Cold Chain Controls That Prevent Clostridium Botulinum Recalls in Peeled Garlic and Refrigerated Produce

Published: April 9, 2026

The case study behind this article: In April 2026, Tops Friendly Markets of Williamsville, New York issued a recall of Christopher Ranch Peeled Garlic (6 oz., UPC: 74574-10852) and Garland Fresh Peeled Garlic (6 oz., UPCs: 71894-00000 and 68826-75340), covering all code dates. The reason: products had been kept at insufficient temperatures, creating a risk of Clostridium botulinum contamination. The problem was not discovered at the manufacturing facility. It was found during a routine store inspection. Distribution had reached Tops Markets locations in New York, Pennsylvania, and Vermont. No illnesses had been reported as of the announcement. (FDA recall notice)

Temperature failures in refrigerated produce are not an unusual event. They happen every week at receiving docks, in distributor warehouses, and inside retail coolers across the country. What makes the Tops Issues Recall of Christopher Ranch Peeled Garlic & Garland Fresh Peeled Garlic Because of Possible Health Risk so instructive is who found the problem and where: a routine store inspection, at the retail end of the supply chain, after the product had already moved through distribution.

That sequence tells you something specific about where the cold chain monitoring system failed. The problem was not caught at manufacturing, not at the distributor checkpoint, not at receiving. It was caught by a store inspector looking at a refrigerated case. By that point, the product had been in commerce long enough to reach multiple states. A robust preventive controls program under FSMA's 21 CFR Part 117 framework is designed to interrupt that failure much earlier. This article walks through exactly how.

---

Why Clostridium Botulinum Is the Highest-Stakes Hazard in Peeled Garlic

Clostridium botulinum is a spore-forming, anaerobic bacterium that produces one of the most potent toxins known. Botulinum toxin causes botulism, a potentially fatal illness characterized by progressive muscle paralysis. Even sub-lethal exposures can result in prolonged hospitalization and assisted ventilation. The fatality rate without treatment is significant. This is not a hazard that tolerates a "detect and respond" posture.

Peeled garlic creates near-ideal conditions for C. botulinum growth when temperature control fails. The outer skin of garlic functions as a natural barrier that, once removed, exposes the clove to its environment. The interior of a peeled garlic clove is low-acid (pH above 4.6) and low-oxygen at the surface, which favors C. botulinum germination from dormant spores. Packaged peeled garlic stored in modified atmosphere or tightly sealed containers compounds this risk by reducing available oxygen further, providing the anaerobic conditions the organism requires to produce toxin.

Refrigeration is the primary critical control for this product. C. botulinum Type E and non-proteolytic Types B and F can grow at temperatures as low as 38°F (3.3°C). Proper refrigeration at or below 41°F (5°C) dramatically slows or eliminates growth, but only if that temperature is maintained consistently throughout the cold chain. A single temperature excursion during distribution or retail storage, sustained for enough hours, can allow toxin production to begin. The product may look and smell normal while toxin accumulates.

Under FSMA, FDA has consistently treated C. botulinum as a "known or reasonably foreseeable hazard requiring a preventive control" for refrigerated, low-acid, modified-atmosphere packaged produce. This is not a borderline hazard analysis call. Any food safety plan covering peeled garlic that does not identify C. botulinum as a biological hazard requiring a process control is incomplete on its face.

---

FSMA's Preventive Controls Rule: What It Requires for Temperature-Sensitive Products

The FSMA Preventive Controls for Human Food rule, codified at 21 CFR Part 117, applies to domestic and foreign food facilities that manufacture, process, pack, or hold food for consumption in the United States. A peeled garlic producer, a distributor operating a cold storage facility, and a retail chain holding food for sale all fall within this regulatory orbit to varying degrees.

The foundation of Part 117 compliance is a written Food Safety Plan (FSP). Under the regulation, the FSP must include a hazard analysis, preventive controls identified to address significant hazards, monitoring procedures, corrective action procedures, and verification activities. The plan is a living document, not a one-time filing exercise.

The Hazard Analysis Obligation

Every covered facility must conduct a hazard analysis to identify known or reasonably foreseeable biological, chemical, and physical hazards that could cause serious adverse health consequences. For a peeled garlic facility, C. botulinum belongs in the biological hazard column with a severity rating of "serious" and a probability rating tied to the frequency of temperature excursions in the supply chain. The result of that analysis should produce a "Yes" determination: this hazard requires a preventive control.

