Summary. Food and beverage businesses answer to more agencies than almost any other consumer industry, and the boundaries between them are historical rather than logical. The failures are predictable and cheap to prevent: an ingredient whose regulatory status nobody confirmed, a claim that converts a food into an unapproved drug, a label defect discovered after a print run, and a recall the company cannot scope because the lot code is on a carton the consumer discarded. This toolkit runs the arc from concept through a recall: which agency labels the product, ingredient status, the FSMA food safety plan, the label panel by panel, claims substantiation, co-packers and importers, and the two exposures that end companies.

What this toolkit is for, and who should use it

Two facts organize this field. First, nearly every requirement is a formatting or documentation rule with a determinate answer, which makes the failures unusually easy to prevent and unusually expensive to discover after a print run or a production run. Second, the two exposures that actually end companies — a recall the company cannot scope, and a criminal charge against an officer under the strict liability provisions of the Food, Drug, and Cosmetic Act — are addressed by the same investment: records good enough to identify what went where within a day, and a documented safety program that a responsible officer actually sees.

This toolkit is for founders, quality and regulatory staff, and counsel working with a packaged food, beverage, or supplement business, from a first product through national distribution.

Roadmap at a glance

  1. Classify the product — which agency, which regime.
  2. Confirm ingredient status — the analysis most often skipped.
  3. Facility registration and the food safety plan.
  4. Suppliers, co-packers, and importing.
  5. The label — panel by panel.
  6. Claims — and the line that makes a food a drug.
  7. State overlays — cottage food, Proposition 65, and ingredient bans.
  8. Traceability and recall readiness.
  9. Recall execution.
  10. Liability, insurance, and the Park doctrine.
  11. The compliance calendar.
  12. A worked sequence, and the questions companies ask.

Stage 1 — Classify the product

FDA regulates the great majority of the food supply and labels nearly all of it. USDA FSIS regulates meat, poultry, and processed egg products, requires continuous inspection at slaughter, and — unlike FDA — requires prior label approval in defined circumstances. TTB regulates most alcohol beverages, requiring a certificate of label approval before sale.

The boundaries produce well-known oddities. An open-faced sandwich is FSIS and a closed one is FDA. A pizza with meat is FSIS and a cheese pizza is FDA. And in the alcohol category, wine below 7 percent alcohol and beers not made from both malted barley and hops — which sweeps in most hard seltzers, many ciders, and sorghum beers — are labeled under FDA rules with a Nutrition Facts panel, a fact producers frequently discover after printing.

Confirm separately whether the product is a dietary supplement, which uses a Supplement Facts panel and a distinct regime including new dietary ingredient notification and the more demanding cGMPs at 21 C.F.R. Part 111.

Confirm whether a standard of identity exists for the food, because a product that purports to be that food and does not conform is misbranded and must use a different name.

Stage 2 — Confirm ingredient status

This is the analysis most often skipped and the most expensive to skip, because an unlawful ingredient makes every unit adulterated as a matter of law regardless of whether anyone was harmed.

For each ingredient, confirm one of: an approved food additive with a regulation; generally recognized as safe status, supported either by a published GRAS notification or by a documented independent conclusion of safety by qualified experts; a prior sanction; or another lawful basis. "Widely used elsewhere" is not one of the answers.

Confirm color additives are approved and, where required, certified. Confirm pesticide residues are within EPA tolerances. Confirm food contact substances and packaging materials are approved or otherwise lawful.

For botanicals, novel proteins, and cannabinoid ingredients, expect the analysis to be genuinely contested, and document it.

Stage 3 — Facility registration and the food safety plan

Register the facility with FDA under 21 U.S.C. § 350d and renew biennially. FDA may suspend a registration, which halts shipment entirely.

Implement current Good Manufacturing Practices and, unless exempt, the Preventive Controls for Human Food requirements: a written food safety plan prepared or overseen by a preventive controls qualified individual, containing a hazard analysis covering biological, chemical (including radiological and allergen), and physical hazards; preventive controls — process, allergen, sanitation, supply chain, and others; monitoring, corrective action, and verification procedures; a recall plan; and records.

Where a hazard is controlled by a supplier, implement the supply chain program with supplier approval and verification activities.

HACCP remains mandatory for seafood (21 C.F.R. Part 123) and juice (Part 120), and USDA requires it for meat and poultry.

Also confirm applicability of the Produce Safety Rule for covered farms, the Sanitary Transportation rule, and the Intentional Adulteration food defense requirements.

