15.3 Crisis Management, Recalls, and Imminent Health Hazards
Key Takeaways
- A written crisis plan must already exist for an outbreak, a recall, and an imminent health hazard — who decides, what stops, what is discarded, and who is called.
- Class I is the most severe recall class: reasonable probability of serious adverse health consequences or death.
- Recall first moves are identify lots, isolate and label, document, notify the regulatory authority and supplier, do not serve, and brief staff.
- An imminent health hazard — sewage backup, no water or power, fire, flood, extended no hot water, or vermin severe enough to stop service — requires cease operation, notify the RA, discard affected TCS food, and RA approval before reopening.
- After a power outage, discard TCS food that was above 41°F for 4 hours or more or for an unknown time; “it smells fine” is not a control.
A food-safety management system that never plans for a bad day will fail the first one. Outbreaks, recalls, and imminent health hazards (IHH) are not “operations problems” you invent at 2 a.m. They are planned responses: who decides, what stops, what is discarded, who is called, and what you say out loud.
Write the Crisis Plan Before You Need It
A written crisis plan covers at least three events: a suspected or confirmed outbreak, a product recall, and an imminent health hazard that can close the building. Assign a decision-maker (usually the PIC or permit holder), a backup, and after-hours numbers for the regulatory authority (RA), the supplier, the pest-control operator, the plumber, the electrician, and owner or legal contacts. Train more than one person. A plan that lives only in the general manager’s phone is not a plan on the GM’s day off.
The plan should tell staff:
- What they must stop (service, using a lot, using a sink)
- What they must not say (guessing the pathogen, blaming a guest)
- Where isolated food goes and how it is labeled
- Which records to pull (invoices, lot codes, temperature logs, staff schedules, guest-complaint notes)
Practice the plan the way you practice a fire drill. A binder nobody has opened since orientation will not help when sewage is on the prep-room floor.
Recalls: Classes and First Moves
FDA and USDA classify recalls by the hazard they present. Class I is the most severe. There is no Class IV on the exam.
| Class | Meaning | Typical teaching example |
|---|---|---|
| Class I | Reasonable probability that use will cause serious adverse health consequences or death | Listeria in deli meat; undeclared peanut in a cookie; Clostridium botulinum risk in canned food |
| Class II | Use may cause temporary or medically reversible consequences, or serious consequences are remote | A foreign object that could injure but is not likely to be fatal; some undeclared minor ingredients |
| Class III | Use is not likely to cause adverse health consequences | Minor labeling violation without allergen or pathogen risk |
When a recall notice arrives — from a supplier, a distributor, FDA, USDA FSIS, or the RA — do not wait to “see if guests complain.”
- Identify lots. Match product name, brand, pack size, lot or establishment number, and use-by dates to the notice.
- Isolate. Pull the product from receiving, storage, prep, and the line. Label it Do Not Use / Recalled. Store it away from food that will be served.
- Document. Record how much you had, lot codes, where it was, and what you did with it.
- Notify the RA and the supplier or distributor as the notice and local rules require. Some jurisdictions want a call even if you have none of the product.
- Do not serve. Do not cook it “to be safe.” Do not donate it. Do not send it home with staff.
- Communicate to staff so a closer does not restock the line from a case in the hall.
If recalled food was already served, cooperate with the RA on guest notification. Keep invoices and production records. Do not destroy evidence the RA may want to see unless the notice or the RA directs disposal and you document it.
A Class III labeling issue still gets the same isolation discipline. Severity changes how loudly public health will speak. It does not change “do not serve the recalled lot.”
Imminent Health Hazards
FDA Food Code defines an imminent health hazard as a significant threat that requires immediate correction or cessation of operation to prevent injury. Retail teaching lists conditions that meet that bar because they contaminate food or remove the ability to control TCS food:
- Sewage backup
- Interruption of potable water
- Interruption of electrical service (no refrigeration, no hot holding, required lights or ventilation gone)
- Fire
- Flood
- Extended interruption of hot water
- Vermin infestation severe enough that food or food-contact surfaces cannot be protected
- Onset of an apparent foodborne-illness outbreak
- Misuse of poisonous or toxic materials that contaminates food
Food Code 8-404.11 is the operational rule: the PIC immediately discontinues operations and notifies the regulatory authority if an IHH may exist because of those kinds of emergencies. An unaffected area may continue only if it is truly unaffected — a flooded basement walk-in is not “fine because the dining room still has lights.” After operations stop, Food Code 8-404.12 requires the permit holder to obtain RA approval before resuming.
