Toolkit · Agriculture

The Food Safety Plan, Inspection Response, and Producer Exemption Toolkit

21 U.S.C. § 342

Type
Toolkit
Jurisdiction
National
Date
2025-02-15
Topic
Agriculture

This toolkit supplies the documents food operations are measured against and the ones that defend them. It provides sanitation standard operating procedure and hazard analysis templates with the daily record formats whose absence is the most cited deficiency in small plants, and a food safety plan outline for facilities under preventive controls. It includes an exemption eligibility record that converts an assumed exemption into a documented one, an animal-share agreement addressing the ownership and payment structure that determines whether custom exempt processing is lawful, and a label change control form addressing the supplier change that causes most allergen recalls. It supplies an inspection response protocol and response letter built around the fifteen-working-day window, an environmental monitoring and vectoring procedure, a recall execution sequence, and the corrective action file format that serves as regulatory defense, criminal defense, and litigation evidence simultaneously. Authority tables close it.

The Food Safety Plan, Inspection Response, and Producer Exemption Toolkit

Agriculture > Meat, Poultry, and Produce Safety | Published 15 February 2025 - Updated 26 May 2025 | UpLaw - uplaw.us

How to use these tools

⚠️ Which tools apply depends on which system governs. Tools 1 and 2 are for meat and poultry establishments. Tools 3 and 4 are for facilities and farms under the preventive controls and produce safety frameworks. Tools 5 through 10 apply across both.

State programs administer substantial portions of both systems and may impose more. Conform every template to the governing program and to your own operation — ⚠️ a template describing controls you do not perform is worse than a simpler one describing controls you do.

Tool 1 — Sanitation standard operating procedures

[ESTABLISHMENT] — SANITATION SOP (required by 9 C.F.R. Part 416) Establishment no.: ______ Signed by the individual with overall authority: ______ Date: ______

PRE-OPERATIONAL (before production begins each day)

# Area / equipment Procedure Chemical & concentration Frequency Responsible position Monitored by
1 Product contact surfaces Disassemble, clean, rinse, sanitize Daily, pre-op
2 Non-product contact
3 Floors, walls, drains
4 Hand-wash and sanitizing stations Stocked and functional

OPERATIONAL (during production)

# Task Frequency Responsible position
1 Employee hygiene and garment control Continuous
2 Mid-shift cleanup
3 Product contact surface re-sanitizing
4 Cross-contamination controls (raw/RTE separation)

DAILY IMPLEMENTATION RECORD ⚠️ the document whose absence is the most cited small-plant deficiency

Date Pre-op check by Time Result ✔/✘ Deficiency Corrective action taken Product affected? Verified by
☐

Annual evaluation and revision: date ______ by ______

Drafting notes. ⚠️ The most commonly cited deficiency in small plants is not unsanitary conditions — it is the absence of records demonstrating the written procedures were followed. A plant may perform perfect sanitation daily and be cited because nothing recorded it.

The "product affected?" column is doing legal work. Under 21 U.S.C. § 342, food prepared under insanitary conditions whereby it MAY have become contaminated is adulterated — no actual contamination need be shown. The column forces the operator to make and record that assessment at the time, which is both a regulatory requirement and the evidence that the judgment was exercised rather than avoided.

Tool 2 — Hazard analysis and critical control point plan

[ESTABLISHMENT] — HACCP PLAN (required by 9 C.F.R. Part 417; poultry also 9 C.F.R. Part 381) Product / process category: ______ Plan signed and dated by: ______

HAZARD ANALYSIS

Process step Potential hazard (B/C/P) Reasonably likely to occur? Basis Control measure Is this a CCP?
Receiving ☐ Y ☐ N ☐
Chilling ☐
Thermal processing ☐
Metal detection ☐

THE PLAN

CCP Hazard Critical limit Monitoring: what / how / frequency / who Corrective action Verification Records

VALIDATION — scientific or technical support that the critical limits control the hazard: ______ VERIFICATION — calibration ______ · record review frequency ______ · direct observation ______ · product or environmental testing ______ ⚠️ REASSESSMENT — annually, and whenever any change could affect the hazard analysis. Last: ______ Next: ______

Changes triggering reassessment: new product · new ingredient or supplier · new equipment · process change · new packaging · new distribution channel · new hazard information · a deviation revealing the plan is inadequate

Drafting notes. The "reasonably likely to occur" column is where hazard analyses fail on review. ⚠️ A blank or conclusory entry is the first thing an inspector or a plaintiff's expert examines — the analysis must show reasoning, and the "basis" column exists to force it.

