Special process: smoking

The smoking HACCP plan

Most restaurant smoking is for flavor and needs no variance. Smoking to preserve food does, and smoked fish is where the real risk lives. Here is how to tell which side your menu is on, and what the plan has to cover.

Reviewed October 8, 2026 3 official sources cited 11 min read
Flavor smoking
No variance if cooked per 3-401.11
Smoking to preserve
Variance, 3-502.11(A)
HACCP plan
Yes with a variance, 8-201.13(A)(2)
Cold smoke over
41°F: variance (Annex 6)
Cold-smoked fish
Always human review

Flavor or preservation: the one question that decides it

The Food Code does not ask whether you own a smoker. It asks why you are smoking. Section 3-502.11 lists the processes that need a variance before you start, and smoking is the first:

FDA Food Code 2022, 3-502.11(A)

Smoking FOOD as a method of FOOD preservation rather than as a method of flavor enhancement;

Annex 6, the Food Code's processing guidance, draws the same line from the other side:

FDA Food Code 2022, Annex 6, 2(H)(3)

Smoking which meets the time/temperature parameters in Section 3-401.11 does not require a variance.

FDA Food Code 2022, Annex 6, 2(H)(3)

Cold smoking where the temperature achieved by the product is greater than 41ºF requires a variance.

So the test is practical. If the smoke adds flavor to food you then cook to the normal temperatures, and you handle it like any other cooked food, you are smoking for flavor. If the smoke, the salt and the cold are what keep the food safe for days, you are smoking to preserve, and you need a variance and a HACCP plan.

  1. Is it cured (salt cure, nitrite) before smoking?Yes: curing variance, 3-502.11(B)
  2. Does the product reach its 3-401.11 cooking temperature in the smoker?No: cold smoking. Variance if the product goes above 41°F
  3. Will you vacuum pack it, or keep it longer than the normal date mark, relying on smoke and salt?Yes: preservation, 3-502.11(A)
  4. None of the above?Flavor smoking. Normal rules: cook, hold, cool, date mark.
Restaurant examples, and how the Food Code reads them
ItemCallWhyWhat you need
Smoked brisket, cooked through, served hot from the pitFlavorCooked to 3-401.11(A)(1) or the roast chart, then hot held at 135°F or aboveNormal Food Code rules. No variance.
Pulled pork smoked today, cooled, reheated tomorrowFlavorCooked, then cooled (3-501.14(A)(1)) and reheated to 165°F (3-403.11(A))Normal rules plus a cooling log. No variance.
Smoked chicken wingsFlavorCooked to 165°F in the smoker (3-401.11(A)(3))Normal rules. No variance.
Hot-smoked trout, cooked through, chilled, served within its date markFlavor, usuallyReaches 145°F for 15 s during the smoke; Annex 6 says smoking that meets 3-401.11 needs no varianceAsk your health department how it reads a brined fish. Vacuum packing it needs a variance.
House bacon or pastramiCuringThe cure is the special process, whatever the smoke doesVariance under 3-502.11(B) and a HACCP plan. See the curing guide.
Cold-smoked salmon held for daysPreservationNever cooked; salt, smoke and cold are the controls, and product often goes above 41°F in the smokerVariance under 3-502.11(A) and (B), HACCP plan, parasite control.
Your health department reads the line

The flavor and preservation wording is the Food Code's, and states adopt it in different editions and sometimes with their own words. A brined, hot-smoked fish is the most common gray zone. Ask before you print the menu, and check your state page.

Hot smoking vs cold smoking

Annex 6 describes smoking broadly:

FDA Food Code 2022, Annex 6, 3(D)

Smoking is the process of exposing meat products to wood smoke. Depending on the method, some products may be cooked and smoked simultaneously, smoked and dried without cooking, or cooked without smoking.

