GMP Compliance Checklist for Food Manufacturers

Last updated: 2026-03-21

If you run a food manufacturing operation, Good Manufacturing Practices (GMPs) aren't optional — they're the regulatory floor the FDA expects you to stand on. Yet every year, hundreds of food facilities receive Form 483 observations and Warning Letters citing GMP deficiencies that a proper internal audit would have caught first.

This pillar guide gives you a practical, regulation-grounded GMP compliance checklist built around the requirements in 21 CFR Part 117 (Current Good Manufacturing Practice, Hazard Analysis, and Risk-Based Preventive Controls for Human Food). Whether you're preparing for a routine FDA inspection, an SQF or BRCGS audit, or simply tightening your quality system, this checklist will help you identify gaps before an investigator does.

Citation hook: According to FDA data, cGMP violations — including inadequate sanitation, poor pest control, and failure to maintain equipment — consistently rank among the top five reasons food facilities receive Warning Letters in any given fiscal year.

---

Why GMP Compliance Matters More Than Ever

The Food Safety Modernization Act (FSMA) shifted FDA's regulatory posture from reactive to preventive. For food manufacturers, that means GMPs are now embedded inside a larger preventive controls framework — and FDA investigators are trained to look at your cGMPs as a system, not as a checklist of isolated line items.

Key statistics every food manufacturer should know:

• The FDA conducted over 12,000 domestic food facility inspections in fiscal year 2023, with a significant portion resulting in voluntary corrective actions or regulatory enforcement.
• According to the FDA's enforcement statistics, inadequate sanitation controls are cited in approximately 30% of all food facility 483 observations.
• A 2023 analysis of FDA Warning Letters found that allergen cross-contact failures — a direct cGMP issue — triggered some of the costliest voluntary recalls in the food industry, with average recall costs exceeding $10 million per event.
• The FDA estimates that foodborne illnesses affect approximately 48 million Americans annually, costing the U.S. economy over $15.6 billion per year — a figure regulators cite when justifying rigorous GMP enforcement.
• SQF-certified facilities that maintain robust GMP programs report audit non-conformance rates up to 40% lower than non-certified peers, according to the Safe Quality Food Institute.

Citation hook: Food manufacturers operating under 21 CFR Part 117 are required to maintain cGMPs as a foundational prerequisite to their Food Safety Plan — meaning a weak GMP program invalidates the preventive controls layer built on top of it.

---

How to Use This GMP Compliance Checklist

This checklist is organized around the eight core GMP program areas defined in 21 CFR Part 117 Subpart B. For each area, I've listed the critical compliance elements, the regulatory citation, and a practical audit question you can use during a self-inspection.

Rate each item using a simple traffic-light system: - 🟢 Compliant — documented, implemented, and verified - 🟡 Partial — in place but lacking documentation or consistency - 🔴 Gap — not implemented or not verifiable

---

Section 1: Personnel Hygiene and Health Controls

Regulatory basis: 21 CFR § 117.10 (Personnel)

Personnel are the most common vector for food contamination — and the most frequently cited GMP deficiency in FDA inspections. Your personnel hygiene program must be documented, trained to, and actively enforced on the production floor.

Checklist Items

• [ ] Written illness and exclusion policy covering vomiting, diarrhea, jaundice, open sores, and communicable diseases
• [ ] Supervisors trained to recognize and act on signs of employee illness
• [ ] Documented hand-washing procedures posted at all hand sinks
• [ ] Verification records showing hand-washing stations are supplied (soap, water, drying material, sanitizer)
• [ ] Hair restraint policy enforced for all personnel and visitors in production areas
• [ ] No eating, drinking, chewing gum, or tobacco use in production areas — policy documented and enforced
• [ ] Personal protective equipment (PPE) policy appropriate to product risk (gloves, beard nets, smocks)
• [ ] Jewelry and personal items policy (no watches, rings, dangling earrings in production)
• [ ] Annual or role-based GMP training records for all employees, contractors, and visitors

Audit question: Pull training records for three randomly selected production employees — can you show documented GMP training completed within the past 12 months?

---

Section 2: Plant and Grounds

Regulatory basis: 21 CFR § 117.20 (Plant and grounds)

Your facility's physical environment is a direct reflection of your GMP culture. FDA investigators walk the perimeter of your building before they ever enter your production floor.

