FSMA 204 Frequently Asked Questions

Comprehensive answers to the most common questions about the FDA Food Traceability Rule — covering compliance basics, the Food Traceability List, who must comply, Critical Tracking Events, enforcement, temperature monitoring, and industry-specific requirements. Each answer is self-contained and cites regulatory sources inline.

General

What is FSMA 204?

FSMA 204 is an FDA regulation requiring businesses that handle certain high-risk foods to maintain detailed traceability records. Officially titled the "Final Rule on Requirements for Additional Traceability Records for Certain Foods," it implements Section 204(d) of the FDA Food Safety Modernization Act. The rule is codified at 21 CFR Part 1, Subpart S and was published on November 21, 2022 (Source: 87 FR 70910).

What is the purpose of the FSMA food traceability rule?

The rule enables faster identification and rapid removal of potentially contaminated foods during outbreaks. Currently, FDA traceback investigations can take weeks or months. FSMA 204 is designed to compress that timeline to hours or days by creating a standardized, end-to-end traceability chain for high-risk foods (Source: FDA FSMA 204 Final Rule).

When does FSMA 204 go into effect?

The compliance deadline is July 20, 2028. The original deadline was January 20, 2026, but Congress directed the FDA to extend enforcement by 30 months through the Continuing Appropriations Act of 2026. The rule itself has not been repealed or altered — only the enforcement date was moved.

Has FSMA 204 been repealed?

No. The rule remains fully intact. Only the enforcement date has been extended to July 20, 2028. Businesses should continue preparing for compliance.

What is the regulatory citation for FSMA 204?

The rule is codified at 21 CFR Part 1, Subpart S — "Additional Traceability Records for Certain Foods." Key sections include:

• 21 CFR 1.1310 — Definitions
• 21 CFR 1.1315 — Traceability plan requirements
• 21 CFR 1.1320-1.1350 — CTE record requirements
• 21 CFR 1.1455 — Record maintenance and availability

Is FSMA 204 the same as FSMA Section 204?

Yes. "FSMA 204" is shorthand for Section 204(d) of the Food Safety Modernization Act, which directed FDA to create additional traceability requirements for high-risk foods. The resulting regulation is the Food Traceability Rule, codified at 21 CFR Part 1, Subpart S.

What was the original FSMA 204 deadline?

The original compliance deadline was January 20, 2026. Congress extended this by 30 months to July 20, 2028 through the Continuing Appropriations Act of 2026. The extension applied only to the enforcement date — the rule's requirements were not changed.

Food Traceability List

What foods are covered by FSMA 204?

Foods on the Food Traceability List (FTL) require additional traceability records. The FTL includes: fresh leafy greens, tomatoes, cucumbers, peppers, melons, tropical tree fruits, fresh herbs, sprouts, fresh-cut fruits and vegetables, shell eggs, soft and semi-soft cheeses, nut butters, finfish (fresh/frozen), crustaceans, bivalve mollusks, smoked finfish, and ready-to-eat deli salads (Source: FDA Food Traceability List).

How were foods selected for the Food Traceability List?

The FDA used a risk-ranking model evaluating commodity-hazard pairs across seven criteria: outbreak frequency, illness severity, contamination likelihood, pathogen growth potential during manufacturing, manufacturing contamination probability, consumption rate, and cost of illness. The model underwent two independent external peer reviews (Source: FDA Final Rule, 87 FR 70910).

Are frozen foods covered by FSMA 204?

It depends on the food category. Frozen seafood IS covered — the FTL includes fresh, frozen, and previously frozen finfish, crustaceans, and bivalves. Frozen produce is generally NOT covered — only fresh forms of produce are listed. Frozen cheeses and frozen deli salads are also generally NOT covered (Source: FDA Food Traceability List).

Are processed foods covered by FSMA 204?

Foods containing FTL ingredients are covered only if the listed ingredient remains in its listed form. A salad containing fresh romaine is covered because the romaine is still fresh. A cooked dish containing formerly fresh tomatoes may not be covered if the tomatoes no longer retain their fresh form (Source: 21 CFR Part 1, Subpart S).

Is meat covered by FSMA 204?

No. Meat, poultry, and catfish (Siluriformes) are regulated by the USDA, not the FDA, and are exempt from FSMA 204.

Are shell eggs covered by FSMA 204?

