FDA 21 CFR Part 110 & 117 Current Good Manufacturing Practice Compliance Checklist: Facility Sanitation, Pest Control & Employee Hygiene Requirements for Food Processing Plants

Master FDA CGMP compliance with our 21 CFR Part 110 & 117 checklist covering facility sanitation, pest control, and employee hygiene for food processors.

1. 40-WORD ANSWER BLOCK: What Is an FDA CGMP Compliance Checklist for Food Processing?

An FDA CGMP compliance checklist for food processing covers 21 CFR Part 110 and Part 117 requirements including facility sanitation, pest control, employee hygiene, equipment maintenance, and preventive controls mandated under FSMA for human food manufacturers.

---

2. Why FDA CGMP Compliance Is Non-Negotiable for Food Processing Plants

The landscape of food safety in the United States underwent a seismic shift with the signing of the FDA Food Safety Modernization Act (FSMA) on January 4, 2011. Touted as the most sweeping reform of food safety laws since 1938, FSMA fundamentally altered the approach from reactive response to proactive prevention. At its core, FSMA, and specifically 21 CFR Part 117, redefines the Current Good Manufacturing Practice (CGMP) standards for food processing plants, building upon the foundational requirements of the older 21 CFR Part 110. For any food manufacturer, understanding and meticulously adhering to these regulations isn't merely good practice; it is a critical mandate for legal operation and consumer safety.

The relationship between 21 CFR Part 110 (often referred to as the legacy CGMP) and 21 CFR Part 117 (the modernized CGMP with Preventive Controls) is one of evolution. While Part 110 laid essential groundwork for hygienic practices, facility design, and personnel, Part 117 expanded these requirements significantly, introducing a scientific, risk-based approach to food safety. This shift necessitates that food processors not only understand the "what" of CGMP but also the "why" and "how" of preventive controls.

The enforcement reality underscores the gravity of compliance. The FDA conducted over 1,600 domestic and foreign food facility inspections in FY2023. Consistently, CGMP violations rank among the top cited deficiencies, often leading to significant regulatory action. The consequences for non-compliance are severe and span a wide spectrum: from official Warning Letters, which are publicly disclosed and can severely damage a company's reputation, to injunctions, consent decrees, mandatory recalls that decimate product lines and finances, and, in extreme cases, facility shutdowns or even criminal prosecution. Beyond regulatory penalties, the financial toll of a foodborne illness outbreak, including legal fees, settlements, and lost sales, can be catastrophic.

These regulations cast a wide net, covering virtually all domestic and foreign facilities that manufacture, process, pack, or hold food for consumption in the United States. This includes a vast array of operations, from large-scale commercial bakeries and meat processors to beverage manufacturers and produce packing houses. The scope of 21 CFR §117.1 explicitly details this applicability, with certain exemptions for very small businesses or specific activities, but the general principle is clear: if you produce food for the U.S. market, you must comply.

Indeed, the data speaks volumes. In recent years, the FDA has recorded thousands of import refusals annually for various reasons, including microbiological contamination, unsanitary conditions, and general adulteration, many of which stem directly from CGMP failures in foreign facilities. For instance, in FY 2022, the FDA issued over 1,700 import refusals related to "filthy, putrid, or decomposed" conditions, a direct indicator of CGMP lapses. These refusals, often accompanied by detention without physical examination (DWPE) alerts, highlight the FDA’s unwavering commitment to preventing unsafe food from reaching consumers. Proactive compliance is the only viable strategy to navigate this stringent regulatory environment and ensure the continuous, safe operation of your food processing plant.

---

3. Understanding the Regulatory Framework: 21 CFR Part 110 vs. Part 117

Navigating FDA regulations can be complex, especially when two major sets of rules address similar aspects of food production. Understanding the distinct roles and interconnectedness of 21 CFR Part 110 and 21 CFR Part 117 is fundamental for effective compliance.

