FSMA 204: the 2028 food traceability deadline explained

What is FSMA 204

FSMA 204, also known as the Food Traceability Rule, is a  part of the FDA's broader effort to reduce foodborne illness by improving the traceability of high-risk foods. The rule requires covered businesses to keep detailed records that allow a product to be quickly traced back through the supply chain in the event of contamination.

The rule exists because a growing number of foodborne illness outbreaks exposed gaps in how quickly the food industry could trace contaminated products to its source. FSMA 204 closes those gaps by requiring standardized recordkeeping and faster information sharing between the different supply chain partners, so that businesses are prepared to hand over accurate records the moment they're needed.

Who does the rule apply to

The rule applies to businesses that manufacture, process, pack, or hold foods that appear on the FDA's Food Traceability List (FTL), which is a list of foods that the FDA has identified as being at a higher risk for outbreaks. The list includes foods such as leafy greens, tomatoes, cucumbers, melons, soft and semi-soft cheeses, shell eggs, nut butters, certain finfish and shellfish, and ready-to-eat deli salads. If your product contains a listed food as an ingredient and that ingredient stays in the same form it appears on the FTL, the rule generally applies to your product too.

One important exemption is meat, poultry, and egg products that are regulated by the USDA's Food Safety and Inspection Service. These are excluded from FSMA 204, since they already fall under separate USDA oversight. If your operation handles meat or poultry, see our article on traceability in meat processing. It covers the different requirements that apply to your business instead.

Key requirements of the rule

Businesses that are subject to the rule need to have systems in place that can capture and store specific traceability information at specified points in the supply chain.

1. Recordkeeping

Covered businesses must keep accurate records for the products that are on the Food Traceability List, including information such as the product's origin, handling dates, and processing steps. Records need to be complete and easy to retrieve, so that a fast response is possible during an investigation.

2. Rapid response

The rule requires businesses to produce traceability records within 24 hours of a request during a recall or an outbreak investigation. That speed is essential, because the faster a contaminated product can be located and removed, the smaller the impact is going to be on public health and on the business itself.

3. Data standardization

The rule also requires that traceability data be kept in a standardized, paper or electronic, sortable format that can be shared with the FDA. Businesses need to ensure that their systems can produce that format on request rather than reformatting records after the fact.

Critical tracking events and key data elements

The rule was created around two core concepts that determine exactly what needs to be tracked and when.

• Critical Tracking Events (CTEs)
  Specific points in the supply chain where traceability data has to be captured, such as receiving, transformation, and shipping.

• Key Data Elements (KDEs)
  Specific pieces of information that need to be recorded at each CTE, such as traceability lot codes, product descriptions, quantities, unit measurements, and the locations and dates associated with the event.

Every covered business also needs a written traceability plan that documents its recordkeeping procedures, identifies which of its products appear on the FTL, and names a designated point of contact for any traceability questions.

The FSMA 204 compliance deadline: what's changed

FSMA 204 originally carried a compliance deadline of January 20, 2026. That date has since moved. In 2025, the FDA proposed extending the deadline by 30 months, and in November 2025, Congress directed the FDA through the Continuing Appropriations Act of 2026 not to enforce the rule before July 20, 2028. The FDA has confirmed it's complying with that direction, so July 20, 2028 is now the operative compliance and enforcement date.

So, what does this extension mean? The requirements of the rule itself haven't changed, only the timeline for enforcing them. Businesses that wait until closer to 2028 to start building compliant systems are likely to find that the coordination that the rule requires (especially getting accurate data from upstream suppliers) takes a lot longer than expected. Starting now, even with a longer runway, gives your business a competitive advantage.

Why the rule is important

The goal of the Food Traceability Rule is to improve response times when contamination happens. Stronger traceability reduces the risk to public health and limits the financial damage that comes with large, imprecise recalls. But, it’s important to realize that complying isn't only about avoiding penalties. It's also about helping build a food system that can respond quickly when something goes wrong.

Falling short on compliance can lead to costly recalls, legal exposure, and reputational damage that's very hard to recover from. The rule is meant to ensure that every business in the supply chain, from growers to retailers, is ready to quickly trace and remove any contaminated product, which leads to a more reliable food system overall.

How Datahex helps with compliance

At Datahex, this regulation can be difficult to stay ahead of, especially with a compliance date that's already been moved once. Our software is built to help businesses capture and manage the information that the rule requires, so that compliance becomes part of daily operations rather than a last-minute effort.

Our Paperless Forms captures real-time data at every traceability point, replacing paper records that are slow to search and easy to lose. MyHaccpPlan connects hazard analysis with traceability requirements, to give you one system for food safety planning instead of several disconnected tools. And Supplyline connects you with your suppliers, so that traceability data consistently flows across the entire supply chain rather than breaking down at the handoff points. If you're ready to prepare your traceability program ahead of the 2028 deadline, talk to an expert about what that could look like for your business.