PCQIPreventive Controls Qualified Individual

FSMA's Preventive Controls for Human Food rule (21 CFR 117 Subpart C, effective 2015) introduced the Preventive Controls Qualified Individual — the named human being who carries personal regulatory accountability for the Food Safety Plan at a covered facility. Where HACCP placed the responsibility on a "HACCP team", FSMA placed it on an identifiable, qualified individual whose name appears on the plan.

Every facility required to register with FDA under 21 CFR Part 1 Subpart H and not otherwise exempt from Subpart C must have at least one PCQI. The exemptions are narrow: very small businesses applying for qualified-facility status (modified requirements), certain low-risk activities, dietary-supplement facilities (covered by 21 CFR 111 instead), and a handful of farm-mixed-type facilities. If you're a US-distributing food manufacturer, processor, packer or holder above the qualified-facility size threshold, you need a PCQI.

Importers are governed by the FSVP rule (21 CFR 1 Subpart L) which has its own Qualified Individual (FSVP-QI) role with different qualifying training (FSPCA FSVP). The two roles are distinct; a single person may hold both if they have both qualifications.

§117.155 sets two qualification routes:

1. Successfully complete training in the development and application of risk-based preventive controls equivalent to the FDA-recognised standardised curriculum — in practice, the FSPCA "Preventive Controls for Human Food" course delivered by an FSPCA-recognised Lead Instructor. The course is 2.5 days of contact instruction and concludes with a certificate of completion.
2. OR be qualified through job experience that has provided knowledge at least equivalent to that provided through the standardised curriculum. The experience route is harder to defend at audit because there is no certificate; facilities choosing it should document the experience portfolio carefully.

Most regulated facilities take the training route because the FSPCA certificate is the universally-accepted evidence. International equivalents include CFIA's recognised PCQI courses for export markets and FSAI-aligned offerings within EU food-business contexts.

Some activities under Subpart C can be performed by any qualified individual; some are reserved by §117.155(a) to the PCQI. The reserved activities are the highest-risk decisions in the plan:

• Preparation of the Food Safety Plan (§117.126).
• Validation of preventive controls (§117.160) — confirmation that controls are capable of effectively controlling the hazards.
• Verification of monitoring and corrective-action records — the seven-day record-review duty under §117.165.
• Verification of implementation and effectiveness (§117.165).
• Re-analysis of the Food Safety Plan (§117.170) — at least every three years and whenever a significant change occurs.

The Food Safety Plan is the central artefact (§117.126). It must be written and signed by the owner/operator/agent in charge, dated upon initial completion and upon any modification. The PCQI prepares or oversees its preparation. Its contents:

1. Hazard analysis — every known or reasonably foreseeable biological, chemical (including radiological), and physical hazard, with severity × probability.
2. Preventive controls — for each hazard requiring a preventive control: process, food allergen, sanitation, supply-chain, and/or recall plan.
3. Supply-chain program (§117 Subpart G) — for hazards controlled by the supplier.
4. Recall plan — for any food with a hazard requiring a preventive control.
5. Procedures for monitoring the preventive controls.
6. Corrective-action procedures.
7. Verification procedures.

FSMA distinguishes three activities that are often conflated:

• Validation — establishing scientifically that a preventive control is capable of effectively controlling the hazard (e.g. a thermal-process validation showing 5-log Salmonella reduction). PCQI personally performs or oversees.
• Verification — checking that monitoring is occurring, that controls are operating as intended, that corrective actions are being taken (e.g. records review, calibration of instruments, environmental monitoring trend review, finished-product testing). PCQI personally performs or oversees.
• Monitoring — the routine, real-time observation that a preventive control is being properly applied (e.g. continuous temperature recorder on a cook step). Performed by any qualified individual; the PCQI verifies the records within seven working days.

§117.165(a)(4) requires that records of monitoring and corrective actions be reviewed by a PCQI within seven working days after the records are created (some records have shorter or different windows, e.g. supply-chain documents). The PCQI signs and dates the review. FDA cites this rule frequently — gaps of weeks or months are a recurring 483 pattern.

The Food Safety Plan must be re-analysed at least every three years (§117.170). It must also be re-analysed within an appropriate timeframe whenever a significant change in activities creates a reasonable potential for a new hazard or significant increase in a previously identified hazard, when there is new information about potential hazards, when a preventive control is found to be ineffective, or when FDA requires it.

• Facility has no formally identified PCQI on the Food Safety Plan.
• PCQI's training certificate has expired or was issued by a non-FSPCA-recognised instructor.
• Reserved activities (validation, record review, re-analysis) performed by quality staff with no PCQI sign-off.
• Record review beyond the seven-day window with no documented rationale.
• Re-analysis not performed after a significant process change (new line, new product, new supplier).
• No supply-chain program for hazards controlled by suppliers.