What Is FSMA 204 and Does Your Business Need to Comply?

What Is FSMA 204?

The FDA Food Safety Modernization Act (FSMA) Rule 204, formally known as the Food Traceability Rule, is one of the most significant food safety regulations in decades. It requires businesses that manufacture, process, pack, or hold foods on the FDA's Food Traceability List (FTL) to maintain detailed traceability records.

The goal is straightforward: in the event of a foodborne illness outbreak, the FDA needs to trace contaminated food back to its source quickly. Manual paper trails and siloed data make that nearly impossible. FSMA 204 is designed to fix that.

Who Needs to Comply?

The rule applies to any business that manufactures, processes, packs, or holds foods on the Food Traceability List, unless a specific exemption applies.

Foods on the FDA Traceability List include:

• Fresh leafy greens (including bagged salads)
• Fresh herbs (basil, cilantro, parsley)
• Fresh tomatoes, peppers, cucumbers
• Fresh melons (cantaloupe, honeydew)
• Tropical tree fruits (mango, papaya, guava)
• Shell eggs
• Nut butters
• Fresh-cut fruits and vegetables
• Finfish (including certain smoked fish)
• Crustaceans (shrimp, crab, lobster)
• Molluscan shellfish

Exemptions that may apply:

• Very small businesses (average annual food sales under $1 million over the previous 3 years)
• Farms selling directly to consumers or to restaurants and retailers in the same state or within 275 miles
• Retail food establishments that are also farms
• Restaurants
• Certain fishing vessels

This is not an exhaustive list. The exemption criteria are specific, and the details matter.

What Records Do You Need to Keep?

FSMA 204 requires what the FDA calls "key data elements," specific pieces of information that must be captured at each Critical Tracking Event (CTE).

Critical Tracking Events include:

• Growing (for farms)
• Receiving
• Transforming (processing or changing the form of the food)
• Creating (producing a food from ingredients on the list)
• Shipping

For each CTE, you must record:

• The traceability lot code for the food
• The quantity and unit of measure
• Location identifier (where the food was received or shipped)
• Date of the CTE
• Reference document type and number (purchase order, bill of lading, etc.)

Records must be maintained for 2 years and must be produceable in an electronic sortable spreadsheet within 24 hours of an FDA request.

The 24-Hour Rule

This is the part that catches most businesses off guard. If the FDA requests your traceability records, you have 24 hours to produce them in an electronic sortable spreadsheet format. Paper logs, handwritten batch records, and disconnected spreadsheets across multiple computers won't cut it.

The practical implication: your traceability system needs to be centralized, digital, and searchable, not just technically compliant on paper.

Common Compliance Gaps

Based on working with food manufacturers, these are the most common gaps:

1. Lot code traceability breaks down at receiving. Manufacturers often track their own lot codes but don't link incoming ingredient lot codes to finished product lot codes. FSMA 204 requires end-to-end linkage.

2. Transformation records are missing. When raw ingredients become finished product, that transformation must be documented with specific data elements. Many manufacturers skip this step entirely.

3. Records aren't produceable in 24 hours. Even businesses with good record-keeping often store records in ways that make rapid compilation impossible: paper binders, disconnected spreadsheets, files across multiple drives.

4. Smaller suppliers aren't compliant. If your ingredient suppliers aren't maintaining their own FSMA 204 records, your traceability chain breaks. This is a supply chain risk that manufacturers often overlook.

What You Should Do Right Now

Step 1: Determine if you're required to comply. Check whether any foods you handle appear on the FDA Traceability List and whether any exemptions apply. Our FSMA Compliance Checker is a free 6-question tool that gives you an initial assessment.

Step 2: Audit your current records. Can you produce all required records within 24 hours in a sortable electronic format? Be honest. If the answer is no, that's your starting point.

Step 3: Map your Critical Tracking Events. For every food on the traceability list that moves through your facility, identify each CTE and verify you're capturing all required data elements.

Step 4: Evaluate your systems. Are your records stored in a way that allows rapid, complete retrieval? Manual systems may need to be replaced or supplemented with digital tools.

Step 5: Get your supply chain in order. Confirm that your ingredient suppliers are also maintaining required records; your compliance depends on theirs.

The Bigger Picture

FSMA 204 compliance isn't just about avoiding FDA enforcement. Proper traceability systems protect your business in the event of a recall, demonstrate due diligence to retail and foodservice customers, and reduce the operational chaos that comes with responding to a food safety event under pressure.

The businesses that invest in compliant traceability systems now will be in a far stronger position, competitively and operationally, than those that scramble to catch up.