FSMA 204 Delayed to 2028: What Food Manufacturers Should Do Now

FSMA 204 was supposed to be enforced starting January 2026. The deadline got pushed to July 20, 2028. That's a 30-month extension.

If you're treating that as breathing room, be careful. The rule hasn't been weakened. The requirements haven't changed. The FDA is using this window to publish guidance, run listening sessions, and build industry engagement. When July 2028 hits, they'll expect you to be ready.

The facilities that start now will be fine. The ones that wait until late 2027 won't be.

What the Rule Actually Requires

FSMA 204 creates additional traceability recordkeeping for high-risk foods. The idea is simple: when there's an outbreak, the FDA should be able to trace contaminated products through the supply chain in hours, not days.

It applies to anyone who manufactures, processes, packs, or holds foods on the Food Traceability List (FTL). That covers:

• Leafy greens (lettuce, spinach, kale, spring mix)

• Fresh-cut fruits and vegetables

• Shell eggs

• Nut butters

• Soft and semi-soft cheeses (brie, feta, mozzarella, blue cheese)

• Fresh herbs

• Fresh and frozen finfish and shellfish

• Certain tropical tree fruits

• Tomatoes, peppers, sprouts, and melons

If your facility handles any of these, or uses them as ingredients in a form that matches how they appear on the FTL (fresh spinach in a salad kit, for example), you're covered by the rule.

CTEs and KDEs: The Core of It

The rule boils down to two concepts. Critical Tracking Events (CTEs) are the moments in your supply chain where you need to capture data. Key Data Elements (KDEs) are the specific data points you capture at each one.

The CTEs:

• Harvesting: Removing and preparing raw commodities for food use

• Cooling: Active temperature reduction (hydro-cooling, vacuum cooling, ice)

• Initial packing: First time a raw commodity gets packed

• First land-based receiving: First entity taking possession from a fishing vessel (seafood only)

• Receiving: Taking physical possession of a tracked food

• Transformation: Processing that changes a food into a different product

• Shipping: Sending a tracked food to another location

At each CTE, you record KDEs: product descriptions, lot codes, quantities, unit measurements, locations, and dates. You keep those records for two years. And when the FDA asks for them, you produce a complete, sortable electronic file within 24 hours.

That 24-hour window is the part most facilities aren't ready for. If your traceability data lives in paper logbooks, scattered spreadsheets, or disconnected systems that need manual assembly, you won't hit that timeline. It's a technology problem as much as a compliance problem.

Why the Deadline Moved

The original compliance date was January 20, 2026. In 2025, the FDA formally extended it by 30 months.

The extension came through the Continuing Appropriations Act, which directed the FDA not to enforce the Food Traceability Rule before July 20, 2028. The same spending bill cut enforcement funding for parts of the Produce Safety Rule (wine grapes, hops, pulse crops, almonds). Congress also mandated quarterly stakeholder engagement and told the FDA to recommend additional flexibilities for lot-level tracking within 180 days.

The practical reasons: smaller operations and farms needed more time. The FDA's Human Foods Program has lost significant staff, slowing administrative processes. But outbreak-driven inspections are still fully resourced. The enforcement intent behind FSMA 204 hasn't softened. Just the timeline.

What FDA Has Done Since

The FDA hasn't gone quiet during the extension. In early 2026, they made several moves:

Q&A guidance addressing how the rule applies to farms, farmers' markets, fishing vessels, retail, and restaurants. It also clarifies requirements for intracompany shipments, commingling, and transformation activities.

New traceability plan examples for food processors, distribution centers, and aquaculture facilities. Plus supply chain examples for eggs, produce, nut butter, and dual-jurisdiction operations.

Quarterly stakeholder sessions. The first one ran March 6, 2026, for Partnership for Food Traceability members. Public sessions follow each quarter.

Translations of key documents in six languages: Spanish, French, Chinese, Thai, Vietnamese, and Indonesian.