3a. 21 CFR Part 110 — The Original cGMP Standard

21 CFR Part 110, officially titled "Current Good Manufacturing Practice in Manufacturing, Packing, or Holding Human Food," represents the bedrock of food safety regulation. Enacted in 1969 and last amended significantly in 1986, it established the basic sanitary requirements and practices that all food facilities were expected to follow. This regulation focused on preventing adulteration of food by ensuring proper sanitation, maintenance, and personnel practices.

Part 110 covered broad categories such as:

Personnel: Requirements for cleanliness, disease control, and hygienic practices.
Buildings and Facilities: Design, construction, and maintenance for sanitary operations.
Equipment: Requirements for design, construction, and maintenance to prevent food contamination.
Production and Process Controls: General controls to prevent contamination during processing, packing, and holding.
Warehousing and Distribution: Safeguards for storage and transport.

While largely superseded for most food processors by Part 117, Part 110 still holds relevance. For instance, it remains fully applicable to dietary supplements (under 21 CFR Part 111, which references many Part 110 principles) and certain food categories specifically exempt from Part 117, such as seafood and juice facilities which operate under HACCP regulations. Its foundational principles regarding basic hygiene and sanitation continue to be essential for all food operations. Key subparts included Subpart A (General Provisions), Subpart B (Buildings & Facilities), Subpart C (Equipment), and Subpart E (Production & Process Controls).

3b. 21 CFR Part 117 — FSMA Preventive Controls Rule

The advent of FSMA brought forth 21 CFR Part 117, "Current Good Manufacturing Practice, Hazard Analysis, and Risk-Based Preventive Controls for Human Food." This rule, with compliance dates beginning September 19, 2016, for large businesses and phased in for smaller facilities, represents a paradigm shift from reacting to contamination to proactively preventing it. Part 117 is not just an update; it’s an expansion that integrates preventive controls as a core component of CGMP.

Part 117 is primarily divided into two major components:

Subpart B: Current Good Manufacturing Practice: This section essentially incorporates and updates many of the Part 110 requirements, making them legally binding under the new framework. It provides more explicit details and expectations for facility sanitation, pest control, and employee hygiene.
Subpart C: Hazard Analysis and Risk-Based Preventive Controls: This is the groundbreaking addition. It mandates that food facilities develop and implement a written Food Safety Plan based on a thorough hazard analysis. This plan must identify and implement preventive controls for all hazards requiring control, covering process, allergen, sanitation, and supply chain controls.

Key additions and requirements introduced by Part 117 over its predecessor include:

Written Food Safety Plans: A comprehensive, documented plan detailing all identified hazards and controls.
Hazard Analysis: A systematic evaluation of biological, chemical (including radiological), and physical hazards.
Preventive Controls: Specific measures implemented to significantly minimize or prevent identified hazards. These include process controls, food allergen controls, sanitation controls, and a supply-chain program.
Corrective Actions: Procedures to address deviations from preventive controls.
Verification Activities: Regularly ensuring that preventive controls are effective and consistently implemented.
Supply Chain Program: Managing hazards introduced by raw materials and ingredients from suppliers.
Recall Plan: A documented procedure for recalling unsafe food.

To assist in developing this critical foundation, the FDA FSMA 21 CFR Part 117 Preventive Controls - Hazard Analysis checklist can guide you through the systematic identification and evaluation of hazards, ensuring no critical step is overlooked.

It’s important to note the Qualified Facility Exemption (QFE) under Part 117, which applies to very small businesses. To qualify, a facility must have less than $1 million (adjusted for inflation) in average annual sales of human food during the three-year period preceding the applicable calendar year, and the majority of its food sales must be directly to consumers or local retail food establishments (restaurants, grocery stores) in the same state or within a 275-mile radius. Even qualified facilities are not fully exempt; they must still comply with modified requirements, including specific CGMP provisions.

3c. Where Part 110 and Part 117 Overlap and Differ

While Part 117 incorporates and strengthens many of Part 110's principles, the distinctions are critical for compliance.

| Feature | 21 CFR Part 110 (Legacy cGMP) | 21 CFR Part 117 (FSMA PC Rule) |

| :---------------------- | :-------------------------------------------------------------- | :--------------------------------------------------------------------------------------------------------- |

| Philosophy | General guidance for sanitary operations | Proactive, risk-based prevention of hazards |

| Hazard Analysis | Implied, but not formally required | Mandatory written hazard analysis |

| Preventive Controls | General practices | Mandatory written preventive controls (process, allergen, sanitation, supply chain) with monitoring, corrective actions, and verification |

| Personnel Hygiene | General requirements for cleanliness, disease prevention | Detailed, with emphasis on proper training and supervisor oversight |

| Facility Design | General requirements for sanitary design | More explicit requirements for cleanability and prevention of cross-contamination |

| Sanitation | General cleaning and maintenance | Mandatory written Sanitation Standard Operating Procedures (SSOPs) and sanitation controls (Subpart C) |

| Pest Control | General expectation to exclude pests | Specific requirements for an Integrated Pest Management (IPM) program |

| Records | Few specific recordkeeping mandates | Extensive recordkeeping for Food Safety Plan, hazard analysis, preventive controls, monitoring, etc. |

The most significant difference lies in the emphasis on written procedures and documentation. Where Part 110 often allowed for implied practices, Part 117 explicitly demands documented Food Safety Plans, SSOPs, monitoring records, corrective actions, and verification activities. This shift ensures that food safety practices are standardized, consistently applied, and auditable, moving compliance from a general understanding to a measurable, scientific system. Facilities operating under Part 110 will find many of their core sanitary practices align with Part 117 Subpart B, but they will need to implement entirely new systems for hazard analysis and preventive controls as detailed in Subpart C.

---

4. FDA CGMP Compliance Checklist: Facility Sanitation Requirements (21 CFR §117.35 / §110.35)

Effective sanitation is the cornerstone of food safety, directly impacting product quality and consumer health. Under both 21 CFR §117.35 (for modern facilities) and §110.35 (for legacy applications), maintaining a meticulously clean environment is non-negotiable. For facilities falling under FSMA, §117.35 mandates written Sanitation Standard Operating Procedures (SSOPs). These aren't just guidelines; they are legally required documents detailing how, when, and by whom specific sanitation tasks are to be performed. A comprehensive Master Sanitation Schedule (MSS) is essential, outlining the frequency of cleaning and sanitation for every piece of equipment and area within the facility, ensuring no spot is overlooked and all critical cleaning operations are routinely executed.

To ensure your facility's sanitation protocols meet the rigorous demands of FSMA, utilizing a structured approach is paramount. The FDA FSMA 21 CFR Part 117 Preventive Controls - Sanitation Control checklist provides a detailed framework to assess and maintain your sanitation program, aligning with regulatory expectations. Additionally, for a foundational review of hygienic practices, the FDA 21 CFR Part 110 GMP - Facility Sanitation & Maintenance checklist offers valuable insights into basic sanitary requirements.

4a. Facility Cleaning & Sanitizing Zones

A robust sanitation program divides the facility into distinct zones, each with tailored cleaning and sanitizing protocols:

Zone 1 (Direct Food Contact Surfaces): This includes all surfaces that food directly touches, such as stainless steel tables, conveyors, slicers, mixers, and processing lines. Cleaning here is critical. Procedures must specify detergent type, water temperature, scrubbing methods, thorough rinsing, and the application of an EPA-registered sanitizer. Crucially, the concentration verification of sanitizers (e.g., using test strips or titration), specified contact time, and rinse requirements (if applicable, to prevent chemical residue) must be documented and strictly followed. Any deviation can lead to bacterial growth or chemical contamination.
Zone 2 (Indirect Food Contact Surfaces): These are surfaces that do not directly touch food but are in close proximity and could contaminate Zone 1 surfaces or the food product. Examples include equipment frames, control panels, drip shields, and the exterior of processing machinery. Cleaning frequency might be less than Zone 1, but methods must prevent accumulation of debris and ensure surfaces are clean and dry.