Yes. Shell eggs from domesticated chickens are on the Food Traceability List. This applies to whole shell eggs — not egg products (liquid, dried, or frozen eggs), which are regulated by USDA.

Can the Food Traceability List change?

Yes. The FDA can add or remove foods through a formal rulemaking process: Federal Register notice, public comment period, and final notice. Additions take effect 2 years after the final notice. Deletions are effective immediately. The list is expected to grow over time (Source: 21 CFR 1.1300).

Is coffee covered by FSMA 204?

No. Coffee is not on the Food Traceability List. The FTL covers foods with the highest risk of causing serious illness based on the FDA's risk-ranking model.

Are dairy products covered by FSMA 204?

Only soft and semi-soft cheeses are on the FTL — including mozzarella, feta, ricotta, cream cheese, brie, camembert, and queso fresco. Hard cheeses (cheddar, parmesan), butter, milk, yogurt, and ice cream are NOT covered.

Who Must Comply

Who must comply with FSMA 204?

Any person who manufactures, processes, packs, or holds foods on the Food Traceability List must comply. This includes farms, coolers, packers, processors, distributors, warehouses, retailers, and restaurants — both domestic and foreign firms producing food for U.S. consumption (Source: 21 CFR Part 1, Subpart S).

Do restaurants have to comply with FSMA 204?

Yes, if the restaurant's annual food sales exceed $250,000 (3-year rolling average, inflation-adjusted to 2020). Most commercial restaurants exceed this threshold — approximately $685/day in food sales is enough. Restaurants must maintain Receiving CTE records only — recording 8 Key Data Elements for every delivery of FTL food. They do NOT need to track transformation, shipping, harvesting, or assign Traceability Lot Codes (Source: 21 CFR 1.1345).

What is the small business exemption for FSMA 204?

Businesses with average annual food sales of $250,000 or less (3-year rolling average, inflation-adjusted) are fully exempt. Those between $250,001 and $1,000,000 must maintain records but are exempt from the electronic sortable spreadsheet requirement. Those over $1,000,000 must fully comply, including providing records in electronic sortable spreadsheet format during outbreak investigations (Source: 21 CFR 1.1455).

Do retailers have to comply with FSMA 204?

Yes. Retailers (grocery stores, supermarkets) that handle FTL foods and exceed the $250,000 sales threshold must maintain Receiving CTE records, just like restaurants. Retailers that repack, relabel, or commingle FTL foods must also maintain Transformation CTE records.

Do food trucks have to comply with FSMA 204?

Yes, if their annual food sales exceed $250,000. The rule applies to all entities that receive FTL foods regardless of their format (brick-and-mortar, food truck, catering, ghost kitchen). The $250,000 threshold applies per establishment.

Do foreign suppliers have to comply with FSMA 204?

Yes. International businesses producing, processing, packing, or holding FTL foods for U.S. consumption must comply, including maintaining traceability plans and providing records within 24 hours of FDA request.

Does the $250,000 threshold apply per location or company-wide?

The $250,000 threshold applies per individual establishment, not aggregated across a chain, franchise, or corporate parent. Each restaurant location is evaluated separately (Source: 21 CFR Part 1, Subpart S).

CTEs and KDEs

What are Critical Tracking Events (CTEs)?

CTEs are seven specific events in the food supply chain that require documented traceability records under FSMA 204:

1. Harvesting — picking/collecting food from farms
2. Cooling — active temperature reduction before initial packing
3. Initial Packing — first time food is packed for sale (TLC assigned here)
4. First Land-Based Receiving — first person taking seafood from a fishing vessel on land (TLC assigned here)
5. Shipping — sending FTL food to another entity
6. Receiving — taking possession of FTL food
7. Transformation — manufacturing, processing, commingling, repacking, or relabeling (new TLC assigned here)

Each CTE has specific Key Data Elements that must be recorded (Source: 21 CFR 1.1325-1.1350).

What are Key Data Elements (KDEs)?

KDEs are the specific pieces of information that must be recorded for each Critical Tracking Event. They typically include: product identification, quantities, dates, locations, Traceability Lot Codes, and reference document information. The exact KDEs vary by CTE type (Source: 21 CFR 1.1325-1.1350).

What is a Traceability Lot Code (TLC)?

