If you manufacture, process, pack, or hold food for sale in the United States, the FDA has a checklist of requirements you must meet -- and the penalties for non-compliance range from warning letters to criminal prosecution.
The challenge for small businesses is that these requirements are scattered across multiple federal regulations, FSMA rules, and guidance documents. This guide consolidates everything into one actionable checklist, updated for 2026.
Why this matters now: In the first quarter of 2026 alone, the FDA issued 66 food-related enforcement actions -- including Class I recalls that can shut down a small business overnight. Undeclared allergens and contamination were the top triggers.
1. FDA Facility Registration
Every domestic facility that manufactures, processes, packs, or holds food for human or animal consumption must be registered with the FDA. This includes your home kitchen if you sell across state lines.
Facility Registration Checklist
- Register your facility via FDA's Unified Registration and Listing System (FURLS)
- Renew registration during the biennial renewal period (Oct 1 - Dec 31 of even-numbered years)
- Update registration within 60 days of any changes to facility name, address, or operations
- Designate a U.S. agent if your facility is outside the United States
- Keep your FDA Establishment Identifier (FEI) number on file
Penalty: Operating an unregistered food facility can result in a warning letter, seizure of products, an injunction, or criminal prosecution under 21 U.S.C. 331.
2. FSMA Preventive Controls (21 CFR Part 117)
The Food Safety Modernization Act (FSMA) is the single biggest compliance obligation for food businesses. The Preventive Controls for Human Food rule (21 CFR Part 117) requires a written food safety plan, and the FDA actively inspects for it.
Who must comply?
All facilities required to register with the FDA under Section 415 of the FD&C Act, unless you qualify for one of the exemptions below.
Small business exemptions and modified requirements:
| Business Size | FSMA Status | Annual Food Sales Threshold |
|---|---|---|
| Very small business | Modified requirements (no food safety plan, but must document other food safety procedures) | Less than $1 million average annual sales (adjusted for inflation -- $1.24M in 2026) |
| Small business | Full compliance required (with extended timelines) | Less than 500 employees |
| Qualified facility | Exempt from preventive controls, but must submit attestation | Under $1M total food sales AND majority of sales direct to consumers or retailers in-state |
FSMA Food Safety Plan Checklist
- Conduct a hazard analysis identifying biological, chemical, physical, and radiological hazards
- Establish preventive controls for each identified hazard
- Define monitoring procedures for each preventive control
- Establish corrective action procedures when controls are not met
- Create verification procedures (including environmental monitoring, supplier verification)
- Maintain a written recall plan
- Designate a Preventive Controls Qualified Individual (PCQI) -- must complete FDA-recognized training
- Document everything: the plan, monitoring records, corrective actions, and verification activities
3. Current Good Manufacturing Practices (cGMP)
21 CFR Part 117, Subpart B covers cGMP requirements. These are the baseline hygiene and operational standards every food facility must meet, regardless of size.
cGMP Checklist
- Personnel: trained in food hygiene and safety; documented training records
- Plant and grounds: maintained in sanitary condition; adequate drainage, lighting, ventilation
- Sanitary operations: documented cleaning/sanitizing schedules for all food-contact surfaces
- Sanitary facilities: adequate handwashing stations with hot water, soap, and single-use towels
- Equipment and utensils: food-grade materials, properly maintained and cleaned
- Process controls: batch records, temperature monitoring, time controls
- Warehousing and distribution: proper storage temperatures, FIFO rotation, pest control
4. Food Labeling Requirements
Labeling violations are one of the most common triggers for FDA enforcement. In Q1 2026, multiple small businesses received Class I and Class II recalls for labeling errors -- particularly undeclared allergens and inaccurate nutrition facts.
Labeling Compliance Checklist
- Statement of identity (common name of the food)
- Net quantity of contents (by weight, measure, or count)
- Nutrition Facts panel (updated format per 21 CFR 101.9 -- includes added sugars, updated serving sizes)
- Ingredient list in descending order of predominance
- Allergen declaration (FALCPA): milk, eggs, fish, shellfish, tree nuts, peanuts, wheat, soybeans, sesame
- Name and place of business of the manufacturer, packer, or distributor
- Country of origin for imported foods
- Any required warning statements (e.g., unpasteurized juice warnings)
Real enforcement example: In March 2026, Uncle Ray's LLC (Detroit, MI) faced a Class II recall for understated sodium content and undeclared monosodium glutamate. Juniper Granola, LLC (Rochester, NY) received a Class I recall for undeclared milk and soy. Both were small businesses.
