals, filth, other materials). Ways to eliminate contamination include separating operations by: location, time, partition, air flow systems, dust control system, etc.

3. Protect food that is stored outside in bulk containers:

4. Floors, Walls, Ceilings must be constructed in a way that allows them to be cleaned. The construction of the space must allow employees to do their jobs and not contaminate food, packaging, and work areas.

5. There should be adequate lighting in all food and employee areas (including food storage areas and employee locker rooms). All bulbs and glass that is suspended over areas where food is exposed should be shatter resistant.

6. There should be adequate ventilation to minimize dust, steam, odors, and vapors.

7. Provide screens or other protection against pests (door sweeps, air curtains)


Sanitary Facilities

Plumbing

Water Supply must be from an adequate source. Running water must be of a suitable temperature and pressure and be provided in all food processing/cleaning areas.

Plumbing must

1. Carry adequate amounts of water around the plant.
2. Remove sewage from the plant.
3. Avoid contaminating food, equipment, water supply, utensils, ec.
4. Provide floor drainage in spaces where floors get very wet
5. Avoid back flow between plumbing systems

Sewage Disposal: Sewage must be disposed of adequately

Toilet Facilities: Each plant must have clean toilet facilities.

Hand-washing facilities: Each plant must provide hand washing facilities.

Rubbish: store rubbish to minimize odor, pests, and contamination


Exemptions

This section applies to most traditional food processors that fall under FDA jurisdiction. However, there are some notable exceptions.

  • Farms

  • Fishing Vessels

  • Establishments who solely hold and transport agricultural products

  • Establishments who only raw process (i.e. shell or dry) nuts.

  • Mixed-Type farm facilities (defined in §1.227)


 
 

This Article is For You if…

∆ You are seeking to understand facility requirements for your FDA-regulated food business.

∆ You manage a facility that makes, holds, or packs food.


More About Operating Requirements

More Posts


References

Guide to Current Good Manufacturing Practices (117 Subpart B)

Guide to Current Good Manufacturing Practices (117 Subpart B)

Processes and Controls

These requirements are a part of the Current Good Manufacturing Practices that relates to Processes and Controls. You can see the full guide to cGMPs here

Processes and controls.png

Requirements For Processes and Controls

Below are the processes and controls requirements for FDA regulated food businesses.

General Requirements

1. All operations involving food must align with sanitation principles.

2. Quality control must be used to ensure food and packaging is safe.

3. One or more competent individuals must be responsible for sanitation

4. You must protect your food from allergens and contamination.

5. Testing must be used to identify sanitation failures or possible product contamination.

6. Any contaminated food must be discarded or treated to eliminate the contamination.

Raw Materials & Ingredients

1. Ingredients must be inspected for cleanliness and stored safely. If necessary, raw materials should be washed using clean water.

2. Ingredients must be safe for consumption or treated to make them safe (i.e. washed or cooked).

3. Ingredients susceptible to toxins must comply with FDA regulations.

4. Ingredients that are contaminated must comply with FDA regulations if they are to be used.

5. Ingredients must be held in containers that prevent contamination and at an acceptable temperature and humidity level.

6. Frozen ingredients must be kept frozen.

7. Ingredients stored in bulk must be safe from contamination.

8. Ingredients that contain allergens must be identified and held in a way that prevents cross-contact.

Manufacturing Operations:

1. Equipment must be maintained in clean condition.

2. All operations should be controlled to minimize growth of bacteria, contamination and spoilage.

3. Food requiring refrigeration must be refrigerated throughout the operation.

4. Measures used to prevent bacteria growth (i.e. cooking, sterilizing, refrigerating) must be adequate.

5. Re-work must prevent contamination and bacteria growth.

6. When ingredients are unprotected they must not be handled in a way that could cause contamination. Food on conveyor belts must be protected.

7. Equipment, containers, and utensils must be constructed and used in a way that doesn’t contaminate food.

8. You must take measures to protect your product from metal or foreign objects.

9. Contaminated food must:

i. Be disposed of OR

ii. Re-worked and re-examined,

10. Food that is being processed must be protected from contamination.

11. Heat blanching --if used-- must be performed properly

12. Foods that are used repeatedly (i.e. dipping sauces, breading) must be protected from contamination and bacteria growth

13. Filling, assembling, and packaging processes must not contaminate food.

14. Dry foods that rely on low moisture for safety must be sufficiently dry.

15. Acidified foods that rely on acid for safety must be sufficiently acidic (pH≤4.6)

16. Ice that touches food must be food quality.


Exemptions

This section applies to most traditional food processors that fall under FDA jurisdiction. However, there are some notable exceptions.

