18.2 Record-Keeping and Legal Duties
Key Takeaways
- Shellstock tags must be kept 90 days after the last shellstock from that container is sold or served, stored in chronological order.
- CFPM exams expect receiving, cooking, cooling, holding, date-mark, employee-health, pest, SDS, variance/HACCP, consumer-advisory, and training records that prove control.
- Do not invent a universal two-year retention rule for all food-safety logs; follow the Food Code where it is explicit and your SOP or regulatory authority for the rest.
- Fake or back-filled temperature logs are worse than missing records because they hide the real hazard and can become a legal problem.
- Food Code 2-103.11 requires the PIC to ensure employee health reporting, handwashing, no bare-hand RTE contact, cooking, cooling, holding, consumer advisories, cleaning, water, pest control, and allergen control.
A CFPM exam does not ask you to become a lawyer. It asks whether the Person in Charge can produce the documents that prove the kitchen is under control — and whether those documents are real. Records are how active managerial control becomes visible. An inspector who cannot see a cooling curve, a shellstock tag, or a signed health agreement has to assume the control did not happen. Hope is not a record.
Records the Exam Expects
Build a file that matches the hazards on your menu. A steakhouse that never serves oysters still needs receiving temperatures and cooling logs. An oyster bar that never cools chili still needs tags. Do not copy a corporate binder from a different concept and call it compliance.
| Record | Why the inspector (and the exam) care | How long to keep |
|---|---|---|
| Receiving temperatures and invoices | Prove food came from an approved source at a safe temperature; support a recall or a rejection | Follow your SOP and the RA. There is no single national “two-year” Food Code clock |
| Cooking, cooling, reheating, and holding logs | Prove TCS food hit required temperatures and did not linger in the 41°F–135°F danger zone | SOP / RA. Keep them long enough to show the current system works and to investigate a complaint |
| Date marks | Ready-to-eat TCS food held more than 24 hours is marked; day of prep or opening is day 1 of 7 at 41°F | The mark stays on the product until it is used or discarded |
| Shellstock tags | Trace oysters, clams, mussels, and scallops back to the harvester after an illness | 90 days after the last shellstock from that container is sold or served, in chronological order |
| Employee health agreements | Staff have been told to report vomiting, diarrhea, jaundice, sore throat with fever, and uncovered infected wounds | Keep the signed agreement while the person works there and as your SOP requires after separation |
| Pest-control invoices and service reports | Show a professional program, not a can of spray stored over the prep sink | SOP / RA; keep recent service tickets available for inspection |
| Safety Data Sheets (SDS) | Identify chemical hazards and first aid for sanitizers, cleaners, and pesticides | Keep SDS for every hazardous chemical currently in the building, accessible to staff |
| Variance and HACCP documents | Special processes (many reduced-oxygen packages, curing, smoking for preservation) are legal only with RA approval and the supporting plan | Keep the approved variance and the live HACCP records as the plan and the RA require |
| Consumer advisory on menus | Disclosure plus reminder when raw or undercooked animal foods are offered | It is a living menu control, not a PDF in a drawer |
| Training records | Show staff were informed of assigned duties and of health reporting | SOP / RA. Attendance sheets help; they do not replace observed behavior |
The only retention period the Food Code states in the language the exam loves is shellstock tags for 90 calendar days, stored so a health department can find a lot. Food Code 3-203.12 keeps the tag attached until the container is empty, then requires the operation to retain that tag for 90 days after the last shellstock from that container is sold or served, in chronological order. A grocery bag of mixed tags with no dates is not a 90-day file. Do not invent a universal two-year rule for cooling logs, invoices, pest tickets, or training files. If your regulatory authority or your written SOP says 90 days, one year, or another interval, follow that written rule. Missing a made-up national clock is not the violation. Missing the oyster tags after a Vibrio or norovirus report is.
Receiving invoices do more than satisfy bookkeeping. When a supplier announces a recall, the invoice and the lot code tell you whether the product entered your building. A PIC who cannot find last week’s produce invoice cannot complete the isolate-and-hold step from the crisis chapter. Cooling logs do similar work after a complaint: they either support “this chili hit 70°F in 90 minutes” or they tell you the batch cannot be defended.