Zone 3 (Non-Food Contact Surfaces Near Food): This zone encompasses areas like floors, walls, and drains within the processing environment. While not directly touching food, poor sanitation here can contribute to environmental pathogens. Regular cleaning and sanitizing are vital, especially for drains, which are notorious harborage points for pathogens like Listeria*. Proper drainage design, as stipulated by §110.20(b), is essential to prevent pooling water.

Zone 4 (Remote Areas): This includes areas like loading docks, storage rooms, hallways, restrooms, and offices. While less critical for direct food contamination, maintaining cleanliness here supports overall facility hygiene and prevents cross-contamination pathways.

Documentation of all cleaning and sanitizing activities, including chemical sanitizer documentation (EPA registration numbers, concentration logs), and test strip/titration records, is essential for proving compliance during an FDA inspection.

4b. Water Quality & Wastewater

Water is a ubiquitous ingredient and cleaning agent in food processing, making its quality paramount.

Potable Water Requirement: Per §117.37(a), facilities must have an adequate supply of potable water, meaning it meets drinking water standards. This applies to all water used in processing, for ice production, or for cleaning food-contact surfaces. Regular testing of water sources for microbiological and chemical contaminants is often necessary to verify potability.
Backflow Prevention & Cross-Connection Controls: Robust systems are required to prevent non-potable water from mixing with potable water. This includes implementing backflow preventers on all water lines and meticulously avoiding cross-connections between potable and non-potable systems.
Wastewater/Sewage Disposal: §117.37(b) dictates that plumbing must be adequate to prevent contamination of food, food-contact surfaces, or water supplies. All wastewater and sewage must be disposed of through a sanitary system to prevent backups or spills that could contaminate the processing environment.
Ice: If ice is used as a food ingredient or comes into contact with food, it must be made from potable water and handled hygienically to prevent contamination. Ice machines must be regularly cleaned and sanitized.

4c. Physical Facility Requirements

The physical structure of the food plant itself plays a critical role in preventing contamination.

Walls, Floors, Ceilings: These surfaces must be constructed of smooth, non-absorbent, durable, and easily cleanable materials. Exposed wood, cracks, crevices, or gaps are unacceptable as they can harbor pathogens and pests. Regular inspection and repair are necessary.
Lighting Minimums: Adequate lighting is crucial for safe operations and effective cleaning. §110.20(b)(2) specifies minimum intensities: at least 5 foot-candles in storage and inspection areas, 20 foot-candles at working surfaces, and 50 foot-candles for activities requiring close observation such as color grading. Light fixtures over exposed food or food-contact surfaces must be shatter-proof or otherwise protected.
Ventilation: Proper ventilation is vital to prevent condensation from dripping onto food or food-contact surfaces, which can introduce contaminants. It also helps control airborne pathogens and odors and maintain a comfortable working environment. Adequate airflow and filtration systems should be in place.

---

5. FDA CGMP Compliance Checklist: Pest Control Requirements (21 CFR §117.35(c) / §110.35(c))

Pests—rodents, insects, and birds—pose a significant threat to food safety, acting as vectors for pathogens, causing physical contamination, and damaging facility infrastructure. Both 21 CFR §117.35(c) and §110.35(c) unequivocally state that "effective measures must be taken to exclude pests from the processing areas and to protect against the contamination of food on the premises by pests." This means a zero-tolerance approach within the processing environment. Absolutely no live animals (with the exception of service animals in appropriate areas) are permitted in any area where food is manufactured, processed, packed, or held.

To ensure your pest control program is robust and compliant, regular, systematic audits are essential. The FDA 21 CFR Part 110 Good Manufacturing Practice - Pest Control checklist offers a comprehensive guide to evaluating your pest management strategies against established regulatory benchmarks.

