14.3 FSMA, HARPC, and Modern Food Safety Systems

14.3 FSMA, HARPC, and Modern Food Safety Systems

Quick Answer: The Food Safety Modernization Act (FSMA) expanded preventive, risk-based food safety for many FDA-regulated facilities. HARPC (Hazard Analysis and Risk-Based Preventive Controls) describes that preventive-controls approach. It resembles HACCP (analyze hazards; control them; monitor; correct; verify; document) but is not identical to classic seven-principle HACCP. Know PCQI, food safety plan, and control types: process, allergen, sanitation, supply-chain.

Modern exams increasingly place HACCP and FSMA preventive controls side by side. High-scoring candidates can explain overlap and differences without claiming they are the same rule under a new name.

FSMA in One Paragraph

The FDA Food Safety Modernization Act shifted the U.S. system further from reactive response toward prevention. For many registered food facilities, key outcomes include requirements to maintain a written food safety plan based on hazard analysis and risk-based preventive controls, with monitoring, corrective actions, verification, and records—plus related FSMA rules (for example produce safety, foreign supplier verification, sanitary transport, intentional adulteration) that sit in the broader FSMA family. This section focuses on the preventive controls / HARPC comparison with HACCP that HACCP exams most often test.

What HARPC Means

HARPC stands for Hazard Analysis and Risk-Based Preventive Controls. It is the conceptual label for the preventive-controls approach under FSMA’s human (and animal) food preventive controls rules. You may also see “PCHF” (Preventive Controls for Human Food) in training materials. Regardless of acronym, the operational idea is:

1. Identify known or reasonably foreseeable hazards for the facility’s foods and processes.
2. Evaluate risks (severity and probability) to determine which hazards require preventive controls.
3. Implement preventive controls appropriate to those hazards.
4. Monitor, correct, verify, validate where required, and keep records.
5. Reanalyze the plan on a set schedule and when significant changes occur.

That sequence will feel familiar if you know HACCP—because both are preventive hazard-management systems. Familiarity is not identity.

HACCP vs HARPC / Preventive Controls — Careful Comparison

Similarities (safe to state)

• Both require structured hazard analysis.
• Both require documented controls, not informal habits alone.
• Both use monitoring, corrective action, verification, and records as system elements.
• Both are preventive, not end-product inspection alone.
• Both must be facility- and product-specific.

Differences (exam-critical)

• Not every preventive control is a CCP. Under preventive controls, a facility may manage a hazard with a sanitation preventive control, allergen preventive control, or supply-chain preventive control without calling that step a HACCP CCP.
• PRPs vs preventive controls: In classic HACCP teaching, many foundational programs are prerequisite programs that support the HACCP plan. Under FSMA preventive controls, some of those same domains (especially sanitation and allergen control, and supplier programs) may be elevated to preventive controls inside the food safety plan when the hazard analysis requires it.
• Supply-chain controls receive explicit preventive-controls treatment when hazards are controlled before receipt (supplier approval, verification activities).
• PCQI is a defined preventive-controls training/role concept; classic HACCP emphasizes a multidisciplinary team but does not use “PCQI” as its universal label.
• Sector HACCP rules remain. Seafood HACCP and juice HACCP did not vanish because FSMA passed. Facilities may need to understand how preventive controls rules interact with existing HACCP mandates for their product—exam items usually test conceptual comparison, not every exemption detail.

Do not overclaim: Saying “HARPC replaced HACCP everywhere” is false. Saying “HARPC is just HACCP with a new acronym and no differences” is also false. The accurate line: shared preventive DNA; different regulatory architecture, terminology, and emphasis on multiple preventive control types.

Types of Preventive Controls to Know

1. Process preventive controls

Controls at process steps that prevent or minimize hazards—often the closest analog to traditional CCPs. Examples: cooking lethality, refrigeration for growth control, metal detection, formulation controls that manage aw or pH when used as a control measure. Parameters, monitoring, and corrective actions must be defined.

2. Food allergen preventive controls

Procedures that prevent undeclared allergens—label controls, scheduling/traffic patterns, dedicated equipment or validated cleaning between allergen-containing and allergen-free runs, and label-to-formula verification. Allergen mismanagement is a leading cause of recalls; exams expect allergen controls to be recognized as a distinct preventive-control category, not only a vague GMP note.

3. Sanitation preventive controls

Sanitation procedures that prevent hazards such as environmental pathogen contamination (for example Listeria in ready-to-eat environments) or cross-contact. May include cleaning/sanitizing of food-contact surfaces, environmental monitoring programs where appropriate, and hygienic zoning. This is stronger than “we clean sometimes.”

4. Supply-chain preventive controls

When a hazard is controlled by the supplier before the receiving facility’s process can control it, the receiving facility may need a supply-chain program: approve suppliers, verify control (audits, COAs, testing, etc. as appropriate), and document the program. This formalizes supplier control inside the food safety plan.

Other controls (for example recall plans as a required plan element in preventive-controls frameworks) appear in detailed PCQI coursework; for HACCP exam literacy, master the four control types above and their contrast with CCP-only thinking.

The PCQI Role

A Preventive Controls Qualified Individual (PCQI) is someone who has successfully completed equivalent training (commonly the standardized preventive controls curriculum) or is otherwise qualified through job experience to develop and apply a food safety system. Under the preventive controls rule framework, a PCQI (or qualified team including PCQI functions) is involved in preparing the food safety plan, validating process preventive controls where required, reviewing records, and reanalysis. Exams often ask: Who develops/oversees the food safety plan under preventive controls? → PCQI (not “only the marketing intern”).

Classic HACCP still needs competent people—the PCQI title is specifically tied to the preventive controls training/regulatory model.

When Both Appear on the Same Exam

Use this decision checklist:

1. Is the question about Codex/NACMCF seven principles, CCPs, and critical limits? → Answer in HACCP language.
2. Is the question about FSMA, food safety plan, PCQI, or process/allergen/sanitation/supply-chain preventive controls? → Answer in HARPC/preventive controls language.
3. Is the question about mandatory U.S. product rules? → Map to FSIS meat/poultry, FDA 21 CFR 123 seafood, FDA 21 CFR 120 juice, or FSMA preventive controls for broader FDA facilities as appropriate.
4. Does the option claim they are 100% identical or that one abolished the other? → Treat as trap.

Integrating Systems in a Real Facility

Many plants run a unified food safety system: prerequisite programs + HACCP plans for mandatory product lines + preventive controls food safety plan elements for FSMA coverage + supplier and allergen programs. Documentation should show how hazards are controlled—not which buzzword is printed in the largest font. For study purposes, keep the conceptual boxes clear so you can parse exam stems quickly.

Exam Traps for This Topic

• “HARPC is identical to HACCP; only the name changed.”
• “FSMA eliminated the need for hazard analysis.”
• “Only CCPs exist under preventive controls; allergen and sanitation controls are never preventive controls.”
• “PCQI is optional marketing certification with no food safety plan role.”
• “Seafood/juice HACCP regulations were repealed by FSMA, so 21 CFR 123/120 no longer matter.”

Bottom line: FSMA preventive controls / HARPC modernized preventive food safety for many FDA facilities with a food safety plan, PCQI, and multiple preventive control types. HACCP remains the classic seven-principle system and remains mandatory in key sectors. Compare carefully, use the right vocabulary for the question, and never overclaim equivalence.