Validation is distinct from verification and is routinely confused. Validation asks whether the critical limits actually control the hazard (a scientific question, answered once and revisited on change); verification asks whether the plan is being executed (an operational question, answered continuously). A plan with monitoring records and no validation support has documented that it followed a procedure nobody established would work.

Tool 3 — Food safety plan outline

[FACILITY] — FOOD SAFETY PLAN (required by 21 U.S.C. § 350g; 21 C.F.R. Part 117) Preventive Controls Qualified Individual: ______ Training documentation attached ☐ Facility registration no.: ______ ⚠️ Biennial renewal due: ______ (registration: 21 U.S.C. § 350d; 21 C.F.R. Part 1)

1. HAZARD ANALYSIS — biological · chemical (including radiological) · physical · ⚠️ hazards intentionally introduced for economic gain

Ingredient / process step Hazard Requires a preventive control? Justification

2. PREVENTIVE CONTROLS ☐ Process controls — parameters, limits, monitoring ☐ Food allergen controls — segregation, labeling, changeover (see Tool 6) ☐ Sanitation controls — including environmental pathogen controls for exposed ready-to-eat food (see Tool 7) ☐ Supply-chain program — approved suppliers, verification activities, documentation ☐ RECALL PLAN — ⚠️ required; see Tool 9

3. MONITORING — what, how, frequency, who, records 4. CORRECTIVE ACTIONS — including product disposition 5. VERIFICATION — validation of process controls · calibration · record review · product and environmental testing · supplier verification · reanalysis 6. RECORDS — retention period ______ 7. REANALYSIS — at least every 3 years, and on significant change. Last: ______ Next: ______

⚠️ ANNUAL PRACTICE AUDIT: read this plan against what the facility actually does. Date: ______ Gaps found: ______ Resolution: ☐ change the practice ☐ change the plan

Drafting notes. ⚠️ Item 7's annual practice audit is the single most valuable line in this toolkit and appears in no regulation. Every inspection compares the plan to the operation, and a plan describing controls the facility does not perform is worse than a simpler accurate plan — it converts a compliance question into a credibility question. Resolve every gap in one direction or the other, and record which.

Tool 4 — Exemption eligibility record

[OPERATION] — EXEMPTION ELIGIBILITY FILE ⚠️ An exemption is a RECORDS obligation, not an absence of obligation. When an inspector asks for these and none exist, the exemption is unavailable.

A. WHICH STATUS? ☐ Farm (produce safety rule — 21 U.S.C. § 350h; 21 C.F.R. Part 112) ☐ Facility (registration + preventive controls — 21 U.S.C. § 350d, 21 U.S.C. § 350g) ⚠️ Have we begun any of these? ☐ cutting, cooking, drying, milling, canning ☐ packing or holding produce from OTHER farms ☐ manufacturing non-raw-agricultural-commodity food If yes, we may have become a facility. Analysis and date: ______

B. QUALIFIED EXEMPTION — annual eligibility record

Year Total food sales Sales to qualified end users % to qualified end users Threshold applicable Eligible? Records location
$ $ % ☐

Qualified end users: consumers, or restaurants/retail establishments within the applicable distance. Documentation of buyer category and location retained: ☐

C. MODIFIED REQUIREMENTS WE MUST STILL MEET ☐ Labeling with the farm/facility name and COMPLETE BUSINESS ADDRESS on the label or at the point of purchase ☐ Records establishing eligibility, retained ☐ ⚠️ Awareness that the exemption may be WITHDRAWN after an outbreak directly linked to the operation, or where conditions present a risk

D. OTHER EXCLUSIONS CLAIMED ☐ Produce rarely consumed raw ☐ Personal/on-farm consumption ☐ Commercial processing that adequately reduces pathogens — ⚠️ requires disclosure and WRITTEN ASSURANCE from the buyer; attached ☐ ☐ Very small business (modified requirements)

E. MEAT AND POULTRY EXEMPTIONS ☐ Custom exempt — 21 U.S.C. § 623. ⚠️ Product stamped "Not for Sale." May NOT be sold. ☐ Producer poultry exemption — 21 U.S.C. § 464. Category: ______ Annual bird count: ______ Cap: ______ ⚠️ STATE recognizes this exemption? ☐ Confirmed with ______ on ______ State limits, if stricter: ______

Reviewed annually. Date: ______ By: ______

Drafting notes. Section E's state confirmation line exists because ⚠️ producers routinely treat the federal ceiling as the operative number, and many States impose stricter limits or decline the exemption entirely. Confirm it, in writing, with the state agency, and record who said so and when.

