FSMA 204 Food Traceability: What Food Businesses Need to Know Before the 2028 Enforcement Date

The FDA’s Food Traceability Rule, also known as FSMA Section 204 or FSMA 204, is one of the most important food safety recordkeeping rules for companies that handle higher-risk foods.

The rule is designed to help the FDA and industry trace certain foods more quickly during outbreaks, recalls, and other food safety events. In practical terms, FSMA 204 requires companies that manufacture, process, pack, or hold foods on the Food Traceability List to maintain additional records that connect products, lots, suppliers, customers, and key supply chain events.

Although the original compliance date was January 20, 2026, the FDA has stated that enforcement will not begin before July 20, 2028, following congressional direction. That extension gives companies more time, but it should not be viewed as a reason to pause. For many businesses, FSMA 204 compliance will require supplier alignment, system updates, staff training, traceability plan development, and mock traceback testing.

The companies that use the extra time well will be in a much stronger position when enforcement begins.

What is FSMA 204?

FSMA 204 is part of the FDA Food Safety Modernization Act. It requires additional traceability records for certain foods that FDA has identified as needing enhanced tracking during foodborne illness investigations.

The rule focuses on two core concepts:

  • Critical Tracking Events (CTEs): key points in the supply chain where traceability information must be captured.
  • Key Data Elements (KDEs): the specific pieces of information that must be recorded at those events.

Examples of Critical Tracking Events include harvesting, cooling before initial packing, initial packing, first land-based receiving of seafood, shipping, receiving, and transformation.

Examples of Key Data Elements may include product description, quantity, unit of measure, location information, dates, reference document numbers, traceability lot codes, and other event-specific information.

The goal is simple: when a food safety issue occurs, companies and regulators should be able to identify where affected product came from, where it went, and which lots may be involved as quickly as possible.

What is the Food Traceability List?

The Food Traceability List, or FTL, is the FDA’s list of foods covered by the additional FSMA 204 recordkeeping requirements.

The list includes foods such as:

  • Cheeses other than hard cheeses
  • Shell eggs
  • Nut butters
  • Fresh cucumbers
  • Fresh herbs
  • Fresh leafy greens
  • Fresh-cut leafy greens
  • Fresh melons
  • Fresh peppers
  • Fresh sprouts
  • Fresh tomatoes
  • Fresh tropical tree fruits
  • Fresh-cut fruits
  • Fresh-cut vegetables other than leafy greens
  • Finfish
  • Smoked finfish
  • Crustaceans
  • Bivalve molluscan shellfish
  • Refrigerated ready-to-eat deli salads

The rule can also apply to foods that contain an ingredient from the Food Traceability List, if that listed ingredient remains in the same form. For example, a ready-to-eat salad that contains fresh leafy greens may be covered because the listed food remains recognizable in the final product.

Because product coverage can depend on food type, form, use, and exemptions, companies should review the FDA’s official Food Traceability List and assess their own products carefully.

Who is impacted?

FSMA 204 can affect businesses across the food supply chain. The rule applies to persons who manufacture, process, pack, or hold foods on the Food Traceability List, unless an exemption applies.

Impacted businesses may include:

  • Farms and harvesters
  • Produce coolers and packers
  • Fresh-cut processors
  • Food manufacturers
  • Seafood processors and receivers
  • Soft cheese and dairy operations
  • Nut butter manufacturers
  • Shell egg handlers
  • Refrigerated deli salad manufacturers
  • Repackers and relabelers
  • Distributors and wholesalers
  • Cold storage facilities
  • Importers
  • Retailers
  • Restaurants and foodservice operators

Some businesses may only handle covered foods occasionally. Others may handle a mix of covered and non-covered products. That is one reason FSMA 204 preparation should begin with a product-by-product assessment.

Companies should also evaluate whether any exemptions apply. Exemptions may relate to business size, direct-to-consumer sales, certain produce or shellfish programs, foods that receive a kill step, foods changed so they are no longer on the Food Traceability List, or other rule-specific criteria. Small entities can find exemptions listed in the Small Entity Compliance Guide.

Exemptions should be documented rather than assumed.

How Companies Can Prepare for Compliance

FSMA 204 compliance is not just a recordkeeping exercise. It is a supply chain data project, an operations project, and a food safety project.

A practical readiness process should include the following steps.

1. Identify covered products

Start by reviewing all raw materials, ingredients, finished goods, repacked items, private-label items, and fresh-prepared products. Determine which products are on the Food Traceability List and which products contain listed foods as ingredients.

