21 CFR 117Current Good Manufacturing Practice, Hazard Analysis, and Risk-Based Preventive Controls for Human Food

21 CFR Part 117, Current Good Manufacturing Practice, Hazard Analysis, and Risk-Based Preventive Controls for Human Food, is the centerpiece food safety rule under the FDA Food Safety Modernization Act (FSMA). It replaces legacy 21 CFR Part 110 CGMPs with a preventive, documented system that anticipates hazards, implements controls, and verifies effectiveness. The rule applies to most domestic and foreign facilities that manufacture, process, pack, or hold human food for the United States and are required to register with FDA.

Part 117 integrates updated CGMP requirements with a structured Food Safety Plan led by a Preventive Controls Qualified Individual. The plan identifies reasonably foreseeable hazards, assesses severity and probability, and establishes risk-based preventive controls with monitoring, corrective action, and verification. Where appropriate, validation, product testing, environmental monitoring, and a written recall plan close the loop.

The regulation also addresses hazards controlled earlier in the supply chain. If a supplier significantly minimizes or prevents a hazard prior to receipt, the receiving facility must implement and document a supply-chain program proportionate to risk. These obligations align closely with Foreign Supplier Verification Programs for importers and support FSMA’s preventive, system-wide approach.

In practice, compliance is demonstrated through current CGMPs, clear scientific rationale in the hazard analysis, disciplined execution of controls, and records that are complete, contemporaneous, and readily retrievable for FDA inspection. Facilities that treat Part 117 as a living system—reassessed when products, processes, or suppliers change—tend to fare well during inspections.

Part 117 implements FSMA (Pub. L. 111-353) for human food and is codified in Title 21 of the Code of Federal Regulations. It modernizes CGMPs and embeds risk-based preventive controls, with phased compliance dates that began in 2016 depending on business size and activity. The rule is supported by FDA guidance, outreach training for Preventive Controls Qualified Individuals, and inspection programs that assess both design and execution of controls.

Structurally, the regulation combines general provisions and updated CGMPs with requirements for hazard analysis, preventive controls, monitoring, corrective actions, verification, validation where appropriate, a supply-chain program when hazards are controlled before receipt, records, and a recall plan. It includes modified requirements for certain qualified facilities and tailored expectations for activities such as storage-only holding. Seafood HACCP and juice HACCP processors meet their respective regulations for hazard controls while maintaining applicable CGMPs under Part 117.

Because the rule is risk- and outcome-focused, FDA expects documented rationale at every decision point. When a hazard is not reasonably foreseeable or is not significant, the analysis must show why. When a hazard is controlled through a preventive control, the plan must show parameters, verification, and justification that the control is capable of achieving its objective.

Part 117 generally applies to domestic and foreign facilities required to register with FDA under section 415 of the FD&C Act. Registration status is the starting point for determining coverage. Farms that meet FDA’s farm definition are out of scope and may instead be subject to the Produce Safety Rule. Retail food establishments are regulated primarily by state and local authorities, while certain low-acid canned food pathogen controls remain under specialized regulations with Part 117 covering other hazards.

Facilities that only store packaged food not exposed to the environment must implement CGMPs and, where necessary, temperature control to prevent pathogen growth or toxin formation. Human food by-products intended for animal food have tailored requirements that often reference animal food CGMPs and preventive controls. Storage and distribution activities that can affect allergen cross-contact or temperature-sensitive safety parameters remain within FDA’s preventive focus.

Foreign suppliers and imported products interact with Part 117 through both the receiving facility’s supply-chain program and the importer’s obligations under the Foreign Supplier Verification Programs. When a hazard is controlled before receipt, the receiving facility must verify supplier performance with activities proportionate to risk, such as onsite audits, sampling and testing, or review of records.

Environmental monitoring becomes applicable when a ready-to-eat food is exposed to the environment prior to packaging and there is no subsequent lethality step that would eliminate the environmental pathogen of concern. In such cases, the Food Safety Plan must identify sites, frequencies, methods, and response actions, and must show that the program is capable of detecting harborage conditions in the plant environment.

The hazard analysis is the analytical heart of Part 117. It must identify known or reasonably foreseeable hazards and evaluate severity and probability under normal and reasonably foreseeable conditions of use. Biological hazards include environmental pathogens and spore-formers. Chemical hazards include allergens, cleaning agent residues, mycotoxins, and food contact substances. Physical hazards include glass, metal, and hard plastics. Economically motivated adulteration that affects safety must also be considered.

When the analysis identifies a hazard requiring a preventive control, the facility must establish and implement controls appropriate to the risk. Process controls specify parameters and critical limits. Food allergen controls cover labeling and cross-contact prevention. Sanitation controls address cross-contamination and cross-contact risks. Supply-chain controls apply when hazards are controlled by suppliers. Recall plans outline steps to quickly remove affected product from commerce.

