Juice HACCP and CGMP Controls That Prevent Warning Letters

If you run a facility that makes juice and something else under the same roof, you are answerable to more than one set of rules at once, and the inspector will check each of them separately. That is the practical lesson from an FDA warning letter dated April 20, 2026, issued to a facility that processed juice and manufactured dietary supplements. The letter's subject line cites Juice HACCP, CGMP for foods, and adulterated and insanitary conditions, and the firm's April 6, 2026 response said it would stop manufacturing and labeling certain products as dietary supplements. That response predates the letter, which suggests it answered an earlier inspectional Form 483 rather than the warning letter itself. You can read the letter on FDA's website.

I am not going to walk through that company's inspection. The letter is useful to me as an example of how this kind of enforcement action unfolds, and what a quality system needs to look like so that you never receive one. This article covers the regulations behind a Juice HACCP and CGMP citation, why the "adulterated" label attaches so easily, and the controls I would put in place first.

Why Does a Juice HACCP Failure Make Product Adulterated?

Because the regulation says so directly. Under 21 CFR 120.9, the legal-basis provision of Part 120, a juice processor that fails to have and implement a HACCP plan when one is necessary, or that otherwise fails to operate in accordance with 21 CFR Part 120, renders its juice adulterated under section 402(a)(4) of the Federal Food, Drug, and Cosmetic Act. FDA does not have to find a contaminated bottle or a sick consumer. A missing or unimplemented plan is enough.

That is a different posture from what many small manufacturers expect. They assume that enforcement follows harm, so if nobody was hurt and no test came back positive, the paperwork gaps feel like a technicality. That assumption is risky, because the regulation was written to make the system itself the thing FDA evaluates.

Section 402(a)(4) also covers food prepared, packed, or held under insanitary conditions where it may have become contaminated with filth or rendered injurious to health. When a warning letter pairs a HACCP citation with an insanitary conditions citation, the two tend to reinforce each other: sanitation findings suggest the hazard analysis was never realistic, and a thin hazard analysis suggests nobody was looking at sanitation as a control.

What Does 21 CFR Part 120 Actually Require?

Part 120 is the Juice HACCP regulation, and its structure is more compact than most people remember. The sections that come up most often in enforcement are these:

Two points deserve attention. First, 21 CFR 120.24(a) sets the performance standard that most juice processors build their critical control point around: a 5-log reduction for the pathogen most resistant to the treatment you use. If your CCP is a kill step, your validation file has to show that your actual equipment and settings deliver that reduction. A supplier's brochure does not meet that expectation.

Second, 21 CFR 120.5 states that Part 117 applies in determining whether the facility, methods, practices, and controls used to process juice are safe and whether the food has been processed under sanitary conditions. In other words, a juice processor is judged against Part 120 and against the CGMP provisions in 21 CFR Part 117, subpart B. A perfect HACCP plan does not offset a poorly maintained plant.

Where Do CGMP Citations Usually Come From?

The CGMP provisions in 21 CFR Part 117, subpart B cover the ordinary running of a plant, and that ordinariness is why they get cited so often. A few sections tend to anchor insanitary findings:

• 21 CFR 117.10 (personnel): health and hygiene, including measures to prevent contamination from hands, clothing, and jewelry.
• 21 CFR 117.20 (plant and grounds): pest exclusion, drainage, and construction that allows adequate cleaning.
• 21 CFR 117.35 (sanitary operations): cleaning and sanitizing of food-contact surfaces and equipment, and pest control.
• 21 CFR 117.37 (sanitary facilities and controls): water supply, plumbing, sewage disposal, and handwashing facilities.
• 21 CFR 117.40 (equipment and utensils): design and maintenance so that food is protected from contamination.
• 21 CFR 117.80 (processes and controls): protection against cross-contact and contamination during processing, storage, and transport.