Section B must be completed contemporaneously, from the first year. An eligibility calculation reconstructed after an inspector asks is worth very little, and the exemption is unavailable without it.

Tool 5 — Animal share agreement

AGREEMENT FOR SALE OF LIVE ANIMAL AND CUSTOM PROCESSING ⚠️ Custom exempt product under 21 U.S.C. § 623 may NOT be sold. This agreement exists so that what is sold is the LIVE ANIMAL, not meat.

1. Sale of a live animal. Producer sells to Buyer an undivided ___% interest in the following live animal: species ______, identification/ear tag ______, approximate live weight ______, located at ______.

2. Purchase price and payment. $______ for the interest in the live animal, paid to Producer on [DATE], BEFORE slaughter. Payment is for the live animal and not for meat or meat products.

3. ⚠️ Transfer of title and risk of loss. Title and risk of loss pass to Buyer on [DATE], before delivery of the animal to the processor. If the animal dies or is condemned before or during processing, the loss is Buyer's in proportion to Buyer's interest.

4. ⚠️ Custom processing arranged and paid for SEPARATELY by Buyer. Buyer engages [PROCESSOR], a custom exempt establishment, and pays the processor directly for slaughter and processing. Producer is not a party to that engagement and receives no part of the processing fee.

5. Delivery. Producer will transport the animal to the processor as Buyer's accommodation on [DATE]. Buyer will provide cutting instructions directly to the processor.

6. Acknowledgment. Buyer acknowledges that product from custom exempt processing is stamped "Not for Sale," is not inspected, and is for the exclusive use of Buyer, Buyer's household, and nonpaying guests.

Producer ______ Date ______ Buyer ______ Date ______ Attach: animal identification record · proof of payment for the animal · Buyer's separate contract and payment to the processor

Drafting notes. ⚠️ The analysis looks at substance, not labels: who paid whom, for what, and when did title pass. The three provisions that matter are paragraph 2 (payment for the live animal, before slaughter), paragraph 3 (risk of loss actually shifts), and paragraph 4 (separate payment to the processor).

A single payment to the producer for "a quarter of beef, cut and wrapped" is a sale of meat, and the arrangement fails regardless of what the document is titled. Enforcement in this area is real, and the documentation is the difference between a lawful structure and an unlawful sale of uninspected product.

Tool 6 — Label change control

LABEL CHANGE CONTROL FORM ⚠️ Undeclared allergens are the most common cause of food recalls in the United States, and the failure is nearly always a supplier change or reformulation that did not trigger label review.

TRIGGER — complete this form for ANY of the following: ☐ New ingredient ☐ New supplier for an existing ingredient ☐ Supplier reformulated their ingredient ☐ Recipe change ☐ New product ☐ Packaging change ☐ New claim ☐ Line or equipment change affecting cross-contact

1. What changed: ______ Effective date: ______ Requested by: ______ 2. New ingredient specification and allergen statement obtained from supplier? ☐ (attach) 3. ⚠️ ALLERGEN REVIEW — does the new or changed ingredient contain, or is it produced on shared equipment with, any major allergen? ☐ No ☐ Yes — list: ______ 4. Label ingredient statement updated? ☐ New statement: ______ 5. Allergen declaration updated? ☐ 6. Cross-contact assessment — does this change require new segregation, changeover, or cleaning validation? ☐ 7. Food safety plan / HACCP reanalysis required? ☐ (a new hazard or a new supplier is a change under 9 C.F.R. Part 417 and 21 C.F.R. Part 117) 8. Label approval required? ☐ Meat/poultry — 21 U.S.C. § 607 ☐ Verified against 21 U.S.C. § 343 9. Old labels removed from inventory and destroyed? ☐ Quantity destroyed: ______ 10. Effective date of new labels: ______

Approved by (QA): ______ Date: ______ Approved by (Production): ______ Date: ______ ⚠️ Production of the changed product may not begin until both approvals are recorded.

