Food Safety Compliance in North America: FSMA 204, CFIA, FSVP 2026

On January 1, 2026, every prepackaged food sold in Canada that is high in saturated fat, sugars, or sodium had to carry a new front-of-package nutrition symbol, with no enforcement discretion left to invoke. Six months earlier, the US Department of Agriculture had gone the other way entirely, withdrawing its proposed Salmonella framework for raw poultry after more than 7,000 public comments challenged its legal basis. And across the border in the other direction, US importers watched FDA issue Foreign Supplier Verification Program warning letters at a pace 67% above the same period in 2024 and 2025.

None of these three moves point the same way. Canada tightened a labelling rule with zero grace period. The United States pulled back a major pathogen standard for poultry while simultaneously ramping up import-side enforcement and pushing a landmark traceability rule's compliance date out by 30 months. For a food safety or regulatory affairs team operating on both sides of the border, 2026 is a year of contradictory signals inside the same regulatory relationship, and getting the sequencing wrong costs real money in detained shipments and recall exposure.

Here is what actually changed, what got walked back, and what a North America food safety program needs to track for the rest of the year.

Did FDA actually delay food traceability requirements, or just enforcement?

Only enforcement moved, not the underlying recordkeeping obligation. The Food Traceability Rule, finalized under Section 204(d) of the Food Safety Modernization Act in November 2022, originally required compliance by January 20, 2026 for every entity that manufactures, processes, packs, or holds food on FDA's Food Traceability List. On August 6, 2025, FDA proposed a 30-month extension, and Congress went further in the FY2026 Agriculture appropriations act, directing that no federal funds may be used to enforce the rule before July 20, 2028.

The rule itself was not amended. Covered entities still need to capture Key Data Elements at every Critical Tracking Event and produce sortable electronic records within 24 hours of an FDA request. FDA ran traceability readiness tabletop exercises with 15 volunteer companies between March 9 and April 1, 2026, and found that participants could generally meet the 24-hour response window but still struggled with traceability lot code sourcing and standardizing data formats across supply chain partners. Since the exercises were voluntary, the companies that showed up were likely better prepared than the industry average, which means the gaps FDA documented are a floor, not a ceiling, for what the rest of the sector faces.

Why did USDA withdraw its Salmonella framework for raw poultry, and what replaces it?

FSIS pulled the proposal because the record of public comments raised questions the agency could not answer on the original timeline. The Salmonella Framework for Raw Poultry Products, published August 7, 2024 at 89 FR 64678, would have set final product standards defining certain Salmonella levels and serotypes as adulterants and required statistical process control monitoring. After receiving more than 7,000 comments questioning FSIS's legal authority, the scientific basis for the proposed standards, and the economic impact on small producers and processors, the agency formally withdrew the rule on April 25, 2025 at 90 FR 17344.

FSIS has not abandoned the goal. The agency held a public meeting on January 14, 2026 to discuss alternative strategies, including biomapping and revised performance-standard windows, aimed at producing a policy that survives the objections raised the first time. Poultry processors should treat the current 9 CFR pathogen reduction standards as the operative baseline and plan for a second rulemaking attempt rather than assuming Salmonella oversight has been shelved indefinitely.

What changed for Canadian food labels on January 1, 2026?

The front-of-package nutrition symbol became mandatory with no transition period left. Health Canada published the amendments to the Food and Drug Regulations on July 20, 2022, giving industry a 3.5-year transition that ended December 31, 2025. Effective January 1, 2026, every prepackaged food meeting or exceeding the thresholds for saturated fat, sugars, or sodium must display the symbol, and the Canadian Food Inspection Agency has stated it will not issue enforcement discretion beyond that date.

Products manufactured, imported, or packaged before January 1, 2026 can still be sold and remain on shelves. Anything manufactured, imported, or packaged at retail on or after that date is subject to CFIA's standard regulatory response process, with correction timeframes scaled to the severity of the non-compliance found during inspection. Companies exporting into Canada should confirm labelling artwork for every SKU crossing the border after that date, since this is exactly the kind of packaging-line detail that gets missed when a compliance team is focused on the US side of a cross-border operation.

How aggressively is the CFIA now enforcing food safety licences?

Very, and the shift is deliberate. The manufactured food sector was only brought under the Safe Food for Canadians Regulations in 2022, and CFIA's initial approach favored compliance promotion over enforcement. That period is ending. Starting in October 2025, the CFIA began a licence verification blitz targeting more than 2,400 manufactured food establishments, with completion targeted for fall 2026, and made the Additional Establishment Information questionnaire a mandatory condition of licensing rather than a voluntary disclosure.

The tools available to CFIA now include detention of product, refusal of entry for imports, licence suspension or cancellation, and Administrative Monetary Penalties. For a Safe Food for Canadians licence holder, a suspended licence halts the ability to manufacture, sell interprovincially, import, or export overnight. Any business holding an SFC licence should confirm the licence still matches its current activities, commodities, and establishments, since an outdated licence is precisely what triggered the blitz after a major 2024 recall involving an unamended licence.

Why are FSVP warning letters spiking for US importers?

Because FDA is returning to importers it has already inspected and finding the same gap again. Between January 1 and April 28, 2026, FDA issued 15 to 16 warning letters citing violations of the Foreign Supplier Verification Program regulation, a 67% increase over the same four-month window in both 2024 and 2025. The letters describe a consistent failure pattern: importers who did not develop, maintain, or follow an FSVP for the specific foods and suppliers named in the letter, even after multiple prior inspections flagged the same gap.

The consequence for continued non-compliance is Import Alert 99-41, which places the importer on FDA's Detention Without Physical Examination list, blocking entry of the specific foods from the specific foreign suppliers named until the importer demonstrates corrective action. FSVP compliance is not a one-time filing; it requires an active, product-specific verification program that FDA expects to see maintained at every follow-up inspection, not just documented once at onboarding.

What should a food safety compliance team do next?

Do not read the Food Traceability Rule extension as a pass. The recordkeeping requirements stand, FDA's tabletop exercises show exactly where firms fall short, and building toward July 20, 2028 now avoids the same scramble the original January 2026 date nearly caused. On the Canadian side, confirm every SKU shipped after January 1, 2026 carries a compliant front-of-package symbol and that any Safe Food for Canadians licence matches current business activities before a CFIA verification visit finds the gap first.

Tracking FDA, USDA-FSIS, Health Canada, and CFIA on top of Codex Alimentarius as the underlying reference floor means watching four regulators that do not publish on the same calendar or in the same format. Obsidian monitors those primary sources jurisdiction by jurisdiction and surfaces the rule changes, withdrawals, and enforcement notices the moment they land, rather than weeks later in a newsletter roundup. For teams that need a fast, specific answer, such as whether a given product falls on the current Food Traceability List or what CFIA's licence blitz means for a specific establishment type, Obsidian's AI companion works from the same verified regulatory records referenced throughout this article, and always as a companion to your own judgment, never as a substitute for it. Compliance functions building internal tools on top of that data can pull it through the MCP, and teams evaluating plans can start with jurisdiction-level monitoring scoped to exactly the US and Canada food safety frameworks covered here.