(a) Circumstances. If you are a manufacturer/processor, you are not required to implement a preventive control when you identify a hazard requiring a preventive control (identified hazard) and any of the following circumstances apply:
(1) You determine and document that the type of food (e.g., raw agricultural commodities such as cocoa beans, coffee beans, and grains) could not be consumed without application of an appropriate control.
(2) You rely on your customer who is subject to the requirements for hazard analysis and risk-based preventive controls in this subpart to ensure that the identified hazard will be significantly minimized or prevented and you:
(i) Disclose in documents accompanying the food, in accordance with the practice of the trade, that the food is “not processed to control [identified hazard]”; and
(ii) Annually obtain from your customer written assurance, subject to the requirements of § 117.137, that the customer has established and is following procedures (identified in the written assurance) that will significantly minimize or prevent the identified hazard.
(3) You rely on your customer who is not subject to the requirements for hazard analysis and risk-based preventive controls in this subpart to provide assurance it is manufacturing, processing, or preparing the food in accordance with applicable food safety requirements and you:
(i) Disclose in documents accompanying the food, in accordance with the practice of the trade, that the food is “not processed to control [identified hazard]”; and
(ii) Annually obtain from your customer written assurance that it is manufacturing, processing, or preparing the food in accordance with applicable food safety requirements.
(4) You rely on your customer to provide assurance that the food will be processed to control the identified hazard by an entity in the distribution chain subsequent to the customer and you:
(i) Disclose in documents accompanying the food, in accordance with the practice of the trade, that the food is “not processed to control [identified hazard]”; and
(ii) Annually obtain from your customer written assurance, subject to the requirements of § 117.137, that your customer:
(A) Will disclose in documents accompanying the food, in accordance with the practice of the trade, that the food is “not processed to control [identified hazard]”; and
(B) Will only sell to another entity that agrees, in writing, it will:
(1) Follow procedures (identified in a written assurance) that will significantly minimize or prevent the identified hazard (if the entity is subject to the requirements for hazard analysis and risk-based preventive controls in this subpart) or manufacture, process, or prepare the food in accordance with applicable food safety requirements (if the entity is not subject to the requirements for hazard analysis and risk-based preventive controls in this subpart); or
(2) Obtain a similar written assurance from the entity's customer, subject to the requirements of § 117.137, as in paragraphs (a)(4)(ii)(A) and (B) of this section, as appropriate; or
(5) You have established, documented, and implemented a system that ensures control, at a subsequent distribution step, of the hazards in the food you distribute and you document the implementation of that system.
(b) Records. You must document any circumstance, specified in paragraph (a) of this section, that applies to you, including:
(1) A determination, in accordance with paragraph (a) of this section, that the type of food could not be consumed without application of an appropriate control;
(2) The annual written assurance from your customer in accordance with paragraph (a)(2) of this section;
(3) The annual written assurance from your customer in accordance with paragraph (a)(3) of this section;
(4) The annual written assurance from your customer in accordance with paragraph (a)(4) of this section; and
(5) Your system, in accordance with paragraph (a)(5) of this section, that ensures control, at a subsequent distribution step, of the hazards in the food you distribute.