Drafting notes. ⚠️ Item 9 is the step that catches the recall that would otherwise happen. Old labels remaining in inventory are applied to reformulated product by an operator who has no reason to know anything changed — and that is the single most common mechanism of undeclared allergen recalls. The destruction record closes it.

This is a paperwork control preventing a life-threatening event, which is an unusually favorable ratio, and it is among the cheapest controls in any food operation.

Tool 7 — Environmental monitoring and vectoring

ENVIRONMENTAL MONITORING PROGRAM (exposed ready-to-eat foods)

Zones: 1 — food contact · 2 — non-food contact adjacent · 3 — non-food contact in the processing area · 4 — outside the processing area Sites, frequency, and target organism: ______

WHEN A POSITIVE IS FOUND — the next 72 hours

☐ 1. Do not stop sampling. ⚠️ A common and serious error is to reduce monitoring after a positive. ☐ 2. Intensify sampling and VECTOR — sample outward from the positive site to locate the source and determine extent ☐ 3. Assess product — ⚠️ under 21 U.S.C. § 342, product prepared under insanitary conditions whereby it MAY have become contaminated is adulterated. Product test results do not by themselves resolve this. ☐ 4. Hold-and-release decision, documented, with the basis ☐ 5. Corrective action — clean, sanitize, disassemble equipment, address the harborage ☐ 6. Re-sample to confirm elimination — three consecutive negatives at intensified frequency is a common standard ☐ 7. Root cause analysis — why was it there, and what allowed it ☐ 8. Assess whether the food safety plan requires reanalysis ☐ 9. Record every step, with dates and decision-makers

⚠️ The isolate will be sequenced and will persist in public databases. A matching clinical isolate years later points back to this facility — and the record of what was done in these 72 hours is the entire defense, regulatory and criminal.

Drafting notes. ⚠️ The finding is not the violation — failing to act on it is. Item 1 exists because operators sometimes respond to a positive by sampling less, which is understandable and indefensible. Whole genome sequencing means a resident environmental strain creates a permanent, matchable record, so the value of a documented, aggressive response is durable in a way it was not two decades ago.

Tool 8 — Inspection response protocol and letter

DURING THE INSPECTION ☐ One person accompanies the inspector; one retrieves records ☐ Take your own notes and photographs of anything photographed ☐ ⚠️ Answer accurately; DO NOT SPECULATE — speculation about what "might have" happened becomes a finding ☐ Duplicate every record produced ☐ ⚠️ Correct what can be corrected immediately and document it — immediate correction is recorded and materially affects the outcome ☐ Do not argue at close-out; note disagreements for the written response ☐ ⚠️ Never refuse access — refusing inspection is a prohibited act under 21 U.S.C. § 331; the authority is 21 U.S.C. § 374

RESPONSE LETTER — ⚠️ file within FIFTEEN WORKING DAYS; a response within the window is considered before further action is decided, a late one is not

To: [DISTRICT DIRECTOR] Re: Inspection of [FACILITY], [DATES]

"We appreciate the inspection conducted on [DATES]. We respond to each observation below. Corrections marked completed were verified on the dates shown."

Obs. # Observation Our response Corrective action Completed / target date Evidence attached
1 ☐ Concur ☐ Concur in part ☐ Respectfully disagree — basis: ☐

Systemic actions: ☐ plan reanalysis ☐ procedure revision ☐ retraining (records attached) ☐ verification schedule change Point of contact: ______

Drafting notes. ⚠️ Address every observation — silence on one is read as agreement without correction. The "concur in part / respectfully disagree" option matters: an operator who concurs with an inaccurate observation to be agreeable has created a fact. State disagreement factually and briefly.

In meat and poultry, review each noncompliance record for accuracy and appeal the incorrect ones. ⚠️ The file is cumulative, and a PATTERN on the same requirement is what precedes suspension of inspection — which closes the plant. An unrebutted record becomes a fact for every future purpose.

