Food safety laws are the federal, state, and local regulations that govern how food is produced, handled, stored, prepared, and served to protect public health. In the United States, no single law covers all food businesses. Instead, a layered system of federal statutes, state codes, and local health ordinances applies depending on the type of food operation and where it is located.
AAA Food Handler provides accredited food safety training that helps restaurants, food service operators, and their teams meet the compliance requirements established by federal and state food safety laws.
What Are Food Safety Laws?
Food safety laws are legally enforceable regulations designed to protect consumers from foodborne illness, unsafe food handling, and contaminated products. They establish standards for how food must be grown, processed, packaged, stored, prepared, and served, and they define the consequences for businesses and individuals that fail to meet those standards.
In the United States, food safety law operates at three levels. Federal laws set national baseline standards enforced by agencies such as the FDA and USDA. State laws adapt and expand those standards for local conditions. Local ordinances add jurisdiction-specific requirements enforced through health department inspections. A restaurant must comply with all three levels simultaneously.
What Is the Main Purpose of Food Safety Laws?
The primary purpose of food safety laws is to prevent foodborne illness, which the CDC estimates affects 48 million Americans every year, resulting in 128,000 hospitalizations and 3,000 deaths annually. Laws achieve this by setting minimum standards for food handling, temperature control, sanitation, allergen disclosure, and staff training, and by giving regulatory agencies the authority to inspect, cite, and penalize non-compliant operations.
Beyond preventing illness, food safety laws serve a secondary purpose of standardizing compliance expectations across the industry, creating a consistent baseline that protects both consumers and businesses operating in good faith.
What Are the Main Federal Food Safety Laws Affecting Restaurants in the United States?
Several federal statutes shape food safety requirements for restaurants and food service operations.
The Federal Food, Drug, and Cosmetic Act (FD&C Act), passed in 1938, is the foundational law giving the FDA authority to regulate most of the U.S. food supply. It prohibits adulterated or misbranded food from entering interstate commerce and gives the FDA authority to inspect facilities and mandate recalls.
The Food Safety Modernization Act (FSMA), signed into law on January 4, 2011, primarily targets food manufacturers and processors. Its Sanitary Transportation Rule, however, applies to distributors and transporters that supply restaurants.
The FDA Food Code is a model regulation, not federal law, that most states adopt as the basis for retail food safety rules governing restaurants directly.
The Food Allergen Labeling and Consumer Protection Act (FALCPA) of 2004 and the FASTER Act of 2021 govern allergen labeling, with sesame added as the ninth major allergen effective January 1, 2023.
The Federal Meat Inspection Act and Poultry Products Inspection Act govern meat and poultry safety under USDA jurisdiction, separate from FDA authority.
What Is the Food Safety Modernization Act?
The Food Safety Modernization Act, known as FSMA, was signed into law on January 4, 2011. It represents the most comprehensive reform of U.S. food safety law since the FD&C Act of 1938 and shifted the regulatory approach from responding to foodborne illness outbreaks to preventing them.
FSMA gave the FDA expanded authority to inspect domestic and foreign food facilities, require written preventive control plans, mandate food traceability records, and issue mandatory recalls.
FSMA primarily applies to food manufacturers, processors, and importers, not to restaurants or retail food establishments, which are regulated under state and local authority based on the adopted FDA Food Code. Some FSMA rules, such as the Sanitary Transportation Rule and the Food Traceability Final Rule, may apply to suppliers and distributors serving food service operations.
What Is the Difference Between the FDA Food Code and FSMA?
The FDA Food Code and FSMA are two distinct regulatory frameworks serving different parts of the food system.
FSMA governs food manufacturers, processors, farms, and importers. It requires these operations to implement written food safety plans based on hazard analysis, maintain traceability records, and comply with preventive control requirements. FSMA is federal law enforced by the FDA.
The FDA Food Code governs retail and foodservice operations including restaurants, grocery stores, school cafeterias, hospitals, and food trucks. It sets standards for food handling, temperature control, allergen disclosure, sanitation, and staff training at the point of service. The Food Code is not federal law. It is a model regulation that states voluntarily adopt and enforce through their own health departments.
A food manufacturer supplying a restaurant is subject to FSMA. The restaurant serving that food to customers is subject to the Food Code as adopted by its state.
Who Enforces Food Safety Laws in the United States?
Food safety enforcement is distributed across multiple agencies at federal, state, and local levels.
The FDA enforces the FD&C Act, FSMA, and federal labeling laws, including FALCPA and the FASTER Act. It regulates approximately 80 percent of the U.S. food supply, covering all foods except most meat, poultry, and processed egg products.
The USDA Food Safety and Inspection Service (FSIS) enforces meat, poultry, and egg product safety with a continuous inspection presence in processing plants.
State health departments enforce state-adopted versions of the FDA Food Code and conduct inspections of restaurants and retail food establishments within their jurisdictions.
