The FDA Food Code and Regulatory Authority

Nearly every temperature and procedure on either exam traces back to one document. Knowing what that document is, what it contains, and what legal weight it carries is itself exam material.

What information does the FDA Food Code contain?

The FDA Food Code contains science-based recommendations for safeguarding public health in retail and foodservice operations, organized into eight chapters that cover management and personnel, food, equipment and utensils, water and plumbing and waste, physical facilities, poisonous or toxic materials, and compliance and enforcement, plus supporting annexes.

Laid out, the Code covers:

Behind the chapters sit annexes carrying the reasoning: the public health rationale for the provisions, model forms and guides, and a HACCP guidance annex. If a rule in this study material has a number attached to it, the Code chapter above is where it lives.

The Code is revised on a four-year cycle, with supplements issued in between. The current basis for the 9th Edition is the 2022 Food Code plus its Supplement of November 2024, which is where the written allergen notification requirement, the food safety management system definition, the disinfection definition, and the food defense employee awareness requirement come from.

The Food Code is a model, not a law

This is the single most tested fact about the Code. The FDA Food Code is not federal law. It is a model that the FDA publishes for state, local, tribal, and territorial governments to adopt. Until a jurisdiction adopts it, it binds nobody.

What follows from that matters in a real kitchen:

• Your regulatory authority is your state or local health department, not the FDA. They issue the permit, run the inspections, and enforce the code.
• Adoption is uneven. Jurisdictions adopt different editions, and some amend the text. A state may still be operating on an older edition, or may impose a stricter rule than the model.
• When local rule and model code differ, the local rule governs. If your jurisdiction requires something stricter, you follow the stricter requirement.

On the exam, an answer choice saying the FDA inspects restaurants, or that the Food Code is federal law, is wrong every time.

Which agency does what

Two of these get mixed up constantly. The CDC does not inspect restaurants and does not write the Food Code; it studies outbreaks, and its five risk factors shape what the Code addresses. The USDA, not the FDA, is behind the inspection stamp on a case of chicken.

Permits and plan review

A food establishment needs a permit to operate, issued by the local regulatory authority, and it must be posted. Operating without one is grounds for closure.

Before a new build or a major remodel, the regulatory authority conducts a plan review: drawings, equipment specifications, menu, and anticipated volume are submitted and approved before construction. It is easier to move a handwashing sink on paper than after the tile is down.

Regulatory inspections

An inspection measures whether the operation meets minimum food safety standards. Passing is a floor, not a grade for excellence.

Inspections are usually unannounced, and that is the point. An inspection scheduled in advance measures how well an operation prepares, not how it runs.

An inspector may not be refused entry. This is the most testable fact in the topic. Inspectors have legal authority to access the operation during hours of operation, and refusing entry can cost the operation its permit. There is no version of this where turning an inspector away at a busy moment is the right call.

The person in charge must be available to accompany the inspector, and must be able to demonstrate knowledge of food safety principles: through certification, by answering the inspector's questions, or by explaining how the operation controls its hazards.

After the walk-through:

1. Discuss the violations while the inspector is still on site, so you know exactly what was observed and why it is a violation.
2. Agree the correction time frames. Different violations carry different deadlines.
3. Take your copy of the written report.
4. File it. Keep copies of all inspection reports on site.

Some jurisdictions require the operation to notify the public when its report becomes available, through a posted placard, a window sticker, or a health department website. Requirements vary, so confirm locally.

An operation can also request a variance, a written approval from the regulatory authority to depart from a specific requirement. A variance often carries a HACCP plan requirement with it.

Self-inspection

The inspection is the outside view. The inside view is the self-inspection, which should be run more often than the regulator visits and modeled on the regulator's own form. Self-inspections are one of the simplest tools for achieving Active Managerial Control, and they let a manager find the problem before someone with citation authority does.

