FDA published the final version of the rule on September 17, 2015. This rule is part of FDA’s implementation of the Food Safety Modernization Act (FSMA).
Key requirements for Preventive Controls for Human Food
Food Safety Plans
Covered facilities must create a written Food Safety Plan in which they identify likely biological, chemical, and physical hazards and determine whether these hazards require preventive controls. For those that do, facilities must establish preventive controls to minimize or prevent the occurrence of those hazards. FDA says preventive controls include “process, food allergen, and sanitation controls, as well as supply-chain controls and a recall plan.”
Food Safety Plans must include methods to monitor and verify the consistency and effectiveness of the preventive controls put in place. Food Safety Plans must also include methods to correct problems that may arise in a timely, effective manner. Corrective actions must be recorded.
Possible monitoring and verification activities and the frequency in which they should be performed depend greatly on the preventive control at hand. Facilities must determine what is appropriate for their facility and controls.
To ensure the safety of food where hazards are controlled in raw materials and other ingredients before receipt by a receiving facility, covered facilities are responsible for approving their raw material and ingredient suppliers and only receiving food from their approved suppliers (or, when necessary and appropriate, on a temporary basis from unapproved suppliers). When approving a supplier, facilities must conduct a hazard analysis of the food and assess the entity that will be controlling the hazards. Facilities must also consider supplier performance.
Management of covered facilities must ensure that all employees who manufacture, process, pack or hold food have the necessary education, training, and/or experience and ensure they receive training in the principles of food hygiene, food safety, and employee health and hygiene.
Who is covered?
All companies that are required to register with FDA as a food facility are required to comply with FDA’s preventive controls rules unless covered by an exemption. Exemptions include, but are not limited to:
Very small businesses (businesses that have less than $1,000,000 in total annual sales of human food, adjusted for inflation)
- Activities subject to seafood HACCP requirements of part 123
- Activities subject to juice HACCP requirements of part 120
- Activities that are subject to the “low acid canned food” requirements of part 113
- For a list of all exemptions and modified requirements, see page 19 of the final rule.
Farms are not required to register with FDA or comply with the preventive control rules. The final rule expands the definition of a farm to cover two types of farm operations, and therefore expands the definitions of who is not required to comply. See the expanded definition here.
Most covered facilities were given only one year (until September 17, 2016) to comply with FDA’s Preventive Controls for Human Food. Compliance dates are as follows:
- Very small businesses (businesses that have less than $1,000,000 in total annual sales of human food, adjusted for inflation) – Three years after publication of the final rule (September 2018)
- Businesses subject to the Pasteurized Milk Ordinance: Three years after publication of the final rule (September 2018)
- Small businesses (businesses with fewer than 500 full-time equivalent employees): Two years after publication of the final rule (September 2017)
- All other businesses: One year after publication of the final rule (September 2016)
Compliance dates for supply chain programs differ and depend on the size of the facility and the status of its suppliers. See all compliance dates here.
Registrar Corp offers services to help food facilities comply with FDA’s Preventive Controls for Human Foods. Registrar Corp can help facilities develop a Food Safety Plan and conduct a Mock FDA Inspection of a facility to ensure employees are following correct food hygiene, food safety, and employee health and hygiene practices. Registrar Corp also offers an FDA Compliance Monitor through which facilities can monitor the FDA compliance history of their raw material and ingredient suppliers.
Registrar Corp Headquarters 144 Research Drive Hampton, Virginia USA 23666 Phone: +1-757-224-0177 Fax: +1-757-224-0179 Email: email@example.com
Registrar Corp Europe 16 Rue Jean Marie Barre Auray France 56400 Phone: +33-(0)-2-97-56-60-65 Fax: +33-(0)-2-72-68-57-24 Email: firstname.lastname@example.org