A Traceability Lot Code is a unique alphanumeric descriptor used to identify a traceability lot. TLCs are assigned at exactly three points in the supply chain: initial packing, first land-based receiving (seafood), and transformation. Once assigned, a TLC follows the food through shipping and receiving unchanged until a new transformation occurs. The FDA does not mandate a specific format — industry best practice is GTIN + batch/lot number encoded in a GS1-128 barcode (Source: 21 CFR 1.1320).

What is a traceability plan?

A traceability plan is a written document that every covered entity must maintain, describing:

• How traceability records are maintained
• How FTL foods are identified
• How TLCs are assigned (if applicable)
• A designated point of contact with name, title, and phone number

Farms must also include maps with geographic coordinates for fields and growing areas (Source: 21 CFR 1.1315).

Which CTE applies to restaurants?

Only the Receiving CTE. Restaurants record 8 Key Data Elements when FTL foods are delivered — product description, quantity, TLC, supplier info, receiving location, date, TLC source reference, and reference document number. Restaurants do NOT perform the Shipping, Transformation, Harvesting, Cooling, Initial Packing, or First Land-Based Receiver CTEs (Source: 21 CFR 1.1345).

What is the Receiving CTE?

The Receiving CTE requires recording 8 Key Data Elements when an entity takes possession of FTL food: Traceability Lot Code, product description, quantity and unit, previous source location, receiving location, date received, TLC source reference, and reference document type and number. This is the only CTE that applies to restaurants and retailers (Source: 21 CFR 1.1345).

What is the Shipping CTE?

The Shipping CTE requires recording 8 Key Data Elements when an entity sends FTL food to another entity: Traceability Lot Code, quantity, product description, recipient location, shipping location, date shipped, TLC source reference, and reference document number. The shipper must pass items 1-7 to the recipient (Source: 21 CFR 1.1340).

What is the Transformation CTE?

The Transformation CTE applies when FTL food is manufactured, processed, commingled, repacked, or relabeled. Processors must record all input TLCs with quantities used, assign a new TLC to the output, and document the transformation location and date. This creates the link that allows FDA to trace contaminated finished products back to source ingredients (Source: 21 CFR 1.1350).

What is the Cooling CTE?

The Cooling CTE requires documentation when a raw agricultural commodity undergoes active temperature reduction before initial packing — hydrocooling, forced air cooling, vacuum cooling, or icing (except standard seafood icing). This CTE applies at produce cooling facilities and packing houses. It does NOT apply at restaurants (Source: 21 CFR 1.1325(b)).

What is the First Land-Based Receiver CTE?

The First Land-Based Receiver CTE applies to the first person who takes possession of seafood from a fishing vessel on land. This person assigns the first TLC and records the species, quantity, harvest date range, harvest location (using FAO or NMFS codes), landing date, and reference document (Source: 21 CFR 1.1335).

Compliance and Enforcement

How long must FSMA 204 records be kept?

All CTE/KDE records must be retained for 2 years (24 months) from the date created or obtained. Previous versions of traceability plans must be retained for 2 years after updates. Records may be paper, electronic, or true copies. They may be stored offsite if retrievable within 24 hours (Source: 21 CFR 1.1455).

How quickly must records be provided to the FDA?

Within 24 hours of an FDA request, or within a reasonable time agreed upon with FDA. During outbreak investigations, records must be provided in electronic sortable spreadsheet format for entities above revenue thresholds. Explanatory materials (coding systems, abbreviations) must also be provided (Source: 21 CFR 1.1455).

What is the electronic sortable spreadsheet requirement?

Entities with annual food sales exceeding $1,000,000 must provide traceability records in an electronic sortable spreadsheet format within 24 hours of FDA request during outbreak investigations. The FDA provides a downloadable template. Entities between $250,000 and $1,000,000 must provide records but are exempt from the spreadsheet format requirement (Source: 21 CFR 1.1455).

What are the penalties for FSMA 204 non-compliance?

FSMA enforcement can include: warning letters, import alerts (for foreign food), injunctions, civil monetary penalties, and criminal prosecution in severe cases. The FDA has indicated it will prioritize education and outreach initially after the July 2028 deadline, but enforcement will follow.

Can a third party maintain my traceability records?

Yes. A third party (such as a distributor or compliance service provider) can maintain records on your behalf under 21 CFR 1.1455. However, the covered entity remains legally responsible for ensuring records are maintained and accessible within 24 hours. A written agreement clarifying responsibilities is recommended.

Are there waivers available for FSMA 204?

