3.7 Food Preparation Policies & Determining When a Variance Is Required

Key Takeaways

  • A variance is written regulatory permission to deviate from a Food Code requirement, granted only when the applicant demonstrates equivalent public health protection.
  • The Food Code specialized processes requiring a variance and HACCP plan include smoking or curing for preservation, using additives such as vinegar to render food non-TCS, reduced oxygen packaging, sprouting seeds, offering live molluscan shellfish from a display tank, and custom-processing animals.
  • Reduced oxygen packaging of TCS food requires a HACCP plan, and a variance is required unless the operation meets the Code's specific ROP exemption criteria.
  • A variance request must include the proposed process, the HACCP plan, and scientific data or a validation study supporting the alternative.
  • The person in charge must be able to produce the variance and the associated HACCP plan on request during an inspection.
Last updated: August 2026

3.7 Food Preparation Policies & Determining When a Variance Is Required

Exam Tip: Blueprint task A.20 is "Determine when a specialized process variance is required." Learn the trigger list cold. Items usually give you an operation — a deli vacuum-packing sandwiches, a restaurant curing its own pancetta, a grocery sprouting mung beans — and ask whether it needs a variance, a HACCP plan, both, or neither.


What a Variance Is

A variance is a written document issued by the regulatory authority that authorizes a modification of, or waiver from, one or more requirements of the Food Code. It is not permission to be less safe. It is permission to achieve the same public health outcome by a different route, granted only when the applicant demonstrates that the alternative provides equivalent protection.

Three properties to remember:

  • A variance is specific to the establishment, the process, and the product. It does not travel with a chef to a new restaurant, and it does not cover a new product line.
  • It is issued by the jurisdiction with authority over the establishment — usually the local or state health department — not by the FDA.
  • Its terms are enforceable. Operating outside the variance's conditions is a violation.

The Specialized Processes That Trigger a Variance

The Food Code lists specialized processing methods that require a variance and a HACCP plan when conducted at retail:

ProcessWhy it is high risk
Smoking food as a method of preservation (rather than for flavor only)Combines mild heat and reduced water activity in a range that can select for Clostridium botulinum
Curing foodNitrite dosing errors are toxic; under-dosing permits botulinum outgrowth
Using food additives or adding components such as vinegar to render a food non-TCS, or as a method of preservationAcidification failures leave a food that is treated as shelf-stable but is not
Reduced oxygen packaging (ROP) of TCS food, including vacuum packaging, cook-chill, and sous videAnaerobic environment favors C. botulinum and Listeria monocytogenes while suppressing spoilage organisms that would otherwise warn the consumer
Operating a molluscan shellfish life-support display tank for shellfish offered for consumptionWater quality and cross-contamination between lots
Custom processing animals for personal useProduct does not enter regulated inspection channels
Sprouting seeds or beansSprouting conditions are ideal pathogen growth conditions; seed is frequently the contamination source
Preparing food by another method determined by the regulatory authority to require a varianceCatch-all for novel processes

The Code also identifies processes that require a HACCP plan without a variance in defined circumstances — most importantly certain ROP operations that meet the Code's specific exemption criteria (for example, ROP of cheese or of food held frozen, or refrigerated ROP with a defined shelf life and secondary barrier). The exam-relevant generalization: ROP of TCS food always requires a HACCP plan; whether it also requires a variance depends on whether the operation fits the Code's narrow exemption.


What a Variance Application Must Contain

A complete request has three parts:

  1. A statement of the proposed variance, citing the specific Food Code section to be waived or modified.
  2. An analysis of the hazards and the alternative controls — in practice, the HACCP plan, including the flow diagram, hazard analysis, CCPs, critical limits, monitoring, corrective actions, verification, and records.
  3. Supporting evidence that the alternative provides equivalent public health protection — a process authority letter, a validated challenge study, published scientific literature, or a predictive microbiology model.

The third element is where most applications fail. "We have always done it this way and nobody got sick" is not scientific evidence. A process authority — a person or organization with expert knowledge in the control of the relevant hazard — is normally required to review and certify a thermal or acidification process.


Writing the Underlying Food Preparation Policies

Blueprint task A.8 covers the broader family of preparation policies. Whether or not a variance applies, written procedures should exist for every step where a control decision is made:

  • Thawing — under refrigeration at 41°F or below; submerged under running water at 70°F or below; in a microwave immediately followed by cooking; or as part of the cooking process.
  • Cooking — required internal temperature and dwell time per product, verification instrument, who checks, how many units.
  • Cooling — the two-stage rule (135°F to 70°F within 2 hours, and 135°F to 41°F within 6 hours total), plus the physical method: shallow pans to a depth of two inches or less, ice paddles, ice-water baths, blast chill, portioning before cooling, loose covering.
  • Reheating — 165°F for 15 seconds within 2 hours for previously cooked and cooled TCS food; commercially processed ready-to-eat food to 135°F.
  • Date marking — ready-to-eat TCS food held more than 24 hours is marked for a maximum of 7 days at 41°F or below, counting the day of preparation as day 1.
  • Bare-hand contact — prohibited with ready-to-eat food; specify gloves, deli tissue, tongs, or spatulas.
  • Time as a Public Health Control (TPHC) — written procedures must exist before use; the 4-hour option with no temperature limit, or the 6-hour option starting at 41°F or below and not exceeding 70°F.
  • Consumer advisory — disclosure and reminder for animal foods served raw or undercooked.

Variance Holders During Inspection

If an establishment holds a variance, the person in charge must be able to produce, on request:

  • The variance document itself, showing the issuing authority, the specific process authorized, and any conditions.
  • The HACCP plan it is predicated on.
  • Monitoring records demonstrating that critical limits were met.
  • Verification records, including thermometer calibration and any required product testing.

An inspector who finds a specialized process running with no variance on file is looking at a Priority item. The typical enforcement path is to order the process stopped and the product embargoed pending a variance application, not merely to write a citation.

Test Your Knowledge

A grocery store deli begins vacuum-packaging its house-made chicken salad for a three-day refrigerated shelf life. What does the Food Code require?

A
B
C
D
Test Your Knowledge

Which of the following operations does NOT by itself trigger the Food Code's specialized-process variance requirement?

A
B
C
D
Test Your Knowledge

An operator's variance application describes a new acidification process and includes a HACCP plan, but supports the critical limit only with a statement that the recipe has been used for twelve years without complaint. What is the deficiency?

A
B
C
D
Test Your Knowledge

A restaurant is cooling a large batch of beef chili. Which written procedure element correctly states the Food Code cooling requirement?

A
B
C
D