FSMA, Explained: Your Questions Answered
Most companies don't need to know all of FSMA — they need to know which parts apply to them. That's what this page is for.
Key Takeaways
- FSMA (2011) made U.S. food safety prevention-based instead of reactive.
- Seven foundational rules cover manufacturing, produce, imports, transport, and food defense.
- New FDA powers — mandatory recall, registration suspension, biennial renewal, stronger import tools.
- FSVP is the import piece; preventive controls is the manufacturing piece.
- Food Traceability Rule (204) compliance is now July 20, 2028 (extended from Jan 2026).
- Which rules apply depends on your role — importer, manufacturer, grower, or transporter.
The Seven Foundational Rules
| Rule | Who it mainly affects | Cite |
|---|---|---|
| Preventive Controls — Human Food | Food manufacturers/processors | 21 CFR 117 |
| Preventive Controls — Animal Food | Animal/pet food makers | 21 CFR 507 |
| Produce Safety Rule | Farms growing covered produce | 21 CFR 112 |
| Foreign Supplier Verification (FSVP) | U.S. food importers | Part 1, Subpart L |
| Accredited Third-Party Certification | Auditors & certified foreign suppliers | Part 1, Subpart M |
| Sanitary Transportation | Shippers, carriers, receivers | Part 1, Subpart O |
| Intentional Adulteration (food defense) | Larger facilities | 21 CFR 121 |
What FSMA Gave FDA
Enforcement powers
- Mandatory recall — order a recall when a company won't act
- Registration suspension — halt a facility when food could cause serious harm (SAHCODHA)
- Expanded records access during investigations
Import & registration tools
- Biennial registration renewal now required
- FSVP and authority to require import certifications
- Refuse entry if a foreign facility blocks inspection
Food Traceability Rule: Now July 2028
The most significant recent FSMA development is a timeline change, not a substance change:
Which FSMA Rules Apply to You
If you import
Facility registration relies on your suppliers being registered, and you'll generally need an FSVP — unless the food follows seafood/juice HACCP.
If you manufacture
You register the facility and generally need a preventive-controls food safety plan. Canned/acidified foods add LACF rules.
If you grow or ship
Produce farms may fall under the Produce Safety Rule; shippers and carriers under Sanitary Transportation. Traceability may apply to listed foods.
Mapping Your FSMA Obligations
Identify your role
Importer, manufacturer, grower, warehouse, or transporter — each triggers different rules.
Confirm registration
If you make or hold food, confirm the facility is registered and renewed biennially.
Check preventive controls
Manufacturers generally need a written food safety plan, unless a qualified-facility exemption applies.
Check import obligations
Importers generally need an FSVP per supplier and food (seafood/juice follow HACCP instead).
Check the other rules
See whether produce safety, sanitary transport, intentional adulteration, or traceability apply.
Document & maintain
Put programs and records in place and keep them current — FSMA is ongoing, not one-time.
Figure Out Exactly What FSMA Requires of You
FDA Registration Assistance handles the FSMA pieces most food businesses need — facility registration and renewal, U.S. Agent, FSVP, and preventive-controls support — and helps map which rules actually apply to your operation.
Contact us at info@fdaregistrationassistance.com or call +1 (928) 275-8333. Trusted by food companies across 135+ countries, with 15+ years of experience.
Frequently Asked Questions
1. What is FSMA?
The Food Safety Modernization Act (2011), the biggest overhaul of U.S. food safety law in decades. It shifted FDA from reacting to contamination to preventing it, and applies to domestic and foreign businesses that make or supply food for the U.S.
2. What are the main FSMA rules?
Seven foundational rules: Preventive Controls for Human Food (21 CFR 117) and Animal Food (507), Produce Safety (112), FSVP (Part 1 Subpart L), Accredited Third-Party Certification (Subpart M), Sanitary Transportation (Subpart O), and Intentional Adulteration (121) — plus the Food Traceability Rule (Section 204).
3. Who must comply with FSMA?
Most of the food supply chain — manufacturers, packers, warehouses, importers, growers, transporters — for food intended for the U.S. Which rules apply depends on your role and products; foreign businesses are covered too.
4. What new powers did FSMA give FDA?
Mandatory recall authority, the power to suspend a facility's registration when food could cause serious harm, mandatory biennial renewal, expanded records access, and stronger import tools including FSVP and import certifications.
5. What are "preventive controls"?
A covered facility must have a written food safety plan — hazard analysis, preventive controls, monitoring, corrective actions, verification, and a supply-chain program where relevant. Some facilities qualify for modified "qualified facility" requirements.
6. How does FSVP fit into FSMA?
FSVP is the import piece — the U.S. importer verifies foreign suppliers meet U.S. safety standards. It's separate from facility registration and has its own exemptions (seafood and juice under HACCP). See our FSVP guide.
7. What is the Food Traceability Rule (204)?
Section 204 adds enhanced recordkeeping for foods on FDA's Food Traceability List — traceability lot codes, key data elements at critical tracking events, and a written traceability plan — to speed recalls and outbreak response.
8. When is the traceability compliance date?
Extended from January 20, 2026 to July 20, 2028. FDA proposed the 30-month extension in 2025 and Congress directed FDA not to enforce before that date. The rule's substance is unchanged — only the date moved — so keep building toward it.
9. Do I need to register my facility under FSMA?
If you manufacture, process, pack, or hold food for the U.S., yes — and FSMA made renewal biennial and gave FDA suspension authority. Foreign facilities also need a U.S. Agent. See our registration guide.
10. Can FDA recall my product under FSMA?
Yes — FSMA gave FDA mandatory recall authority. FDA usually requests a voluntary recall first, but can order one if a company won't act and the food could cause serious harm. A major shift from the pre-FSMA framework.
11. Do small businesses have to comply?
Generally yes, though several rules include modified requirements or exemptions for qualified facilities, very small businesses, and very small importers. "Exempt" rarely means "nothing to do," so confirm where you land.
12. Does FSMA apply to alcohol facilities?
They must register and meet some FSMA obligations, but under FSMA section 116 they're exempt from preventive controls and sanitary transportation for alcohol. See do alcohol brands need FDA registration.
13. What happens if I'm not compliant?
Consequences range from inspections and warning letters to import holds, refused entries, registration suspension, and recalls. FSMA is heavily enforced at import, so gaps often surface at the border or during inspection.
14. How does FDA Registration Assistance help?
It handles the FSMA pieces most food businesses need — registration and renewal, U.S. Agent, FSVP, and preventive-controls support — and helps map which rules apply, for companies across 135+ countries. Contact info@fdaregistrationassistance.com or +1 (928) 275-8333.