Monitoring ensures controls are consistently applied. Corrective actions and corrections address deviations and minor, isolated issues. Verification confirms that the system is performing as intended and includes calibration, review of records, targeted product testing, and environmental monitoring as appropriate. Validation is required for certain process controls where scientific evidence is needed to demonstrate efficacy.

A strong HARPC program ties each control back to a specific hazard and explains why frequencies, sampling schemes, and acceptance criteria are sufficient. Alignment with vulnerability and fraud programs can clarify boundaries between safety driven HARPC and broader fraud mitigation. See HARPC and related Food Fraud (VACCP) topics for complementary approaches that prevent gaps and duplication.

Part 117 requires a written Food Safety Plan developed and overseen by a Preventive Controls Qualified Individual. FDA recognizes multiple pathways to PCQI qualification, including successful completion of standardized curriculum or other training and job experience sufficient to develop and apply a food safety system. The PCQI role is practical and ongoing, not ceremonial. FDA will expect to meet this person and see evidence of their decisions in the plan and records.

The Food Safety Plan contains the hazard analysis and the preventive controls, along with procedures for monitoring, corrective actions, verification, and validation where appropriate. It also includes a written recall plan that designates responsibilities, communication protocols, lot identification, and effectiveness checks. Reanalysis is required at least every three years or sooner when significant changes occur, such as new ingredients, new equipment, process changes, deviations indicating system failure, or new scientific information.

PCQI accountability rests on documentation. Decisions to designate or not designate a preventive control must be supported. Supplier verification intensity must match the risk profile of the ingredient and supplier performance. Validation files must contain scientific studies, challenge data, or in-plant studies that demonstrate effectiveness under actual conditions.

Training extends beyond the PCQI. Employees must receive training in food hygiene and food safety as appropriate to their duties, with records to demonstrate competency. Cross-functional engagement with sanitation, maintenance, quality, and operations teams strengthens the Food Safety Plan’s credibility during an FDA inspection. For implementation support, see FSMA Preventive Controls PCQI Readiness and the PCQI glossary entry.

Part 117 updates and consolidates CGMP expectations for human food facilities. Personnel must maintain clean outer garments, practice good hand hygiene, and avoid behaviors that could contaminate food. Facilities must be designed to facilitate cleaning and prevent cross-contamination, with adequate drainage, airflow, lighting, and pest exclusion. Equipment must be of suitable design, accessible for cleaning, and maintained to prevent lubricants or fragments from entering food.

Sanitation procedures must address food-contact surfaces, non-contact surfaces that influence contamination risk, and tools and utensils. Sanitizer selection, concentrations, contact times, and rinse steps require documented scientific support and routine verification. Water quality and steam systems must be monitored and controlled. Waste handling and traffic patterns must minimize contamination risk. Allergen cross-contact is a central CGMP theme tied directly to HARPC decisions and preventive controls.

Label control is now safety critical for allergens. Facilities should implement barcode or dual-verification checks, distinct label storage, and line clearance procedures between allergen profiles. Where product exposure occurs, environmental monitoring programs should be designed to detect harborage and to verify sanitation effectiveness. Trending of findings and timely corrective actions reduce recurring risks.

Food-contact materials should comply with applicable regulations and notifications. Documenting material suitability and change control for contact surfaces demonstrates diligence during inspection. Cross-references to materials compliance and cleaning schedules help keep the Food Safety Plan cohesive. See Sanitation and Cleaning Schedule and food-contact material readiness under 21 CFR Part 177 for aligned controls.

When a hazard is controlled before receipt, Part 117 requires a documented supply-chain program. The receiving facility must approve suppliers and determine appropriate verification activities based on the nature of the hazard, supplier performance, and applicable regulations. High-risk hazards, such as Salmonella in certain ingredients or undeclared allergens in complex blends, often demand onsite audits or targeted testing supported by scientifically valid sampling plans.

Supplier verification activities can include reviewing certificates of analysis, auditing against preventive controls and allergen management expectations, and checking regulatory history. The program should define acceptance criteria, frequency, and escalation triggers. When verification identifies concerns, interim controls such as enhanced sampling, alternative suppliers, or additional processing steps must be documented and justified.

Allergen controls span from raw material segregation to finished label verification. Dedicated utensils and equipment, validated cleaning to remove allergen residues, and staged changeovers reduce cross-contact. For ready-to-eat operations, an environmental monitoring program focused on relevant pathogens, appropriate sites, and investigative responses is often necessary to demonstrate control of environmental risks.

Digital supplier management can strengthen preventive controls by maintaining approved supplier lists, tracking corrective actions, and aligning incoming inspection with risk. Explore Approved Supplier List, Supplier Portal, and Supplier Risk Management to operationalize verification and communication. For vulnerability considerations linked to substitution or dilution that affects safety, see Food Fraud (VACCP).

Verification activities demonstrate that the Food Safety Plan is implemented as written and is effective. They include review of monitoring and corrective action records, calibration of instruments, and direct observations of operations. Verification may also comprise product testing and environmental monitoring when these activities provide meaningful assurance of control. Trend analysis helps detect emerging risks and supports focused corrective actions.

