Food Safety

FDA Food Facility Registration and FSMA for Bakeries

By Robert Roessler, Food Scientist · Published 14 November 2026

Growing from a home bakery or a shop into wholesale brings federal rules into play. This guide explains the difference between FDA registration and FSMA preventive controls, who is affected, and how to check your own situation.

1. Two different federal duties

People often mix up two things. Food facility registration means telling the FDA that your facility exists. FSMA preventive controls are the rules for what you must do inside the facility to keep food safe. A bakery can fall under one, both or, in some cases, neither. This guide explains the logic and where to check; it does not replace the rule text.

2. Registration: who has to do it

The FDA states that facilities engaged in manufacturing, processing, packing or holding food for consumption in the United States must register, and that registration has to be renewed every other year under the Food Safety Modernization Act (U.S. Food and Drug Administration: Registration of Food Facilities). The registration rules took effect on 12 December 2003, and FSMA was signed into law on 4 January 2011 (same FDA page).

For a bakery this usually means: a wholesale or commercial bakery that makes bread, rolls or pastry for sale to other businesses is a food facility. Some businesses are exempt from registration, for example restaurants and retail food establishments whose primary function is selling directly to consumers. Whether your shop qualifies depends on how much you sell to consumers and how much to other businesses, so confirm your own case with the FDA (1-888-INFO-FDA, 1-888-463-6332, as listed on the FDA page) or with your state food authority before you decide that you do not need to register.

3. Preventive controls and the "qualified facility"

The preventive controls rule for human food asks registered facilities for a food safety plan, hazard analysis, preventive controls, monitoring, corrective actions and records (FDA: FSMA Final Rule for Preventive Controls for Human Food). A plan under this rule must be reassessed at least every three years (New York State Department of Agriculture and Markets).

Very small businesses get a lighter set of duties as a qualified facility. The test is based on the business's average annual sales of human food plus the market value of food held without sale, and it is set at less than one million dollars, adjusted for inflation (Minnesota Department of Agriculture: Qualified Facility Guidance; National Sustainable Agriculture Coalition). A qualified facility does not have to write the full plan, but it must still register, attest to its status and follow current good manufacturing practice. Check the current dollar figure on the FDA site before you rely on it.

4. Why bakeries still need a food safety system

Even if you are exempt from the federal plan, your state or county may require a HACCP-style system, allergen controls and sanitation records. The guide HACCP for Small Bakeries shows how to build a plan in plain steps. Allergen control is part of every system: see Food Allergen Labeling for Small Bakeries. Cleaning and pest control belong to the prerequisite programs that your plan relies on; they are covered in Cleaning, Sanitation and Pest Control in Bakeries.

5. The path from home bakery to registered facility

1. Home bakery under a cottage food law. State rules apply; see Cottage Food Laws for Home Bakers.
2. Licensed retail bakery. You sell directly to consumers from a permitted kitchen. Your local health department is your main authority.
3. Selling to shops, cafés or wholesalers. This is where the FDA registration question becomes real. Ask before the first wholesale delivery.
4. Larger production. A full food safety plan, supplier controls and trained staff.

6. What to prepare before you call the authority

• Your address and a short description of what you make.
• Your estimate of annual sales, split into direct-to-consumer and sales to businesses.
• Whether any products are shipped across state lines.
• A list of your allergens and ingredients of concern.

These four points answer most of the questions the authority will ask and make the conversation short.

7. A short checklist

1. Decide whether your bakery makes food for sale to other businesses.
2. Check with the FDA or your state whether you must register.
3. If you register, put the renewal in your calendar; it recurs every second year.
4. Find out whether you count as a qualified facility.
5. Keep records from day one, including supplier documents and cleaning logs.
6. Review your status whenever sales or customers change.

Summary

Registration tells the FDA that your facility exists; preventive controls describe how you keep food safe. A bakery that sells to other businesses usually has to register, a very small one may qualify for lighter duties, and a bakery that sells only to consumers may be exempt. Confirm your own case with the FDA or your state before you decide.

Sources

• U.S. Food and Drug Administration: Registration of Food Facilities and Other Submissions
• FDA: FSMA Final Rule for Preventive Controls for Human Food
• New York State Department of Agriculture and Markets: Preventive Controls for Human Food Rule (presentation)
• Minnesota Department of Agriculture: Qualified Facility Guidance
• National Sustainable Agriculture Coalition: Is my operation a qualified facility?

Information current as of 14 November 2026. This guide is general information and does not replace advice from your local health department, your food safety authority or a qualified food safety professional.