Process Controls Under Section 117.135

Once a hazard requiring a preventive control is identified, 21 CFR 117.135 requires implementation of process controls appropriate to the nature of the facility and the food. For temperature-sensitive products, the process control is temperature management, including defined temperature parameters, equipment calibration, and monitoring at critical points. The regulation does not prescribe specific temperatures, but the scientific basis for the temperature limits must be documented. For peeled garlic, that scientific basis is well-established: FDA guidance, the FDA Food Code, and published growth modeling for C. botulinum at refrigeration temperatures.

Monitoring Procedures Under Section 117.140

Section 117.140 requires written monitoring procedures specifying the method, frequency, and person responsible for monitoring each preventive control. For a cold chain temperature control, this means documented monitoring at defined intervals, not periodic visual checks. The monitoring record must capture what was observed, when it was observed, and who observed it. A temperature log filled out by memory at the end of a shift is not monitoring. It is documentation of an assumption.

Corrective Actions Under Section 117.150

When monitoring indicates a preventive control is not operating within established parameters, 21 CFR 117.150 requires corrective actions to be taken. These corrective actions must address the cause of the problem and evaluate the safety of affected product. The critical phrase is "before product is allowed to enter commerce." A corrective action program that identifies temperature excursions after product has shipped is not functioning as a preventive control. It is functioning as a recall trigger.

Validation Requirements Under Section 117.170

Section 117.170 requires validation that the preventive controls, as implemented, are adequate to control the identified hazard. For a temperature control targeting C. botulinum, validation means scientific evidence that the temperature parameter established is sufficient to prevent growth and toxin production under foreseeable conditions. This validation is not a compliance checkbox. It is the documented answer to the question: "How do we know this temperature limit is enough?"

---

The Cold Chain Gap: Where This Recall Points to a Systemic Failure

The Tops recall notice specified that the hazard was found during a routine store inspection. That detail is worth pausing on. The cold chain for refrigerated peeled garlic runs from the production facility through packaging, cold storage, carrier transport, distributor receiving and warehousing, delivery to the retail receiving dock, and finally into the retail cooler. Each of those handoffs is an opportunity for temperature to drift and for monitoring to fail.

Here is where the breakdown typically occurs at each stage:

• Manufacturing and primary cold storage: Monitoring at the point of origin is usually most robust, because FSMA obligations fall most clearly on the registered food facility. Temperature data loggers and calibrated refrigeration equipment are standard here for compliant operations.
• Transport: Carrier transport is the first major gap. Unless the supply agreement requires pre-cooled trailers, continuous temperature monitoring during transit, and documented delivery-temperature confirmation, this stage is often monitored by the driver's judgment and periodic manual checks.
• Distributor receiving and warehousing: Distributors that operate cold storage facilities have their own FSMA obligations, but enforcement attention here has historically been less intensive than at manufacturers. Temperature log discipline and equipment maintenance are common weak points.
• Retail receiving dock: Product often sits on a receiving dock for a period before being placed into refrigerated storage. During high-volume receiving windows, this dwell time can extend well beyond what is safe for temperature-sensitive products. Receiving staff are often not trained to verify product temperatures at acceptance or to reject product that arrives above threshold.
• Retail cooler: Cooler temperatures drift due to door cycles, overloading, equipment maintenance lapses, and placement of product. Retail cooler monitoring is rarely continuous and rarely reviewed systematically for trend excursions.

The fact that a routine store inspection identified this problem suggests the temperature issue was visible at the retail level. That means it either originated at retail, or it originated upstream and was severe enough to be apparent by the time the store inspector looked. Either way, no monitoring system anywhere in the supply chain caught it before the product reached the retail shelf.

---

Five Preventive Controls That Would Have Caught This Before the Recall

The following five controls represent the specific gap-fillers that FSMA contemplates and that this recall suggests were absent or insufficient across the supply chain.

1. Continuous Temperature Data Logging Throughout the Cold Chain

Periodic manual temperature checks at the beginning and end of a shift are not adequate for a product with a C. botulinum risk profile. What is adequate is continuous data logging at multiple cold chain points: manufacturing cold storage, shipping containers, distributor warehouse, and retail cooler. IoT-based temperature sensors and Bluetooth data loggers have made this cost-effective at scale. The monitoring record produced by these systems provides time-stamped documentation of every temperature deviation, eliminating the "we checked this morning and it was fine" gap in accountability.

The data loggers must be calibrated on a documented schedule and the records reviewed by a qualified individual. Logging without review is accumulating liability, not evidence of control.

2. Written Temperature Control Limits Validated Against C. Botulinum Growth Curves

The temperature limit for peeled garlic cold storage is not simply "whatever the refrigerator runs at." Under 21 CFR 117.170, the limit must be validated against scientific evidence that demonstrates it is adequate to prevent C. botulinum growth. FDA's guidance documents and published predictive microbiology models for C. botulinum provide the scientific basis. The validation should address not just the target temperature but the maximum allowable temperature, the maximum duration of an excursion before corrective action is required, and the cumulative time-temperature exposure that defines safe versus unsafe product.

