Food Safety curriculum

A foodborne illness comes from eating food that carries germs or a harmful chemical, and the most common signs are diarrhea, stomach cramps, nausea, vomiting and fever. When two or more people get the same illness from the same contaminated food or drink, CDC counts it as an outbreak, so one sick guest is a case, not yet an outbreak.

Time/temperature control for safety (TCS) food is food that needs time or temperature limits to keep pathogens from growing or making toxin. The FDA Food Code model counts raw or cooked animal foods, cooked plant foods, raw sprouts, cut melons, cut leafy greens, cut tomatoes and garlic-in-oil, unless a product has been changed so it cannot support growth.

Whether a food needs time or temperature control turns largely on two numbers: water activity, the water available to microbes, and pH, its acidity. For a heat-treated, packaged food, the Food Code model's table calls it non-TCS at pH 4.6 or below or water activity 0.92 or below; above both lines a few combinations still qualify and the rest need a product assessment.

Ready-to-eat food is food that is safe to eat in its present form with no further step to kill pathogens, such as cooked food, washed raw produce or properly frozen raw fish. Because nothing later will destroy germs that land on it, ready-to-eat food is the food you keep away from bare hands and from raw animal foods.

Adults 65 and older, children under 5, pregnant women and people with weakened immune systems are more likely to get very sick from foodborne germs, because their bodies fight infection less well. Pregnant women, for example, are about 10 times more likely to get a Listeria infection. The Food Code adds stricter rules for places like hospitals and nursing homes that serve these groups.

FDA notes that outbreak data repeatedly point to five risk factors in retail and food service, all tied to employee behavior and preparation: food from unsafe sources, inadequate cooking, improper holding temperatures, contaminated equipment and poor personal hygiene. The Food Code's controls target these five, from approved suppliers to cooking temperatures and handwashing.

Biological hazards are bacteria, viruses and parasites, and they differ in a way that matters. Bacteria can multiply in food held at the wrong temperature, while a virus cannot multiply outside a living cell and parasites do not grow in food, so for those two the controls are clean hands, approved sources, and destroying them by cooking or freezing.

Chemical hazards can occur naturally, like ciguatoxin in reef fish, or be added, like cleaners, sanitizers, pesticides and too much of a food additive. Metals belong here too: the Food Code model lists copper and lead as toxic elements and says not to hold high-acid foods in copper utensils or in vessels containing lead.

A physical hazard is a hard foreign object in food, such as broken glass, metal fragments or a piece of jewelry, which can chip teeth or cause internal cuts. The harm comes from the object itself, so the controls keep objects out: a glove over any bandage, shields on lamps above food, sharp can-opener blades that do not shed metal, and no glass-stemmed thermometers.

To classify an incident, ask what the harmful thing is. A living germ, such as Salmonella or norovirus, is biological; a substance, such as a sanitizer, pesticide, histamine or an allergen, is chemical; an object, such as glass or a metal fragment, is physical. Allergens and fish toxins trip people up, but the Food Code model lists both as chemical hazards.

Contamination can enter at any step from farm to table: a sick worker who does not wash well, raw meat juices on a cutting board, dirty water used on produce, or a truck not cleaned after carrying animal products. In the kitchen, people, equipment, floors and animals are the usual routes, which is why animals stay out of food areas and food stays off the floor.

Cross-contamination is the spread of germs from food, hands or surfaces to other food, such as raw chicken juices reaching lettuce through a shared cutting board. It matters most for food that will not be cooked again, because nothing later will kill what it picks up. Separating raw from ready-to-eat food and cleaning between tasks breaks the path.

Food defense is protecting food from deliberate tampering, which differs from food safety's focus on accidents. In a kitchen it mostly means controlling access: the person in charge keeps unnecessary people out of prep and storage areas and checks deliveries left after hours. FDA's food defense page lists its criminal investigators and the FBI among contacts for food facilities.

Ice is food, so the Food Code model requires ice for eating or for cooling food to be made from drinking water. Freezing does not reliably kill germs and can preserve them, so ice is only as safe as its water. Ice used to chill the outside of fish, melons or canned drinks may not then be served, because it picks up whatever was on those surfaces.

Most foods supply enough nutrients for bacteria, so whether they grow depends on other conditions: available water, acidity, temperature, oxygen, salt and preservatives, competing microbes, and how long the food sits. Water, pH and temperature matter most, and it is their combination, not any single factor, that decides whether a germ can grow.

Water activity (aw) measures how much of a food's water is free for microbes to use, on a scale where pure water is 1.00. Dissolved salt or sugar lowers it, because microbes must compete with those molecules for water. Below a germ's minimum it stops growing, but it does not necessarily die and can stay dormant yet infectious.

Each microbe grows best at its own optimum pH and more slowly as conditions move away from it. In the Food Code model's tables, a heat-treated, packaged food at pH 4.6 or below is not TCS whatever its water activity, while foods above that line need lower water activity or a product assessment to skip temperature control.

Some bacteria, including Clostridium perfringens, Clostridium botulinum and Bacillus cereus, form spores that survive cooking. As cooked food cools slowly or sits warm, the spores germinate into active cells that can multiply fast, which is why cooling deadlines and hot-holding temperatures still matter after a correct cook.

Bacteria moved into a new food first spend a lag phase adjusting before they enter rapid, exponential growth, called the log phase. FDA's seafood guidance sets time and temperature limits to keep food inside the lag phase, because once growth turns exponential, numbers climb by factors of ten.

A foodborne infection comes from eating living pathogens that then multiply in your body, as with Salmonella. A food intoxication comes from a toxin already formed in the food, as with Staphylococcus aureus enterotoxin, so living germs need not be present, and cooking or reheating may not make the food safe.

How fast symptoms start is a clue to the cause. Toxins formed in the food act fast: CDC lists 30 minutes to 8 hours for Staphylococcus aureus, and Bacillus cereus vomiting can start within half an hour. Infections take longer, such as 12 to 48 hours for norovirus, 2 to 5 days for Campylobacter, and about 2 weeks for invasive Listeria.

A sick worker reports symptoms and diagnoses to the person in charge, including the date symptoms began. The person in charge must notify the regulatory authority when a worker is jaundiced or diagnosed with one of six listed pathogens. Anyone made ill by food can report it to the health department, which helps CDC and others trace outbreaks.

CDC counts a foodborne outbreak when two or more people get the same illness from the same contaminated food or drink. The Food Code model's confirmed outbreak goes further: a laboratory identifies the cause and epidemiological analysis implicates the food as the source.

Recalled, damaged or spoiled products held for return or credit go in a designated area separated from food, equipment, utensils, linens and single-use items. The separation keeps unsalable goods from being mistaken for safe stock and from contaminating anything stored near them.