Local health departments carry out day-to-day enforcement through inspections, permit issuance, and enforcement actions at individual food establishments.
What Is the Difference Between FDA and USDA Food Safety Jurisdiction?
The division of jurisdiction between the FDA and the USDA is one of the more counterintuitive aspects of U.S. food safety law.
As a general rule, the FDA regulates all food except meat, poultry, and processed egg products, which fall under USDA/FSIS authority. The FDA regulates fruits, vegetables, seafood, dairy, packaged foods, dietary supplements, and most processed foods. The USDA regulates beef, pork, lamb, chicken, turkey, and processed egg products.
Some products create split jurisdiction. A frozen pepperoni pizza, for example, is regulated by the FDA for the crust and cheese and by the USDA for the pepperoni.
For restaurants, the practical implication is that food purchased from manufacturers is subject to FDA or USDA oversight depending on the product, while the restaurant’s own food handling and preparation is regulated by the state and local health department under the adopted Food Code.
Are Food Safety Laws Federal or State?
Food safety law in the United States is a shared system of federal and state authority.
Federal laws establish national baseline standards and give federal agencies the authority to regulate food manufacturing, imports, and labeling across state lines. These laws apply uniformly across the country.
State laws then adapt and build on federal standards to create enforceable regulations for food businesses operating within each state. States adopt their own versions of the FDA Food Code, sometimes with modifications, and enforce them through state and local health agencies.
The result is that a restaurant in California must comply with California’s CalCode, Texas must comply with the Texas Food Establishment Rules, and so on, even though all of these state codes draw on the same federal FDA Food Code as their foundation.
Does the FDA Food Code Become Law Automatically in Every State?
No. The FDA Food Code is a model regulation, not federal law. The FDA publishes it as a reference document that states can choose to adopt, but no state is legally required to do so.
Each state must go through its own rulemaking process to adopt the Food Code into enforceable state or local law. As of 2024, most states operate under the 2017 or 2022 edition of the Food Code, while a few states still operate under older versions. Some states, such as California, maintain their own retail food code, CalCode, which draws from but is not identical to the FDA Food Code.
Once a state adopts a version of the Food Code, that version becomes the legally enforceable standard in that jurisdiction. Operators must comply with the edition their state has adopted, not necessarily the most recent FDA release.
What Food Safety Laws Apply to Restaurants Specifically?
Restaurants are primarily regulated under the state-adopted FDA Food Code, enforced by local health departments through periodic inspections. This covers temperature control for cooking, holding, and cooling of food; personal hygiene requirements for food workers; handwashing procedures; cross-contamination prevention; allergen disclosure; cleaning and sanitizing protocols; and pest control.
At the federal level, FALCPA and the FASTER Act require accurate allergen information, which extends to menu labeling and staff knowledge in food service settings. The 2022 FDA Food Code strengthened this by requiring written allergen disclosure for unpackaged foods, which becomes enforceable once a state adopts that edition.
Federal OSHA requirements also apply to restaurant workplaces, covering employee safety standards separate from food safety compliance.
For a complete overview of how federal standards translate into kitchen operations, the food safety guidelines page outlines how federal expectations map to daily restaurant practices.
Are Restaurants Required by Law to Have a Certified Food Safety Manager?
In most states, yes. The FDA Food Code requires that food establishments have a Person in Charge who can demonstrate food safety knowledge, and most state adoptions interpret this as requiring at least one Certified Food Protection Manager (CFPM) per establishment. Certification must be obtained through an ANAB-CFP accredited program and is typically valid for five years, though some jurisdictions may have additional renewal requirements.
State-specific requirements vary. California, Texas, Illinois, New York, and most other states mandate at least one CFPM per establishment. Some states specify when the CFPM must be present on-site. Others require certification within a set window of hiring.
What Food Safety Training Is Required by Law for Food Service Workers?
Training requirements for frontline food service workers vary by state. Many states require all food handlers to hold a valid food handler card before or within a defined period of starting work. A food handler card demonstrates completion of basic food safety training covering hygiene, temperature control, cross-contamination, and allergen awareness.
At the federal level, the FDA Food Code requires the Person in Charge to ensure that all food employees have the knowledge and skills appropriate to their duties. This is not a specific certification mandate, but it creates an operational expectation that employers train staff to a defined standard.
States such as California, Texas, Illinois, Arizona, and Washington have explicit food handler training requirements. Others leave it to employer discretion. AAA Food Handler’s food handler and food manager training programs meet the requirements recognized by health departments across all 50 states.
What Are the Penalties for Food Safety Violations?
Penalties for food safety violations are tiered by severity and jurisdiction.
