FSMA 204 — formally the Food Traceability Rule, 21 CFR Part 1 Subpart S — is the most over-marketed regulation in small food manufacturing. Vendors imply a universal deadline. The rule is considerably narrower than that, and the deadline has moved.
Two facts first, because they change what you should do about it:
The compliance date is July 20, 2028. Not January 2026. FDA announced a 30-month extension in March 2025, published it in the Federal Register in August 2025, and Congress codified the delay in the Continuing Appropriations Act of 2026. FDA has been clear that the requirements are unchanged — only the date.
It only reaches foods on the Food Traceability List. If nothing you handle is on the FTL, Subpart S does not apply to you, whatever else you must comply with.
This page is not legal advice. It is the shape of the rule, so you can work out whether to spend time on it.
Does it reach your product?
Three questions, in order.
Is any food you handle on the FTL? The list is specific, and it is a list of foods rather than categories of business. It runs to items such as certain fresh fruits and vegetables, fresh herbs, leafy greens, melons, sprouts, shell eggs, nut butters, cheeses (some), and various seafood. Check your ingredient list against FDA's published list rather than reasoning from what sounds risky.
If yes, is it still in its listed form? This is the part that decides most small producers' answer, and the part vendor pages skip. The rule covers foods on the list and foods that contain them as ingredients — but only while the ingredient remains in the form in which it is listed. Fresh produce that stays fresh keeps its listed status. A listed ingredient that you cook, bake, ferment, acidify or otherwise transform out of that form generally takes the finished product outside the rule.
So a salad packer handling fresh leafy greens is squarely covered. A hot sauce maker who cooks those same peppers, or a bakery using them in a filling, is often not. "Often" is doing real work in that sentence — the determination is ingredient-by-ingredient and process-by-process.
If yes, does an exemption apply? The rule carries a long list of full and partial exemptions, including thresholds for very small farms, and limited requirements for retail food establishments and restaurants below a sales threshold. FDA maintains the current exemptions and thresholds alongside the rule itself. Thresholds are inflation-adjusted, so read them from FDA rather than from a blog post — including this one.
What the rule requires from those it covers
Three things, and none of them name a product you have to buy.
Key Data Elements at Critical Tracking Events. The rule defines seven events where records must be kept: harvesting, cooling, initial packing, first land-based receiver, shipping, receiving, and transformation. Each carries its own set of data elements, and all of them tie back to a traceability lot code.
For a manufacturer or co-packer, three of the seven do the work:
- Receiving — what arrived, its traceability lot code, from whom, when, and where.
- Transformation — the lot codes going in, the new lot code coming out, what was made and how much. This is your batch record, described in regulatory language.
- Shipping — what left, its lot code, to whom, when, and from where.
A written traceability plan. Your recordkeeping procedures, how you identify FTL foods you handle, how you assign traceability lot codes, and a point of contact. Growers additionally need farm maps with coordinates. This is a document, not a system, and most producers do not have one.
An electronic sortable spreadsheet within 24 hours. When FDA requests traceability information during an outbreak or public health threat, you must be able to supply it as an electronic sortable spreadsheet within 24 hours, or another agreed timeframe. This is the requirement that makes paper-only records insufficient — not their accuracy, but the impossibility of sorting and sending a binder inside a day.
FDA also allows covered entities to satisfy the rule using records they already create for business purposes. You do not need a parallel compliance system; you need your existing records to carry the required elements and be exportable.
What to actually do
If nothing you handle is on the FTL, stop worrying about Subpart S and note the conclusion somewhere, with the date you checked and the ingredient list you checked against. Revisit it when you add an ingredient or FDA revises the list.
If you are covered, or expect to be:
- Write the traceability plan. It is the cheapest requirement and the one most often missing.
- Confirm your receiving records capture the supplier's traceability lot code, not just the delivery.
- Confirm your batch records link input lot codes to the output lot code — the transformation event.
- Confirm your despatch records link the output lot code to the customer.
- Test the export. Not "could we produce a spreadsheet" but produce one, from a randomly chosen lot, and time it.
Steps two to four are ordinary batch traceability, which is why producers who keep good batch records find compliance mostly a documentation exercise. Producers who do not, find it a rebuild.
The reason that does not depend on the rule
Most small-batch producers we talk to are not covered by FSMA 204 and still need traceability, because the pressure comes from three other directions: a supplier recalling a lot you used, a client asking for batch records as a condition of production, and a GFSI-benchmarked audit — SQF, BRCGS — requiring both traceability records and a periodic exercise proving they work.
If you are choosing what to fix first, fix the chain from ingredient lot to delivered unit. How to trace a recalled ingredient lot is that procedure, and it is the same chain the rule asks for from the producers it does cover.