FSMA Preventive Controls and Food Safety Plans, FALCPA and Sesame Allergen Labeling, Nutrition Labeling Rules and Lot Traceability Recordkeeping: Compliance for US Bakery Software

This article is part of our series on Custom Bakery Production Planning Platform Development for US Wholesale Bakers: Building a Recipe Scaling, Allergen Scheduling and Route Delivery System

Introduction: When the Schedule Is a Control

Compliance obligations mostly tell a business what to record. One of these central obligations tells a bakery what order to work in, which is why this article leads with this point.

A bakery running several allergens through shared equipment cannot separate them physically. So, it controls cross-contact through sequencing and sanitation, documented in the food safety plan as a preventive control. 

That makes the production schedule the delivery mechanism for an allergen control rather than an operational artifact. Bakery compliance software that can rearrange the schedule can rearrange the control. 

In custom software development, sequencing rules belong in the scheduler as constraints. 

Labeling rules depend on the product and sale channel, nutrition rules on business size, and recall records on lot data, which requires web application development to keep queryable. This guide provides educational content on the compliance requirements for bakery businesses and not legal advice.

FSMA Preventive Controls and Food Safety Plans

The food safety plan is where the allergen sequence is written down as part of the FSMA preventive controls for a bakery. Every other obligation in this article connects back to it.

What the Plan Contains

A food safety plan is a written plan built on a hazard analysis identifying the biological, chemical, and physical hazards that require control. An allergen cross-contact is treated as a hazard in its own right. 

A preventive control is established where a hazard requires it, with adequate monitoring, corrective action procedures, verification activities and records. The plan is prepared or overseen by a qualified individual with appropriate training. 

Allergen and Sanitation Controls Specifically

Allergen preventive controls address both labelling accuracy and cross-contact prevention. For a bakery, this means the sequencing rules, the sanitation between defined transitions,  and the verification that both the other steps were carried out. 

Sanitation controls address the cleaning that supports them. Both these controls generate records, which are examined in an inspection. 

Facility Status Changes What Applies

Registered facilities are subject to the full requirements. Facilities that meet defined criteria based on sales may qualify for modified requirements, while other exemptions exist on activity. 

Several smaller bakeries qualify and many do not, and the outcome is specific. Notably, the requirements for a particular bakery needs to be verified with a qualified individual and the thresholds should never be published. Confirming which of these requirements apply is one of the first things a requirements-first review settles before a bakery commissions a custom production platform.

FALCPA and Sesame Allergen Labeling

As per Federal law, major food allergens are identified and these require declaration on packaged food items. The list was expanded in recent years as sesame was added. This change has particular consequences for bakeries, since sesame appears widely in bread and pastry and in ingredients where it is not obvious. 

Bakeries need to make the declaration through the ingredient list or a separate statement in prescribed form. 

For products sold unpackaged at retail, the requirements differ and labelling rules applying to packaged food are generally not applicable. However, other obligations and state requirements may apply. 

Advisory labelling needs careful consideration. This is because statements about possible cross-contact are voluntary and not a substitute for preventive controls. A facility that cannot control cross-contact does not solve the problem through FALCPA sesame allergen labeling. Also, regulators have been clear that advisory statements must not be used in place of good practice. 

A related practice that can be uncomfortable to a section of customers is worth naming rather than recommending. After the addition of sesame to the list of food allergens, some manufacturers intentionally added sesame to their products so that the declaration would be accurate. 

They didn’t implement controls to eliminate sesame allergens from their products. Thus, it was not a food safety strategy and it materially reduced the options available to people who cannot consume sesame. 

Thus, any bakery production planning platform must incorporate certain essential compliance criteria. These include allergen attributes derived from ingredients through sub-recipes, formula changes triggering label review by people, and label content versioned with the formula. These criteria build on the everyday modules covered in this overview of bakery software features, where formulas, sub-recipes and production schedules are set up in the first place.

Nutrition Labeling Rules

Packaged food must be subjected to nutrition labelling. Whether a bakery must incorporate this function depends on the exemptions that are worth establishing rather than assuming. 

A small business exemption exists based on employee numbers and units sold. It is subject to filing a notice, and a bakery that grows past the threshold, or that files late, is in a different position than it believes. 