Tool 9 — Recall execution

☐ 1. Convene the recall team named in the plan (a written recall plan is a required preventive control under 21 C.F.R. Part 117) ☐ 2. Define the problem and the implicated lots — ⚠️ traceability determines scope, and scope determines cost. Records under 21 U.S.C. § 350l must be producible within 24 hours ☐ 3. Assemble the distribution list — consignee, quantity, date, lot ☐ 4. Classify: ☐ Class I ☐ Class II ☐ Class III ☐ 5. Notify the agency immediately and coordinate ☐ 6. Reportable food obligation — report within 24 hours where there is a reasonable probability of serious adverse health consequences ☐ N/A ☐ 7. Notify consignees — identification, segregation, return or destruction, response required ☐ 8. Public notice if product reached consumers ☐ 9. Effectiveness checks — verify receipt and action ☐ 10. Account for recovered product; dispose or recondition ☐ 11. Request termination ☐ 12. Notify insurers — product liability, ⚠️ contaminated products / recall expense (frequently absent or inadequate; it is the cost that arrives first), business interruption ☐ 13. PRESERVE EVERYTHING; ALTER NOTHING — ⚠️ a food safety file improved after a claim arrives converts a defensible matter into an indefensible one

⚠️ On leverage: in meat and poultry there is no mandatory recall authority — but refusal is met with detention, seizure, and suspension of inspection, which closes the plant. In FDA-regulated foods, mandatory authority follows an opportunity for voluntary recall. The productive conversation is about scope, not whether.

Drafting notes. Item 13 deserves its emphasis. Under United States v. Dotterweich and United States v. Park an officer's criminal exposure turns on responsibility and authority — and a file altered after the fact converts a question about food safety into a question about the company's integrity, which is a much worse case.

Tool 10 — Corrective action file

CORRECTIVE ACTION RECORD — [FACILITY] ⚠️ This single file is the regulatory defense, the United States v. Park criminal defense, and the answer to a plaintiff's expert.

# Date identified How identified Issue Escalated to (name & title) Date escalated Action taken Product disposition Verified effective by / date Plan reanalysis?
☐ monitoring ☐ verification ☐ env. monitoring ☐ inspection ☐ complaint ☐ audit ☐

Quarterly management review: date ______ attendees ______ trends identified ______ systemic actions ______

Drafting notes. ⚠️ The escalation column is the one that matters most and the one most often omitted. Under Park, an officer is exposed where they had authority to prevent or promptly correct a violation, and the defense is powerlessness. A record showing that problems reached the responsible official and were addressed demonstrates diligence; its absence demonstrates a structure in which nobody was responsible, which is precisely what the doctrine targets.

The quarterly management review line converts a log into a system. Individual corrective actions show responsiveness; documented trend review shows the company was managing food safety rather than reacting to findings.

Authority tables

Meat and poultry

Authority What it supplies
21 U.S.C. § 601 Definitions
21 U.S.C. § 603, § 604, § 606 Ante-mortem, post-mortem, and processed product inspection
21 U.S.C. § 607, § 608, § 610 Labeling; sanitary conditions; prohibited acts
21 U.S.C. § 623 Custom exempt — not for sale
21 U.S.C. § 451, § 453, § 455, § 464 Poultry — declaration, definitions, inspection, exemptions
9 C.F.R. Part 416, Part 417, Part 381 Sanitation SOPs; HACCP; poultry products

Produce and processed foods

Authority What it supplies
21 U.S.C. § 350d Facility registration and biennial renewal
21 U.S.C. § 350g Hazard analysis and preventive controls
21 U.S.C. § 350h Produce safety standards
21 U.S.C. § 350l Traceability recordkeeping
21 C.F.R. Part 112, Part 117, Part 1 Produce safety; preventive controls and GMP; registration procedures

Cross-cutting

Authority What it supplies
21 U.S.C. § 342 ⚠️ Adulteration — including food that MAY have become contaminated
21 U.S.C. § 343 Misbranding, including allergen declaration
21 U.S.C. § 331 Prohibited acts, including refusing inspection
21 U.S.C. § 374 Inspection authority
United States v. Dotterweich; United States v. Park Responsible corporate officer doctrine
Thomas v. Union Carbide Agricultural Products Co. Administrative adjudication of regulatory disputes

Sequencing the tools

Before operating: Tool 4 (status and exemptions), then Tools 1 and 2 or Tool 3. When selling meat from your own animals: Tool 5. On any supplier or formulation change: Tool 6. Continuously, for exposed ready-to-eat food: Tool 7. When an inspector arrives: Tool 8. When product must come back: Tool 9. Always: Tool 10.

⚠️ Two items carry disproportionate value. Tool 3's annual practice audit — reading the plan against what the facility actually does — addresses the most common finding across both regulatory systems and appears in no regulation. Tool 10's escalation column is the record that distinguishes a company that found and fixed a problem from one that did not notice, which is the distinction on which both regulatory and criminal outcomes turn.

Related Documents