A cottage cheese exemption for IMS-listed Grade A products.

All of this signals the same thing: the FDA is building the infrastructure for enforcement, not backing away from it.

What to Do Now

Don't waste the extension. The smartest move is to use it.

1. Figure Out If You're Covered

Pull up the Food Traceability List and map it against everything you manufacture, process, pack, or hold. The rule also covers foods that contain FTL items as ingredients, as long as the ingredient stays in the same form it appears on the list.

This gets tricky fast. A frozen pizza with fresh mozzarella? Probably covered. A snack bar with roasted peanuts (not nut butter)? Probably not. Work through your product list carefully.

2. Test Your Current Traceability

For each CTE in your operation, ask yourself:

• Are we capturing all the required KDEs today?

• Where does that data live? Paper? Spreadsheet? ERP? Three different systems?

• Could we produce a complete, sortable electronic record within 24 hours if the FDA asked right now?

• Can we trace a product one step forward and one step back?

If the answer to any of those is "no" or "not sure," you've got work to do before July 2028.

3. Be Honest About Your Systems

The 24-hour electronic response requirement makes this a data and technology problem. If you're still on paper or running disconnected systems, you'll need something that can:

• Capture KDEs at each CTE in real time

• Store records in a centralized, searchable format

• Generate sortable electronic reports on demand

• Connect with your suppliers' and customers' systems for one-up, one-back traceability

That doesn't mean ripping everything out. But it does mean honestly assessing whether what you've got can handle a 24-hour FDA request. A modern traceability platform can sit on top of existing systems and add the recordkeeping layer FSMA 204 requires.

4. Talk to Your Supply Chain Partners

FSMA 204 doesn't stop at your loading dock. Traceability data has to flow between partners. If your suppliers can't give you the KDEs you need, or your customers aren't ready to receive yours, the chain falls apart.

Start these conversations now:

• What traceability data can they provide today?

• What format is it in?

• Are they aware of FSMA 204?

• Do you have data-sharing agreements in place?

5. Join the FDA Listening Sessions

The quarterly stakeholder sessions are a real opportunity to shape how the rule gets interpreted. If you've got specific implementation concerns (cost, tech, supply chain complexity), bring them. Monitor the FDA FSMA 204 page for dates.

6. Start Drafting Your Food Traceability Plan

The rule requires every covered facility to maintain a written Food Traceability Plan covering:

• How you assign and maintain lot codes

• Your procedures for each CTE

• How you link KDEs to specific products and lots

• Your process for responding to FDA records requests

Draft it now, even as a working document. It forces you to find gaps while you still have time to close them.

A Realistic Timeline

This is how I'd use the remaining time:

Now through Q3 2026: Scope it. Figure out which products are covered, audit your traceability capabilities, and find the gaps. Start supplier conversations.

Q4 2026 through Q2 2027: Build. Pick your technology, start implementation, draft your Traceability Plan. Hit the FDA stakeholder sessions.

Q3 2027 through Q1 2028: Test. Go live with new systems, run mock exercises. Can you actually produce a complete record in 24 hours? Find out now, not when it counts.

Q2 2028: Validate. Full mock FDA request. Verify completeness. Confirm your supply chain partners can hold up their end.

The Bigger Picture

FSMA 204 is one piece of a larger shift toward digital, real-time traceability. Retailers and food service companies are already pushing suppliers toward lot-level tracking. GFSI-benchmarked standards like SQF Edition 10 are raising expectations across the board, including for food safety culture and documentation. The traceability technology market is projected to triple by 2034.

Facilities that build strong traceability now won't just be FSMA-compliant. They'll be faster on recalls, stronger on customer audits, and they'll have the kind of operational visibility that comes from actually knowing where every lot has been.

If your traceability still runs on paper and spreadsheets, that's not going to cut it when the FDA calls. Beacon's supply chain and lot tracking tools are built for exactly this. See what it looks like.