Checklist Items

• [ ] Grounds maintained to minimize pest harborage (mowed grass, no standing water, debris removed)
• [ ] Waste and sewage disposal systems adequate and operating correctly
• [ ] Roads and yards paved, graded, or drained to prevent puddles and mud
• [ ] Building exterior free of cracks, gaps, and openings larger than ¼ inch (the threshold for rodent entry)
• [ ] Doors, windows, and roof in good repair — self-closing doors on production entry points
• [ ] Adequate lighting in all production, storage, and inspection areas (minimum footcandles documented per area)
• [ ] Ventilation adequate to minimize condensation, odors, and airborne contamination
• [ ] Plumbing systems providing adequate supply of potable water; backflow prevention verified

Audit question: When did you last document a perimeter inspection, and who is responsible for corrective actions?

---

Section 3: Sanitary Operations

Regulatory basis: 21 CFR § 117.35 (Sanitary operations)

Sanitation is the backbone of any GMP program. This section covers both general facility sanitation and the sanitation of equipment and utensils.

Checklist Items

• [ ] Master Sanitation Schedule (MSS) covers all equipment, utensils, walls, floors, and drains
• [ ] Cleaning and sanitation procedures (SOPs) written, approved, and accessible to sanitation staff
• [ ] Sanitation chemicals are food-grade, used per label instructions, and stored away from food contact surfaces
• [ ] Pre-operational sanitation verification performed and documented before production begins each day
• [ ] Environmental monitoring program in place (swabs for pathogens or indicators appropriate to product risk)
• [ ] Pest control program managed by a licensed PCO with service logs, trap maps, and trend analysis
• [ ] Compressed air used in food contact areas is filtered and free of oil, moisture, and contaminants
• [ ] Non-food-contact surfaces (walls, floors, drains) cleaned on a scheduled frequency

Audit question: Show me the last 30 days of pre-operational sanitation records — are there any open CAPAs from failed pre-op checks?

---

Section 4: Sanitary Facilities and Controls

Regulatory basis: 21 CFR § 117.37 (Sanitary facilities and controls)

Checklist Items

• [ ] Adequate number of hand-washing stations located in or near production areas
• [ ] Hand-washing stations equipped with running water at appropriate temperature, soap, and hygienic drying
• [ ] Toilet facilities adequate in number, kept clean, and located to prevent contamination of food areas
• [ ] Locker rooms and break areas separated from production — no direct access to food-contact areas
• [ ] Sewage and liquid waste disposed through approved systems; no cross-connection with potable water
• [ ] Garbage and waste receptacles covered, clearly identified, and removed regularly

Audit question: Do hand-washing station checks appear in your daily sanitation verification records?

---

Section 5: Equipment and Utensils

Regulatory basis: 21 CFR § 117.40 (Equipment and utensils)

Checklist Items

• [ ] Food-contact surfaces made of non-toxic, non-absorbent, corrosion-resistant materials (stainless steel, food-grade polymers)
• [ ] Equipment designed and installed to allow adequate cleaning and inspection
• [ ] Seams on food-contact surfaces are smoothly bonded — no crevices that harbor bacteria
• [ ] Thermometers and temperature-monitoring devices calibrated on a documented schedule
• [ ] Equipment maintenance and preventive maintenance (PM) program in place with records
• [ ] Lubricants used on food-contact equipment are food-grade (NSF H1 certified)
• [ ] Single-use items (gaskets, tubing, gloves) replaced at defined intervals or when visibly damaged
• [ ] Utensil and equipment storage protects from contamination between uses

Audit question: Pull calibration records for your three most critical temperature monitoring devices — are they current?

---

Section 6: Processes and Controls

Regulatory basis: 21 CFR § 117.80 (Processes and controls)

This is the operational heart of your GMP program — where raw materials, in-process controls, and finished product handling all intersect.

Checklist Items

• [ ] Raw material and ingredient receiving program with documented acceptance criteria
• [ ] Supplier verification program (COAs, vendor audits, or approved supplier list)
• [ ] Lot coding and traceability for all raw materials and finished products (forward and backward, within 4 hours per FSMA expectations)
• [ ] FIFO (First In, First Out) inventory rotation enforced and verified in storage areas
• [ ] Time and temperature controls for processes where pathogen growth is a hazard
• [ ] Foreign material control program (metal detection, X-ray, magnets, sifters) with verification records
• [ ] Rework policy — documented criteria for when rework is permitted and how it's controlled
• [ ] Hold and release procedure for non-conforming materials or products
• [ ] Finished product testing program with defined specifications and out-of-spec procedures

Audit question: If I ask for the disposition record of the last product hold, can you produce it within 15 minutes?