An imminent health hazard is a threat serious enough to need immediate correction or a halt. Under the Food Code model, the permit holder stops operating and notifies the regulator for events like fire, flood, sewage backup, a long loss of power or water, or an apparent foodborne outbreak; areas the hazard does not affect may keep running.

Norovirus is the leading US cause of illness from contaminated food or water, often starting with sudden vomiting 12 to 48 hours after exposure. Very little virus causes illness, it spreads easily from infected workers' hands, and it can keep passing in stool after symptoms end. Alcohol hand gels do not protect against it, so handwashing and keeping sick workers home are the main controls.

Hepatitis A virus inflames the liver and can cause jaundice, a yellowing of the skin and eyes. Its incubation averages about 30 days, so the food that caused it is long gone before anyone is sick, and people without symptoms can also shed it. It survives freezing and more heat than many bacteria, which is why prevention rests on handwashing and excluding infected workers.

Salmonella Typhi causes typhoid fever, with high fever, headache and abdominal symptoms that usually start one to three weeks after exposure. It lives only in people, so it reaches food through infected people or sewage-contaminated water. The Food Code model excludes a worker diagnosed with typhoid, or who had it in the past 3 months without antibiotic treatment.

Nontyphoidal Salmonella causes nausea, vomiting, cramps, diarrhea and fever, usually 6 to 72 hours after exposure, and as little as one cell may be enough. Many foods carry it, from meat, poultry and eggs to produce and even dry foods like spices and raw tree nuts. It is hard to wash off food, so thorough cooking and separating raw from cooked food are the key controls.

Shigella spreads from the feces of infected people, through unwashed hands and contaminated water, and FDA also names flies and contaminated objects as routes. As few as 10 to 200 cells can cause illness, often bloody diarrhea within about 8 to 50 hours. Foods eaten raw or handled after cooking, like salads, are typical vehicles, so handwashing after the toilet is the key control.

Shiga toxin-producing E. coli, such as O157:H7, can cause severe cramps and bloody diarrhea, and in some people hemolytic uremic syndrome, a life-threatening form of kidney failure. Outbreaks have been traced to ground meat, raw milk, unpasteurized juice, lettuce, spinach and sprouts. FDA lists cooking ground beef well and washing produce under running water among the protections.

The Food Code model names six pathogens whose diagnosis a worker must report: norovirus, hepatitis A virus, Shigella, Shiga toxin-producing E. coli, Salmonella Typhi and nontyphoidal Salmonella. All spread easily through food handled by ill people, and the person in charge must pass on a diagnosis, or a jaundiced worker, to the regulatory authority.

Listeria monocytogenes is unusual because it can grow at refrigerator temperatures and tolerates salt. It is among the leading causes of death from foodborne illness, and pregnant women are about 10 times more likely to be infected, with grave risk to the baby. Deli meats, soft cheeses, smoked seafood and raw milk are typical vehicles, and it is the organism date-marking limits are built around.

Clostridium perfringens spores survive cooking, then germinate and multiply very fast in meat, gravy and large batches that cool slowly or sit warm. Illness, usually cramps and watery diarrhea, typically starts 8 to 16 hours after eating. The defense is speed: cooling within the Food Code model's 2-hour and 6-hour limits, and reheating held food to 165 degrees F.

Clostridium botulinum grows where oxygen is low, as in improperly canned or sealed foods, and makes a potent nerve toxin. Symptoms such as double vision, drooping eyelids and trouble swallowing usually start 18 to 36 hours after eating. A contaminated can may look normal, though swollen or leaking cans are a warning sign and must not be used or sold.

Bacillus cereus causes two illnesses. One toxin forms in the food itself and causes vomiting within half an hour to 6 hours, most often from rice and other starchy foods; the other forms in the gut and causes diarrhea in about 6 to 15 hours. Cooking may kill the bacteria but not the vomiting toxin, so cooked rice must be cooled quickly or held hot.

Staphylococcus aureus can live on people and animals, and it makes a toxin in food that is handled and then left warm. The toxin may not be destroyed by cooking, and symptoms such as vomiting and cramps come fast, within about 30 minutes to 8 hours. Foods with a lot of handling, like sliced meats, egg or tuna salads and cream pastries, are typical, so clean hands and cold holding are the controls.

Campylobacter is a leading bacterial cause of foodborne illness in the US, bringing diarrhea that is often bloody, with fever and cramps, 2 to 5 days after exposure. Raw poultry, raw milk and untreated water are the major sources. Cooking poultry fully and keeping its juices off cooked and ready-to-eat food are the main controls.

Vibrio bacteria live naturally in coastal and estuary waters, and illness rises in warmer months when the water is warm. Raw or undercooked shellfish, especially oysters, is the main source: more than 90 percent of US Vibrio vulnificus illness is tied to raw Gulf Coast oysters. In people with liver disease or weak immune systems it can spread to the blood and kill.

Anisakis worms come from raw or undercooked fish and squid, Trichinella from undercooked pork and especially wild game, and Cyclospora from contaminated fresh produce. Parasites do not grow in food, so the controls are destroying them, by cooking or by freezing fish meant to be eaten raw, and preventing contamination through good sources and washing.

Under the Food Code model, fish served raw or undercooked is first frozen to kill parasites: at -4 degrees F or below for 7 days, or frozen solid at -31 degrees F and held 15 hours at that temperature or 24 hours at -4. Looking for worms is not enough. Molluscan shellfish, certain tunas and some farmed fish are exempt.

Scombrotoxin poisoning comes from histamine that bacteria form when fish such as tuna, mahi-mahi, marlin and bluefish are left too warm. Tingling of the mouth, rash, headache and nausea can appear within minutes to hours. Once histamine forms, cooking and freezing cannot remove it, so the defense is keeping these fish cold from harvest onward and buying from suppliers who did the same.

Ciguatoxin comes from marine algae and builds up through the food chain in tropical and subtropical reef fish, highest in long-lived predators such as barracuda, grouper, snapper and jacks. It causes stomach upset plus nerve symptoms like tingling and reversed hot-cold sensation, usually within 6 hours. Cooking and freezing do not destroy it, so sourcing is the control.

Clams, mussels, oysters and scallops can concentrate toxins from algae in their harvest waters. Paralytic shellfish poisoning can paralyze breathing, and amnesic shellfish poisoning can cause seizures and short-term memory loss. The toxins have no smell, taste or color and survive cooking and freezing, so protection comes from approved, tagged shellfish and monitored harvest areas.

Cooking kills living germs but cannot be relied on to destroy a toxin that has already formed. FDA notes that natural seafood toxins are heat stable, that histamine in abused fish survives heat and freezing, and that some bacterial toxins, such as Staphylococcus aureus enterotoxin, may survive reheating. The control is preventing the toxin from forming or arriving.