Discard TCS food that may have been temperature-abused or contaminated. Floodwater, sewage, fire-suppression chemicals, and meltwater from a failed cooler are not “maybe wipe it off.” Cans with damaged seams or labels that soaked off are not restaurant salvage. Get RA direction on what may be kept.
Power-Outage Decision Tree
Keep cooler and freezer doors closed. When power returns, measure the food — do not guess from the room thermostat. Time in the temperature danger zone (41°F–135°F) is the control, not odor or appearance.
| What you find | Decision |
|---|---|
| Cold TCS still 41°F or below | Keep; resume ordinary cold holding |
| Cold TCS above 41°F for a known time less than 4 hours | Rapidly cool back to 41°F and hold, or cook and serve using time/temperature rules; start the clock from when it first left 41°F |
| Cold TCS above 41°F for 4 hours or more, or time above 41°F is unknown | Discard |
| Frozen food still frozen solid, or with ice crystals and 41°F or below | May be refrozen or thawed under a legal method |
| Frozen food thawed, then held above 41°F for 4 hours or unknown time | Discard |
| Hot TCS still 135°F or above | Keep; resume hot holding |
| Hot TCS dropped below 135°F for less than 4 hours | Reheat to 165°F within 2 hours if it will be hot-held, or cool correctly if it will be cold-held — only if TDZ time is still within limits |
| Hot TCS below 135°F for 4 hours or more, or unknown time | Discard |
“It still smells fine” is not a control. Neither is freezing warm TCS overnight to “reset the clock.” If the outage was long enough that you cannot hold TCS, treat it as an IHH: stop service and notify the RA.
Vomiting Event Cleanup Recap (2-501.11)
Chapter 4 covered the standard. The crisis plan must include the written 2-501.11 procedure before anyone is sick in the dining room: isolate the area, discard nearby exposed food, use personal protective equipment, remove vomit, disinfect with a norovirus-effective EPA-registered disinfectant at the labeled concentration and contact time, handle linens as contaminated, and send the ill person home under the employee health policy. Ordinary food-contact sanitizer is not automatically that disinfectant. Reopen the area only after the written procedure is complete.
Talk to Guests and Media Without Guessing
Do not diagnose. Do not say “it was the chicken” or “it cannot have been us.” Do not post speculation. A safe script is: you take the report seriously, you have removed implicated or recalled product from service, you are cooperating with the health department, and you will share confirmed information when you have it. Collect the guest’s contact, the date and time, and the foods eaten. Pull the corresponding invoices, logs, and staff roster. Let the RA lead public statements about pathogens and outbreak status.
| Crisis | First actions |
|---|---|
| Class I, II, or III recall notice | Identify lots → isolate and label → document → notify RA and supplier → do not serve → brief staff |
| Suspected outbreak (two or more similar illnesses) | Stop implicated food; isolate leftovers; keep records; notify RA; cooperate; do not guess the agent |
| Sewage backup | Cease operation; notify RA; discard contaminated food and single-service items; sanitary cleanup; RA approval to reopen |
| No potable water | Cease food operations that need water; notify RA; do not wash produce or warewash without an approved alternative |
| Extended no hot water | Cease if you cannot wash hands and warewash as required; notify RA |
| Electrical outage | Close if you cannot hold TCS; keep doors shut; when power returns, apply the 41°F / 4-hour tree; notify RA if it is an IHH |
| Fire or flood | Cease; notify RA; discard exposed or chemically contaminated food; RA approval to reopen |
| Severe vermin | Cease if food cannot be protected; notify RA; licensed pest control; discard contaminated product |
| Vomit or diarrhea in the facility | Execute the 2-501.11 written cleanup; exclude the ill person; discard nearby food |
The CFPM who can run this table from memory is practicing AMC at the worst moment of the year.
Which recall class is the most severe?
Sewage backs up onto the kitchen floor during lunch. What must the Person in Charge do first?
After an extended power outage, cold TCS food has been above 41°F for more than 4 hours. The correct action is: