What Is FSMA 204?
FSMA 204 is an FDA regulation that requires businesses handling certain high-risk foods to maintain detailed traceability records throughout the supply chain. Officially titled the "Final Rule on Requirements for Additional Traceability Records for Certain Foods," it implements Section 204(d) of the FDA Food Safety Modernization Act and is codified at 21 CFR Part 1, Subpart S. The compliance deadline is July 20, 2028.
What does the rule actually require?
The core requirement is straightforward: covered entities must maintain records containing Key Data Elements (KDEs) associated with specific Critical Tracking Events (CTEs) for foods on the Food Traceability List.
In plain terms, this means:
- Know which foods you handle are on the Food Traceability List (FTL)
- Record specific data points when certain supply chain events happen
- Keep those records for 2 years
- Produce records for FDA within 24 hours upon request
The rule does not tell you how to handle food safely. It tells you what to document so the FDA can trace food quickly during an outbreak investigation.
Why does FSMA 204 exist?
The rule exists because traceback investigations during foodborne illness outbreaks have historically taken weeks to months. The FDA wants to compress that timeline to hours or days (Source: 21 CFR Part 1, Subpart S).
The public health statistics driving the rule:
| Metric | Annual Figure | |--------|--------------| | Americans sickened by foodborne illness | 48 million | | Hospitalizations | 128,000 | | Deaths | 3,000 |
(Source: CDC estimates)
When an outbreak occurs, the FDA needs to identify the source and remove contaminated food from commerce. Without standardized traceability records, investigators rely on inconsistent paperwork across dozens of supply chain participants. FSMA 204 creates a uniform system that every handler must follow.
How did FSMA 204 become law?
The rule has a long legislative and regulatory history spanning over a decade:
| Date | Event | |------|-------| | January 4, 2011 | FSMA signed into law by President Obama | | February 2014 | FDA opens public docket (FDA-2014-N-0053) | | September 23, 2020 | Proposed rule published in Federal Register | | November 21, 2022 | Final rule published (87 FR 70910) | | January 20, 2026 | Original compliance date | | March 2025 | FDA announces intention to extend by 30 months | | 2025-2026 | Continuing Appropriations Act directs FDA not to enforce before July 2028 | | July 20, 2028 | Current compliance/enforcement date |
The 17-year gap between the law's passage and the current compliance date reflects the complexity of building a national food traceability system.
What does FSMA 204 NOT do?
Understanding what the rule does not require is critical for accurate compliance planning:
- Does NOT create food safety requirements -- temperature controls, HACCP plans, and sanitation standards come from other FSMA rules (Preventive Controls, Produce Safety, Sanitary Transportation)
- Does NOT mandate specific technology -- paper records, spreadsheets, and software are all acceptable
- Does NOT replace existing recordkeeping -- FSMA 204 adds to existing requirements, it does not consolidate them
- Does NOT apply to all foods -- only foods on the Food Traceability List are covered
- Does NOT apply to meat, poultry, or catfish -- these are under USDA jurisdiction
This distinction matters. FSMA 204 is a recordkeeping rule. The obligation it creates is paperwork (the Receiving CTE for restaurants, for example), not operational changes to how you store or cook food.
How does FSMA 204 relate to other FSMA rules?
FSMA 204 is one of several rules under the Food Safety Modernization Act. It is additive -- it layers traceability requirements on top of existing food safety regulations.
| FSMA Rule | What It Does | Relationship to FSMA 204 | |-----------|-------------|--------------------------| | Preventive Controls | Requires hazard analysis and preventive controls | FSMA 204 adds traceability on top | | Produce Safety Rule | Sets growing, harvesting, and packing standards | FSMA 204 adds traceability for FTL produce | | Sanitary Transportation Rule | Sets transport temperature standards | FSMA 204's shipping/receiving KDEs complement transport docs | | FSVP (Foreign Supplier Verification) | Requires importers to verify foreign supplier safety | FSMA 204 adds traceability documentation | | Intentional Adulteration Rule | Addresses food defense | Separate from but complementary to traceability |
What is the connection to New Era of Smarter Food Safety?
FSMA 204 is a key component of the FDA's New Era of Smarter Food Safety Blueprint, launched in 2020. The Blueprint envisions end-to-end digital traceability across the entire food system, leveraging technologies like IoT, AI, and blockchain (Source: FDA New Era of Smarter Food Safety Blueprint).
The Blueprint's Core Element 1 -- "Tech-Enabled Traceability" -- explicitly calls for standardized, interoperable traceability systems. FSMA 204 is the regulatory foundation for this vision.
The FDA has signaled that FSMA 204 is the beginning of food traceability regulation, not the end. The Food Traceability List will likely expand over time, and digital traceability standards will become more specific.
Who needs to comply?
The rule applies to any entity that manufactures, processes, packs, or holds foods on the FTL, including farms, processors, distributors, restaurants, and retailers. Businesses with annual food sales of $250,000 or less are fully exempt.
Each establishment is evaluated independently -- a restaurant chain's individual locations are assessed separately against the revenue threshold.
The compliance burden varies significantly by role in the supply chain. Restaurants have the lightest burden (only the Receiving CTE), while processors and manufacturers face the heaviest (Transformation CTE with input/output lot code linkage).