Mycotoxins are toxic compounds made by molds. Aflatoxin, from Aspergillus molds, can cause cancer and is tied to corn, peanuts, tree nuts and milk; patulin is tied to rotten apples in juice. The Food Code model lists them as chemical hazards and says to check condition at receiving and not to use moldy or decomposed food.

Spoilage and danger are different problems. Natural seafood toxins have no odor, taste or color, and food carrying botulinum toxin often shows no visible sign. Practices aimed at quality, like first-in, first-out rotation, do not by themselves make food safe, so the safety controls of time, temperature and source still apply to food that looks fine.

Molluscan shellfish arrive with a tag or label identifying the source. The tag stays on the container until it is empty, the date the last shellfish was sold goes on it, and tags are kept 90 days. The 90 days cover hepatitis A's long incubation, so investigators can trace an outbreak back to the harvest area.

Food must come from sources that comply with food law: food made in a private home may not be used, and shellfish must come from approved sources. Approved sourcing is the first line of defense against hazards a kitchen cannot fix later, such as ciguatoxin in reef fish or viruses in shellfish from polluted water.

Match the control to the organism. Bacteria grow in food, so time and temperature control them, and spore-formers also need fast cooling. Viruses and parasites cannot grow in food, so handwashing, no bare-hand contact, excluding ill workers, approved sources and, for parasites, cooking or freezing stop them. Toxins already formed need prevention, because cooking will not fix them.

US law names nine major food allergens: milk, eggs, fish, crustacean shellfish such as crab, lobster and shrimp, tree nuts, peanuts, wheat, soybeans and sesame. The first eight were judged to account for about 90 percent of US food allergies, but more than 160 other foods can also cause reactions, so a guest's allergy may not be on the list.

The FASTER Act, signed April 23, 2021, made sesame the ninth major food allergen, effective January 1, 2023. Labeling rules apply from that date, but products already in commerce did not have to be relabeled, so you may still meet older packages that do not name sesame. FDA's advice when unsure is to check with the manufacturer.

Cross-contact is the unintended introduction of an allergen into a food that should not contain it, such as a shared utensil carrying peanut into a salad. It differs from cross-contamination: cooking can kill germs, but an allergen is a protein that heat does not reliably remove, so prevention is the only control.

Heat changes some allergen proteins, but not reliably. FDA's review found that boiling eggs reduced but did not eliminate allergen binding, that roasted peanut extracts bound allergy antibodies far more strongly than raw ones, and that responses vary from person to person. Because no cooking method removes allergenicity in every case, cooking cannot undo cross-contact.

Allergic reactions usually begin within minutes to a few hours of eating. Signs include hives, flushed skin, tingling in the mouth, swelling of the face, lips or tongue, vomiting, cramps, wheezing, dizziness, throat swelling and trouble breathing. A mild start does not mean a mild reaction, because symptoms can become life-threatening in a short time.

Anaphylaxis is a severe allergic reaction that comes on fast and can kill. CDC's food allergy guidance for schools names prompt epinephrine as the first-line treatment and says emergency medical services must still be called even when epinephrine is used. That describes the published guidance; it is not a substitute for first-aid training or medical advice.

Guests with food allergies depend on the allergen information staff give them, spoken or written, and they often ask about ingredients. The Food Code model suggests allergen training cover each establishment's own procedures and communication, and it warns that using an ingredient a guest asked to leave out can have severe medical consequences. A request protects the guest only if it reaches the cook intact.

CDC's food allergy guidance for school food service suggests preparing allergen-free items in a separate work space with separate equipment. Shared surfaces carry risk in quiet ways, since oils can seep through wax paper or liners. The Food Code model also requires cleaning and sanitizing equipment that touched a raw animal food that is a major allergen, such as raw fish, before it touches other raw animal foods.

Allergen residue comes off hands with soap and water; CDC's food allergy guidance for schools notes that hand sanitizers are not effective at removing food allergens. Gloves are not a shortcut either, since the Food Code model requires washing hands before putting on gloves for a food task, and gloves are changed when they become soiled.

Allergens are proteins, so they have to be physically removed. CDC's food allergy guidance for schools says cleaning with water alone will not remove food allergens; surfaces need soap and water or an all-purpose cleaner, followed by sanitizing. A sanitizer is defined by how many microbes it kills, so it does not replace the cleaning step.

Read the label every time a product is bought or delivered, not just the first time. CDC's food allergy guidance for schools notes that food labels often change and that ingredient lists posted online are not reliable. When a label leaves you unsure, the manufacturer is the one to ask, not a coworker's memory of last month's product.

Allergens hide inside ingredients that do not sound like them. FDA records hot dogs made with partially hydrolyzed milk protein causing reactions in milk-allergic children, and starch can come from wheat. Federal labeling covers allergens used in colorings, flavorings and incidental additives, so the label of each packaged component is where to look.

The 2022 Food Code model added a rule that establishments tell customers in writing when major food allergens are ingredients in unpackaged food. The notice can be on menus, deli case cards, table tents, placards or brochures. FDA's reasoning is that notifying the customer may prevent an accidental exposure before anyone thinks to ask.

A special order can fail after it is made correctly. CDC's food allergy guidance for school food service suggests making allergen-free items first, then labeling and storing them before other food is prepared, and reporting any cross-contact mistake right away. The Food Code model warns that using an ingredient a guest asked to leave out can have severe medical consequences.

In celiac disease, gluten, a group of proteins in wheat, barley and rye, triggers an immune response that damages the lining of the small intestine and limits nutrient absorption. Wheat is a major allergen, but gluten as such is a separate concern. A "gluten-free" label is a voluntary claim that must meet FDA's defined standard.

A food allergy is an immune reaction to a food protein, and the IgE type can lead to anaphylaxis. A food intolerance does not involve the immune system; lactose intolerance, for example, is trouble digesting milk sugar that brings gas, bloating and diarrhea. CDC describes such conditions as possibly serious but not immediately life-threatening.

Under the Food Code model, the person in charge makes sure employees are trained in food allergy awareness for their duties: knowing the major allergens and the symptoms they can cause. FDA suggests training also cover how to respond to a reaction, reading labels and preventing cross-contact, since guests often ask staff about ingredients.

Federal law requires packaged food labels to name the food source of every major allergen, either in parentheses in the ingredient list, like "whey (milk)", or in a "Contains" statement. The specific tree nut, fish or crustacean must be named. "May contain" warnings are voluntary and cannot stand in for good manufacturing practice.

An undeclared allergen is one that is in a food but missing from its label, through a labeling error or cross-contact. From 2009 to 2014, about a third of foods reported to FDA as serious health risks involved undeclared allergens. Milk is the most common allergen behind these recalls, and bakery products, snacks, candy, dairy and dressings are the foods most often recalled.