SDS sheets are not optional wallpaper. The cook who splashes degreaser in an eye needs the first-aid section now, not after someone searches a vendor website. Store SDS where staff can reach them during the shift — typically with the chemical closet or in a labeled binder — and match the binder to the bottles actually on the shelf. A pesticide SDS for a product you stopped using three years ago does not cover today’s quat.
Variance and HACCP paperwork is the legal permission slip for processes the Code will not let you improvise. If you package cooked chili in reduced-oxygen bags without an approved variance and a living HACCP plan, a perfect temperature log does not make the process legal. Keep the approval letter with the monitoring sheets. An inspector who asks for the variance is not being difficult. The inspector is checking whether the special process is authorized.
Fake Records Are Worse Than Missing Records
A blank cooling log tells the inspector the system failed. A cooling log that shows chili at 70°F in 90 minutes when nobody took a temperature is a false record. False records hide the real hazard, destroy credibility, and can become a legal problem in an outbreak investigation or a lawsuit. If the log was not kept, say so, check the food you still have, discard what you cannot verify, and restart honest monitoring. Do not invent numbers to make the binder look complete. The exam will offer that shortcut. Refuse it.
The same rule applies to receiving temperatures filled in at the end of the week, sanitizer ppm copied from yesterday, and training signatures collected for people who were not in the room. Fabrication is not “better than nothing.” It is evidence that management will conceal a risk.
In Practice
An inspector asks for oyster tags. The PIC dumps a paper bag of tags on the desk with no dates and no order. That is not compliance. Tags must be kept 90 days after the last shellstock from that container is sold or served, and they must be in chronological order so a health department can trace a harvest area after an illness. A second inspector asks for last night’s cooling log. The PIC starts writing 68°F and 40°F in the car while the inspector is in the walk-in. Stop. A blank page plus a discard is ugly and honest. A back-filled page is a second violation stacked on the first.
PIC Legal Duties: 2-103.11 Recap
Food Code 2-103.11 is the duty list, not a suggestion poster. The 2022 lead-in says the PIC shall maintain active managerial control of foodborne-illness risk factors by ensuring these things happen — not by hoping a laminated sheet did the work.
| Duty area | What “ensuring” looks like on a Tuesday |
|---|---|
| Employee health | Staff know the reportable symptoms; the PIC excludes or restricts as required |
| Hands | Hands are washed at stocked sinks at the required times |
| No bare-hand contact with RTE food | Gloves, tongs, deli tissue, or an approved alternative; no alternative in HSP facilities |
| Cooking | Animal foods reach Code internal temperatures |
| Cooling | Two-stage cool: 135°F to 70°F in 2 hours, then to 41°F in 4 more (6 hours total) |
| Hot and cold holding | Hot TCS at 135°F or above; cold TCS at 41°F or below |
| Consumer advisory | Raw or undercooked animal foods are disclosed and reminded on the menu where allowed |
| Cleaning and sanitizing | Food-contact surfaces are washed, rinsed, and sanitized |
| Water | Water is potable; plumbing and backflow prevention work |
| Pests | Signs are reported and controlled without contaminating food |
| Allergens | Staff can name the major allergens and prevent cross-contact |
| Receiving and approved sources | Food comes from approved suppliers and is checked at the door |
| Training | Employees are informed of their assigned duties and of the health-reporting requirement |
You will not be asked to recite paragraph letters. You will be given a scenario — a cook with diarrhea still on the line, chili cooling overnight on the counter, a raw-egg Caesar with no advisory — and asked what the PIC was supposed to ensure. The legal duty is the control, not the poster. If the PIC never checked whether staff were trained to report vomiting, the duty is already broken before anyone gets sick. If the consumer advisory is only in the office binder and not on the menu the guest reads, the duty is not met. Records support those duties. They do not replace them.
Keep the relationship straight for the exam. 2-102.11 is how the PIC demonstrates knowledge during an inspection. 2-102.12 is the accredited CFPM staffing rule. 2-103.11 is what the PIC must make happen every shift. A framed certificate that sits above a blank cooling log and a missing oyster-tag file has satisfied 2-102.12 on paper and failed 2-103.11 in the kitchen.
After the last oyster from a tagged container is served, the shellstock tag must be:
A cooling log for last night’s chili is blank. The PIC’s correct action is:
Food Code 2-103.11 requires the Person in Charge to ensure, among other duties, that: