Skip to content
Get Started
    November 15, 2022

    FSMA 204 Final Rule: Roadmap to Enhanced Traceability Recordkeeping

     Note: This article was originally published on November 15, 2022 and updated on March 23, 2026.

    What's New with FSMA 204?


    • FSMA 204 Compliance Deadline: July 20, 2028

    • Latest Constituent Update: February 19, 2026

    • New Q&A draft guidance from the FDA clarifies traceability rule requirements, compliance date extension, and exemptions 

    • Finalized exemption for certain Grade "A" cottage cheeses from the Food Traceability List 

    • FSMA 204 Stakeholder Engagement Sessions announced

    As the food industry moves further into the implementation phase of the Final Traceability Rule outlined in section 204 of the FDA Food Safety Modernization Act (FSMA), the collective focus has begun to shift from understanding — getting its arms around the substance of the new compliance guidelines — to action — mapping out how they'll actually get there.  

    While the core requirements of FSMA 204 have remained consistent since 2022, the path to compliance has been reshaped thanks to widespread awareness and education efforts. The most significant change is the extension of the compliance deadline to July 20, 2028. This extra time revises the roadmap to achieving compliance, allowing for a more strategic and informed path to enhanced traceability.

    Our Take: FDA Announces FSMA 204 Compliance Delay, But Food Safety Can't Wait

    White text on a blue background with a black and white headshot of Trustwell CEO Katy Jones: "Leaders in food safety and supply chain management understand that traceability isn’t just about passing an audit."

    NEW: FSMA 204 Industry Q&A Draft Guidance

    New draft guidance issued by the FDA on February 19, 2026 answers several scenario-based questions for the edification of industry stakeholders. Significant takeaways include the application of exemptions for small produce farms with annual sales under $25,000, partial exemptions for ad hoc purchases at the retail level, and specific recordkeeping relief for products subjected to a "kill step" or commingled raw agricultural commodities.  

    The document also defines logistical roles, identifying the initial packer as the first to pack a raw agricultural commodity for commerce, and explains that "transformation" events like repacking or relabeling require new records to ensure continuity in the supply chain.  

    Listen In: FSMA 204 Is Coming: Is Your Supply Chain Ready? 

    Ultimately, firms remain responsible for providing requested records to the FDA within 24 hours, even if a third party manages the data on their behalf, and the FDA emphasizes that the digitization of traceability records will help ensure that they can fulfill such a request.  

    The Grade “A” Cottage Cheese Exemption (Effective February 20, 2026)

    While cottage cheese originally fell under the "Fresh Soft or Soft Unripened Cheese" category on the Food Traceability List (FTL), the FDA has granted a specific exemption for IMS-listed Grade “A” cottage cheese.

    • Who is exempt? Facilities that manufacture, process, pack, or hold cottage cheese that is regulated under the Grade “A” Pasteurized Milk Ordinance (PMO) and appears on the Interstate Milk Shippers (IMS) List.

    • Why did this change? The FDA concluded that the existing PMO regulations already provide rigorous, science-based oversight and processing requirements. Because these standards already address the risk factors that landed cottage cheese on the FTL, additional FSMA 204 record-keeping was deemed unnecessary for public health protection.

    • What is still required? You aren't completely off the hook. Even exempt facilities must still maintain "one-up/one-back" records. This means you must still identify the immediate previous source and the immediate subsequent recipient of the product, but you do not need to maintain the complex CTE/KDE digital data or provide the 24-hour electronic spreadsheet for this specific product

    FDA Quarterly Stakeholder Engagement Sessions on FSMA 204

    The FDA also announced a series of quarterly stakeholder engagement sessions designed to address the practical challenges of implementing the Food Traceability Final Rule before the July 20, 2028 deadline.

    The inaugural session was held on March 6, 2026 with the Partnership for Food Traceability (PFT), an industry-driven, independent, sector-neutral nonprofit partnership with the FDA and state governments. General public sessions are scheduled to begin in the second quarter of 2026.

    Regulatory compliance is not a static destination, but a continuous journey. As the FDA refines its approach to FSMA 204 — from the 2028 enforcement extension to new exemptions for Grade “A” dairy — our mission remains to translate complex legal mandates into actionable business strategies.

    Trustwell is committed to helping you navigate the complexities of food safety regulations as they evolve. We actively monitor FDA announcements, Congressional directives, and industry shifts to ensure our guidance reflects the most current requirements. As the FSMA 204 Food Traceability Rule continues to change, we will update our resources and share the critical insights your business needs to remain compliant. 


    FSMA 204: The Food Traceability Rule

    FSMA 204 establishes traceability recordkeeping requirements for designated foods on the FDA’s Food Traceability List (FTL). This groundbreaking and ambitious final rule is built upon the foundation of the Food Safety Modernization Act (FSMA), with Section 204 requiring the FDA to designate foods for which additional recordkeeping requirements are appropriate and necessary to protect public health. The focus of FSMA is to transform our nation’s food safety system by shifting the focus from reacting to foodborne illness to preventing it. 