Guests with food allergies depend on what staff tell them, spoken or written. CDC's school guidance teaches allergic students to avoid unknown foods and warns that allergens in restaurant food may be present but unrecognized. If you cannot confirm what is in a dish, saying so leaves the decision with the guest; a guess hands them a false assurance.

The Food Code model sets the order: rinse under clean, warm running water, apply soap, rub hands and arms together vigorously, working under the fingernails, between the fingers and over the fingertips, rinse thoroughly, then dry right away. The area under the nails holds the most microbes and is the hardest to clean, so it gets deliberate attention.

The Food Code model's 20 seconds covers the whole procedure, of which 10 to 15 seconds is vigorous rubbing with soap. The rubbing creates friction over the hands, fingertips and the spaces between fingers, which is what loosens soil and microbes; a quick rinse skips the step that does the work.

The 2022 Food Code model requires a handwashing sink to deliver water of at least 85 degrees F, lowered from 100 degrees F in earlier editions. The rule sets what the sink supplies, not a washing temperature, because water that is too cold or too weak leads to poor handwashing. States adopt the model and may set their own value.

Wash immediately before starting food work, and after anything that can contaminate your hands: using the toilet, touching your body, coughing, sneezing, eating, drinking, using tobacco or vaping, handling dirty equipment, switching between raw and ready-to-eat food, and before putting on gloves. The list is examples, not limits; any contaminating activity counts.

Wash hands only at a handwashing sink. Washing at a food prep sink can contaminate the sink and the food prepared in it, and a mop or service sink adds contaminants from floors and toilet rooms. The handwashing sink must stay accessible and stocked with soap and towels so washing is always possible.

A hand antiseptic, often called hand sanitizer, may be used only on hands that have already been washed. It achieves a much smaller reduction in microbes than an equipment sanitizer, so it is an extra step, never a substitute for washing. Norovirus shows why: FDA notes that alcohol hand gels do not protect against it.

Single-use gloves are for one task only, such as working with ready-to-eat food or with raw animal food. Discard them when they are damaged or soiled, when you change tasks, or when work is interrupted. Gloves used on ready-to-eat food count as utensils, so they must be kept as clean as any other utensil.

Gloves protect food only when the hands inside are clean. The Food Code model requires washing hands before putting on gloves to start a food task, and gloves are thrown away when soil or other contaminants get inside them. A glove pulled over unwashed hands is a barrier with the contamination already behind it.

Under the Food Code model, you may not touch exposed ready-to-eat food with bare hands; use deli tissue, tongs, spatulas, single-use gloves or dispensing equipment. Exceptions are narrow: adding food to a dish that will be fully cooked, washing produce, and a regulator-approved written plan where no highly susceptible people are served.

Keep fingernails trimmed and smooth, because rough nails harbor microbes and pieces can break off into food. Nail polish and artificial nails are not allowed when working with exposed food unless you wear intact gloves. While preparing food, only a plain ring, such as a wedding band, may be worn on the hands and arms, since rings, bracelets and watches collect soil.

Hats, hair nets and beard restraints keep hair from falling into food and discourage you from touching your hair, which contaminates your hands. The rule covers staff near exposed food or clean equipment; counter staff serving only drinks or packaged food, hosts and wait staff may be exempt if they pose minimal risk.

Wear clean outer clothing over anything that could touch food. Dirty clothing can carry disease-causing microbes, and touching it moves them to your hands and then to food; food can also pick them up by direct contact. Clean clothing also tells customers the place is kept sanitary.

Eat, drink and use tobacco or vaping products only in designated areas where exposed food and clean equipment cannot be contaminated. Hands that touch the mouth carry germs back to the work. The exception is a closed drink container handled carefully, allowed because hot work areas can dehydrate workers.

A bandage, finger cot or finger stall on your hand or wrist must be covered with a single-use glove while you work with exposed food, because the cover itself can fall into food. A wound with pus on the hands also needs both layers; without them, the worker is restricted from exposed food and clean equipment.

Tell the person in charge if you have vomiting, diarrhea, jaundice, sore throat with fever, or a pus-filled wound that is open or draining and not properly covered. Include the date symptoms began. A diagnosis of any of the six listed pathogens, or exposure to a confirmed outbreak, must be reported too, even without symptoms.

To exclude a worker is to keep them out of the establishment as an employee; to restrict is to let them work but keep them away from exposed food, clean equipment, utensils and linens. Vomiting or diarrhea means exclusion. Sore throat with fever means restriction, unless the place serves a highly susceptible population, where it means exclusion.

A worker excluded for vomiting or diarrhea with no diagnosis may return after 24 hours without symptoms, or with a note that the cause is not infectious. A diagnosis needs more: for norovirus, Shigella, Shiga toxin-producing E. coli, typhoid, nontyphoidal Salmonella and hepatitis A, the person in charge needs regulatory approval plus a condition such as 48 symptom-free hours for norovirus.

The Food Code model requires that workers be informed, in a way that can be verified, of their duty to report symptoms and illnesses. Signed reporting agreements, training records, or a written employee health policy backed by signs and pocket cards all qualify. A written policy is specifically required before bare-hand contact with ready-to-eat food can be approved.

The person in charge must be present whenever the establishment operates and is responsible for Food Code compliance. Their duties include watching handwashing, checking deliveries, overseeing cooking, cooling and holding temperatures, making sure staff are trained in food safety and allergens, and excluding or restricting ill workers. The model expects a certified food protection manager in the role.

Every establishment needs written procedures for cleaning up vomit and diarrhea. Norovirus is the leading cause of US foodborne outbreaks; one projectile vomiting incident can spread about 300,000 virus particles, and droplets can settle on surfaces or be swallowed. A planned response limits how far contamination spreads and who is exposed.

Single-service and single-use items, and cleaned and sanitized utensils, must be handled and dispensed so their food- and lip-contact surfaces stay untouched. Unwrapped knives, forks and spoons are presented so only the handles are touched, and items for customer self-service come with the wrapper intact or from an approved dispenser.

You may not use a utensil more than once to taste food that will be sold or served. The rule keeps a spoon that has touched your mouth from going back into food that others will eat. Taste with a clean utensil every time, and set the used one aside for washing.

Buy from suppliers that comply with food law and are inspected. Food made in a private home may not be used, and fish meant to be served raw must come from a supplier that froze it properly or be frozen on site with records. Source is a control a kitchen cannot add later, because hazards like ciguatoxin survive cooking and freezing.

Check every delivery as it arrives: cold TCS food at 41 degrees F or below, hot food at 135 degrees F or above, frozen food still frozen, packages intact, and no sign of earlier temperature abuse. The person in charge also confirms the food comes from an approved source and that it goes promptly into proper storage.