Other nutrition labeling exemptions may be applicable based on how the product is sold. These include food sold directly to consumers at the place of preparation. 

In cases where labeling is required, the content that needs to be labeled is prescribed. It includes serving size, the nutrients that must be declared, and format requirements. Notably, the format has been revised in recent years. 

Claims that are made on packages have their own requirements. Descriptors about content, health claims, and structure-function claims are governed, and a bakery that describes a product as high in something has made a regulated claim. 

For certain retail food establishments that meet the location-count criteria, there are separate menu labelling obligations. 

Bakery production planning platforms need to have the chain from ingredient lots to customers unbroken and queryable in both directions. Records should be retained for the applicable period and the platforms should be able to produce a customer list from a lot number quickly. In practice, that chain is built at the receiving dock and the delivery stop, where mobile app development lets staff scan ingredient lots on arrival and drivers confirm which lots reached which customer.

Bakery businesses must verify the exact regulations that apply, and never publish thresholds or formats. 

Lot Traceability Recordkeeping

Obligations regarding traceability for a bakery come from more than one direction. It is worth separating them. 

General recordkeeping requirements enable identification of the immediate previous source of an ingredient and the immediate subsequent recipient of a product. This entails taking one step back and one step forward, which is the baseline that every food facility carries. 

As per preventive control requirements, businesses need to add records supporting the food safety plan, with data elements captured at defined events. Most finished bakery products are not included in that list, but the ingredients that bakeries use might be. This is why bakeries need to consider related obligations at receipt. 

The compliance timing for these requirements has been extended, so both applicability and dates should be verified rather than recalled. 

A recall plan is required separately where a possible hazard requires preventive control. It covers how the affected product would be identified and retrieved and how the business should communicate about it. 

Bakery production planning platforms need to have the chain from ingredient lots to customers unbroken and queryable in both directions. Records should be retained for the applicable period and the platforms should be able to produce a customer list from a lot number quickly. 

What an Inspection Actually Asks For

Obligations are easy to understand for bakeries by understanding what is actually requested during an inspection or an audit, and the pattern is consistent. Here are all the requirements that are considered during such inspections:

• The food safety plan itself, current and signed, with the hazard analysis supporting the established controls. 
• Monitoring records for the preventing controls, covering the period under review. For a bakery, it is largely the evidence that sequencing and sanitation happened as specified. 
• Corrective action records where monitoring showed a deviation. Auditors examine this more closely than compliant records because they show how the operation behaves when something goes wrong. 
• Verification records, including any testing. 
• Supplier verification for ingredients where a hazard is controlled upstream. 
• Training records for the people performing the work and for the qualified individual. 
• A traceability exercise, frequently conducted live. The inspection officials specify a lot number and question the staff where it went. 
• Lastly, a test is conducted which a platform either passes or does not pass. It is worth rehearsing before an audit asks. 
• Retention periods also apply, Bakeries should verify the same before the inspection. 

Other Obligations

The other requirements that bakeries must fulfill to ensure alignment with existing compliance regulations include: 

• Registration of facilities and their periodic renewal. 
• Inspection and licensing by state authorities. It operates alongside federal requirements and varies with the state in consideration. 
• Weights and measuring requirements for net contents on packaged products. 
• Shelf-life declaration and date coding, with state requirements varying on what may be stated. 
• Certification obligations where the bakery claims organic, kosher, halal, gluten-free or similar, each with its own scheme requirements and records. 
• State-specific warning requirements applicable to certain products or ingredients. 
• Employment and workplace safety obligations, given early shifts, hot equipment, and repetitive work. 
• Vehicle requirements for the delivery fleet. 
• Customer audit requirements, which frequently exceed the regulatory floor for grocery accounts. 

Final Thoughts

Certain bakeries encode their sequencing rules as constraints derive allergen information from ingredients instead of typing it. These businesses also trigger label review when a formula changes, and can produce a customer list from a lot number in minutes. 

Such businesses end up with a platform that supports the food safety plan rather than sitting beside it. This article contains educational and not legal advice. As such, businesses should confirm the specifics with a preventive controls qualified individual and the applicable authorities.

For businesses that are scoping a bakery platform, NewAgeSysIT can run a traceability exercise on the current records before design begins. This shows whether the chain actually connects. Learn more about digital transformation solutions from one of the leading AI software companies in the United States.