INTERNATIONAL TRADE LAW
FSMA Import Rules: FSVP for Importers
The Food Safety Modernization Act (FSMA) shifted U.S. food safety from reacting to outbreaks to preventing them — and for importers, its most important piece is the Foreign Supplier Verification Program, which makes the U.S. importer legally responsible for confirming that foreign food is produced to American safety standards. If you bring food into the United States, FSMA is the law that defines what you have to verify and document.
What FSMA Changed
Signed into law on January 4, 2011, FSMA was the largest overhaul of U.S. food safety law in decades. Its core idea is prevention: rather than waiting for contaminated food to make people sick, the FDA now requires food businesses to identify hazards in advance and build controls to stop them.
For domestic facilities, that means a written food safety plan. For imported food, FSMA created a parallel obligation that lands on the importer rather than the foreign producer — the Foreign Supplier Verification Program.
Preventive Controls, Not HACCP
FSMA requires most registered food facilities to maintain a food safety plan built on hazard analysis and risk-based preventive controls (HARPC). This is the successor to the older Hazard Analysis and Critical Control Points (HACCP) system — broader in scope and applied across most food categories, not just the specific products (like juice and seafood) where HACCP has long been mandatory.
A preventive controls plan must:
- Identify and evaluate known or reasonably foreseeable hazards for each food.
- Put in place controls that significantly minimize or prevent those hazards — process controls, food allergen controls, and sanitation controls.
- Monitor those controls, take corrective action when they fail, and verify they are working.
- Include a recall plan.
The distinction matters: describing the FSMA requirement as “HACCP” understates it. The preventive-controls framework is what governs most facilities supplying the U.S. market, and it is the standard the importer’s verification has to reach.
The Foreign Supplier Verification Program (FSVP)
The FSVP rule requires the U.S. importer to verify that imported food is produced in a manner that meets U.S. safety standards — the same preventive-controls and produce-safety requirements that apply domestically. In practice, an FSVP importer must:
| FSVP step | What it requires |
|---|---|
| Hazard analysis | Identify the hazards reasonably likely with each food |
| Supplier evaluation | Assess the foreign supplier’s performance and the risk the food presents |
| Verification activities | Use methods like on-site audits, sampling and testing, or review of food safety records |
| Corrective action | Address problems with a supplier promptly |
| Recordkeeping | Keep documentation the FDA can review on request |
Verification has to match the risk. A high-risk food generally calls for an annual on-site audit of the supplier, while lower-risk foods may be verified through testing or records review.
Who Is the “FSVP Importer”?
FSVP responsibility falls on a specific party: the U.S. owner or consignee of the food at the time of entry, or — if there is none — the U.S. agent or representative of the foreign owner. This is not necessarily the customs broker or the carrier. Identifying who holds FSVP responsibility for each entry is one of the most common compliance gaps, because the obligation cannot be assumed away by contract.
What the FDA Checks
FSMA gave the FDA stronger tools at the border and beyond. The agency conducts FSVP inspections — often remote records reviews — to confirm importers are actually performing and documenting verification. It can also examine imported shipments and refuse entry to food that does not meet the requirements. A missing or inadequate FSVP is itself a basis to detain or refuse a shipment, even if the food tests clean.
For importers of FDA-regulated food generally, FSVP works alongside the broader FDA food import rules and the detention process that follows a violation.
Frequently Asked Questions
What is the difference between FSMA and FSVP?
FSMA is the 2011 statute that overhauled U.S. food safety law. FSVP is one rule under FSMA — the Foreign Supplier Verification Program — that requires U.S. importers to verify their foreign suppliers meet U.S. standards.
Does FSMA require HACCP?
Not in general. FSMA requires most facilities to follow hazard analysis and risk-based preventive controls (HARPC), the successor to HACCP. HACCP remains mandatory for specific products such as juice and seafood, but the preventive-controls framework is broader.
Who is responsible for FSVP compliance?
The FSVP importer — generally the U.S. owner or consignee of the food at entry, or the U.S. agent of the foreign owner if there is no U.S. owner or consignee. It is often not the broker, and the responsibility cannot be contracted away.
What happens if I do not have an FSVP?
The FDA can detain or refuse the shipment and cite the importer for the missing program. A clean lab result does not cure a missing FSVP — the program itself is the requirement.
FSVP is paperwork-heavy, and the FDA reviews it on its own schedule, not yours. Reidel Law Firm helps importers stand up FSVP programs and respond to FSVP inspections on flat-fee terms. Get an import compliance memo.