Cold TCS food must arrive at 41 degrees F or below unless a law sets another limit, as for milk and molluscan shellfish, and raw shell eggs arrive in refrigerated equipment at 45 degrees F or below. Food shipped frozen must arrive frozen, and hot food at 135 degrees F or above. These are Food Code model values that each state adopts or adjusts.

Refuse TCS food that arrives too warm or shows signs of earlier temperature abuse, and food labeled frozen that arrives thawed. Packages must be intact: swollen or leaking cans can signal botulinum toxin and must not be offered for sale. Shellfish without a proper tag can be held or destroyed, and dead shellstock with badly broken shells is discarded.

The Food Code model separates raw animal foods from ready-to-eat food and from each other by the temperature they must be cooked to: fish and pork, cooked to 145 degrees F, go above or away from raw poultry, cooked to 165. Applied to one set of shelves, that puts ready-to-eat food on top, then fish and whole cuts (145), ground meats (155), and raw poultry at the bottom.

The order follows how many pathogens each food is expected to carry and how hot it must be cooked to kill them. If raw juice drips down a shelf, it lands on food that will be cooked hotter, which destroys what it picked up; raw poultry, with the highest expected load, sits at the bottom where it can drip onto nothing.

First in, first out means using older stock before newer stock, guided by the dates on labels. The Food Code's HACCP guidance classes it as a quality practice, not a critical control point for safety. The safety limit for ready-to-eat TCS food is its date mark, and no amount of rotation extends it.

Ready-to-eat TCS food made on site and held cold more than 24 hours must be marked with the day by which it is used or thrown out: at most 7 days at 41 degrees F or below, counting the day of preparation as day 1. A dish combining ingredients keeps the date of the earliest one. The limit exists because Listeria can keep growing in the refrigerator.

Store food at least 6 inches (15 cm) above the floor, in a clean, dry place away from splashes and drips. Shoes carry contamination onto floors, and moisture in storage areas encourages microbial growth. Cased food in waterproof containers, like canned or bottled drinks, is an exception and may sit on a clean, dry floor.

Dry goods need a clean, dry spot, since moisture in storage areas promotes microbial growth. Food may never be stored in toilet rooms, locker rooms, garbage rooms or mechanical rooms, or under leaking pipes or sewer lines. Working containers taken from original packages are labeled with the food's common name, so flour is not mistaken for something else.

Keep cleaners, sanitizers and other toxic materials separated from food by space or a partition, and never above food, equipment or single-use items, where a spill could reach them. Only the chemicals needed to run and clean the establishment belong there at all.

The Food Code model allows four ways to thaw TCS food: in a refrigerator that keeps it at 41 degrees F or below; fully submerged under running water at 70 degrees F or below; in a microwave, if cooking follows without interruption; or as part of cooking. Each limits the time surviving bacteria get to grow as the food warms.

Thawing on the counter is not one of the allowed methods. Freezing stops growth but does not destroy all microbes, so improper thawing gives survivors time to grow and make toxins, and refreezing the food preserves both. CDC's consumer advice says the same: thaw frozen food safely, not on the counter.

Bacteria can grow or make toxin when TCS food stays between 41 and 135 degrees F too long, so FDA says heating and cooling should happen as fast as possible. Large masses cool slowly, and one alternative FDA names is preparing smaller batches closer to service, so less food has to pass back down through that range.

Wash raw fruits and vegetables in water before cutting, combining, cooking or serving them, even if they will be peeled. Washing reduces pathogens but does not remove them all: bacteria can enter through stem scars, cracks and bruises, and once inside they cannot be washed out. FDA advises against soaking produce and against washing it with soap or detergent.

Raw animal foods stay apart from ready-to-eat food and from one another. You can do that with dedicated equipment, or by working on the same surfaces at different times or in different areas, with a full clean and sanitize between uses. Equipment that touched a raw animal food that is also a major allergen, such as raw fish, adds an allergen cross-contact risk on top of the pathogen risk.

The Food Code model sets final internal temperatures by food: 145 degrees F for 15 seconds for fish, intact meats and eggs cooked to order; 155 degrees F for 17 seconds for ground meats and pooled eggs; 165 degrees F instantly for poultry, stuffed foods and stuffing. Microwaved raw animal food also goes to 165, then stands covered 2 minutes.

A cooking temperature comes with a time, because killing pathogens depends on both. Ground meat is safe at 155 degrees F for 17 seconds or at lower temperatures held longer, such as 145 for 3 minutes, and whole roasts can be cooked as low as 130 degrees F if held 112 minutes. Touching the number for an instant is not enough unless the rule says so.

Take an internal temperature at the geometric center or thickest part of the food. For thin foods under half an inch, like burgers and fish fillets, use a thin probe; for hot-held food, also check the spots farthest from the heat source. FDA tells inspectors not to stir food before measuring, so the reading shows the food as it was held.

The Food Code model requires food thermometers accurate to within 2 degrees F and calibrated according to the maker's instructions. FDA describes two checks: an ice slurry should read 32 degrees F, and boiling water 212 degrees F, adjusted for altitude. Use the check nearest the temperatures you will measure.

A bimetal stem thermometer has a wide probe that cannot sense temperature accurately at its tip, so it is not suited to thin foods. A thermocouple or thermistor with a thin probe can read thin foods. An infrared thermometer reads only the surface, so it cannot confirm an internal cooking or holding temperature.

An infrared thermometer measures only surface temperature. Problems under the surface, from poor cooling of cold food or poor reheating of hot food, stay hidden, so a reading can look fine while the center is unsafe. FDA calls infrared inappropriate for internal cooking temperatures and inconsistent with Food Code checks of holding temperatures.

Hot TCS food is held at 135 degrees F or above, except roasts cooked to the Food Code's time tables, which may be held at 130. Check the points farthest from the heat source, such as near the surface on a steam table. Hot holding stops heat-injured microbes from regrowing; it does not make temperature-abused food safe.

Cold TCS food is held at 41 degrees F or below, which limits the growth of pathogens without stopping all of it, which is why ready-to-eat food also carries a date limit. Unpackaged food displayed on ice needs drained ice, and packaged food that water could get into should not sit in ice or water.

Time can replace temperature for food on display or a working supply, with written procedures. Under the 4-hour option, food starts at 41 degrees F or below (or 135 or above), is marked with a discard time 4 hours out, and is served or thrown away by then. A 6-hour option exists for cold food that never rises above 70 degrees F.

Displayed food needs food guards, display cases or packaging, because breath and sneezes carry microbes through the air. Self-service needs utensils or dispensers and trained staff watching. Raw animal foods are generally not offered for self-service, and guests may not reuse a dirty plate for seconds, so staff remind them to take clean tableware.

Food served off site, as for catering, stays under the same rules: 135 degrees F or above hot, 41 or below cold, or time control with written procedures. FDA tells inspectors to assess every holding unit, including those used to move food to satellite kitchens and catering events, not just the main kitchen.