Without this validation, a facility cannot defend its temperature limit if challenged during an inspection or after a recall. "We keep it at 38 degrees because that seems right" is not a food safety plan. It is a guess.

3. Supplier and Distributor Qualification and Cold Chain Verification

21 CFR Part 117 Subpart G addresses the supply chain program. For manufacturers that rely on distributors or transport carriers to maintain temperature integrity, the supply chain program must include evaluation of the distributor's or carrier's ability to control the identified hazard. In practice, this means requiring cold chain compliance documentation from all distribution partners, incorporating temperature control requirements into supply agreements, and verifying compliance through records review or on-site audit at least annually.

A supply chain program that accepts a distributor's verbal assurance that they "keep things cold" does not satisfy Subpart G. The verification must be documented and must be based on actual cold chain performance data, not representations.

4. Defined Corrective Action Procedures for Temperature Excursions Before Product Ships or Sells

Under 21 CFR 117.150, corrective action procedures must specify what happens when a temperature deviation is detected. For peeled garlic, the corrective action procedure should address: who is notified when monitoring detects a deviation above the critical limit; how quickly the affected product is placed on hold pending evaluation; the criteria used to evaluate safety (time-temperature integration, C. botulinum growth modeling, sensory evaluation); the disposition decision process; and the documentation requirements.

The most important element of this procedure is the "before product enters commerce" requirement. A corrective action procedure that allows product to ship while an investigation is pending is not compliant. The investigation and disposition decision must occur before the product moves.

5. Retail Partner Food Safety Agreements and Periodic Audits

Manufacturers cannot contractually eliminate their regulatory obligations, but they can create contractual expectations that reduce the risk of downstream cold chain failures. Written food safety agreements with retail partners covering minimum refrigeration temperatures, receiving procedures, and temperature log requirements shift the operational responsibility explicitly to the retailer while creating a documented expectation. Periodic audits of retail cold chain compliance, even if limited to a sample of locations, provide verification that the agreements are being followed and create accountability at the retail level that currently does not exist in most produce supply chains.

---

The Hazard Analysis Every Peeled Garlic Producer Must Conduct

A complete hazard analysis for peeled garlic under 21 CFR Part 117 requires the food safety team to systematically evaluate each step in the process for known or reasonably foreseeable hazards. For the C. botulinum hazard specifically, the analysis should proceed as follows.

First, identify the hazard in the hazard analysis table as a biological hazard: Clostridium botulinum, with the associated concern being growth and toxin production. Mark severity as "high" based on the potential for fatal illness. Mark the probability as "reasonably likely to occur" given the product's documented vulnerability and the industry's track record of cold chain failures. The combination of high severity and non-trivial probability should drive a "Yes, requires a preventive control" determination.

Second, identify the process step at which the hazard will be controlled: cold storage temperature maintenance. The preventive control type is a process control under 21 CFR 117.135.

Third, document the scientific basis for the temperature parameter selected. Reference FDA guidance, published growth models, or a validated scientific study demonstrating that the selected temperature prevents C. botulinum growth over the expected shelf life of the product.

Fourth, note in the hazard analysis the supply chain extension of the hazard: the temperature control must be maintained not just at the manufacturing facility but through the distribution chain to retail. This observation drives the supply chain program requirements and the monitoring verification activities.

A hazard analysis that stops at the manufacturing facility gate and treats the post-shipping cold chain as someone else's problem is not a complete hazard analysis for this product type. C. botulinum does not respect property boundaries.

---

Employee Training and Monitoring Gaps That Create Recall Risk

Temperature failures in refrigerated supply chains are predominantly human failures. Equipment works until it doesn't, and the early-warning function of a monitoring program depends entirely on whether people are executing it consistently.

Common human failure modes include: products left on loading docks during busy receiving windows while other tasks take priority; refrigeration equipment set at incorrect temperatures after maintenance or cleaning; temperature logs completed based on recalled observations rather than real-time readings; monitoring records for refrigeration equipment that has been malfunctioning for hours or days before anyone escalates; and receiving staff who are not trained to verify product temperatures at acceptance or to reject non-conforming product.

Under 21 CFR 117.4, qualified individuals must perform the activities required by the preventive controls rule. "Qualified" has a specific meaning: the individual must have the education, training, or experience to perform the assigned function. For monitoring activities involving temperature-sensitive products with a C. botulinum hazard, this means training that covers why temperature control matters for this specific product, what the critical limits are, how to use the monitoring equipment correctly, what constitutes a deviation, and what corrective action to take when a deviation is observed.