Stage 4 — Suppliers, co-packers, and importing

A co-packer does not absorb the brand owner's liability. The name on the package is the responsible party for the label, remains liable for adulteration and misbranding, and is what consumers and plaintiffs see.

Every co-packer and ingredient supplier agreement should carry: specifications with tolerances; an allergen control program; a change notification requirement covering ingredients, suppliers, and processes; the right to audit and to receive third-party audit reports and any Form 483 observations; insurance with the brand as additional insured; indemnity; and recall cost allocation that does not simply say each party bears its own costs.

Importing triggers the Foreign Supplier Verification Program: hazard analysis of the food, evaluation of the supplier's performance and the food's risk, verification activities including an annual onsite audit where the hazard warrants it, a DUNS number identified in the entry filing, and records. FSVP failures are a leading cause of import refusal, and the obligation runs to the importer regardless of the supplier's assurances.

Stage 5 — The label

Build it to the regulation, panel by panel, and have it reviewed before printing.

Principal display panel: the statement of identity in bold, and the net quantity of contents in metric and U.S. customary units, in the prescribed type size, within the bottom 30 percent.

Information panel, immediately to the right with no intervening material: the ingredient statement in descending order of predominance with sub-ingredients declared; the allergen declaration for milk, eggs, fish, crustacean shellfish, tree nuts, peanuts, wheat, soybeans, and sesame, naming the specific tree nut, fish, and shellfish; the name and place of business; and nutrition labeling.

The Nutrition Facts panel with the serving size derived from the reference amount customarily consumed, calories in the enlarged type, added sugars, vitamin D and potassium with actual amounts, and dual-column labeling where required — plus the small business exemption analysis, which is forfeited by making a nutrient content claim.

Allergen control deserves separate emphasis. Undeclared allergens are the leading cause of Class I food recalls, and the dominant cause is a label mix-up at changeover or an unnoticed supplier change rather than a formulation error. Label reconciliation at the line and supplier change notification prevent most of them.

Resources

Stage 6 — Claims

Nutrient content claims — "low fat," "good source of," "light" — each has a regulatory definition and conditions of use. Health claims must be authorized, qualified with the required disclaimer, or based on an authoritative statement with notification, and each carries model language and disqualifying nutrient levels.

The line that matters: a claim that the product diagnoses, cures, mitigates, treats, or prevents disease makes it an unapproved new drug, and the evidence is not limited to the label. FDA looks at the website, social media, influencer content, amplified testimonials, and the product name together. "Immunity," "detox," "anti-inflammatory," and "reduces anxiety" are the recurring problem words.

"Natural" has no FDA definition and only a longstanding policy, and that vacuum has produced sustained class action litigation. If the claim is used, maintain a written, defensible basis and recognize that it buys litigation risk in exchange for marketing value.

"Organic" is certified under the National Organic Program, with defined tiers. "Gluten-free" is defined at under 20 ppm with testing. Bioengineered food disclosure follows 7 C.F.R. Part 66. "Made in USA" follows the FTC's all-or-virtually-all standard.

Assemble a substantiation file before the claim is made. A study conducted afterward does not cure the violation, and the FTC requires competent and reliable scientific evidence at the time the claim is made.

Put a claims review gate in the marketing workflow. It is the cheapest control in this toolkit.

Stage 7 — State overlays

Cottage food laws in every state permit home production of specified non-potentially-hazardous foods for direct sale, with dollar limits, venue restrictions, labeling requirements, and prohibitions on interstate sale. Exceeding the limits or accepting a wholesale order moves the operation into full commercial regulation — facility registration and preventive controls — which is a large step to take by accident.

Proposition 65 requires a clear and reasonable warning before knowingly exposing a California consumer to a listed chemical, with a private right of action and a bounty structure that has produced substantial enforcement over lead and cadmium in foods, acrylamide, and heavy metals in supplements. Test first, because many products fall below the safe harbor level and an unnecessary warning carries its own costs.

State ingredient bans with future effective dates now prohibit specific additives in several states, and state labeling, allergen, and menu requirements layer on. Preemption is uneven — the FDCA expressly preempts certain differing state labeling requirements while leaving substantial room, and POM Wonderful LLC v. Coca-Cola Co., 573 U.S. 102 (2014), held that FDCA compliance does not preclude a Lanham Act false advertising claim by a competitor.

Stage 8 — Traceability and recall readiness

Apply lot and date codes to the product itself, maintain production records linking lots to component supplier lots and shifts, maintain distribution records to the retailer level, and capture purchaser data where the channel permits.