Core violations, which involve general sanitation and facility conditions, typically result in a written notice with a correction deadline. Priority Foundation violations, which relate to missing procedures, records, or training systems, may result in fines and a follow-up inspection. Priority violations, which are directly linked to foodborne illness risk, such as improper temperatures or bare-hand contact with ready-to-eat food, can trigger immediate corrective action requirements and, in severe cases, temporary closure orders. Fines at the local level typically range from $50 to $2,000 per violation, depending on the state and violation category.
At the federal level, federal criminal penalty statutes allow fines between $100,000 and $500,000 per offense for misdemeanor violations of food safety law, with higher penalties where violations cause death. The FDA can also mandate recalls, suspend facility registrations, and initiate civil action.
For a detailed breakdown of violation categories and consequences, the food safety violations page covers enforcement specifics by violation type.
How Often Are Restaurants Inspected for Food Safety Compliance?
Inspection frequency is determined by state and local health departments, not federal law. Most jurisdictions use a risk-based system that sets inspection schedules according to the type and complexity of food operations at each establishment.
High-risk establishments such as full-service restaurants that handle raw meat, prepare food from scratch, and serve vulnerable populations are typically inspected two to four times per year. Lower-risk operations, such as convenience stores selling pre-packaged foods may be inspected annually.
Additional inspections are triggered by consumer complaints, reported foodborne illness incidents, and follow-up visits after violations are cited. A restaurant that receives a poor inspection score may be placed on an accelerated inspection schedule.
What Do Food Safety Laws Require for Temperature Control?
Temperature control requirements are established by the FDA Food Code and adopted into state law. The key standards that apply in most jurisdictions include the following.
- Hot holding: 135 degrees Fahrenheit or above
- Cold holding: 41 degrees Fahrenheit or below
- Cooked poultry: 165 degrees Fahrenheit internal temperature
- Ground meat: 155 degrees Fahrenheit internal temperature
- Whole cuts of beef, pork, and seafood: 145 degrees Fahrenheit with a three-minute rest time
- Cooling: from 135 to 70 degrees Fahrenheit within two hours, then from 70 to 41 degrees Fahrenheit within an additional four hours
These standards address the temperature danger zone, between 41 and 135 degrees Fahrenheit, where bacterial growth in TCS foods occurs most rapidly.
What Is HACCP and Is It Required by Law?
HACCP stands for Hazard Analysis and Critical Control Points. It is a systematic, science-based approach to identifying and controlling food safety hazards at specific points in the production process.
HACCP is mandatory by federal law for specific food categories. The FDA requires HACCP plans for seafood processors and juice manufacturers. The USDA requires HACCP plans for all meat and poultry processing facilities.
For restaurants and retail food establishments, HACCP is not federally mandated as a formal written plan. However, the FDA Food Code embeds HACCP principles into its active managerial control requirements. Establishments conducting specialized processes such as smoking, curing, reduced oxygen packaging, or serving raw shellfish are typically required by their state to submit a HACCP plan for regulatory approval before operating.
The FDA recommends voluntary application of HACCP principles for all retail food operations.
What Are the Food Safety Laws Around Food Traceability?
The FDA’s Food Traceability Final Rule, established under Section 204 of FSMA, took effect on January 20, 2026. It requires businesses that handle foods on the FDA’s Food Traceability List, which includes leafy greens, fresh herbs, shell eggs, nut butters, certain fresh produce, and ready-to-eat deli salads, to maintain enhanced traceability records throughout the supply chain.
The goal is to enable the FDA to identify and contain contamination outbreaks within 24 hours rather than the days or weeks previous investigations required.
Restaurants and food service operators that receive foods on the Traceability List must maintain supplier information and lot codes for covered foods and make these records available to the FDA upon request within 24 hours.
How Do I Know Which Food Safety Laws Apply to My Business?
The applicable food safety laws depend on three factors: what type of food you handle, what you do with it, and where you operate.
If you operate a restaurant, café, food truck, school cafeteria, or grocery deli, your primary obligations come from your state-adopted version of the FDA Food Code, enforced by your local health department.
If you manufacture, process, or import food products, FSMA applies in addition to state requirements. The specific FSMA rules that apply depend on what you produce and your business size.
If you handle foods on the FDA Traceability List, the Food Traceability Final Rule applies regardless of whether you are a manufacturer or a restaurant.
The best first step is to contact your local health department to confirm which edition of the Food Code is currently adopted in your jurisdiction and what permits or certifications are required for your specific operation.
How Does AAA Food Handler Help Businesses Comply With Food Safety Laws?
AAA Food Handler provides ANAB-CFP accredited food manager certification and food handler training programs that meet the compliance requirements established by food safety laws across all 50 states. The food manager certification program satisfies the Certified Food Protection Manager requirement under the FDA Food Code and state adoptions. The food handler training meets the card requirements enforced by health departments in states that mandate frontline worker certification.
Group registration options allow employers to manage, track, and document employee compliance in one place, which supports the documentation requirements that health inspectors increasingly look for during inspections. Training is fully online, self-paced, and accessible on any device.