Cooked and cooled food reheated for hot holding must reach 165 degrees F for 15 seconds in every part, within 2 hours. Speed matters because the food passes back through the danger zone. Proper reheating kills most organisms of concern, including Clostridium perfringens, but some toxins survive it.

Cooked, refrigerated food reheated for one customer's order and served right away, such as a roast beef sandwich au jus, may be served at any temperature. The 165 degrees F rule is for food going back into hot holding, where it may sit for hours.

Cooked food that will not be held hot is cooled from 135 to 70 degrees F within 2 hours and to 41 within 6 hours total, using shallow pans, smaller portions or ice-water baths. Ready-to-eat leftovers then get a date mark of up to 7 days, and they are reheated to 165 degrees F if they go back into hot holding.

The FDA Food Code, a model that states adopt in their own versions, puts the danger zone at 41 °F to 135 °F, and its cold and hot holding limits sit at those two edges. USDA consumer guidance uses 40 °F and 140 °F instead, so check which rule set a question is using.

Within the zone, growth speeds up as the temperature rises toward each organism's optimum, then slows above it. USDA notes some bacteria can double in as little as 20 minutes, so time spent at warm temperatures adds up fast, and pathogens usually do not change how food looks, smells or tastes.

Refrigeration only slows bacteria, so cells that multiplied during an earlier warm stretch are still there after chilling. For food partly cooked and cooled now, then finished later, FDA says growth during the first heating and the cooling must be counted together, so each warm period uses up margin that later steps no longer have.

Under this Food Code option, food that leaves cold holding at 41 °F or below, or hot holding at 135 °F or above, is marked with the time 4 hours later and must be cooked and served, served, or discarded by then; unmarked food is discarded. A separate 6-hour option covers cold food that stays at 70 °F or below. Written procedures must be on file first.

FDA calls this initial cool a critical element of cooling. Its own example: food that reaches 41 °F within 6 hours but took 3 hours to reach 70 °F may not have had its hazards controlled. Reach 70 °F early and the unused time carries over, so 1 hour here leaves 5 hours for the rest.

Stage two runs from 70 °F to 41 °F and gets whatever is left of the 6-hour total, so at most 4 hours if stage one used its full 2. Food made from room-temperature ingredients, such as reconstituted foods or canned tuna, has no hot stage and must reach 41 °F within 4 hours.

The 6-hour total adds flexibility but never replaces the 2-hour checkpoint. Food cooled to 70 °F in 1 hour has 5 hours left, while food still above 70 °F at 2 hours has failed even if it is cold by hour 6. The clock starts when the food passes 135 °F on the way down.

FDA's rationale names 70 °F to 125 °F as near-ideal incubation temperatures, so the rule forces food through that band first and fast. Proper cooking kills most bacteria but not spore-formers such as Clostridium perfringens and Bacillus cereus, and slow cooling is what lets those survivors grow.

The Food Code lists shallow pans, smaller or thinner portions, rapid-cooling equipment, stirring in an ice-water bath, containers that conduct heat, and ice as an ingredient. An ordinary cooler is built to hold cold food, not to cool a large hot mass; a blast chiller uses very cold, fast-moving air.

Heat leaves through the surface, so the center of a deep container is the last part to cool, and reducing the volume in each container sharply raises the cooling rate. The model Food Code names shallow pans as a method but sets no depth, so look to your jurisdiction's adopted rules for any figure.

Roasts, whole turkeys and big containers of rice or refried beans cool slowly because so much mass must give up its heat. Dividing them into smaller or thinner pieces speeds cooling, and cooking smaller batches closer to service can avoid cooling a large mass at all.

The Food Code names ice as an ingredient among its cooling methods, alongside ice-water baths and shallow pans. It is a method, not a pass: the food must still reach 70 °F within 2 hours and 41 °F within 6, so confirm with a thermometer rather than assume the ice did the job.

A tight lid slows heat loss and keeps food longer at temperatures where bacteria multiply. The Food Code wants cooling food loosely covered, or uncovered if protected from overhead contamination, and containers arranged in the unit so heat can leave through their walls.

Take a temperature when cooling starts and again before each deadline, at the geometric center and around the edge: a warm core with cooler edges means the food is still cooling. FDA's inspection guidance flags tightly packed pans, bulk buckets and shrouded racks for a closer look.

FDA's inspection guidance: food still above 70 °F more than 2 hours into cooling, or above 41 °F more than 6 hours in, is discarded. Food found cooling too slowly while still inside those limits may be reheated to 165 °F for 15 seconds and cooled again, this time with a different method.

The limit sits above the highest temperature at which Clostridium perfringens has been reported to grow, about 126 °F, with a margin for uneven food and equipment that drifts. Roasts cooked or reheated under the code's roast rules may be held at 130 °F instead.

Refrigeration slows most microbes, but Listeria monocytogenes keeps growing slowly in the cold, which is why ready-to-eat food also has time limits. The model code once allowed 45 °F for existing equipment; the Supplement to the 2005 Food Code deleted that option, partly because of what was learned about Listeria.

A unit's built-in thermometer is placed at the warmest spot of a cooler or the coolest spot of a hot unit, so it tracks the equipment, not the food. FDA's inspection guidance says a reading between packages may prompt a closer look, but a citation rests on the temperature of the food itself.

Food can read 135 °F on a steam table and still have been reheated badly before it got there. Food cooked and cooled on site must reach 165 °F when reheated for hot holding, with no more than 2 hours between 41 °F and that temperature, and FDA tells inspectors to question whether a unit found reheating food can meet that.

A log turns monitoring into evidence. When checks are not continuous, FDA's HACCP guidance says they must come often enough to show the limits are met, and verification includes reviewing logs for accuracy and the planned frequency, so a missing entry leaves a stretch with no proof the limit held.

The model Food Code sets no fixed interval; it requires calibration to the manufacturer's specifications as needed to keep readings accurate. An inaccurate thermometer cuts both ways: a real temperature problem can go unnoticed, or a corrective action can be taken that was never needed.

Killing pathogens depends on time at temperature, not temperature alone. In the Food Code's roast table, holding beef at 130 °F for 112 minutes gives the same lethality as 145 °F for 4 minutes. Poultry carries more and more varied pathogens, so it needs a higher temperature.

After a large roast leaves the oven its center keeps warming, and the Food Code lets that post-oven rise count toward the required holding time. It counts only as measured: FDA tells inspectors to read the geometric center or thickest part and to allow for the rise as the temperature evens out.

Microwaving heats fast and unevenly, so it lacks the time at temperature that conventional cooking builds up and can leave cold spots. The Food Code therefore asks for 165 °F in all parts, rotating or stirring midway, a cover, and a 2-minute covered stand; check the temperature in several places.

