FSMA 204 Food Traceability Rule: The Complete Guide

FSMA 204 is an FDA regulation requiring businesses that handle foods on the Food Traceability List (FTL) to maintain detailed traceability records at specific points in the supply chain. The compliance deadline is July 20, 2028. The rule applies to farms, processors, distributors, restaurants, and any entity that manufactures, processes, packs, or holds FTL foods with annual food sales exceeding $250,000.

The rule's official name is the "Final Rule on Requirements for Additional Traceability Records for Certain Foods." It implements Section 204(d) of the FDA Food Safety Modernization Act and is codified at 21 CFR Part 1, Subpart S.

What does FSMA 204 require?

All covered entities must maintain records containing Key Data Elements (KDEs) associated with specific Critical Tracking Events (CTEs) for foods on the Food Traceability List (Source: 21 CFR Part 1, Subpart S).

In practical terms, this means:

1. Identify which foods you handle are on the FTL
2. Record specific data points when certain events happen (harvesting, cooling, packing, shipping, receiving, transformation)
3. Retain those records for 2 years
4. Produce records for FDA within 24 hours upon request

The rule does not mandate specific technology. Paper records are acceptable, though the 24-hour response requirement makes digital recordkeeping highly practical.

What is the Food Traceability List?

The Food Traceability List identifies the specific foods requiring additional traceability records. The FDA selected these foods using a risk-ranking model evaluating outbreak frequency, illness severity, contamination likelihood, and other factors.

FTL categories include:

• Cheese and dairy -- fresh soft cheeses, soft ripened cheeses, unpasteurized milk cheeses
• Shell eggs -- domesticated chicken eggs
• Nut butters -- peanut, almond, cashew, and all tree nut butters
• Fresh produce -- leafy greens, tomatoes, cucumbers, peppers, melons, tropical fruits, fresh herbs, sprouts, fresh-cut fruits and vegetables
• Seafood -- finfish (fresh, frozen, smoked), crustaceans, molluscan shellfish
• Prepared foods -- ready-to-eat deli salads

The FTL is not static. The FDA can add or remove foods through a defined Federal Register notice process. Additions take effect 2 years after the final notice. Deletions are effective immediately.

What are the 7 Critical Tracking Events?

Critical Tracking Events are the specific supply chain activities where traceability records must be created. Each CTE has defined Key Data Elements that must be recorded (Source: 21 CFR 1.1325-1.1350).

| # | CTE | Who Performs It | Key Purpose | |---|-----|----------------|-------------| | 1 | Harvesting | Farms | Record what was harvested, where, and when | | 2 | Cooling | Coolers (before initial packing) | Record active temperature reduction of raw commodities | | 3 | Initial Packing | First-time packers | First Traceability Lot Code (TLC) assignment | | 4 | First Land-Based Receiver | Seafood receivers | First TLC assignment for seafood from fishing vessels | | 5 | Shipping | Any entity arranging transport | Record what was shipped, to whom, and when | | 6 | Receiving | Any entity taking possession | Record what was received, from whom, and when | | 7 | Transformation | Processors, manufacturers | Link input TLCs to new output TLCs |

For restaurants: The only CTE that applies is Receiving. Restaurants do not need to track harvesting, cooling, packing, shipping, or transformation for food sold directly to consumers.

Who must comply with FSMA 204?

The rule applies to any person who manufactures, processes, packs, or holds foods on the FTL, subject to revenue thresholds evaluated on a per-establishment basis (Source: 21 CFR Part 1, Subpart S).

| Annual Food Sales | Compliance Status | |------------------|-------------------| | $250,000 or less | Fully exempt | | $250,001 -- $1,000,000 | Must comply, but exempt from electronic sortable spreadsheet requirement | | Over $1,000,000 | Full compliance including electronic sortable spreadsheet capability |

The $250,000 threshold is based on all food sold (not just FTL foods), uses a 3-year rolling average, and is inflation-adjusted to 2020 dollars. A restaurant doing approximately $685/day in food sales crosses this threshold.

Read the full breakdown: Who Must Comply with FSMA 204? and What Are the FSMA 204 Exemptions?

What is the FSMA 204 compliance deadline?

The FSMA 204 compliance deadline is July 20, 2028. The original deadline was January 20, 2026, but Congress directed the FDA not to enforce the rule before July 20, 2028, through the Continuing Appropriations Act.

The rule itself has not been repealed or altered. The core mandates remain intact. Industry guidance is clear: do not use the extension as a reason to delay preparation.

Major retailers including Walmart, Kroger, and Albertsons are already incorporating FSMA 204 traceability clauses into supplier contracts, with some requirements taking effect regardless of the FDA enforcement date.

Read the full timeline: When Does FSMA 204 Go Into Effect?

What does FSMA 204 NOT do?

