United States

How long do you have to keep food safety records?

The Food Code sets a retention period for a few specific records and is silent on the rest. Here is which is which — and how to find the rule that actually applies to you.

6 min read · Updated

Ask three operators how long to keep a temperature log and you will get three answers, all delivered with total confidence. The honest position is that the FDA Food Code gives an explicit retention period for a small number of records, says nothing about most of the rest, and leaves the gap to whoever inspects you.

That is not a dodge. Knowing which of your records has a written federal answer, and which is a local decision, is the difference between confidently handing over a folder and hoping.

The records the Food Code does put a number on

These are specified in the Code itself, so they travel with you regardless of state.

Shellstock tags — 90 days

If you serve oysters, clams, mussels or scallops in the shell, the identification tag that came with the container must be kept for 90 calendar days from the date the container is emptied. This is FDA Food Code §3‑203.12. The tag has to stay with the product while any of it remains, and the date the last one came out has to be recorded on it.

This is the retention rule inspectors cite most often, because it is unambiguous and easy to check. It is also the one most commonly missed, because the tag looks like packaging rather than a record.

Reduced oxygen packaging and other variance records — as specified in the HACCP plan

If you vacuum-pack, sous-vide for later service, cure, or do anything else requiring a variance or a HACCP plan, §8‑201.14 requires the plan to state what records are kept and for how long, and those records must be available to the regulatory authority. The period is whatever your approved plan says, which is why the plan itself is the document to check rather than a general rule.

Date marking — while the food exists

Ready-to-eat time/temperature control for safety food held more than 24 hours must be marked with the day or date by which it is to be consumed, discarded or sold — a maximum of seven days at 41°F (5°C) or below, counting the day of preparation as day one (§3‑501.17). That is a marking rule rather than a retention rule, but it is the one people conflate with record keeping, so it is worth separating.

The records the Food Code does not put a number on

Your daily fridge and freezer temperatures. Your cooling logs. Your cleaning checklists. Your cook temperatures. The Code requires that time and temperature are controlled and, in several places, that the operator can demonstrate control — but it does not set a universal retention period for the routine monitoring logs that most kitchens keep.

What fills that gap is your regulatory authority: the state, county or city health department that actually inspects you. Their requirements vary, and some set nothing in writing at all, in which case the practical standard is "enough history to show a pattern" rather than a specific date.

How to find your actual rule, in about ten minutes.

  1. Search for your state's adopted food code — most states adopt a version of the FDA Food Code, sometimes several years behind the current edition.
  2. Search that document for "records" and "retain". State amendments are where retention periods usually appear if they exist.
  3. If nothing is specified, call the health department that issues your permit and ask directly. They answer this question constantly, and having asked is itself worth something.

A defensible default when nobody has told you

Absent a local rule, most operators land on keeping routine monitoring records for a rolling one to two years. There is no federal basis for that figure and this page is not going to pretend otherwise — it is a convention, and its logic is practical rather than legal:

  • It comfortably covers the interval between routine inspections in nearly every jurisdiction.
  • It spans a full year of seasonal variation, which is what makes a pattern legible rather than a snapshot.
  • If an illness complaint is ever traced to your premises, the records covering that date still exist. This is the reason that actually matters, and it is the one people forget when deciding to bin last year's folder.

If you keep records digitally, the storage cost of "forever" is effectively nothing, and the argument for deleting anything largely disappears.

The part that catches people out

Retention only means something if the records can be produced. A box of paper in an office at another site, or a folder only the owner can find, is not meaningfully retained at the moment an inspector is standing in your kitchen on a Saturday.

Two practical tests, both worth applying to whatever system you use now:

  • Can the person on shift produce them? Inspections do not wait for the owner to drive in.
  • Is each entry attributable and timestamped? A log filled in from memory at the end of the week is a document, not a record, and it reads that way to someone who inspects for a living.

In short

  • Shellstock tags: 90 days. Federal, specific, commonly missed.
  • HACCP and variance records: as your approved plan specifies.
  • Everything else: your health department decides. Ask them.
  • If nobody has told you: a rolling one to two years is the common convention, and digital storage makes keeping more than that essentially free.

This guide is general information, not regulatory advice. The FDA Food Code is a model that states adopt in their own versions and on their own timelines, sometimes with amendments. The document that governs your restaurant is the code adopted by the authority that inspects you — confirm anything here against it before building a procedure on it.