  • Farms

  • Fishing Vessels

  • Establishments who solely hold and transport agricultural products

  • Establishments who only raw process (i.e. shell or dry) nuts.

  • Mixed-Type farm facilities (defined in §1.227)

 
 

This Article is For You if…

∆ Your business is regulated by the FDA

∆ Your business makes, packs, or holds food.


More About Operating Requirements

More Posts


References

Guide to Current Good Manufacturing Practices (117 Subpart B)

Guide to Current Good Manufacturing Practices (117 Subpart B)


Personnel Requirements in Food Processing Spaces

These requirements are a part of the Current Good Manufacturing Practices. You can see the full guide to cGMPs here

Personnel Requirements

adult-business-container-1267312.jpg

Employees working in food processing spaces are subject to basic requirements about disease control and cleanliness. The aim of these requirements is to make sure a food processor does contaminate their own food product which could cause a customer to become sick.

Disease Control:

Sick employees must be excluded from operations that could result in food contamination.

The typical way of doing this implementing an Employee Hygiene Policy that excuses sick employees from work. This may require food production employees who have been exposed to a serious contagious illness to refrain from working until they are no longer contagious.

Cleanliness:

This section states that employees must have clean practices

1. Clothing that protects against contamination
2. Adequate personal cleanliness
3. Hand washing
4. Removing unsecured jewelry
5. Wearing gloves in a safe manner
6. Wearing hair restraints
7. Storing other belongings in areas where food is exposed/equipment is washed.
8. Not eating food, chewing gum, drinking beverages, or using tobacco in food areas.
9. Taking other precautions


Exemptions

This section applies to most traditional food processors that fall under FDA jurisdiction. However, there are some notable exceptions.

  • Farms

  • Fishing Vessels

  • Establishments who solely hold and transport agricultural products

  • Establishments who only raw process (i.e. shell or dry) nuts.

  • Mixed-Type farm facilities (defined in §1.227)


 
 

This Article is For You if…

∆ Your business is regulated by the FDA

∆ You have employees who work in a space where food is handled, packed, or produced.


More About Operating Requirements

More Posts


References

Guide to Current Good Manufacturing Practices (117 Subpart B)

Guide to Current Good Manufacturing Practices (117 Subpart B)

Requirements for FDA Food Producers
Requirements for FDA Food Producers.jpg

Introduction

Great! You have already confirmed that your business is regulated somehow by the FDA

The easiest way to understand what regulations apply to your business is to identify what kind of food you make.

Some foods are subject to special requirements. If your business produces one of the food types below, click the link to learn about their special requirements. Otherwise, keep reading

Do you make one of these specially regulated foods?

If you make one of these foods, check out our section on Specially Regulated Foods 
Otherwise, your product likely falls under Part 117 (See Below)


Part 117 Overview

If you are producing human food, then you are most likely governed under Title 21 -- Chapter 1 -- Subchapter B -- Part 117.  This section contains the majority of requirements for typical food producers.

What You Need To Know To Be FDA Compliant:

Everything a food producer needs to know is located in Subpart B. To find exactly what you're looking for, read the sections below:

Subpart B -- Current Good Manufacturing Practices: This contains Requirements for Facilities, Employees, and Sanitation.
     Guide to Subpart B

Subpart C -- Hazard Analysis and Risk Based Preventive Controls: This section outlines the requirements for a Food Safety Plan and other requirements related to the implementation of preventive controls.
    Guide to Subpart C

Subpart F -- Requirements Relating to Records that Must Be Established and Maintained: This section dictates the record keeping requirements for food businesses. 
     Guide to Subpart F

Subpart G -- Supply-Chain Program: This section outlines the requirement for verifying supplier partners and documenting this process.
Guide to Subpart G

Other Parts of 117:

These sections relate to a minority of food processors. In case you are interested, I have linked them below:

Subpart A -- General Provisions:This section contains definitions, exemptions, and the training requirements for employees working in a food production space.
Source Text: Title 21 -- Chapter 1 -- Subchapter B -- Part 117 -- Subpart A: General Provisions

Subpart D -- Modified Requirements: This section describes modified requirements that apply to Qualified Facilities and Storage Facilities.
Source Text: Title 21 -- Chapter 1 -- Subchapter B -- Part 117 -- Subpart D: Modified Requirements

 Subpart E -- Withdrawal of  a Qualified Facility Exemption: This section describes how a business would transition from being exempt to provisions of the code to non-exempt status. This only applies to businesses who previously but no-longer apply for the Very Small Business Exemption
Source Text: Title 21 -- Chapter 1 -- Subchapter B -- Part 117 -- Subpart E: Withdrawal of a Qualified Facility Exemption