5a. Integrated Pest Management (IPM) Program Elements

A modern food facility must implement a comprehensive Integrated Pest Management (IPM) program, which goes beyond simply spraying pesticides. It's a holistic, preventative strategy that integrates multiple methods:

Written IPM Plan: A formal, documented plan is critical. It should clearly define the scope of the program, identify responsible personnel (internal or external), outline specific control measures for different pests, and detail reporting and recordkeeping protocols. If utilizing a contractor, the plan must include their credentials and service specifics.
Exterior Perimeter Control: This involves strategic placement of tamper-resistant, locked, numbered, and mapped rodent bait stations around the facility perimeter. These stations should be regularly inspected and serviced according to a set frequency. The goal is to intercept pests before they gain entry.
Interior Monitoring: Inside the facility, monitoring devices are key. This includes glue boards strategically placed in low-traffic areas, UV insect light traps (ILTs) for flying insects (positioned away from direct food contact but where insects are likely to enter), and pheromone traps for specific crawling insect pests. A detailed placement map of all interior traps is required, along with regular monitoring logs.
Entry Point Exclusion: This is a fundamental preventative measure. All potential entry points must be sealed. This includes installing door sweeps on all external doors, using air curtains at high-traffic entryways, ensuring dock seals are tight, installing window screens on all openable windows, and meticulously sealing all pipe penetrations, conduits, and utility lines. Any gaps exceeding 1/4 inch are considered critical vulnerabilities and must be addressed immediately.
Pesticide Use Restrictions: If pesticides are necessary, they must be EPA-registered for use in food facilities. Their application must be carried out only by licensed applicators, and meticulous records must be kept. These records should include the product name, EPA Registration Number, specific location of application, date, and the applicator’s license number. This ensures accountability and prevents misuse.

5b. Pest Activity Documentation & Corrective Action

Robust documentation and proactive response are hallmarks of an effective IPM program:

Pest Sighting Logs: All employees must be trained to report pest sightings. These logs should record the date, precise location, type of pest, estimated quantity, the corrective action taken (e.g., increased trapping, sealing entry point), and verification that the issue has been resolved.
Trend Analysis: Regularly reviewing trap catch counts (e.g., monthly or quarterly) and graphing them over time is crucial. This trend analysis helps identify seasonal spikes, emerging pest pressures, or areas where exclusion efforts are failing. Escalation triggers should be defined, prompting more intensive interventions when pest activity reaches unacceptable levels.
Third-Party Licensed Pest Control Operator (PCO) Service Reports: If you engage an external PCO, their detailed service reports are vital compliance documents. They must document inspection findings, treatments applied, recommendations, and evidence of corrective actions. These reports, along with internal records, must be maintained on-site for a minimum of 12 months, and often inspectors will request records going back 1-2 years.
FDA Inspector Expectation: Be prepared. During an inspection, the FDA will almost certainly request a comprehensive review of your pest control records. They will look for consistency, corrective actions, and a demonstrated commitment to preventing pest harborage and entry.

5c. Common FDA Warning Letter Triggers — Pest Control

FDA warning letters often cite specific, preventable pest control deficiencies:

Evidence of rodent activity: The presence of droppings, gnaw marks, nesting materials, or burrow trails within the facility, particularly in food storage or processing areas, without documented, effective corrective action.
Unaddressed structural deficiencies: Gaps, holes, or unsealed openings in the facility exterior or interior that allow pest entry or harborage.
Improper pesticide application: Use of non-approved pesticides, application by unlicensed personnel, or application in a manner that could contaminate food.
Missing or incomplete PCO service records: Lack of documentation demonstrating regular inspections, treatments, and follow-up by a qualified pest control operator.
Pests observed in critical areas: Direct observation of live or dead insects or rodents in food processing or storage areas during an inspection.

---

6. FDA CGMP Compliance Checklist: Employee Hygiene Requirements (21 CFR §117.10 / §110.10)

The human element is often cited as a leading cause of food contamination. Recognizing this, 21 CFR §117.10 ("Personnel") and §110.10 outline stringent requirements for employee health, hygiene, and training. These regulations are designed to prevent employees from becoming a source of contamination for food, food-contact surfaces, or food packaging materials. This subsection, notably the first substantive subpart of Part 117 Subpart B, underscores the critical importance of human behavior in maintaining food safety.

6a. Health & Disease Control

A fundamental requirement is to ensure that employees who could be a source of microbiological contamination are excluded