FSMA 204 Moved to 2028. Your Food Safety Hiring Window Did Not.

In August 2025, the FDA finalized a 30-month extension to the compliance date for the Food Traceability Rule, moving it from January 2026 to July 20, 2028. Congress then directed the agency not to enforce before that date. What did not change is the rule itself. Every requirement in the final rule still stands.

Most of the businesses I speak with have read this as two years of relief. I think it is closer to the opposite, and the reason is a hiring problem rather than a compliance one.

If you manufacture, process, pack, or hold anything on the Food Traceability List, and that list reaches into leafy greens, fresh-cut produce, shell eggs, nut butters, certain cheeses, deli salads, and most seafood, you have to capture and hand over key data elements at defined critical tracking events, in a sortable electronic format, within 24 hours of a request.

Read that as a records project, and you will staff it wrong. In practice, it requires your suppliers to send you data they may not currently capture, your ERP or traceability system to hold it in a structure it probably was not designed for, your plant floor to record it without adding labor to every changeover, and your procurement team to renegotiate supplier agreements so the data actually arrives. Quality owns the outcome. Quality does not own most of the inputs.

That is a cross-functional operating change with a compliance deadline attached, not a documentation exercise.

Food safety and quality leadership in US manufacturing has largely been built around audit and compliance. That is not a criticism; it is what the job has demanded. A strong QA director keeps the plant audit-ready against SQF, BRCGS, or FSSC 22000, manages the HACCP plan, handles the customer audits, and holds the line on specifications.

Traceability at the level this rule describes asks for something adjacent but different: someone who can specify a data model, hold suppliers to a data standard through a commercial negotiation they do not lead, work with IT on a system build, and get shop floor adoption without adding a step that operators will quietly skip under pressure.

The people who can do both are not rare because they are gifted. They are rare because the two skill sets have historically sat in different functions and different reporting lines. There has not been much reason to build one person who holds both until now.

Here is the part I would want a board to sit with.

The deadline is fixed and public. That means demand for this profile will not arrive gradually. It will concentrate in late 2027 and the first half of 2028, when a large number of businesses reach the same conclusion in the same quarter and start looking for the same person.

Hiring into that is expensive and slow, and the available candidates at that point will be fielding several approaches each. Hiring into it now is neither. The capability also takes time to install regardless of who you appoint, so a leader who starts in 2026 has two years to build something that works, while one who starts in 2028 is executing under a deadline with no margin for the supplier who will not cooperate or the system that does not do what the vendor said.

The extension did not buy anyone two years of not thinking about it. It bought a two-year advantage to whoever uses it, and a much harder hiring market for everyone who does not.

Three things I would want to see before taking someone seriously for this remit.

They have implemented a system, not just operated one. There is a large difference between running traceability in a plant where the architecture already exists and being the person who specified and installed it. Ask which one they did and who they had to convince.

They have held a supplier to a data requirement. This is where most traceability programs actually stall. Ask about a supplier who would not or could not provide what was needed, and what happened next. The answer reveals whether they have commercial standing in the business or only technical authority.

They can say what they would not do. A credible leader in this space will tell you which parts of the list they would tackle first and which they would deliberately leave until year two. Someone who proposes to solve all of it at once has not done it.

I am not going to tell you that every business covered by this rule needs to hire someone new. Plenty have the right person already and simply have not given them the mandate, the budget, or the standing with procurement and IT to do the work. If that is your situation, the answer is to have a conversation with your existing quality leader about what they would need, not to search.

The businesses that do need to hire tend to know it. They are usually the ones where quality reports two levels down, where traceability has always been handled by whoever was available, and where nobody in the leadership team can currently say what a 24-hour data request would produce.

If you would like a 30-minute conversation about your leadership pipeline or a specific gap, use the button below.