    An important outcome of the Food Safety Modernization Act (FSMA), and specifically Section 204's Food Traceability Rule, is that companies handling foods on the FTL must move from basic “one-up/one-back” traceability to much more granular, event-based traceability and recordkeeping. This has significantly changed how many companies manage operations, data, and supplier relationships. Now, with the new July 20, 2028 compliance deadline approaches, industry leaders have moved beyond basic prevention into the era of full digital supply chain traceability.  

    And if they haven't, now is the time to start.  

    The Updated FSMA 204 Compliance Deadline: July 20, 2028

    A quote from Julie McGill, Trustwell's VP of Supply Chain Strategy & Insights: As we got closer to that 2026 deadline, the FDA was getting feedback from stakeholders and companies were sharing their concerns over the compliance date. They were finding that their suppliers just weren't ready."

    Originally slated for early 2026, the FDA first proposed a 30-month extension for FSMA 204 enforcement in March 2025, and a subsequent congressional directive in November 2025 made it official. 

    This additional time is intended to allow industry operators at every level to be thorough and rigorous as they develop comprehensive traceability programs that can collect and provide the required data. It's a very big, very important job, and the updated FSMA 204 compliance deadline acknowledges and allows for that.  

    Read More: The Smart Leader's Guide to the New FSMA 204 Compliance Date

    While 2028 may seem distant, the complexity of capturing Critical Tracking Events (CTEs) and Key Data Elements (KDEs) across multiple supply chain partners requires aggressive action today. 

    Start Here: Download This Free, Comprehensive Guide to FSMA 204 Compliance (Updated for 2026)

    What is the Food Traceability List (FTL)?

    At the core of FSMA 204 compliance is the Food Traceability List (FTL). This list is a major factor in determining whether your business must comply with the enhanced recordkeeping requirements of the final traceability rule. Specifically, If you manufacture, process, pack, or hold any food item found on the FTL, or use an FTL item as an ingredient in a way that maintains its fresh state, you are legally required to comply by the July 2028 deadline.

    The FTL is a risk-based catalog of foods that the FDA has identified as having a higher potential for foodborne illness outbreaks.  It includes a wide range of categories and specific items, such as:

     

    Crustaceans Bivalve Molluscan Shellfish Finfish Cheese Eggs Nut Butters
    Crustaceans Bivalve Molluscan Shellfish Finfish  Cheese Eggs Nut butters
    Leafy Greens Ready to Eat Salads Fresh-cut Vegetables Herbs Sprouts  
    Leafy Greens Ready-to-Eat Salads Fresh Cut Vegetables Herbs Sprouts  
    Peppers Tomatoes Cucumbers Tropical Fruit Fresh Cut Fruit Melons
    Peppers Tomatoes Cucumbers Tropical Fruit Fresh Cut Fruit Melons

    Keep in mind that these examples are not representative of the comprehensive FTL, which the FDA formally reviews and updates every five years to ensure the regulations reflect the most current food safety data. Because items can be added or clarified during these cycles, it is critical for businesses to stay informed of the latest designations and exemptions.

    For a complete and definitive list of commodities on the FTL, from specific soft cheeses to various fresh-cut fruits and seafood, it's always best to review the FDA’s full Food Traceability List. Trustwell strives to stay abreast of FTL changes and updates, and you can now download our simplified, quick-reference Food Traceability List Cheat Sheet, recently updated for 2026.

    Get Your Copy: FSMA 204 Food Traceability List Cheat Sheet

    Recent Updates and Clarifications to the FTL

    As of 2026, several key clarifications have been made regarding the scope of the FTL:

    • Form Matters: The rule primarily targets "fresh" forms of commodities. For example, fresh spinach is on the FTL, but frozen spinach is not. Similarly, fresh peppers are covered, while dried peppers are exempt.

    • Ingredient Inclusion: If an FTL food is used as an ingredient (e.g., fresh tomato slices in a pre-packaged sandwich), the final multi-ingredient product remains subject to the rule because the FTL item is still in its fresh form.

    • The "Kill Step" Ending: If an FTL food undergoes a validated "kill step" (like high-heat pasteurization or pressure processing), the enhanced traceability requirements typically end at that point in the chain.

    Determining your FTL status is a critical first step in your roadmap. Because the FDA is required to review and update this list every five years, businesses must implement flexible traceability systems that can adapt as new food categories are added or removed. 

    Enhanced Traceability Recordkeeping: CTEs and KDEs

    A comprehensive FSMA 204 supply chain traceability diagram illustrating the flow of Critical Tracking Events (CTEs) and Key Data Elements (KDEs) from farm to fork. The visual maps the July 20, 2028, compliance path for Food Traceability List (FTL) items, including Harvesting, Transformation, and Shipping events, and highlights the transition from manual records to a digital traceability thread.

    There were several differences between the proposed and the final rule for FSMA 204. These updates centered on a more granular definition of the supply chain checkpoints where data capture is now mandatory to ensure full, lot-level visibility. Here are the mandatory Critical Tracking events (CTEs) that require specific recordkeeping:

    • Harvesting: Applies to farms and farm mixed-type facilities and means activities that are traditionally performed on farms for the purpose of removing raw agricultural commodities (RACs) from the place they are grown or raised and preparing them for use as food.