Notice how many of these are about routine work done by people who may not think of themselves as quality staff: the person who hoses down a floor, the sanitation lead who decides whether a drain is clean enough, the maintenance technician who leaves a tool on a conveyor. When an inspection turns up an insanitary condition, the root cause is almost always a task that was assigned to someone but never verified by anyone.

What Changes When Juice and Supplements Share a Building?

This is the part of the 2026 letter that I think matters most for readers beyond juice processors. A facility that makes juice and dietary supplements has two regulatory frameworks that overlap in the physical plant but diverge in their documentation expectations:

For a facility operating under both, the failure mode I see most is a quality system that was built for one product line and quietly assumed to cover the other. A juice HACCP plan will not satisfy Part 111's batch record requirements, and a Part 111 quality unit will not automatically know what a critical limit deviation under 21 CFR 120.10 requires them to do with the product.

The firm's April 6 response, which the letter references and which appears to have followed a Form 483, was to discontinue manufacturing and labeling certain products as dietary supplements. Narrowing the product portfolio is a legitimate way to reduce regulatory exposure, and some small manufacturers should seriously consider it. It also means the remaining operations have to be strong enough to stand on their own, because FDA does not stop looking at the juice side of the house because the supplement side was dropped.

Which Controls Reduce the Risk of a Citation Like This?

I am not mapping these controls to the specific observations in that letter. They are the general controls that address the kinds of gaps Juice HACCP and CGMP citations usually involve. Here is how I would approach the problem if a client in this position called me before an inspection instead of after. I would start with documents, then move to behavior, then to verification.

Start with a hazard analysis you can defend

Under 21 CFR 120.7, the hazard analysis is the foundation of everything else, and it is where weak programs are exposed first. For each juice product and process, write down which biological, chemical, and physical hazards are reasonably likely to occur, and why. If you conclude that a hazard is not reasonably likely to occur, record the reasoning. An inspector who finds a hazard analysis that is two pages long and identical across every product will assume nobody thought about the differences between, say, an unpasteurized cold-pressed product and a thermally treated one.

Reassess it whenever something changes. Under 21 CFR 120.11, you are expected to reassess the hazard analysis at least annually and whenever a change could affect it, such as a new ingredient, a new supplier, a new piece of equipment, or a shift in the process.

Validate the kill step and keep the file

If your CCP is a thermal process, UV treatment, or another method intended to reach the 5-log standard in 21 CFR 120.24, your validation file should include the scientific basis for the treatment, the critical limits you set, and data showing your equipment can hit them under real production conditions. If you rely on a supplier's validation, confirm that it matches your product's pH, solids, and throughput. A validation done on a clear apple juice does not obviously transfer to a pulpy blend.

Treat SSOPs as a daily record, not a binder

21 CFR 120.6 requires a written SSOP, monitoring of sanitation conditions, and records of that monitoring. The regulation lists key areas to address, including safety of water, condition and cleanliness of food-contact surfaces, prevention of cross-contamination, handwashing and toilet facilities, protection from adulterants, labeling and storage of toxic compounds, employee health conditions, and exclusion of pests. I like to turn that list into a one-page daily checklist that a supervisor signs. A signed checklist that is blank on some days tells an inspector more than a binder that looks perfect.

Define corrective actions before you need them

When a critical limit is missed, 21 CFR 120.10 expects a predetermined corrective action that addresses both the cause and the product. Write down who has authority to hold product, how held product is evaluated, and who releases or destroys it. The weakest corrective action records I see say "adjusted temperature" with no mention of what happened to the product that ran while the temperature was low.

Give someone real authority over quality

For the dietary supplement side, 21 CFR Part 111 subpart F requires a quality control operations function with authority to approve or reject components, in-process materials, and finished product. In a small facility that function is often one person who is also wearing three other hats. That is workable only if the person is allowed to say no to a production schedule, and if that authority is written down. If the same person who makes the batch also releases it, you have a structural problem that no amount of documentation will hide.