USDA explains that freezing to 0 °F makes microbes dormant; once thawed they can multiply again, so thawed food is handled like fresh. Freezing can destroy some parasites, but only under set conditions: one Food Code option for raw fish served raw is -4 °F or below for 7 days.

Commercial refrigerators are designed to hold food that is already cold, not to pull heat from large hot masses. The Food Code asks that cooling containers be arranged for maximum heat transfer, and FDA flags tightly packed pans and shrouded rolling racks in coolers for a closer temperature check.

The Food Code treats an extended loss of power as a possible imminent health hazard: stop operating and notify the regulatory authority unless an approved written emergency plan lets you continue. Federal consumer guidance says a refrigerator keeps food safe up to 4 hours if the door stays shut, and many perishables above 40 °F for over 2 hours are discarded.

The Food Code's holding rule lists exceptions for preparation, cooking, cooling and time as a control, but none for travel, so food in transit still needs 135 °F or above or 41 °F or below unless time is the control. FDA's transport rule waives restaurants and stores delivering to their customers because state and local controls already apply.

Cleaning takes residue off so a sanitizer can reach the surface; the code wants food-contact surfaces clean to sight and touch. Sanitizing is defined by its result: heat or chemicals that cut representative pathogens by 5 logs, or 99.999%. Soil left behind weakens the sanitizer, so the order never reverses.

Each step sets up the next. Washing removes soil, rinsing takes off detergent and abrasives that would dilute or inactivate the sanitizer, sanitizing follows cleaning and comes before the surface touches food, and air-drying avoids wiping clean items with a cloth.

The code bans cloth drying so a towel cannot move microorganisms back onto a clean surface. Let items drain and dry before stacking, because wet stacked pans cannot dry and may let microbes grow. Air-dried utensils may then be polished with a clean, dry cloth.

The first compartment holds wash solution at 110 °F or the detergent label's temperature, the second rinse water, the third sanitizer. Each must be big enough to submerge the largest item you wash; anything that will not fit goes to a warewashing machine or other approved equipment.

A hot-water machine's final rinse must be at least 180 °F at the manifold, or 165 °F for a stationary-rack, single-temperature machine, but no more than 194 °F, because hotter spray vaporizes and delivers less heat. The proof is a utensil surface reaching 160 °F. Chemical machines wash at 120 °F or more.

Below 171 °F, FDA says sanitization will not be achieved and pathogens may survive to reach food. Both numbers matter: the item stays submerged for at least 30 seconds. Because heat does the work, there is no concentration to test, only water temperature and time.

Each works only within its own conditions: iodine at 12.5 to 25 mg/L, at least 68 °F and usually pH 5 or lower; quats at least 75 °F with a water-hardness limit; chlorine at a minimum temperature set by its strength and pH. Federal oversight of these sanitizers moved to EPA, so follow the EPA-registered label.

A weak solution leaves pathogens alive. An overly strong one is no better: FDA treats sanitizers as toxic materials, excess strength leaves harmful residues behind, and inspectors record it as a toxic-substance violation. Mix to the label, then measure.

Concentration and pH decide whether a sanitizer works, and neither is visible, so the code requires a test kit or similar device. Solutions also weaken as they pick up soil: a wiping-cloth bucket full of food residue can neutralize its sanitizer, so check it periodically and change it as needed.

Wiping a sanitizer on and straight off does not sanitize. The Food Code sets at least 10 seconds for chlorine, or 7 seconds for 50 mg/L at specified temperatures and pH, and 30 seconds for other chemical sanitizers, and the times must also match the EPA-registered label.

For chlorine at 50 to 99 mg/L, the minimum water temperature is 75 °F when the pH is 8 or lower but 100 °F when the pH is up to 10. Quats have a maximum water hardness, and in a two-compartment setup, detergent carried into an incompatible sanitizer can inhibit it.

A damp, soiled cloth can breed pathogens. Wet cloths for counters sit in sanitizer of the right strength between uses and are laundered daily; cloths used on raw animal food stay separate; cloths for wiping spills from tableware stay dry and are used for nothing else.

Surfaces used with time/temperature control for safety food are cleaned at least every 4 hours, and also when switching from raw to ready-to-eat food, between raw meat types unless each needs a higher cooking temperature than the last, and after possible contamination. In cold rooms the interval may stretch, never past 24 hours.

During pauses, a scoop or ladle can rest in the food with its handle above it, in water held at 135 °F or above, in running water for moist foods like ice cream, or on a clean surface that is itself cleaned on schedule. Hot water works because it keeps microbes from growing.

Materials must not pass harmful substances or flavors into food and must survive repeated washing without pitting, chipping or cracking. Damage matters because a pitted surface can shelter pathogens from cleaning and sanitizing. Cast iron is porous, so it is allowed mainly as a cooking surface, where heat destroys what the pores hold.

Floor-mounted equipment that cannot be moved is sealed to the floor or raised on legs with at least 6 inches of clearance, or 4 inches if no point underneath is more than 6 inches from cleaning access. Spaces you cannot reach collect soil and give insects and rodents a place to hide.

FDA lists the general cleaning schedule among tasks suited to written standard operating procedures, so the same job is done the same way each time. Where the model code lets equipment in a cold room go longer between cleanings, the chosen frequency must be documented, and a regulator may approve a custom schedule.

Chemicals bought in bulk get poured into smaller working containers that end up in different parts of the kitchen. Labeling each one with its common name helps prevent dangerous misuse, and the chemicals must also be stored where they cannot contaminate food, equipment or linens.

OSHA's hazard communication standard requires employers with hazardous chemicals to have labels and safety data sheets for exposed workers and to train them to handle the chemicals safely. The sheets follow a 16-section format, and FDA's Food Code annex advises keeping one for every chemical on site.

Nondrinking water may be of unknown origin, and wastewater is known or suspected to be contaminated, so the Food Code forbids connecting either to the drinking water system. Nondrinking lines must be durably marked, and a hose dropped into a bucket or puddle can create the same link.

At times of heavy demand, water lines can develop negative pressure and siphon standing water from sinks or equipment into the supply. An air gap at least twice the inlet's diameter, and never under 1 inch, stops this physically; an approved backflow prevention device is the alternative. One or the other is required at each point of use, including a hose bibb with a hose attached.

Equipment that holds food, utensils or portable equipment may not drain straight into the sewer, so a sewage backup cannot reach those surfaces. The code allows narrow exceptions, such as floor drains in built-in refrigerated rooms and, where law permits, a dish machine piped to a nearby trapped floor drain.

The Food Code calls for at least 10 foot-candles in walk-ins and dry storage, 20 at handwashing, warewashing and self-service areas, and 50 where employees work with food or with knives and slicers. Light lets staff read labels and spot soil. Mechanical ventilation is required where heat, steam or fumes would build up.