    • Cooling: Active temperature reduction of a raw agricultural commodity (RAC) using hydrocooling, icing (except icing of seafood), forced air cooling, vacuum cooling, or a similar process. 

    • Initial Packing: Packing a raw agricultural commodity (RAC), other than a food obtained from a fishing vessel, for the first time. 

    • First Land-Based Receiver: The person taking possession of a food for the first time on land directly from a fishing vessel. 

    • Shipping: An event in a food's supply chain in which a food is arranged for transport from one location to another. This includes intracompany shipments between different physical addresses. 

    • Receiving: An event in a food's supply chain in which a food is received by someone other than a consumer. 

    • Transformation: An event involving manufacturing, processing, or changing a food (e.g., by commingling, repacking, or relabeling) where the output is a food on the Food Traceability List (FTL). 

    Your Traceability Plan: The Digital Requirement

    If you are subject to the requirements of the final rule, you must establish and maintain a traceability plan. In 2026, the standard for these plans has evolved from simple documentation to digital frameworks that support interoperability. Your plan must contain:

    1. Procedures for record maintenance: A description of the procedures used to maintain records, including the specific format and storage location

    2. Identification of FTL foods: A description of the procedures used to identify foods on the Food Traceability List (FTL) within your operations

    3. Traceability lot codes: An explanation of how you assign traceability lot codes to FTL foods

    4. Point of contact: A designated individual who can answer questions regarding your traceability plan and records and how to reach them

    5. Farm map (if applicable): A map showing growing areas with geographic coordinates for any applicable farms


    If you are utilizing a third party to capture or maintain data on your behalf your plan should also include:

      • Identification of the external traceability platform or service provider

      • A description of how Key Data Elements (KDEs) and Critical Tracking Event (CTE) records are captured and stored

      • An explanation of the process for retrieving and providing records to the FDA within the required 24-hour timeframe

      • The internal roles and responsibilities for accessing and submitting those records

    Data Collection: The 24-Hour Rule

    The FDA has made it clear that "recordkeeping" no longer means "filing cabinets." During an outbreak or investigation, the agencies expectations for data retrieval are strict:

    • 24-Hour Response: You must provide requested records to the FDA within 24 hours of a request

    • Electronic Sortable Spreadsheet (ESS): When requested during an outbreak or recall, records must be provided in an electronic sortable spreadsheet. Many legacy paper-based systems are finding it impossible to meet this requirement, making digital transformation a necessity rather than an option

    • Retention: Records must be maintained for 24 months (2 years)

    Free Download: The Ultimate Data Integrity Checklist for Food Safety & Quality Teams


    Your Roadmap to 2028 Traceability: Achieving FSMA 204 Compliance with Trustwell

    In order for food companies to be successful in their FSMA 204 journey, we recognize that: 

    1. Tech-Enabled traceability and digital interoperability is essential for competitive food businesses and provides business value beyond compliance and consumer protection
    2. Companies are at risk if they do not understand their role and approach to capturing and sharing enhanced traceability data. Companies also need to realize that our food supply chain is an ecosystem, and leading brands are utilizing industry standards to enable data capture and sharing across their supply chains.
    3. The extended timeline is not a reason to delay; it's a strategic head start that teams can use to test their supply chain traceability programs before the July 2028 deadline turns "best effort" into a high-stakes legal requirement.

    Trustwell has been an active member of this journey since the beginning. Our teams helped shape policy at the national level, including participating in the FDA’s traceability pilots that were implemented as part of FSMA Section 204. We have worked hand-in-hand with the food industry’s leading innovators to develop our industry-leading traceability and food transparency solutions.

    Case Study: Taco John’s Embraces Tech-Enabled Traceability with Trustwell’s FoodLogiQ

    We support some of the largest foodservice operators, food manufacturers and grocers in the world. This provides us with a unique perspective regarding today’s challenges and future opportunities facing food industry partners when implementing traceability programs

    On-Demand Webinar: A Fresh Take on Traceability with Del Monte: How FSMA 204 is Reshaping Complex, Global Supply Chains

    Withdrawal Details in FoodLogiQ RecallSafe, digital, traceable food systems are achievable. All it takes is a new approach that leverages a combination of tools, technology and expertise that can evolve alongside consumer demands and industry regulations.

    Trustwell leads the industry in tech-enabled food traceability with FoodLogiQ's family of solutions, which together form a unified supply chain management platform built on a foundation of GS1 Standards, utilizing Key Data Elements (KDEs) and Critical Tracking Events (CTEs) to support lot-level traceability. 


    Ready to Get Started?

    As part of our commitment to your success, Trustwell provides the technical expertise and regulatory intelligence needed to navigate the July 20, 2028, compliance deadline.

    Whether you are identifying which of your products appear on the Food Traceability List or mapping your Critical Tracking Events, our team is here to support your digital transformation. 

    Get in touch today to leverage our expertise in food supply chain strategy and FSMA 204 compliance and ensure your brand is strategically prepared for the next era of food safety.

    Other posts you might be interested in

    View All Posts