Hot smoking

The smoke and the heat arrive together, and the food cooks. Brisket, ribs, wings, hot-smoked trout. What makes it safe is the cook: 145°F for 15 seconds for fish and whole-muscle meat, 155°F for 17 seconds for ground meat sausage, 165°F for poultry (3-401.11(A)(1) to 3-401.11(A)(3)). The probe decides, not the bark.

Cold smoking

The smoke is kept cool so the food never cooks. Cold-smoked salmon, smoked cheese, some sausages before drying. Nothing in the smoker kills bacteria or parasites. What makes it safe is a cure before, controlled temperature during, and cold holding after, which is why it needs a variance when the product goes above 41°F.

Annex 6 also asks every smoking operation for a written procedure that keeps contamination out, and for smokehouses to be tested when installed:

FDA Food Code 2022, Annex 6, 3(D)

As with curing operations, a standard operating procedure must be established to prevent contamination during the smoking process.

FDA Food Code 2022, Annex 6, 3(F)(3)

When smokehouses are initially installed or structurally modified, calibration of product heating characteristics must be ascertained by competent food technologists.

Why smoked fish is the hard case: C. botulinum

Smoked fish has a history the Food Code does not let anyone forget:

FDA Food Code 2022, Annex 6, 2

However, the early use of vacuum packaging for smoked fish had disastrous results, causing a long-standing moratorium on certain uses of this technology at the retail level.

The organism is Clostridium botulinum, and some types grow at refrigerator temperatures. Annex 3 notes that non-proteolytic strains can make toxin in cold food:

FDA Food Code 2022, Annex 3, 3-502.12

C. botulinum spores are able to germinate and produce toxin at temperatures down to 3ºC (38ºF).

That is colder than 41°F, the normal cold holding limit. Oxygen helps hold it back, which is why packing smoked fish in a vacuum bag changes everything:

FDA Food Code 2022, Annex 6, 2(H)(1)

Unfrozen processed fish and smoked fish may not be packed by ROP unless retail food establishments have an approved variance application and HACCP plan to show C. botulinum spore germination and toxin production or L. monocytogenes growth will not occur and are inspected by the regulatory authority.

Fish processors control this hazard with a combination of salt in the fish, smoke, temperature and packaging, set out in FDA's Fish and Fishery Products Hazards and Controls Guidance, chapter 13 (C. botulinum toxin formation). A cold-smoked fish HACCP plan uses that guidance as its scientific support, and your health department may ask for lab testing of salt levels in the finished fish. We do not quote its numbers here because they are not in the Food Code text; the plan cites the edition it relies on.

Listeria is the other concern. Cold smoking does not kill it and it grows in the cold, so smoked fish made in house is date marked, with no exemption:

FDA Food Code 2022, Annex 3, 3-501.17

This exemption does not apply to hot or cold smoked fish products, nor does it apply to fish products that are dried, marinated, or otherwise preserved on-site, in a food establishment, such as ceviche.

Parasites in cold-smoked fish

Hot smoking to 145°F is a cook, and the cook takes care of parasites. Cold smoking is not, and the Food Code names cold-smoked salmon specifically:

FDA Food Code 2022, Annex 3, 3-201.11

fish from natural bodies of water may carry parasitic worms that can infect and injure consumers who eat such raw fish dishes as sushi, ceviche, green (lightly marinated) herring, and cold-smoked salmon.

Under 3-402.11 the fish is frozen before service using one of three options, or bought frozen with a supplier statement:

Parasite destruction, FDA Food Code 2022 3-402.11(A)
OptionFreeze and hold
3-402.11(A)(1)-4°F or below for 168 hours (7 days)
3-402.11(A)(2)-31°F until solid, held at -31°F for 15 hours
3-402.11(A)(3)-31°F until solid, held at -4°F for 24 hours

Freezing records or the supplier letter are kept for 90 days after the fish is served (3-402.12). Aquacultured salmon raised on formulated, parasite-free feed is exempt under 3-402.11(B)(4), with a written statement from the supplier. Chapter 5 of the FDA fish guidance covers parasites in more depth.