Yes. Any entity can petition FDA for a waiver based on economic hardship due to unique circumstances, provided the waiver will not significantly impair FDA's rapid identification capabilities during outbreaks. Petitions follow 21 CFR 10.30 procedures. FDA publishes granted waivers in the Federal Register.

Will the FDA conduct inspections for FSMA 204?

Yes. FSMA 204 compliance will be assessed during routine FDA food facility inspections. The FDA has indicated a phased approach — initial emphasis on education and outreach, followed by enforcement actions for non-compliance.

Can I keep paper records for FSMA 204?

Technically yes. The rule does not mandate electronic records. However, the 24-hour response requirement and the electronic sortable spreadsheet obligation (for entities over $1M annual sales) make digital systems highly practical. Paper records are most viable for small-volume operations.

Temperature Monitoring

Does FSMA 204 require temperature monitoring?

No — not directly. FSMA 204 is a traceability recordkeeping rule focused on product identity, lot codes, and chain of custody. However, the Cooling CTE requires documentation of active temperature reduction before initial packing — which inherently involves temperature data. Separately, the FSMA Sanitary Transportation Rule (a different regulation, already enforced since 2016) directly requires temperature monitoring during food transport (Source: 21 CFR 1.1325(b); 21 CFR Part 1, Subpart O).

How do IoT sensors support FSMA compliance?

IoT temperature sensors support FSMA compliance in two ways. First, for the Sanitary Transportation Rule (already enforced), sensors document temperature during transport and at delivery — a direct regulatory requirement. Second, for the FSMA 204 Cooling CTE, sensors at cooling facilities provide continuous, timestamped evidence that active cooling occurred, how long it took, and what temperature was achieved. Sensors also create the digital records that make 24-hour FDA response practical.

Do restaurants need temperature sensors for FSMA 204?

No. Restaurant obligations under FSMA 204 are limited to the Receiving CTE — recording delivery information from invoices and case labels. Temperature monitoring at restaurants supports other food safety regulations (HACCP, local health codes, the Sanitary Transportation Rule) but is not required by FSMA 204 specifically.

What is the difference between FSMA 204 and the Sanitary Transportation Rule?

The Sanitary Transportation Rule (21 CFR Part 1, Subpart O) directly mandates temperature monitoring during food transport — it has been enforced since April 2016. FSMA 204 (21 CFR Part 1, Subpart S) mandates traceability recordkeeping — who had the food, when, what lot code — with compliance beginning July 2028. They are separate regulations that overlap in cold chain operations, particularly at the Cooling CTE.

Where do temperature sensors have the highest FSMA 204 relevance?

At produce cooling facilities — where the Cooling CTE requires documentation that active temperature reduction occurred. IoT sensors provide continuous temperature curves, automated timestamps, and digital records that directly support Cooling CTE compliance. Sensor relevance decreases as you move downstream: medium at distribution centers (dock verification), low at restaurants (receiving is paperwork, not sensor data).

Industry-Specific

How does FSMA 204 affect food distributors?

Food distributors must maintain both Receiving and Shipping CTE records for all FTL foods they handle. They must NOT assign new TLCs unless they perform a transformation (repacking, relabeling, commingling). They must pass TLC information to downstream recipients (restaurants, retailers). The high volume of daily transactions effectively mandates electronic record systems (Source: 21 CFR 1.1340, 1.1345).

How does FSMA 204 affect produce farms?

Produce farms bear the heaviest upstream burden with up to three CTEs: Harvesting (commodity, field name, harvest date, geographic coordinates), Cooling (if actively cooling before packing), and Initial Packing (where the first TLC is assigned). Farms must maintain maps showing field locations with names and geographic coordinates. Farms with average annual food sales of $25,000 or less are exempt (Source: 21 CFR 1.1325, 1.1330).

How does FSMA 204 affect the seafood industry?

Seafood has a unique CTE — First Land-Based Receiving — where the first person taking seafood from a fishing vessel on land assigns the initial TLC. Unlike produce, seafood coverage includes fresh, frozen, and previously frozen forms. Standard seafood icing is explicitly excluded from the Cooling CTE. Aquaculture follows the agricultural pathway (harvesting, cooling, initial packing) rather than the fishing vessel pathway (Source: 21 CFR 1.1335).

How does FSMA 204 affect food processors?

