FDA Food Code 2022: A Practical Guide for Food Businesses

Food safety at the point of sale is governed by a patchwork of state and local rules. The FDA Food Code is the common blueprint behind many of them, but it is often mistaken for federal law or for the rules that govern a manufacturing plant. That distinction affects permits, procedures, training, records, and the evidence a brand gives its retail partners.

What the FDA Food Code is, and what it is not

The U.S. Food and Drug Administration publishes the Food Code as a model for safe food handling in retail and foodservice. It gives regulators a science-based template for restaurants, grocery stores, delis, bakeries, schools, hospitals, nursing homes, vending operations, and mobile food units. The FDA’s Food Code overview explains its purpose and lists every published edition.

The model does not automatically become a federal requirement. A state, county, city, tribal authority, or territory adopts an edition through its own law or regulation, often with additions and omissions. For a retail operation, an inspector enforces the text adopted in that jurisdiction; the FDA PDF remains the model reference. Two locations in the same region can therefore operate under different editions or different amendments.

The reason for the model is consistency. The Centers for Disease Control and Prevention estimates that 48 million people in the United States get sick from foodborne illness each year, with 128,000 hospitalizations and 3,000 deaths. A shared set of preventive controls gives local programs a common technical starting point while leaving enforcement with local government. CDC food-safety facts.

Which edition applies now

The latest full edition published by FDA is the 2022 Food Code, the 10th edition. Its version date is January 18, 2023. FDA issued a Supplement to the 2022 Food Code in November 2024 to incorporate recommendations from the 2023 Conference for Food Protection. The supplement is a model amendment, so it has legal effect only after an adopting authority incorporates it.

FDA’s 2026 priority plan says the agency will release an updated Food Code in 2026. Until a new edition is published and adopted, the 2022 edition and the 2024 supplement are the current federal model to use when building a program. The 2022 Food Code page provides the full document, print version, and change summary; you can also download the full 2022 Food Code PDF. The 2024 supplement explains the interim updates.

FDA’s 2024 adoption report shows why version control matters: 11 state agencies in seven states had adopted the 2022 version, covering 16.06% of the U.S. population. Thirty agencies in 24 states had adopted either 2022 or 2017, and 46 agencies in 36 states had adopted one of the three most recent editions. The state-by-state directory links each state’s retail and foodservice code.

Who falls under the Food Code?

Start with the activity and the buyer, rather than the product name. The same kitchen can contain a retail operation covered by the Food Code and a processing operation covered by federal manufacturing rules.

FDA’s retail-establishment exemption flowchart defines a retail food establishment by its primary function: selling food directly to consumers. A business-to-business sale does not count as a consumer sale. FDA’s preventive-controls rule covers registered facilities that manufacture, process, pack, or hold human food, unless an exemption applies.

The boundary matters for brands. The Food Code does not replace a manufacturing food-safety plan, and a certificate of analysis does not replace retail controls such as handwashing, cold holding, or allergen communication. A brand can need both systems when it runs retail preparation alongside wholesale production.

How the code is organized

The chapter titles are stable across editions, while the detailed language and section numbers can change.

Requirements carry one of three risk designations. Priority (P) provisions directly control a foodborne-illness hazard, such as cooking or handwashing. Priority foundation (Pf) provisions provide the people, equipment, records, or procedures needed to control that hazard. Unmarked provisions are core sanitation and maintenance requirements. A P or Pf mark helps a team decide what to correct first and what evidence an inspector may request.

FDA’s Decoding the Food Code training explains the numbering, cross-references, defined terms, and risk designations in more detail.

Core controls operators have to run

The following are the 2022 model’s practical baselines. An adopted local code can be more restrictive or use a different edition.

Temperature and time controls

TCS food supports pathogen growth when it remains in the 41°F to 135°F range for too long. The code controls that risk with measurable limits:

The FDA’s date-marking fact sheet confirms that the code allows calendar dates, weekdays, color codes, or another system that identifies the discard day. It does not prescribe a particular sticker or require the preparation time on the label.

People, allergens, and sanitation

• Person in charge and employee health: A designated person in charge must oversee operations. Employees report symptoms and diagnoses that can transmit through food. The code requires food-allergen awareness training and controls bare-hand contact with ready-to-eat food.
• Allergen communication: The 2022 edition added sesame as the ninth major food allergen and requires written notification of major allergens in unpackaged food where that edition is adopted. Bulk food available for self-dispensing must identify the food sources of its major allergens. The FDA sesame update explains the retail provisions.
• Approved sources and contamination prevention: Food must come from lawful, approved sources and be protected from cross-contamination during receiving, storage, preparation, display, and transport. Molluscan shellfish identification, supplier records, and parasite-destruction records apply to relevant products.
• Facilities and equipment: Food-contact surfaces need to be cleanable and maintained. Handwashing sinks, potable water, plumbing, waste systems, chemical storage, and pest controls are part of the code because they support the process controls above.
• Special processes: Reduced-oxygen packaging, curing, smoking for preservation, sprouting, sushi rice acidification, and other higher-risk processes can require a HACCP plan, a variance, or both, depending on the process and the local authority.

What changed in 2022 and in the 2024 supplement

The most useful way to read the update is as a set of operational changes, not a list of renumbered paragraphs.

The FDA supplement release contains the complete list. A supplement is not self-executing law; it becomes enforceable through adoption by the relevant authority.

A practical workflow for brands and manufacturers

Use one compliance map for every place food is made, held, or sold:

1. Classify each activity. Record whether the site serves consumers directly, supplies another business, or does both. Include co-manufacturers, fulfillment centers, retail kitchens, pop-ups, and online orders.
2. Identify the adopted code. Link each retail site to its state or local code, edition, amendments, permit, and inspection contact. The FDA state directory is a useful index, but the local adopted text controls.
3. Map requirements to owners and records. For each applicable section, assign an owner and define the SOP, training, log, corrective action, and retention period. Make the P and Pf controls visible in the daily workflow.
4. Separate process evidence from product evidence. Temperature logs, cleaning records, allergen matrices, employee-health forms, HACCP plans, and variances demonstrate retail controls. Product testing, supplier certificates, and lot-level certificates of analysis address ingredient and finished-product hazards under the relevant manufacturing or quality program. Neither category substitutes for the other.
5. Keep the handoff intact. Assign who receives samples, approves lots, releases product, and responds to out-of-spec results. A SKU can have manufacturing, retail-preparation, and customer-facing records.

At Light Labs, our ISO 17025-accredited lab tests food and supplement products for contaminants and other quality attributes. Our testing platform keeps results, action limits, retest notifications, and COA exports in one workspace. That evidence helps a quality team manage supplier and product decisions; it does not replace a retail kitchen’s Food Code procedures or permit.

How we help brands connect testing to compliance

Retail partners and internal quality teams need a reliable record of what was tested, which limit applied, and what happened when a result was out of spec. We bring those details together across finished goods, raw materials, SKUs, and co-manufacturers, with fast turnaround and audit-ready exports. The result is a clearer link between product data and the decisions a Food Code or FSMA program requires.

The practical takeaway

Treat the FDA Food Code as the retail and foodservice blueprint, then anchor your program to the version your jurisdiction adopted. Keep retail operating controls separate from manufacturing preventive controls, and connect both to lot-level evidence and clear ownership. When you need a single place to run the testing side of that system, start your workflow with Light Labs.