Verify with something independent

21 CFR 120.11 calls for verification activities, which means checking that the plan is working and is being followed. An internal audit once a year by someone outside the production line, a review of monitoring records within a defined window, and calibration of the instruments that support your CCP are the usual elements. One useful verification habit is a monthly walk of the plant with the HACCP plan in hand, asking whether what is written matches what is happening on the floor.

How Do You Make the Records Hold Up?

Records are where good operations get convicted. Under 21 CFR 120.12, records have to be complete, signed or initialed, and dated, and they have to be kept for the periods set in 21 CFR 120.12: at least 1 year for refrigerated products and at least 2 years for frozen, preserved, or shelf-stable products. If you handle both categories, build a retention schedule that matches the longest applicable period for each record type and stick to it.

A few habits make the difference:

• Record at the time of the activity, not at the end of the shift.
• Use fixed forms with the critical limit printed on them, so the operator sees the target as they write the reading.
• Review records daily, and sign the review, since an unreviewed record is a missed opportunity to catch a deviation while the product is still on hold.
• Keep the training records for anyone performing HACCP functions, because 21 CFR 120.13 expects trained personnel and an inspector will ask to see the proof.

What Should You Do If You Have Already Received a Warning Letter?

Respond within 15 business days, which is the window FDA's warning letters conventionally request. That period is FDA practice stated in the letter, not a deadline set by regulation, but missing it invites escalation. A strong response describes what you found, what you did about the root cause, what you will do to confirm it stays fixed, and dates for each step. Evidence beats promises: attach the revised hazard analysis, the updated SSOP forms, the training rosters, and the corrective action records. If a commitment will take longer than the response window, say so and give a schedule, then send updates.

One more thing I would say plainly: a letter that says you will stop doing something is a business decision with consequences. Before you commit to discontinuing a product line, make sure you understand how it affects labeling on remaining products, inventory in distribution, and any customer commitments. For a deeper walk through response strategy, see our warning letter remediation service page, and for how these obligations compare with the broader preventive controls rule for other food facilities, our article on FDA FSMA preventive controls for food facilities is a useful companion.

What Is the Takeaway for Mixed-Use Facilities?

If I could give a small manufacturer one piece of advice, it would be to stop thinking of the regulations as separate hurdles and start thinking of them as a single question: can you show, on any given day, that you know what could go wrong and that you are checking? Part 120, Part 117, and Part 111 each phrase that question differently, but the answer you build for one gets you most of the way on the others.

Before the next inspection, pull your last three months of sanitation monitoring and your last HACCP reassessment, and fix whatever you would not want an investigator to see.

Frequently Asked Questions

Does FDA have to find contamination to call juice adulterated? No. Under 21 CFR 120.9, failing to have and implement a required HACCP plan, or otherwise failing to operate in accordance with Part 120, renders the juice adulterated under section 402(a)(4) of the FD&C Act, regardless of test results.

Which CGMP regulation applies to a juice processor? Juice processors must follow 21 CFR Part 120, and 21 CFR 120.5 states that 21 CFR Part 117 applies in determining whether the facility, methods, practices, and controls are safe and whether the juice was processed under sanitary conditions.

What is the 5-log reduction requirement for juice? 21 CFR 120.24(a) requires processors to include a control measure in their HACCP plan that will consistently produce at least a 5-log reduction of the pertinent microorganism, meaning the most resistant pathogen of public health significance likely to occur in the juice.

Can a facility make juice and dietary supplements in the same building? Yes, but each operation has to meet its own rules: Part 120 and Part 117 for juice, and Part 111 for dietary supplements. A quality system designed for one will not automatically satisfy the other.

How long must juice HACCP records be kept? Under 21 CFR 120.12, at least 1 year for refrigerated products and at least 2 years for frozen, preserved, or shelf-stable products.

How long do I have to respond to an FDA warning letter? FDA warning letters conventionally ask for a written response within 15 business days of receipt. That is FDA practice stated in the letter, not a regulatory deadline. Include evidence of corrections and a timeline for any actions that will take longer.

Last updated: 2026-10-07