CDC describes rodent droppings as pointed at one end and often containing hair, found anywhere rodents travel, while gnaw marks alone may only show past activity. The Food Code expects routine inspection of incoming deliveries and of the premises, so signs are caught before pests reach food.

Keep pests out by protecting outer openings, take away their food, water and shelter, and identify a pest before acting; EPA's approach tries less risky controls first. Restricted-use pesticides may be applied only by or under a certified applicator, and rodent bait goes in covered, tamper-resistant stations.

FDA uses the term for management's deliberate use of specific procedures to control five risk factors: unsafe sources, inadequate cooking, improper holding temperatures, contaminated equipment and poor personal hygiene. It is preventive rather than reactive, kept up by continuous monitoring and verification.

The team first lists the biological, chemical and physical hazards that might be present at each step of preparing a food, then evaluates each by how severe its effects would be and how likely it is to occur. Only hazards reasonably likely to cause illness or injury go into the plan, with the control measures that can prevent, eliminate or reduce them.

A critical control point is a step where losing control could create an unacceptable health risk and control is essential, as with cooking, cooling, hot holding and cold holding. Two places making similar food can choose different points, and in a voluntary system a hazard such as cooling may be managed by a standard procedure in its prerequisite programs instead.

A critical limit is the minimum or maximum value, such as a temperature, time, pH or water activity, that must be met at a critical control point to keep a hazard controlled. It must be scientifically based and measurable; FDA's examples include cooking chicken to 165 °F and acidifying sushi rice below pH 4.2.

Monitoring is the planned observation or measurement that shows whether each critical limit is being met, such as checking the internal temperature of chicken pieces right after cooking. Continuous monitoring is preferred when feasible; intermittent checks must come often enough to show the limits hold, and trained staff closest to the work usually do them.

Corrective actions are what happens whenever a critical limit is missed, and the plan sets them in advance so nobody improvises. Discarding the food is one option; cooking longer or reheating is another when safety is not compromised, such as keeping a hamburger cooking until it reaches its required temperature. The plan names who acts, how and when.

Verification is everything other than monitoring that shows the plan is valid and being followed: watching the person who monitors, reviewing records for accuracy and the planned frequency, confirming corrective actions were taken, checking that critical limits actually control the hazard, and making sure equipment is calibrated.

Records show the system worked: FDA lists prerequisite-program, monitoring, corrective-action, verification and validation, and calibration records. They let verification confirm each step was done, and if an establishment is linked to an illness, they can show reasonable care was taken. A plan without them cannot show it was followed.

The hazard analysis produces the list of significant hazards and their control measures; the essential measures become critical control points; each point gets critical limits; monitoring checks those limits; and a missed limit triggers a corrective action. A hazard the analysis misses therefore never gets a control point, a limit or a check.

FDA separates control measures that are essential to food safety from those that are not. Only the essential ones, such as cooking and cooling, sit at critical control points. Steps like first-in, first-out rotation or refrigerating food that needs no temperature control protect quality and are not critical control points unless they also serve safety.

A critical limit must be measurable and scientifically based, and it can set a minimum, like the cooking temperature for chicken, or a maximum, like a pH below 4.2 for acidified sushi rice. Limits can come from the Food Code, other guidelines, performance standards or experimental results, and one control measure can carry several limits.

Monitoring is the routine measurement or observation at a critical control point, such as taking the internal temperature of chicken after cooking. Verification checks the system around it: watching whether monitoring is done as planned, reviewing those records, confirming corrective actions were taken, and calibrating the thermometers.

FDA's guidance deals with the food first: discard it, or keep cooking or reheat it when safety is not compromised. The process matters too: food that cooled too slowly is reheated and then cooled by a different method, not the one that failed. Corrective-action records let verification confirm the action was actually taken.

They protect food from contamination, control growth from temperature abuse and keep equipment working, through programs such as vendor certification, training, allergen management, buyer specifications, recipe instructions and first-in, first-out rotation. With them in place, a HACCP plan can focus on hazards tied to the food and how it is prepared.

The Food Code lists smoking or curing food to preserve it, adding vinegar or other additives to preserve food, sprouting seeds or beans, and reduced-oxygen packaging that does not meet the code's own safeguards. These processes have historically caused more illness than standard ones and need specialized skills.

Vacuum and modified-atmosphere packs hold back the spoilage organisms that normally show food has gone bad, so Clostridium botulinum toxin can form before the food seems spoiled, and Listeria is also a concern. Without a variance, most such packaging needs a HACCP plan and storage at 41 °F or below, with shelf life capped at 30 days or less.

The model Food Code requires the person in charge to have passed a test that is part of an accredited program, but lets the regulatory authority exempt low-risk operations. Because each jurisdiction adopts its own version of the code, who must be certified, and when, can differ from place to place.

Following the same written procedure every time is how quality and safety criteria are met consistently. FDA suggests SOPs for areas such as employee health, cleaning schedules, chemical storage and pest control, and for risk-factor tasks like measuring temperatures at a set frequency and acting when they are off.

The person in charge must make sure employees are trained in food safety, including allergen awareness, as it relates to their duties; this is operation-specific training, not a rule that everyone pass a certification test. Where the code asks for written proof, as in a HACCP plan or a bare-hand-contact procedure, a training plan goes on file.

The FDA Food Code is a model offered for adoption, not a federal law for restaurants, so state, local and federal jurisdictions decide what to adopt. The body with jurisdiction issues permits, inspects and enforces, which means the rules that bind a kitchen are the ones its own authority adopted.

Once an inspector shows credentials and states the purpose, the person in charge must allow access during operating hours and provide required records. Priority and priority foundation violations are corrected on the spot where possible. Signing the report acknowledges receipt; it is not agreement with the findings.

Priority items directly control a hazard, such as cooking or cooling. Priority foundation items support them, like training, equipment or record keeping. Core items cover general sanitation and maintenance. Priority and priority foundation violations are fixed during the inspection unless the regulator allows up to 72 hours or 10 days; core items get up to 90 days.

Fire, flood, a sewage backup, an extended loss of power or water, misuse of toxic materials or an apparent foodborne outbreak can each be an imminent health hazard. The permit holder stops operating in the affected area, notifies the authority, and may not resume until the authority approves.

The onset of an apparent outbreak is a reason to stop operations and notify the regulatory authority. Investigators may take employee illness histories and specimens, and retained records, such as shellfish tags kept 90 days, let them trace the implicated lot to its source.

Recalled, damaged or spoiled products held for return or credit go in a designated area away from food, equipment and utensils so they are not mistaken for good stock. Records such as beef grinding logs, with supplier lot numbers, help trace a recall to its source and narrow it to the affected product.