---

Section 7: Warehousing and Distribution

Regulatory basis: 21 CFR § 117.93 (Warehousing and distribution)

Checklist Items

• [ ] Temperature-controlled storage maintained and monitored for products requiring refrigeration or freezing
• [ ] Finished goods stored off the floor and away from walls to allow inspection and airflow
• [ ] Allergen segregation enforced in storage areas — written segregation map available
• [ ] Pest control active in warehouse areas — no evidence of rodent or insect activity
• [ ] Shipping containers inspected before loading — not damaged, odorous, or contaminated
• [ ] Chain-of-temperature records for distribution of temperature-sensitive products

Audit question: How do you verify that your cold chain was maintained for the last refrigerated shipment that left your facility?

---

Section 8: Training and Competency

Regulatory basis: 21 CFR § 117.4 (Qualifications of individuals who manufacture, process, pack, or hold food)

Citation hook: Under 21 CFR § 117.4, food manufacturers are required to ensure that all individuals engaged in manufacturing, processing, packing, or holding food are qualified through training, education, or experience — and that this qualification is documented.

Checklist Items

• [ ] Job-specific GMP training completed before personnel work independently
• [ ] Training records include: employee name, date, topic, trainer, and method of verification
• [ ] Supervisory staff trained to a higher standard — able to identify, document, and escalate GMP deviations
• [ ] Training program reviewed and updated annually or when procedures change
• [ ] Records of training for temporary workers, contractors, and third-party service providers
• [ ] Preventive controls qualified individual (PCQI) identified and documented for facilities with a Food Safety Plan

Audit question: Who is your PCQI, and can you show me their FSPCA training certificate?

---

GMP Compliance Quick-Reference Table

The following table maps each GMP program area to its regulatory citation, common FDA 483 observation triggers, and audit priority level.

GMP Program Area	21 CFR Citation	Common 483 Trigger	Audit Priority
Personnel Hygiene	§ 117.10	No illness exclusion policy; missing training records	🔴 Critical
Plant and Grounds	§ 117.20	Gaps in building exterior; standing water	🟡 High
Sanitary Operations	§ 117.35	No pre-op verification records; inadequate pest control	🔴 Critical
Sanitary Facilities	§ 117.37	Insufficient hand-washing stations; inadequate soap supply	🟡 High
Equipment and Utensils	§ 117.40	Food-contact surfaces not cleanable; missing calibration	🔴 Critical
Processes and Controls	§ 117.80	No traceability system; no allergen controls	🔴 Critical
Warehousing/Distribution	§ 117.93	Products stored on floor; no allergen segregation	🟡 High
Training and Competency	§ 117.4	No documented training records; unqualified personnel	🔴 Critical

---

GMP Compliance vs. FSMA Preventive Controls: Understanding the Relationship

One of the most common misconceptions I see when working with food manufacturers is the belief that GMPs and preventive controls are separate programs. They are not. Under the FSMA framework, cGMPs are prerequisite programs — the foundation that your Food Safety Plan sits on top of.

Here's how the layers interact:

Layer	Framework Element	Regulatory Basis
Foundation	Current Good Manufacturing Practices (cGMPs)	21 CFR Part 117, Subpart B
Middle	Prerequisite Programs (sanitation, pest control, allergen programs)	21 CFR Part 117, Subpart B
Top	Food Safety Plan (hazard analysis + preventive controls)	21 CFR Part 117, Subpart C

If your GMP foundation is weak, your Food Safety Plan will not hold. FDA investigators are trained to evaluate the entire stack — and a solid Food Safety Plan cannot compensate for documented GMP failures on the floor.

---

What Happens When You Fail a GMP Inspection?

Understanding the enforcement continuum helps you prioritize which gaps to close first.

1. Inspectional Observations (Form 483): The investigator issues written observations at the close of the inspection. You have the opportunity to respond within 15 business days. A strong, specific CAPA-based response can prevent escalation.
2. Warning Letter: If your 483 response is inadequate or your violations are serious, FDA issues a Warning Letter — which is publicly posted and triggers import alerts, customer notifications, and potential loss of contracts.
3. Consent Decree or Injunction: For chronic or egregious violators, FDA may seek a federal injunction that halts operations until deficiencies are corrected under court supervision.
4. Mandatory Recall: If a GMP failure results in adulterated product in commerce, FDA can mandate a recall under FSMA's expanded recall authority.

The most effective strategy is to treat every internal GMP audit as a mock FDA inspection — and to close every gap before an investigator does it for you.