What the smoking plan covers

A HACCP plan under 8-201.14 has the same parts for every process: the foods it covers, a flow diagram with the critical control points marked, the recipe and equipment, a CCP table, and the procedures and records behind it. For a smoking plan, these are the parts reviewers read hardest:

  • Raw material. Species and source for fish; the parasite paperwork; the receiving temperature.
  • Brine or cure. Recipe by weight, how it is mixed, how cold it is kept, how long. If it contains nitrite, it is also a cure (see curing).
  • The smoke. Smoker type, load, wood, and the product temperature it reaches. For a hot smoke, the cook limit and how it is probed.
  • Cooling. From 135°F to 70°F within 2 hours, then to 41°F within 6 hours total (3-501.14(A)(1)).
  • Storage. Cold holding at 41°F or below, containers, labels, date marking. No vacuum bags unless the variance covers them.
  • Records. Annex 6 is direct about it:
FDA Food Code 2022, Annex 6, 3(F)(3)

Time/temperature parameters of the cooking process must be monitored and recorded.

Here is the flavor-smoked trout plan, in short. The full version is the hot-smoked trout sample plan.

Hot-smoked trout, brined, smoked to a cook

  1. 01 Receive trout 41°F or below, fresh
  2. 02 Brine in walk-in Kept at 41°F or below; brine made to recipe
  3. 03 Rinse, dry, pellicle On racks, in the walk-in
  4. 04 Hot smokeCCP 145°F for 15 s internal 3-401.11(A)(1)
  5. 05 CoolCCP 135°F to 70°F in 2 h, 41°F in 6 h 3-501.14(A)(1)
  6. 06 Cold hold, date markCCP 41°F or below, 7 days 3-501.16(A)(2), 3-501.17(A)
  7. 07 Plate and serve
Teal steps are critical control points, each with its Food Code limit.
Critical control points for hot-smoked trout (example)
CCPSignificant hazardCritical limitMonitoringIf the limit is missedVerification and records
Hot smoke (cook) Survival of pathogens and parasites in the fish 145°F or above for 15 seconds, internal, thickest fillet3-401.11(A)(1) Probe the thickest fillet on each rack at the end of the smoke; record smoker setting, time and product temperature Keep smoking until the limit is met and record the extra time; if the smoker fails, finish in an oven to the same limit Thermometer calibration; person in charge reviews the smoke log dailyCooking log, thermometer calibration log
Cooling Spore formers (C. perfringens, C. botulinum) growing while the fish cools 135°F to 70°F within 2 hours; to 41°F within 6 hours total3-501.14(A)(1), 3-501.14(A)(2) Probe at both checkpoints; fillets on racks in a single layer, uncovered until cold Missed the first checkpoint: reheat and restart, or discard. Missed the total: discard Person in charge signs the cooling logCooling log, corrective action log
Cold holding and date mark Listeria monocytogenes growth during storage 41°F or below; used or discarded within 7 days3-501.16(A)(2), 3-501.17(A) Walk-in temperature checked each shift; every container labeled with the use-by day Above 41°F: evaluate time and temperature under the plan, discard if it cannot be shown safe. Past the date: discard Weekly log reviewCold holding log

Cold-smoked fish: always a human review

Everything about cold-smoked fish is a judgment call between salt, smoke, temperature, time and packaging, with a toxin that cannot be seen, smelled or cooked out. We do not let software make that call alone.

How ClearHACCP handles it

Every cold-smoked fish plan goes to a person for review before it is released. We are not selling them yet: they open once an independent food safety professional has reviewed that rule pack in writing. You can start the plan in the builder now, and we will email you when it is ready. Hot smoking for flavor builds straight away.

If your menu needs cold-smoked fish now, a consultant or process authority with seafood experience is a sound choice.

