The main FSMA rules, who they cover, what a food safety plan and PCQI are, and how training, sanitation and records work in daily operations.
Before FSMA, FDA’s food safety work focused largely on reacting to contamination after it happened. FSMA gave FDA new powers and set preventive requirements across the supply chain, from farms to processors, warehouses, transporters and importers. It builds on HACCP concepts but applies them more broadly, including to hazards such as allergens, radiological hazards and economically motivated adulteration where relevant. See our HACCP guide for the underlying principles.
To record clock-ins, breaks and overtime automatically, see EZTime time and attendance software.
| Rule | Who it mainly covers | Core requirement |
|---|---|---|
| Preventive Controls for Human Food | Facilities that manufacture, process, pack or hold human food and must register with FDA | Current good manufacturing practices, a hazard analysis and a written food safety plan with risk-based preventive controls |
| Preventive Controls for Animal Food | Facilities producing animal food | Similar requirements for animal food |
| Produce Safety | Farms growing covered produce | Standards for water, soil amendments, worker health and hygiene, equipment and buildings |
| Foreign Supplier Verification Program | Importers | Verify that foreign suppliers meet U.S. safety standards |
| Sanitary Transportation | Shippers, loaders, carriers and receivers | Prevent contamination during transport, including temperature control |
| Intentional Adulteration | Larger food facilities | Food defense plans to protect vulnerable points from deliberate contamination |
| Food Traceability | Businesses handling foods on FDA’s Food Traceability List | Keep key data elements for critical tracking events |
Each rule has exemptions and modified requirements, for example for very small businesses and certain farms. The traceability rule’s compliance date has been extended by FDA, so check the current date on FDA’s website before planning.
Under the Preventive Controls for Human Food rule, covered facilities need a written food safety plan that includes:
The plan must be prepared or overseen by a Preventive Controls Qualified Individual (PCQI), someone who has completed training under a standardized curriculum recognized by FDA or is otherwise qualified through job experience.
FSMA’s current good manufacturing practice rules require that individuals who manufacture, process, pack or hold food be qualified to perform their assigned duties, with education, training or experience, and that they receive training in the principles of food hygiene and food safety, including the importance of employee health and personal hygiene. Facilities must keep records of that training.
Training time is working time and must be paid for non-exempt employees.
Most FSMA requirements end up as tasks done by people on shifts: cleaning and sanitizing equipment in a set order, checking temperatures, verifying allergen changeovers, inspecting incoming loads and recording results. Inspectors look at whether the records are complete and believable.
| Task | Who usually does it | Record |
|---|---|---|
| Pre-operational sanitation check | Sanitation crew or supervisor | Checklist with time and signature |
| Allergen changeover | Line lead | Cleaning verification and label check |
| Cooking or cooling temperature checks | Cook or line operator | Temperature log |
| Receiving inspection | Receiving clerk | Temperature and condition of load |
| Record review | Supervisor or QA | Signed review |
Food safety controls fail when shifts are understaffed. If the sanitation crew is short, steps get skipped; if the only trained person on a line calls out, checks are missed. Build food safety roles into your staffing model: name who is responsible for each control on every shift, cross-train backups and schedule sanitation with enough time between runs. Watch for fatigue on long shifts, which raises the risk of errors.
Each of these is a people and process problem more than a technical one. Clear roles, realistic schedules and simple, time-stamped records fix most of them. Run a short internal audit every quarter that looks at the records the way an inspector would, and fix the weakest area first.
EZTime supports the people side of FSMA. Sanitation, monitoring and verification checks run as recurring tasks with time stamps and photo proof, training records and certificates live in each digital employee file, and schedules show who is responsible for each control on every shift. EZTime does not replace your food safety plan or regulatory advice.
The FDA Food Safety Modernization Act, signed into law in 2011.
Generally, facilities required to register with FDA that manufacture, process, pack or hold human food, unless an exemption applies.
A Preventive Controls Qualified Individual: a person qualified through FDA-recognized training or experience to prepare or oversee a food safety plan.
Yes. Employees must be qualified for their duties and trained in food hygiene and food safety, and facilities must keep training records.
No. FSMA’s preventive controls build on HACCP concepts but cover a wider range of hazards and controls.
EZTime runs sanitation and monitoring as tasks with time stamps and photos.