---

Building a Sustainable GMP Compliance Program

A one-time checklist exercise won't keep you compliant. Sustainable GMP compliance requires a system. Here's the framework I recommend to clients at Certify Consulting:

1. Assign Ownership

Every GMP program area should have a named owner — a specific person accountable for implementation, verification, and continuous improvement. Ownership without accountability is just a policy document.

2. Build a Verification Calendar

Schedule internal GMP audits quarterly at minimum. High-risk facilities or those with previous 483 observations should audit monthly. Document findings and assign CAPAs with due dates and responsible parties.

3. Use Corrective Action, Not Just Correction

When you find a gap, don't just fix the immediate problem — investigate the root cause. A drain that wasn't cleaned is a correction; a procedure that didn't specify cleaning frequency is a corrective action.

4. Connect GMP Records to Your Food Safety Plan

Your pre-op sanitation records, calibration logs, and training records should be explicitly referenced in your Food Safety Plan as monitoring records for prerequisite programs. This creates an auditable thread from floor activity to plan documentation.

5. Conduct an Annual Management Review

Compile GMP audit results, pest control trends, training completion rates, customer complaints, and recall events into an annual management review. Use this data to prioritize resources for the coming year.

---

How Certify Consulting Helps Food Manufacturers Achieve GMP Compliance

Over 8+ years and 200+ client engagements, I've helped food manufacturers ranging from small artisan producers to large co-manufacturers achieve and maintain GMP compliance — with a 100% first-time audit pass rate across SQF, BRCGS, FSSC 22000, and FDA regulatory inspections.

Our GMP compliance services for food manufacturers include:

• Gap assessments against 21 CFR Part 117 and your applicable GFSI standard
• SOP and program development for all eight GMP program areas
• Mock FDA inspection walkthroughs with written findings and CAPA support
• Employee GMP training — on-site and remote options available
• Ongoing compliance retainer programs for facilities that need continuous support

If you're preparing for an upcoming audit or have received a 483 observation that needs a strong response, contact Certify Consulting to schedule a consultation.

You can also explore our food safety consulting services to learn how we support food manufacturers across the full FSMA compliance spectrum.

---

Frequently Asked Questions: GMP Compliance for Food Manufacturers

What is the difference between GMPs and cGMPs in food manufacturing?

GMP stands for Good Manufacturing Practices — the general concept of using defined, controlled methods to produce safe food. The "c" in cGMP stands for "current," meaning the practices must reflect the current state of science and regulatory expectation. In the U.S., the FDA uses the term cGMP to signal that compliance is a moving target — what was acceptable five years ago may not meet today's standard. Under 21 CFR Part 117, food manufacturers are expected to implement current GMPs, not just historical ones.

How often should food manufacturers conduct GMP audits?

At a minimum, food manufacturers should conduct formal internal GMP audits at least quarterly. High-risk facilities — those producing ready-to-eat products, allergen-containing products, or products for vulnerable populations — should audit monthly. Additionally, abbreviated daily or weekly GMP walkthroughs should be conducted by supervisors to catch emerging issues between formal audit cycles.

What are the most commonly cited GMP violations in FDA food inspections?

Based on FDA enforcement data and Form 483 observation trends, the most frequently cited GMP violations in food facilities include: (1) inadequate sanitation of equipment and food-contact surfaces, (2) failure to maintain pest control programs, (3) inadequate or absent employee hygiene training records, (4) improper storage of food and ingredients, and (5) failure to maintain adequate traceability records. These five categories appear consistently across FDA Warning Letters and 483 observations in the food manufacturing sector.

Is a written GMP program required by FDA for food manufacturers?

Yes. Under 21 CFR Part 117, food manufacturers covered by the Preventive Controls rule are required to have a written Food Safety Plan that includes documented prerequisite programs — which encompass your GMP program areas. Even for smaller facilities that may qualify for modified requirements, written procedures and records are essential for demonstrating cGMP compliance during an FDA inspection or third-party audit.

Can a food manufacturer fail an FDA inspection for GMP violations alone?

Absolutely. GMP violations under 21 CFR Part 117 can result in Form 483 observations, Warning Letters, and in serious cases, injunctions or mandatory recalls — entirely independent of any Food Safety Plan deficiencies. GMP violations are classified as adulteration under Section 402 of the FD&C Act, meaning non-compliant products are considered adulterated by definition and are subject to seizure and recall.

---

Last updated: 2026-03-21

Jared Clark, JD, MBA, PMP, CMQ-OE, CPGP, CFSQA, RAC — GMP Compliance Consultant, Certify Consulting | certify.consulting