What plan reviewers look for, and common mistakes

  • Calling it flavor when it is not. If smoked fish sits in the walk-in for a week or goes into a vacuum bag, the smoke is doing preservation work. Say so and get the variance.
  • Smoker temperature instead of product temperature. The limit is the internal temperature of the thickest piece. A smoker dial reading is not a critical limit.
  • No cooling plan. Big smoked cuts cool slowly. Slice or portion, spread on racks, then chill; log both checkpoints.
  • Missing parasite paperwork. Cold-smoked or lightly smoked fish without freezing records or a supplier letter is the first thing an inspector asks for.
  • No date marks. In-house smoked fish is never exempt.
  • A variance kept in the office. Under 8-103.12(A) the approved variance is kept at the food establishment.

The variance request itself follows 8-103.11: a statement of the variance with the Code sections, the rationale for how the hazards are controlled another way, and the HACCP plan.

FDA Food Code 2022, 8-103.11(C)

A HACCP PLAN if required as specified under ¶ 8-201.13(A) that includes the information specified under § 8-201.14 as it is relevant to the VARIANCE requested.

Frequently asked questions

Do I need a variance to smoke brisket?
Not if you smoke it for flavor and cook it through. The variance in 3-502.11(A) is for "smoking food as a method of food preservation rather than as a method of flavor enhancement". Annex 6 says smoking that meets the time and temperature rules in 3-401.11 does not require a variance. Cook it, hold it hot at 135°F or above, and cool leftovers by the two-stage rule.
What makes smoking 'for preservation'?
When you are counting on the smoke, salt or drying (not cooking and normal cold holding) to keep the food safe for longer. Cold-smoked salmon held for days is the textbook case. Annex 6 also says cold smoking where the product goes above 41°F requires a variance. If you are unsure, the free checker walks you through it and your health department has the final word.
Is hot-smoked fish safe to vacuum pack?
Not without a variance. Annex 6 says unfrozen processed fish and smoked fish may not be packed by reduced oxygen packaging unless the restaurant has an approved variance and HACCP plan showing C. botulinum and Listeria are controlled. Keep hot-smoked fish in lidded containers, cold, under its date mark, or get the variance first.
Do I have to freeze fish before cold smoking it?
Usually, yes. Cold smoking does not cook the fish, so 3-402.11 parasite destruction applies, for example -4°F or below for 168 hours (7 days), or a supplier letter. Some tuna species and aquacultured fish raised on parasite-free feed are exempt with the right paperwork. Hot smoking that reaches 145°F for 15 seconds is a cook, so the freezing rule does not apply to it.
Does liquid smoke count as smoking?
Annex 6 mentions liquid smoke as a substitute for smoke in the smoking section. Brushed on for flavor before a normal cook, it is flavor enhancement. It does not make a product shelf stable, and it is not a safety control in a plan.
Can ClearHACCP write my cold-smoked salmon plan today?
You can start it. Cold-smoked fish plans always go to a person at ClearHACCP for review, and we are holding them until an independent food safety reviewer has signed off on that rule pack. Hot smoking for flavor, curing and the other processes build straight away.

Sources

  1. FDA Food Code 2022 (PDF): 3-502.11, 3-401.11, 3-402.11, 3-501.14, Annex 6 sections 2 and 3
  2. FDA Food Code 2022 overview page
  3. FDA, Fish and Fishery Products Hazards and Controls Guidance (chapter 13, C. botulinum; chapter 5, parasites)

Every temperature, time and pH on this page is quoted from the FDA Food Code 2022 with its section number. Your state or county may run an older edition or add its own rules, and only your regulatory authority approves a HACCP plan or grants a variance. This page explains the rules in plain words; it is not legal advice.

Keep reading

Build your HACCP plan.

Read the cover, the contents and the first sections before you pay. Pay once when it is ready to submit.

Read the cover, the contents and the first sections of your plan before you pay. No card to start.

Build my plan