For foods on the Food Traceability List, maintain the key data elements at critical tracking events and the ability to produce a sortable electronic spreadsheet within 24 hours.

Write a recall plan — the team by role with alternates, decision authority, the reporting analysis for each applicable agency, notification templates, call center activation, reverse logistics, and the insurer notice list — and run a mock recall annually.

Know the Reportable Food Registry obligation: a report within 24 hours where there is a reasonable probability that use will cause serious adverse health consequences or death.

Stage 9 — Recall execution

Decide and document within hours, not days. Determine scope from the traceability records. Notify FDA and file the reportable food report if applicable. Notify the trade directly with stop-sale instructions and a response mechanism. Provide public notification where the product reached consumers, jointly with the agency. Conduct effectiveness checks at the level FDA specifies. Document disposition — return, destruction, or reconditioning. Conduct root cause analysis and corrective action, which is what FDA will focus on afterward. Request termination in writing once effectiveness checks are complete.

Resources

Stage 10 — Liability, insurance, and the Park doctrine

Product liability coverage generally does not cover recall expense, business interruption from a recall, or lost profits. Product recall or contaminated product insurance is a separate line — confirm it exists, read what triggers it, and understand the sublimits.

Adulteration and misbranding are strict liability misdemeanors on a first violation under 21 U.S.C. § 333(a), and under United States v. Dotterweich, 320 U.S. 277 (1943), and United States v. Park, 421 U.S. 658 (1975), a responsible corporate officer may be convicted for a corporate violation without personal participation or knowledge, where the officer had the authority and responsibility to prevent or correct it. A second offense or one with intent to defraud is a felony, and convictions support exclusion and debarment.

That makes food safety a personal risk for executives, and it makes a documented system giving officers actual visibility both a defense and a reason to build one.

Stage 11 — The compliance calendar

Biennially: facility registration renewal.

Annually: food safety plan reanalysis and reanalysis on any material change; supplier verification activities including required onsite audits; mock recall; allergen control program review; label review against any formulation or supplier change; Proposition 65 testing where applicable; insurance review including the recall trigger; and FSVP records review for imported ingredients.

Continuously: complaint coding and pattern review; environmental monitoring where the process warrants it; label reconciliation at every changeover; and a claims review gate before anything consumer-facing goes live.

On every change: a formulation change, a supplier change, a packaging size change, a claim change, or a new co-packer is a labeling and food safety event, and each should trigger a documented review.

Stage 12 — A worked sequence, and the questions companies ask

From home kitchen to national brand. A baker sells at a farmers market under a cottage food exemption — an approved non-potentially-hazardous product, a home-produced labeling statement, a food handler course, and a revenue cap, with no wholesale and no interstate shipment. Accepting a wholesale order is outside the exemption everywhere and converts the operation into an unregistered commercial facility the day it ships.

Moving to a licensed shared-use kitchen brings facility registration, cGMP compliance, and — once the operation is no longer a qualified facility — a full food safety plan with allergen controls addressing changeover in a shared space.

Retail packaging brings the full label: statement of identity, net quantity in the bottom 30 percent, ingredient statement with sub-ingredients, a "Contains" statement naming the specific tree nuts, name and place of business, and a Nutrition Facts panel using the reference amount rather than the baker's preferred serving — with the small business exemption tracked, because it is lost silently when volume crosses the threshold.

Moving to a co-packer is where brands mistakenly believe they have outsourced compliance. They have not; the contract must carry specifications, allergen controls, change notification, audit and Form 483 access, insurance, indemnity, and recall cost allocation.

Claims arrive next — "clean," "no artificial anything," and "supports gut health." The first two are unregulated and litigable and require a substantiation file. The third is read against the company's entire marketing record, and if that record implies treatment of a disease, the product has become an unapproved drug.

Importing a specialty ingredient makes the company an importer with FSVP obligations, which is a common and unwelcome surprise.

"Do we need FDA approval before selling a food?" No — foods are not approved. But every ingredient must be lawful, the facility must be registered, and the label must comply.

"Is my recipe protected?" Not by copyright. Protect the formula as a trade secret and the brand as a trademark.

"What is the fastest way to get a warning letter?" Health claims in social media. Companies routinely say on a podcast or in a reposted testimonial what they carefully avoided on the package.

Master resource index

Articles

Guides

Checklists

Related toolkits

External and primary sources

This toolkit is educational and not legal advice. Food regulation is detailed and changes frequently, compliance dates for several FSMA rules have been extended, and state ingredient and labeling laws vary. Consult qualified food and drug counsel before launching a product, making a claim, or responding to a contamination event.