Food processors face the most complex burden due to the Transformation CTE. They must link every input TLC to every output TLC when food is manufactured, processed, commingled, repacked, or relabeled. Processors also typically perform Receiving and Shipping CTEs. A single production run may involve dozens of input lots from multiple suppliers (Source: 21 CFR 1.1350).

What should multi-unit restaurant operators know about FSMA 204?

Multi-unit operators with commissary or central kitchen operations face significantly higher compliance requirements. The commissary is treated as a food processor and must track the Transformation CTE (linking input TLCs to output TLCs), assign new TLCs to transformed products, and maintain Shipping KDEs for each delivery to satellite locations. Each satellite location must maintain Receiving KDEs. The $250,000 threshold applies per individual establishment, not chain-wide (Source: 21 CFR 1.1350).

Does cooking food count as a transformation under FSMA 204?

Not for restaurants serving consumers directly. When a restaurant cooks FTL food for direct consumer sale, this is not a tracked transformation. However, when a commissary transforms FTL food and ships it to satellite locations, that IS a tracked transformation because the output leaves the facility (Source: 21 CFR 1.1350).

Are catering companies covered by FSMA 204?

Yes, if their annual food sales exceed $250,000. Catering companies that receive FTL foods must maintain Receiving CTE records. If a catering company operates a central kitchen that transforms food for off-site service, the central kitchen may be subject to Transformation CTE requirements.

How does FSMA 204 affect ghost kitchens and virtual brands?

Ghost kitchens and virtual brands are treated the same as traditional restaurants under FSMA 204. If annual food sales exceed $250,000 per establishment, the Receiving CTE applies. The rule does not distinguish between dine-in, delivery-only, or virtual restaurant concepts.

Getting Started

How should I prepare for FSMA 204?

Seven steps to prepare:

1. Determine coverage — check if your annual food sales exceed $250,000
2. Identify FTL foods — review everything you receive against the Food Traceability List
3. Create a traceability plan — document your record-keeping procedures and designate a contact
4. Train receiving staff — ensure they know which products require KDE capture and what to record
5. Organize delivery documentation — ensure invoices, BOLs, and case labels are retained and retrievable
6. Coordinate with suppliers — confirm they will provide TLCs on delivery documents by the deadline
7. Test retrieval — practice finding specific records within 24 hours

Where can I find the FDA's FSMA 204 resources?

The FDA provides multiple resources at fda.gov/fsma:

• The full regulatory text (21 CFR Part 1, Subpart S)
• The Food Traceability List
• Fictional example traceability plans (available in English, Spanish, Chinese, Vietnamese, Thai, French, and Indonesian)
• Electronic sortable spreadsheet template
• Technical assistance via FSMA204Traceability@fda.hhs.gov

What industry associations provide FSMA 204 guidance?

Several industry associations publish compliance guidance:

• National Restaurant Association — restaurant-specific guidance
• IFDA (International Foodservice Distributors Association) — distributor compliance manual
• Produce Traceability Initiative (PTI) — produce industry implementation guidance
• National Fisheries Institute (NFI) — seafood industry guidance
• GS1 US — data standards for TLC formatting and barcode implementation
• FMI (Food Marketing Institute) — retail and wholesale guidance

What does a traceability plan look like for a restaurant?

A restaurant traceability plan is a short written document that includes:

• A statement of how you maintain receiving records (paper binder, spreadsheet, software)
• A description of how you identify FTL foods in your deliveries
• The name, title, and phone number of your designated traceability contact
• A list of your FTL food suppliers

The FDA publishes fictional example restaurant traceability plans. Most restaurant traceability plans are 1-3 pages (Source: 21 CFR 1.1315).

What is the best TLC format to use?

The FDA does not mandate a specific TLC format. Industry best practice is GS1 GTIN + batch/lot number, which creates a globally unique identifier when encoded in a GS1-128 barcode. This format enables automated scanning at receiving docks and is recommended by the Produce Traceability Initiative and GS1 US. Any unique alphanumeric code is technically acceptable (Source: 21 CFR 1.1320).

How do I know if my suppliers are FSMA 204 ready?

Ask your suppliers directly whether they will provide Traceability Lot Codes on invoices, case labels, and bills of lading by the July 2028 deadline. Major distributors (Sysco, US Foods, Performance Food Group) are already implementing TLC systems. Smaller suppliers may need more lead time. If a supplier cannot provide a TLC, receiving entities are not responsible for assigning one — but should record as much available information as possible and note the gap.