(a) You must validate that the preventive controls identified and implemented in accordance with § 117.135 are adequate to control the hazard as appropriate to the nature of the preventive control and its role in the facility's food safety system.

(b) The validation of the preventive controls:

(1) Must be performed (or overseen) by a preventive controls qualified individual:

(i)(A) Prior to implementation of the food safety plan; or

(B) When necessary to demonstrate the control measures can be implemented as designed:

(1) Within 90 calendar days after production of the applicable food first begins; or

(2) Within a reasonable timeframe, provided that the preventive controls qualified individual prepares (or oversees the preparation of) a written justification for a timeframe that exceeds 90 calendar days after production of the applicable food first begins;

(ii) Whenever a change to a control measure or combination of control measures could impact whether the control measure or combination of control measures, when properly implemented, will effectively control the hazards; and

(iii) Whenever a reanalysis of the food safety plan reveals the need to do so;

(2) Must include obtaining and evaluating scientific and technical evidence (or, when such evidence is not available or is inadequate, conducting studies) to determine whether the preventive controls, when properly implemented, will effectively control the hazards; and

(c) You do not need to validate:

(1) The food allergen controls in § 117.135(c)(2);

(2) The sanitation controls in § 117.135(c)(3);

(3) The recall plan in § 117.139;

(4) The supply-chain program in subpart G of this part; and

(5) Other preventive controls, if the preventive controls qualified individual prepares (or oversees the preparation of) a written justification that validation is not applicable based on factors such as the nature of the hazard, and the nature of the preventive control and its role in the facility's food safety system.