This assessment should include product form, intended use, suppliers, and whether the listed food remains in the same form in the finished product.

2. Review exemptions

If a company believes a product, supplier, facility, or activity is exempt, that rationale should be documented. Exemption decisions should be reviewed by qualified regulatory or legal personnel.

3. Map Critical Tracking Events

For each covered product, identify where Critical Tracking Events occur. A produce company may need to consider harvesting, cooling, initial packing, shipping, and receiving. A processor may need to consider receiving, transformation, and shipping. A distributor may focus heavily on receiving and shipping.

The key question is: where does traceability information need to be created, preserved, transferred, or linked?

4. Identify required Key Data Elements

Once the Critical Tracking Events are mapped, companies should identify which Key Data Elements are required at each event. Then they should compare those requirements against the records they currently maintain.

This gap assessment often reveals missing supplier data, inconsistent lot codes, unclear product descriptions, or records that exist but are difficult to retrieve quickly.

5. Establish traceability lot code practices

Traceability lot codes are central to FSMA 204. Companies need clear rules for when traceability lot codes are assigned, preserved, changed, or linked through transformation.

This is especially important when products are repacked, relabeled, commingled, processed, or used as ingredients in new products.

6. Create a traceability plan

FSMA 204 requires covered firms to maintain a traceability plan. The plan should describe how the company maintains required records, identifies covered foods, assigns traceability lot codes when applicable, and provides records to FDA when requested.

The traceability plan should also identify a point of contact and, where relevant, include farm maps or other location information.

7. Align suppliers and customers

A company cannot comply in isolation if required information is not moving through the supply chain. Supplier specifications, purchase orders, bills of lading, invoices, advance ship notices, labels, case codes, and data exchange formats may all need review.

Companies should begin conversations with suppliers and customers early, especially if they handle products with short shelf lives or complex distribution patterns.

8. Test record retrieval

The FDA may require records to be provided within 24 hours of a request. In certain circumstances, FDA may request records in an electronic sortable spreadsheet.

Companies should not wait until an emergency to find out whether their records can be retrieved and connected quickly. Mock tracebacks and mock recalls are essential.

9. Train staff

FSMA 204 touches many roles: procurement, receiving, quality assurance, production, sanitation, warehousing, logistics, customer service, IT, and sales.

Training should focus on the real points where data can break down, such as substitutions, repacking, relabeling, partial shipments, mixed pallets, rework, and product holds.

10. Connect traceability to food safety programs

Traceability is most valuable when it supports fast, accurate food safety decisions. Companies should consider how FSMA 204 records connect to microbiology testing, environmental monitoring, certificates of analysis, positive pathogen findings, corrective actions, product release, and recall decisions.

When a food safety issue occurs, the ability to connect test results to ingredients, lots, suppliers, production dates, and shipped product can make the difference between a targeted response and a broad, costly recall.

What Matters Most

FSMA 204 readiness is not about creating more paperwork for its own sake. It is about building a traceability system that works under pressure.

The most important elements are:

  • Accurate product coverage decisions
  • Clear exemption documentation
  • Consistent traceability lot codes
  • Complete supplier and customer data
  • Reliable shipping and receiving records
  • Strong links between ingredients and finished goods
  • Accessible records that can be produced quickly
  • Trained employees who understand their role
  • Mock traceback exercises that prove the system works

A company may have records in multiple systems and still comply, but only if those records can be connected and retrieved efficiently.

Why Companies Should Not Wait Until 2028

The enforcement date may be in 2028, but FSMA 204 preparation should begin now.

There are several reasons.

First, supplier alignment takes time. If required data is missing from invoices, bills of lading, labels, or electronic records, companies may need months or years to work with trading partners.

Second, system changes take time. ERP, WMS, inventory, labeling, purchasing, and quality systems may all need updates.

Third, master data cleanup takes time. Product names, supplier IDs, facility addresses, units of measure, and lot-code formats need to be consistent enough to support traceback.

Fourth, customer expectations may arrive before FDA enforcement. Retailers, distributors, and foodservice customers may require FSMA 204-style traceability data earlier as part of their own readiness programs.

Finally, traceability is valuable today. Outbreaks, recalls, environmental positives, and product holds are not waiting until 2028. A stronger traceability program can help reduce recall scope, support faster investigations, and protect public health.

Available Resources

The FDA maintains a list of Frequently Asked Questions and provides an example spreadsheet to help companies navigate the regulations.