Understanding the rule's boundaries is as important as understanding its requirements:

• Does NOT create new food safety requirements -- temperature controls, HACCP plans, and sanitation standards come from other FSMA rules
• Does NOT mandate specific technology -- paper, spreadsheets, or software are all acceptable
• Does NOT replace existing recordkeeping -- it adds traceability records on top of existing requirements
• Does NOT apply to non-FTL foods -- only foods on the Food Traceability List are covered
• Does NOT apply to USDA-regulated foods -- meat, poultry, and catfish (Siluriformes) are under USDA jurisdiction, not FDA

FSMA 204 is a recordkeeping rule, not a food safety rule. It tells you what to document, not how to handle food safely. The food safety obligations come from other FSMA regulations like the Preventive Controls Rule, Produce Safety Rule, and Sanitary Transportation Rule (Source: 21 CFR Part 1, Subpart S).

How does FSMA 204 apply to restaurants?

Restaurants have the lightest compliance burden of any entity in the FSMA 204 supply chain. Their only Critical Tracking Event is the Receiving CTE -- recording information when FTL foods are delivered (Source: 21 CFR 1.1345).

What restaurants must do:

1. Create and maintain a Traceability Plan
2. Record 8 Key Data Elements at every FTL food delivery (TLC, product description, quantity, previous source, receiving location, date, TLC source reference, reference document)
3. Retain records for 2 years
4. Produce records within 24 hours upon FDA request

What restaurants do NOT have to do:

• Assign new Traceability Lot Codes
• Track transformation (cooking food for direct consumer sale)
• Maintain shipping records
• Track harvesting, cooling, or initial packing events

Critical exception: Restaurant commissaries or central kitchens that transform food and ship to satellite locations are treated as food processors and face significantly more requirements.

What are the key exemptions?

Several categories of entities are fully exempt from FSMA 204:

• Businesses with annual food sales $250,000 or less
• Very small farms (annual food sales $25,000 or less)
• Small shell egg producers (fewer than 3,000 laying hens)
• Foods regulated by USDA (meat, poultry, catfish)
• Foods not on the FTL
• Foods that have undergone a kill step (lethality processing)
• Foods for government feeding programs, surplus donations, or research

Additional simplifications exist for farm-to-table purchases (180-day name-and-address records only) and ad hoc purchases between restaurants (simplified records, no full KDEs required).

Read the full details: What Are the FSMA 204 Exemptions?

What are the penalties for non-compliance?

The FDA enforces FSMA through inspections. Consequences for FSMA 204 non-compliance can include warning letters, injunctions, civil monetary penalties, and criminal prosecution in severe cases.

The FDA has indicated it will prioritize education and outreach during the initial enforcement period. However, companies should not assume leniency -- the 24-hour record production requirement means the FDA expects organized, accessible traceability records from day one.

Read the full breakdown: What Are the Penalties for FSMA 204 Non-Compliance?

How to prepare for FSMA 204 compliance

Even with the July 2028 deadline, preparation should begin now. The practical steps:

1. Audit your FTL exposure -- identify every food you handle that appears on the Food Traceability List
2. Evaluate your revenue -- determine whether each establishment exceeds the $250,000 threshold
3. Review incoming documentation -- check whether your suppliers already include Traceability Lot Codes on invoices and delivery documents
4. Draft your Traceability Plan -- document how you will maintain records, identify FTL foods, and designate a point of contact
5. Establish a recordkeeping system -- paper or digital, organized for 24-hour retrieval
6. Train receiving staff -- they need to know which foods require KDE documentation and where to find the data on delivery documents
7. Engage your suppliers -- confirm they will provide required traceability data by the compliance date

Connection to FDA's New Era of Smarter Food Safety

FSMA 204 is a key component of the FDA's broader New Era of Smarter Food Safety Blueprint, which envisions tech-enabled traceability throughout the food system, leveraging AI, IoT, blockchain, and other emerging technologies (Source: FDA New Era of Smarter Food Safety Blueprint).

The Blueprint signals that FSMA 204 is the beginning, not the end, of food traceability regulation. The FDA intends to expand requirements over time. The Food Traceability List will likely grow, and digital traceability standards will become more defined.

Key regulatory citations

| Citation | Subject | |----------|---------| | 21 CFR Part 1, Subpart S | Full regulatory text | | 21 CFR 1.1310 | Definitions | | 21 CFR 1.1315 | Traceability plan requirements | | 21 CFR 1.1320 | Traceability lot code assignment | | 21 CFR 1.1325 | Harvesting and cooling records | | 21 CFR 1.1330 | Initial packing records | | 21 CFR 1.1335 | First land-based receiver records | | 21 CFR 1.1340 | Shipping records | | 21 CFR 1.1345 | Receiving records | | 21 CFR 1.1350 | Transformation records | | 21 CFR 1.1455 | Record maintenance and availability |