5. Allergen Controls
Undeclared allergens are the #1 reason for FDA food recalls. Under FALCPA (and the 2023 FASTER Act adding sesame), you must declare the presence of the nine major allergens.
Allergen Control Checklist
- Declare all 9 major allergens: milk, eggs, fish, crustacean shellfish, tree nuts, peanuts, wheat, soybeans, sesame
- Use "Contains" statement or parenthetical declaration in ingredient list
- Implement allergen cross-contact controls in production
- Verify supplier ingredient lists and certificates of analysis
- Review labels whenever you change suppliers, formulations, or production lines
- Train all production staff on allergen awareness and cross-contact prevention
6. Supplier Verification (FSVP)
If you import any food ingredients, the Foreign Supplier Verification Program (FSVP) under 21 CFR Part 1, Subpart L applies to you. This is separate from your food safety plan.
FSVP Checklist
- Identify hazards associated with each imported food
- Evaluate each foreign supplier's performance and food safety practices
- Conduct supplier verification activities (audits, sampling, or review of supplier's food safety records)
- Designate a qualified individual responsible for FSVP activities
- Maintain records for at least 2 years
- Re-evaluate suppliers when you become aware of new hazards or supplier issues
7. Traceability (FSMA Section 204)
The FDA's Food Traceability Rule (21 CFR Part 1, Subpart S) took effect January 2026. It requires additional traceability records for foods on the Food Traceability List (FTL) -- including fresh produce, certain cheeses, shell eggs, and nut butters.
Traceability Checklist
- Determine whether your products are on the Food Traceability List
- Assign traceability lot codes to all FTL foods
- Maintain Key Data Elements (KDEs) at each Critical Tracking Event (CTE)
- Keep records in electronic sortable format for 2 years
- Be prepared to provide records to FDA within 24 hours of request
8. Recalls and Reportable Food
You must have a written recall plan as part of your food safety plan. Additionally, the Reportable Food Registry (RFR) requires you to report when there is a reasonable probability that your food will cause serious adverse health consequences.
Recall Readiness Checklist
- Written recall plan with assigned roles and responsibilities
- Procedure for notifying direct consignees within 24 hours
- System to trace affected products through distribution chain
- RFR submission capability (via FDA Safety Reporting Portal)
- Consumer notification templates pre-drafted
- Annual recall drill or tabletop exercise
9. Prior Notice for Imported Food
If you import food, you must file prior notice with the FDA before the food arrives at the U.S. port of entry. Filing windows vary: 15 days advance for ocean freight, 4 hours for truck, 4 hours for rail, and up to the time of arrival for air.
10. State-Level Requirements
Federal FDA requirements are the floor, not the ceiling. Many states impose additional requirements:
- California: Proposition 65 warnings for foods containing listed chemicals
- New York: Article 20-C food processing licenses, state-specific labeling for certain products
- Texas: Texas Cottage Food Law allows limited home production but restricts product types and sales channels
- Florida: Additional permitting for acidified foods, state inspection requirements
Check with your state's Department of Agriculture or Health for requirements beyond the federal baseline.
What Happens If You Don't Comply?
| Enforcement Action | What It Means | Typical Trigger |
|---|---|---|
| Warning Letter | Public letter requiring corrective action within 15 business days | cGMP violations, missing food safety plan |
| Import Alert | Detention without physical examination of imported foods | Foreign supplier violations |
| Recall (Voluntary/Mandatory) | Product removal from market; public notification | Undeclared allergens, contamination |
| Seizure | FDA takes possession of adulterated/misbranded food | Repeated violations after warning letter |
| Injunction | Court order to stop operations until compliance is achieved | Severe or persistent violations |
| Criminal Prosecution | Misdemeanor (up to 1 year) or felony (up to 3 years) and fines up to $10,000 per violation | Intent to defraud, repeated offenses |
Stop tracking FDA changes manually
Get weekly compliance action items tailored to your business -- with deadlines and plain-English instructions.
Get weekly compliance action items -- free for 7 days →