Skip to content
Search

Food Safety and Cold Chain Compliance

FSMA (signed 2011, phased implementation 2015–2026) is the most significant overhaul of US food safety law since 1938. It shifts FDA authority from responding to foodborne illness outbreaks to preventing them.

For warehousing and distribution, the relevant FSMA rules are:

FSMA RuleScopeKey Requirement
Preventive Controls for Human Food (21 CFR 117)Food storage and handlingHARPC plan, cGMP, PCQI
Sanitary Transportation (21 CFR 1.900)Transport of human and animal foodTemperature control, equipment cleanliness, communications
Foreign Supplier Verification (FSVP)ImportersVerify foreign suppliers meet US safety standards
FSMA 204 — TraceabilityHigh-Risk FoodsEnhanced lot-level traceability; Key Data Elements (KDEs); Critical Tracking Events (CTEs)

HARPC — Hazard Analysis and Risk-Based Preventive Controls

Section titled “HARPC — Hazard Analysis and Risk-Based Preventive Controls”

HARPC replaces the HACCP (Hazard Analysis and Critical Control Points) framework for most FDA-regulated facilities. HARPC is broader — it covers not just biological hazards but also chemical, physical, and radiological hazards.

HARPC components:

  1. Hazard analysis: Identify biological, chemical, physical, and radiological hazards reasonably likely to occur
  2. Preventive controls: Implement controls to significantly minimize or prevent hazards (process controls, allergen controls, sanitation controls, recall plan)
  3. Monitoring: Procedures to monitor effectiveness of controls
  4. Corrective action: Procedures for when controls are not properly implemented
  5. Verification: Activities to verify controls are implemented and effective (testing, auditing)
  6. Recall plan: Written plan for recalling food if preventive controls fail

PCQI — Preventive Controls Qualified Individual

Section titled “PCQI — Preventive Controls Qualified Individual”

A PCQI must be identified at each food facility. Requirements:

  • Successfully completed FSMA PCQI training recognized by FDA, OR
  • Equivalent industry experience or academic qualifications

The PCQI is responsible for preparing and reviewing the HARPC food safety plan, reviewing records, and overseeing validation activities. Outsourcing this role is possible (consultant or 3PL corporate resource) if properly documented.


cGMP — Current Good Manufacturing Practices (21 CFR 117, Subpart B)

Section titled “cGMP — Current Good Manufacturing Practices (21 CFR 117, Subpart B)”

cGMPs establish baseline sanitation and hygiene requirements for food handling facilities:

  • Personnel hygiene (handwashing, protective clothing, illness exclusion)
  • Facility cleanliness (pest control, sanitary design)
  • Equipment and utensil maintenance
  • Process and production controls
  • Storage and distribution (temperature, separation from non-food items)

For warehouse operations: primary cGMP concerns are pest control, temperature control, separation of allergens, and prevention of cross-contamination.


FSMA 204 — Food Traceability Rule (Effective January 2026)

Section titled “FSMA 204 — Food Traceability Rule (Effective January 2026)”

FSMA 204 establishes enhanced traceability requirements for foods on the Food Traceability List (FTL) — the High-Risk Foods list, which includes fresh produce (leafy greens, tomatoes, melons), shell eggs, nut butters, finfish, crustaceans, and soft/semi-soft cheese.

Key Data Elements (KDEs) and Critical Tracking Events (CTEs)

Section titled “Key Data Elements (KDEs) and Critical Tracking Events (CTEs)”

For each FTL food, companies must capture and maintain KDEs at each CTE:

CTEKDEs Required
ShippingTLC (Traceability Lot Code), quantity, product description, ship-to, ship date
ReceivingTLC, quantity, location, date received, source
TransformingInput TLC, output TLC, location, date

Traceability Lot Code (TLC): The unique identifier that must follow the product from the farm/processor through distribution. Not the same as a typical lot code — FSMA 204 requires the TLC to link back to the first land-based receiver (farm or packer) for produce.

Forward and backward traceability: Within 24 hours of a request from FDA, a company must be able to produce records showing one step back (who you received from) and one step forward (who you shipped to).

  • WMS must capture and maintain TLC data throughout the facility
  • ASN (856 EDI) from suppliers must include TLC
  • License plate / pallet label must carry TLC
  • Lot-controlled receiving, putaway, and shipping required
  • Records retention: 2 years

Before putting product in a new temperature-controlled space, a temperature mapping study is required:

  • Place data loggers at multiple points throughout the space (corners, center, near doors, near evaporator coils)
  • Run for minimum 24–72 hours at steady state
  • Verify the entire space maintains temperature within specification
  • Re-map after any significant facility modification (new door, relocated evaporator)
  • Data loggers (wired or wireless) in storage areas with alarm thresholds
  • NIST-traceable calibration of sensors (typically annually)
  • Alarm response procedures: who is notified, what product assessment is performed, disposition decision authority

Temperature excursions most often occur at:

  • Dock receipt: Cold product staged on untempered dock for extended time
  • Outbound staging: Product pulled from freezer/cooler and held in staging area while truck is loaded
  • Cross-dock transfer: Brief exposure during transfer between conditioned trailers

Mitigation: dock door seal integrity, fast-load protocols, insulated staging carts, temperature recording at receipt and release.


SchemeGoverning BodyCommon In
SQF (Safe Quality Food)SQFIGrocery retailers, food service
BRC Global StandardsBRCGSUK/European retailers; increasingly US
AIB InternationalAIBTraditional grocery/baking industry
FSSC 22000FSSCGlobal, ISO-aligned

All four are GFSI (Global Food Safety Initiative) benchmarked — meeting one is generally recognized across retail customers as equivalent.

Practical implication for 3PLs: Retail food customers commonly require SQF or BRC certification as a contract prerequisite for food-grade DC services.

Standard content

Continue reading with Standard

This article is part of our Standard library — written from real projects, not generic explainers.

  • Full Standard tier vault — automation, intralogistics, supply chain, more
  • Practitioner-level guidance from real projects
  • Unlimited AI questions across the Standard corpus

$19/mo Standard · $25/mo Pro · cancel anytime