Training documentation must be maintained under 21 CFR 117.180. Records of training content, dates, and individuals trained are required. When an inspector or investigator reviews a temperature-related recall, training records are one of the first documents requested. If the training records do not exist or do not cover the specific activity at issue, the facility has a documentation problem on top of a temperature control problem.

---

What Retailers Must Do Under FSMA

Many retailers assume that FSMA's preventive controls rule applies primarily to food manufacturers and that retail operations fall outside its scope. This assumption deserves scrutiny. Under 21 CFR Part 117, a facility that processes, packs, or holds food for consumption in the United States is covered unless a specific exemption applies. Retail food establishments are largely exempt from Part 117 when they sell food directly to consumers, but that exemption has limits, and retailers who operate centralized distribution centers or who serve as the re-distributor of product to multiple locations may be operating as covered facilities for some activities.

Beyond the direct regulatory question, retailers have practical obligations under the Food Safety Modernization Act's framework. If a retailer receives a temperature-sensitive product and stores it under conditions that create a safety hazard, the retailer bears responsibility for the conditions under its control. The FDA recall authority extends to any party that holds an adulterated food in commerce. A retailer holding peeled garlic at temperatures that allow C. botulinum growth is holding an adulterated food.

Retailers managing refrigerated produce should implement at minimum: calibrated continuous or frequent temperature logging in all refrigerated cases; receiving procedures requiring product temperature verification before acceptance; documented criteria for rejecting product that arrives outside temperature parameters; and staff training on cold chain requirements for high-risk products including fresh-cut and peeled produce.

---

Practical Compliance Action Items

If you manufacture, distribute, or retail peeled garlic or similar refrigerated, low-acid produce, the following action items directly address the gap pattern this recall represents:

• Review your food safety plan's hazard analysis to confirm Clostridium botulinum is identified as a biological hazard requiring a preventive control for all refrigerated, low-acid, modified-atmosphere packaged products. If it is absent from the analysis, correct that immediately.
• Validate your temperature control limits with documented scientific support. The validation should address target temperature, maximum allowable temperature, and maximum excursion duration before corrective action is required. Reference FDA guidance on C. botulinum growth in refrigerated foods.
• Implement continuous data logging at every cold chain control point: manufacturing cold storage, transport, distributor receiving and warehouse, and retail cooler. Loggers must be calibrated, records must be reviewed by qualified individuals, and deviations must trigger the documented corrective action procedure.
• Establish a documented corrective action procedure for temperature excursions that includes product hold, evaluation against established criteria, disposition decision, and record retention. Confirm the procedure requires disposition to occur before product re-enters commerce.
• Audit your distribution and retail partners annually for cold chain compliance. Incorporate cold chain performance requirements into written supply agreements and review documentation of partner compliance at least once per year.
• Train receiving staff on temperature verification at product acceptance, rejection criteria for out-of-temperature product, and the escalation procedure for non-conforming deliveries. Maintain training records under 21 CFR 117.180.
• Review your supply chain program under 21 CFR Part 117 Subpart G to confirm it covers distributor and carrier temperature control as a supply chain-applied control for the C. botulinum hazard. If your supply chain program does not address how downstream cold chain performance is verified, it is incomplete.

---

Conclusion

The Tops Friendly Markets recall of Christopher Ranch Peeled Garlic and Garland Fresh Peeled Garlic in April 2026 was preventable. It was not prevented because the temperature control monitoring system did not catch the problem until a store inspector found it, at the end of the supply chain, after the product had been in commerce long enough to reach three states.

FSMA's preventive controls framework under 21 CFR Part 117 exists precisely to prevent this sequence of events. The hazard analysis required by the regulation should have identified C. botulinum as a high-severity biological hazard requiring a process control. The monitoring procedures required by section 117.140 should have caught the temperature deviation before the product left a controlled environment. The corrective action procedures required by section 117.150 should have intercepted the product before it reached retail. The supply chain program required by Subpart G should have verified that distribution partners were maintaining temperature integrity.

When all of those systems function as designed, a routine store inspection finds nothing because there is nothing to find. The time to build those systems is before the inspector walks in.

---

Jared Clark is the principal consultant at Certify Consulting, with 8+ years of FDA regulatory experience across pharmaceutical GMP, food manufacturing, and medical device compliance. He holds credentials including CPGP (Certified Professional Good Manufacturing Practices), CFSQA (Certified Food Safety Quality Auditor), CMQ-OE (Certified Manager of Quality/Organizational Excellence), PMP, and JD. Visit certify.consulting to schedule a compliance consultation.