Food Handler versus Manager: how deep to go

Food Handler candidates need the essentials: the FDA writes the Food Code, the local health department enforces it and inspects, an inspector cannot be refused entry, and food handlers cooperate and answer honestly. The Food Handler exam is 40 questions and passes at 75%, or 30 correct.

Manager candidates need the whole picture: what the Code contains and that it is a model rather than law, the four federal agencies and what each does, permits and plan review, the person in charge's demonstration of knowledge, the full inspection sequence and its follow-up, public notification, variances, and self-inspections as a tool of Active Managerial Control. Manager questions here are usually scenarios asking what the manager should do next.

Practice set

1. What information does the FDA Food Code contain? A. Federal criminal penalties for foodborne illness B. Science-based recommendations covering personnel, food, equipment, facilities, chemicals, and enforcement C. A list of approved suppliers D. State licensing fees

2. What legal status does the FDA Food Code have? A. It is federal law binding on all operations B. It is a model that state and local governments may adopt C. It is voluntary industry guidance with no regulatory role D. It applies only to interstate chains

3. Which agency inspects and regulates meat, poultry, and egg products? A. FDA B. USDA C. EPA D. CDC

4. Which agency investigates foodborne illness outbreaks? A. CDC B. USDA C. EPA D. The local fire marshal

5. A health inspector arrives unannounced during a busy lunch service. What should the manager do? A. Ask the inspector to return at a quieter time B. Refuse entry until the owner arrives C. Admit the inspector and accompany them D. Close the operation for the day

6. What can happen if an operation refuses an inspector entry? A. Nothing, entry is voluntary B. A written warning only C. The permit can be revoked D. The inspection is rescheduled automatically

7. Who must be able to demonstrate knowledge of food safety principles during an inspection? A. Every food handler B. The person in charge C. The dishwasher D. The supplier

8. After an inspection, what should the manager do with the report? A. Discard it once violations are corrected B. Send it to the FDA C. Keep a copy on file at the operation D. Post it only if the score was high

9. Which is the correct relationship between the Food Code and local regulations? A. Local regulations may not differ from the Code B. Local jurisdictions adopt and may amend the Code, and the local rule governs C. The Code overrides local rules D. Local rules apply only to new construction

10. What is a variance? A. A difference between two thermometer readings B. A written approval from the regulatory authority to depart from a specific requirement C. A failed inspection item D. A type of permit for temporary events

Answers

1. B. The Code's eight chapters cover management and personnel, food, equipment, water and plumbing and waste, physical facilities, toxic materials, and compliance. A is not what a model code does. C and D are not in it.

2. B. It is a model for adoption. A is the most common wrong answer on this topic. C understates it, since adopted provisions are enforceable. D confuses the Code with interstate commerce authority.

3. B. The USDA, through its Food Safety and Inspection Service. A regulates most other foods. C handles water and pesticides. D does no inspection of operations.

4. A. The CDC investigates outbreaks and conducts surveillance. B and C have different mandates. D is unrelated to food safety.

5. C. Admit the inspector and accompany them. A and B obstruct an inspector who cannot legally be refused. D is a drastic and unnecessary response.

6. C. The permit can be revoked. A is false, inspectors have legal authority to enter. B understates the consequence. D invents a process.

7. B. The person in charge, by certification, by answering questions, or by explaining the operation's controls. A overstates the requirement. C and D are not accountable for it.

8. C. Keep copies on file at the operation. A destroys the record of what was found. B sends it to an agency that does not inspect. D treats a compliance record as marketing.

9. B. Jurisdictions adopt, sometimes amend, and then enforce, and the local rule governs. A and C invert the relationship. D limits it to a context that is only one part of the Code.

10. B. A written approval to depart from a requirement, often carrying a HACCP plan obligation. A is thermometer accuracy. C is a violation. D is a permit type.

This hub is study material for candidates preparing for ServSafe certification exams. It is not affiliated with, endorsed by, or connected to the National Restaurant Association Educational Foundation, and it does not certify anyone. Certification is issued only by the exam provider.