What Must Restaurants Do to Comply with FSMA 204?

Restaurants have the lightest compliance burden under FSMA 204. The only requirement is the Receiving CTE — recording 8 data points from delivery invoices when Food Traceability List (FTL) foods arrive. Restaurants do not need to assign lot codes, track cooking, or maintain shipping records. The compliance deadline is July 20, 2028.

Does FSMA 204 apply to my restaurant?

Yes, if your annual food sales exceed $250,000 (3-year rolling average, inflation-adjusted to 2020 dollars). A restaurant generating approximately $685/day in food sales crosses this threshold — capturing the vast majority of commercial restaurant operations (Source: 21 CFR Part 1, Subpart S).

Restaurants with annual food sales of $250,000 or less are fully exempt from the rule.

What foods trigger FSMA 204 at restaurants?

Nearly every restaurant handles multiple FTL foods daily. Common FTL items received by restaurants include:

| Category | Common Items | |----------|-------------| | Leafy greens | Romaine, spinach, mixed greens, kale, arugula | | Fresh produce | Tomatoes, cucumbers, peppers, melons | | Herbs | Basil, cilantro, parsley | | Eggs | Shell eggs (domesticated chicken) | | Finfish | Salmon, tuna, cod, snapper, grouper, trout, mahi mahi | | Crustaceans | Shrimp, crab, lobster | | Soft cheeses | Mozzarella, feta, ricotta, cream cheese, brie | | Other | Fresh-cut fruits/vegetables, sprouts, nut butters, smoked fish, tropical fruits, bivalves, ready-to-eat deli salads |

How do restaurants comply? Step-by-step

Step 1: Create a traceability plan

A written document describing:

• How you maintain traceability records (paper, digital, or both)
• How you identify which foods you receive are on the Food Traceability List
• A designated point of contact (name, title, phone number)

The FDA provides fictional restaurant example traceability plans in multiple languages. The National Restaurant Association also publishes guidance (Source: 21 CFR 1.1315).

Step 2: Identify your FTL foods

Review every product you receive against the Food Traceability List. Flag items on your order guides, purchasing system, or supplier catalogs. Most restaurants will find 10-30 products that require tracking.

Step 3: Record 8 data points at every FTL delivery

For each delivery of FTL food, record these 8 Receiving CTE Key Data Elements (Source: 21 CFR 1.1345):

| # | What to Record | Where to Find It | |---|---------------|-----------------| | 1 | Traceability Lot Code (TLC) | Case labels, delivery invoices, packing slips | | 2 | Product description | Product name, brand, size from invoice | | 3 | Quantity and unit of measure | Count or weigh at receiving | | 4 | Previous source name and location | Distributor/supplier info from invoice | | 5 | Your receiving location | Your restaurant name and address | | 6 | Date received | Date of delivery | | 7 | TLC source location or reference | On delivery documents (packer/processor info) | | 8 | Reference document type and number | Invoice number, BOL number, PO number |

Key insight: Items 4, 5, and 6 are already known — your regular supplier, your restaurant, and today's date. Items 1, 2, 3, 7, and 8 appear on the delivery invoice or case labels. The practical work is keeping delivery documentation organized and accessible.

Step 4: Keep records for 2 years

All receiving records must be retained for 24 months from the date created. Records may be paper, electronic, or true copies (Source: 21 CFR 1.1455).

Step 5: Produce records within 24 hours

When FDA requests records — particularly during an outbreak investigation — you must provide them within 24 hours (or a reasonable agreed-upon time). Restaurants with annual sales exceeding $1,000,000 must provide records in electronic sortable spreadsheet format (Source: 21 CFR 1.1455).

What restaurants do NOT have to do

| Requirement | Required for Restaurants? | |------------|--------------------------| | Assign new Traceability Lot Codes | No | | Track transformation (cooking food) | No — food sold directly to consumers is exempt | | Maintain shipping records | No — for direct consumer service | | Create farm maps | No | | Track harvesting events | No | | Track cooling events | No | | Track initial packing | No | | Install temperature sensors for FSMA 204 | No — the Receiving CTE is paperwork, not sensor data |

What about multi-unit restaurants and commissaries?

This is a critical distinction. If a restaurant operates a commissary or central kitchen that transforms food and ships it to satellite locations, the commissary is treated as a food processor under FSMA 204 (Source: 21 CFR 1.1350).

The commissary must:

1. Maintain Receiving KDEs for FTL foods received
2. Track Transformation KDEs — link input TLCs to output TLCs, assign new TLCs
3. Maintain Shipping KDEs for each shipment to satellite locations
4. Each satellite location must maintain Receiving KDEs for food from the commissary

The $250,000 threshold applies per individual restaurant location, not aggregated across a chain or franchise.

Does the farm-to-table exemption apply?

If a restaurant purchases food directly from a farm that grows and sells the food:

• You only need to maintain the farm's name and address for 180 days
• Full receiving KDEs are not required
• This applies only when the farm sells and ships directly to you

This simplification covers farmers market purchases, direct farm deliveries, and CSA programs (Source: 21 CFR Part 1, Subpart S).

What about ad hoc purchases?

When a restaurant makes a one-off purchase from another restaurant or retail establishment (outside normal supply chains), simplified requirements apply:

• Record the product name, date of purchase, and name and address of seller
• Full KDEs are not required

Common questions

"I cook everything — am I still covered?"

Yes. The Receiving CTE applies regardless of what you do with the food afterward. You must record KDEs when FTL foods arrive, even if you immediately cook them. Cooking food for direct consumer sale is NOT a tracked transformation — but receiving the raw ingredients IS tracked.

"My distributor handles all the paperwork — is that enough?"

Partially. Your distributor can maintain records on your behalf (this is allowed under 21 CFR 1.1455), but you remain legally responsible. You should have a clear written agreement with your distributor about what records they maintain for you and ensure those records are accessible within 24 hours.

"I only buy frozen fish — is that covered?"

Yes. Unlike produce (where only fresh forms are covered), seafood on the FTL includes fresh, frozen, and previously frozen forms. Frozen fish is covered.

"What if my supplier doesn't provide a TLC?"

Restaurants are exempt from assigning TLCs when they receive food without one (Source: 21 CFR 1.1345(b)). Record as much information as possible and note the absence. By the July 2028 compliance date, suppliers should be providing TLCs on delivery documents.

"Do I need special software?"

The rule does not mandate specific technology. Paper records are technically acceptable. However, the 24-hour response requirement and electronic sortable spreadsheet obligation (for restaurants over $1M annual sales) make digital record-keeping highly practical. The challenge with paper is not recording the information — it is finding it quickly when the FDA calls.

"What happens if I don't comply?"

FSMA is enforced through FDA inspections. Consequences can include warning letters, injunctions, civil monetary penalties, and criminal prosecution in severe cases. The FDA has indicated it will prioritize education initially, but enforcement will follow.

"What is the actual cost of compliance?"

The FDA estimated relatively low per-entity costs for restaurants because the Receiving CTE is the simplest CTE. The practical cost is staff time to organize delivery documentation and maintain records in a retrievable format. The largest cost driver is the initial setup — creating a traceability plan, training staff, and implementing a record-keeping system.