Validation is required for certain process controls where scientific evidence is needed to confirm that the control, as implemented, can effectively prevent or significantly minimize the hazard. Evidence can include literature, challenge studies, or in-plant data gathered under worst-case conditions. Validation should be revisited when formulations, equipment, or process parameters change, or when verification indicates a loss of control.

Records are essential and must be accurate, legible, and retained for at least two years or longer if necessary to cover the shelf life and distribution time of products. They must be readily available for official review. Electronic records systems should provide access controls, audit trails, and integrity safeguards consistent with FDA expectations for reliability and trustworthiness.

A written recall plan is mandatory when a preventive control is identified. It should specify roles, lot identification methods, communication templates, and effectiveness checks. Integration with incident reporting and traceability tools facilitates rapid, documented action. See Reportable Food Registry and FSMA 204 for adjacent obligations. For system support, consider Traceability, Recall Management, Document Control, QC Release, and Part 11 alignment under 21 CFR Part 11.

FSMA established a suite of complementary programs. For animal food, 21 CFR Part 507 sets CGMPs and preventive controls analogous to Part 117 but tailored to animal nutrition and hazards. Importers operate under the Foreign Supplier Verification Programs, which evaluate foreign supplier performance and product risks in tandem with receiving facilities’ supply-chain programs. These lines of responsibility should be clearly documented to avoid duplication and gaps.

The Intentional Adulteration rule requires a Food Defense Plan for certain larger facilities, focused on actionable process steps and mitigation strategies against intentional contamination. While distinct from HARPC, it uses similar disciplines of vulnerability assessment, mitigation, and verification, and should be reconciled with sanitation and access control programs to ensure consistency at the plant level.

Seafood and juice processors follow specialized HACCP regulations for hazard controls and generally maintain applicable Part 117 CGMPs. USDA-regulated meat and poultry establishments follow FSIS regulations, which can intersect with preventive approaches for lethality, stabilization, and sanitation. Facilities that handle both FDA- and USDA-regulated products should align documentation and controls to meet both agencies’ expectations without conflict.

Modern supply networks also demand traceability and recall readiness that connect preventive controls to rapid containment. FSMA 204 sets recordkeeping for certain high-risk foods, while broader digital traceability supports faster root-cause analysis and market withdrawals. Explore 21 CFR Part 507, Food Defense Plan, Seafood HACCP Readiness, 9 CFR 416 SSOP Readiness, 9 CFR 430 Listeria RTE Readiness, FSMA 204 Readiness, and 21 CFR Part 1 Subpart L for adjacent requirements.

FDA inspections evaluate whether your food safety system is designed based on actual risks and whether it is implemented consistently over time. Investigators will interview the PCQI, review the hazard analysis, and sample records for monitoring, corrective actions, verification, and validation. They will look for proof that supplier controls are proportional to risk and that environmental and product testing programs answer meaningful questions about control.

Common pitfalls include treating the hazard analysis as a generic template, failing to justify why a foreseeable hazard does not require a preventive control, relying on certificates of analysis without a risk-based supplier verification plan, and running environmental monitoring without defined investigative and corrective pathways. Incomplete allergen label verification, weak line clearance, and poor reconciliation of rework also drive observations.

Record weaknesses frequently undercut otherwise sound controls. Examples include missing review signatures, undocumented calibration of critical instruments, and gap-filled production logs that make it hard to tie lots, lines, times, and parameters together. Electronic systems should enforce completeness, time-stamps, and version control to support data integrity during FDA review.

Practical readiness pairs technical rigor with clarity. Keep the Food Safety Plan current, train operators on the why behind each control, and pre-stage evidence binders for high-risk controls. Consider internal mock inspections that trace a lot from receiving through shipping, including supplier verification, allergen changeovers, environmental results, and recall drills. See Inspection Readiness, Audit Readiness, and Mobile Audits for structured practices that sustain day-to-day compliance.

Operationalizing Part 117 requires control at the point of work and evidence at the point of inspection. V5 Ultimate connects hazard analysis, preventive controls, and supplier verification to production execution and records. Teams plan once in the Food Safety Plan, then run the plan every shift with digitized checklists, interlocks, and monitored parameters. When conditions drift, structured deviations, alerts, and CAPA routing keep decisions documented and timely.

Supplier and ingredient risks flow into receiving and batch records. Approved supplier status, COA checks, targeted sampling, and audit outcomes are visible at dock and line. Allergen changeovers, sanitation releases, and label verifications are enforced with role-based sign-offs and time-stamped evidence. Environmental and product tests trend alongside process data to validate control and trigger focused investigations. When a recall is necessary, lot-level traceability and communication toolkits compress time to action.

Electronic records carry access controls and audit trails that align with FDA expectations for trustworthy data. Integrated calibration and maintenance schedules protect critical measurements. Management review dashboards surface lagging and leading indicators so the PCQI can reanalyze with confidence. Whether you operate one facility or many, V5 scales preventive controls and documentation without sacrificing local nuance.