What are the major tasks that food companies must perform to comply with the Hazard Analysis and Risk-based Preventive Controls (HARPC) provision in the FSMA?
1. Conduct Hazard Analysis
The “HA” in HARPC stands for “Hazard Analysis” and addresses the core intent of the law: to identify hazards due to the specific foods or food ingredients in the food or due to the various processing, manufacturing, packing, and holding steps applied to the foods. Once identified, the company must evaluate each hazard to assess its probability of occurring and severity of the injury it would bring. This step is designed to prepare the firm for identifying the steps necessary to minimize or prevent the hazards from arising.
To identify the hazards, the company must consider following:
- Known or reasonably foreseeable hazards:
- biological hazards,
- chemical hazards (including radiological hazards),
- physical hazards
- Natural toxins, pesticides, drug residues, decomposition, parasites, allergens, and unapproved food and color additives
- Naturally occurring hazards or unintentionally introduced hazards
- Intentionally introduced hazards for economic gain
After identifying the hazards, the Company must evaluate each by considering formulation, ingredients, facilities, equipment, production flow, storage, and transportation. The Company must also look into relevant factors that could contribute to each hazard throughout the food facility, its operations and personnel, including personnel screening and controls, the entire supply chain of a facility’s food ingredients (raw materials, packaging, dyes, labels, etc.), and the finished foods received, delivered and shipped.
Companies must create a written analysis of the above hazards, in English, so that FDA can review it during inspection or upon request.
2. Risk-based Preventive Controls
The “RPC” in HARPC stands for “Risk-based Preventive Controls.” This portion of HARPC requires companies, whether foreign or domestic, to develop and implement a series of risk-based controls to significantly minimize or prevent the identified hazards to ensure the safety of the food it manufactures, processes, holds and distributes. The Company must designate controls at food processing steps that are appropriate for ensuring the safety of the food, especially, the critical control point (CCP). CCPs are critical manufacturing points, where the Company can apply controls to minimize or eliminate the hazard or reduce the hazard to an acceptable level under normal manufacturing operations.
Examples of types of preventive controls include:
- Sanitation procedures at food surface contact points
- Sanitation of utensils and equipment
- Staff hygiene training
- Food allergen control program
- Recall plan
- Current Good Manufacturing Practices (cGMPs)
- Supply-chain controls
The Company must have written preventive controls. For each hazard that requires a preventive control, the Company must establish a written recall plan.
If a particular hazard will be controlled by another facility in the supply-chain (whether a supplier or later distributor/processor), the Company is not required to implement a preventive control as long as the Company records and obtains written assurance from the other facility that the hazard is being controlled.
3. Monitoring of Effectiveness
HARPC requires the food facility to establish and implement a written monitoring program, which ensures the firm is conducting regular evaluations of the facility’s control measures to determine that the preventive controls are working. FDA will evaluate the firm’s monitoring system to identify inadequacies in either the methods of monitoring or the firm’s record keeping.
4. Corrective Actions
The Company must establish and implement written corrective action procedures that will go into effect if:
- preventive controls are not property implemented;
- there is a question regarding preventive control or food safety plan’s effectiveness;
- the records are incomplete, or other discrepancies in implementing the food safety plan.
The corrective action procedures must include the following steps:
- Identification of weak spots in the controls
- Identification of ineffective controls
- Identification of new hazards
- Performing necessary steps to reduce the likelihood of recurrence
- Evaluating the processed food for safety
- Prevention of adulterated food from entering commerce
HARPC requires food facilities to design and implement verification steps to ensure that their HARPC plans (including the hazard identification and analysis, preventive controls and control measures, monitoring and corrective action steps) are operating correctly to prevent or minimize food safety and adulteration hazards. Verification steps should be sufficiently robust to ensure that:
- The selected preventive controls are adequate
- Monitoring is occurring properly as defined in the plan
- Appropriate corrective actions are taken
- Potential food and food processing hazards are reduced
- Periodic reviews are conducted at appropriate intervals so the HARPC plan remains working and takes into account new and emerging risks and hazards
6. (Receiving Facilities) Supply-chain Program
HAPRC gives flexibility to receiving facilities’ controls on raw materials. If supplier or a third party entity implements controls to manage the hazards associated with raw material or other ingredients, the receiving facility does not need to establish its own preventive controls itself, but can rely on that of the third party or supplier through a risk-based supply-chain program.
Every receiving facility needs to set up a risk-based supply-chain program to make sure that the relevant hazards are appropriately controlled by its suppliers or third party entities. Under the supply-chain program, the receiving facility must first approve suppliers by considering the nature of the hazards and supplier performance. Then, the receiving facility must determine appropriate verification activities to ensure the supplier’s controls significantly minimize or prevent hazards. Appropriate verification activities may include onsite audits and testing. If the supplier is not controlling the hazards, the receiving facility can also choose to review and the verification conducted by another entity to assess the sufficiency of the controls.
In summary, the contents of the supply-chain program must include:
- Identification and use approved suppliers
- Determining and conducting supplier’s verification activities
- Conducting other facility (non-supplier)’s controls of hazards, or reviewing another entity’s verification activities on the hazards.
The supply-chain program must be written. The receiving facility needs to develop written receiving procedures and document the supplier’s verification activities.
7. Recordkeeping and Documentation
One key development under HARPC is its new requirements related to recordkeeping and methods of documentation that are now mandatory for food manufacturing, processing, packing and storage facilities. Previously, under the Bioterrorism Act, FDA could only require a food company to maintain records that enabled food to be traced through the supply chain (one up / one back identification records). Now, HARPC and the supply-chain provisions under FSMA require that records and documents related to food hazards and process control systems be established and maintained for no less than 2 years to cover the following HARPC steps:
- The monitoring of the preventive controls
- The corrective actions
- Testing results and other verification steps designed to ensure the preventive controls are effectively minimizing or preventing hazards
- Supply-chain program
In other words, FDA requires that a written record be kept of the entire plan including the process, theproof, and the problems. A facility must make these records and documentation available to FDA upon request. This new authority will result, eventually, in FDA demanding foreign and domestic food facilities to produce their HARPC records rather than the agency spending resources conducting physical plant inspections. The recordkeeping requirements, therefore, must tell the proper story to demonstrate HARPC compliance.
8. Requirement to Reanalyze
After developing and implementing an adequate HARPC plan, the food facility must periodically evaluate its food safety HARPC system. Under HARPC the facility must reanalyze its plan:
- Whenever there is a significant change at the facility that might increase a known hazard or introduce a new one
- Every 3 years (if no other significant changes occur)
Additionally, HARPC requires the facility to perform a new hazard analysis and implement any new, necessary preventive controls before operational changes occur. Any changes must be documented in the firm’s HARPC records. If no changes are necessary after a reanalysis of a HARPC system, the firm must document the basis for that decision.
Continue at: https://www.harpc.com/harpc-requirements/
The text above is owned by the site above referred.
Here is only a small part of the article, for more please follow the link