Complete Guide to FDA FSMA Foreign Supplier Verification Program for Taiwan Exporters

The Foreign Supplier Verification Program (FSVP) is a regulation under the FDA Food Safety Modernization Act (FSMA), codified at 21 CFR Part 1 Subpart L, that requires US importers of food products to verify that their foreign suppliers are producing food in a manner that meets US food safety standards. The FSVP rule places the compliance obligation on the US importer (defined as the "FSVP importer" -- the US owner or consignee of the food at the time of entry), not on the foreign manufacturer. However, the practical impact on Taiwan food exporters is enormous, because US importers must evaluate and continuously monitor their foreign suppliers, and suppliers who cannot provide adequate documentation will lose their US import relationships.

FSVP compliance has been fully enforceable since May 2017 for most importers, and the FDA has significantly increased FSVP inspections in recent years. In fiscal year 2025, the FDA conducted over 5,200 FSVP inspections of US importers, resulting in 1,800 warning letters and 340 import alerts. The most common FSVP violations found during inspections include failure to conduct hazard analysis (42 percent of violations), failure to evaluate foreign supplier food safety practices (28 percent), failure to maintain required records (18 percent), and failure to take corrective actions when supplier performance is inadequate (12 percent). Taiwan food exporters who proactively support their US importers' FSVP compliance protect their market access and strengthen their competitive position.

The FSVP applies to all food products imported into the US, with limited exceptions for food imported for personal consumption, food imported for research purposes, alcoholic beverages (covered under separate regulations), food that is transshipped through the US without entering US commerce, and food from countries with equivalent food safety systems recognized by the FDA (currently limited to New Zealand for certain shellfish products). Taiwan is not on the FDA's list of countries with recognized equivalent food safety systems, so all Taiwan food exports to the US are subject to FSVP requirements.

It is critical for Taiwan exporters to understand that FSVP is an ongoing obligation, not a one-time certification. US importers must continuously monitor their foreign suppliers through periodic reviews of supplier performance, re-evaluation of hazard analyses when there are changes in supplier practices or product formulations, and corrective actions when food safety issues are identified. Taiwan exporters who make it easy for their US importers to comply with FSVP -- by providing comprehensive documentation, responding promptly to information requests, and proactively communicating changes -- build stronger and more durable US import relationships.

The first step in FSVP compliance is conducting a hazard analysis for each food product imported from a foreign supplier. The US importer (or a qualified individual acting on the importer's behalf) must identify and evaluate known or reasonably foreseeable hazards for each food, including biological hazards (pathogens such as Salmonella, Listeria monocytogenes, E. coli O157:H7), chemical hazards (pesticide residues, heavy metals, allergens, mycotoxins), physical hazards (metal fragments, glass, stones), and radiological hazards (relevant for products from certain geographic regions). The hazard analysis must consider hazards that may be present in the food based on the type of food, the production process, and the supplier's history.

The hazard analysis must evaluate whether each identified hazard requires a control measure. For hazards requiring control, the analysis must determine whether the control is applied by the foreign supplier, the importing entity, or a subsequent processor in the US supply chain. For example, if a Taiwan dried fruit exporter ships products that contain sulfite preservatives (an allergen), the hazard analysis must identify sulfite as a chemical hazard, determine that the control (accurate allergen labeling) is applied by the foreign supplier, and verify that the supplier's labeling accurately declares the presence of sulfites.

Taiwan food exporters can significantly support their US importers' hazard analysis by providing the following documentation: (1) a written food safety plan (if applicable under FDA's Preventive Controls rule), including a hazard analysis, preventive controls, monitoring procedures, corrective actions, and verification activities; (2) certificates of analysis (COA) for each production batch showing test results for relevant biological, chemical, and physical hazards; (3) a process flow diagram showing all manufacturing steps from raw material receipt to finished product shipping; (4) allergen management procedures and cross-contact prevention measures; and (5) supplier qualification documentation for raw material suppliers, particularly for high-risk ingredients.

The FDA does not prescribe a specific format for the hazard analysis, but it must be documented in writing and maintained for at least 2 years. Many US importers use standardized hazard analysis templates provided by industry associations such as the Food Industry Association (FMI) or the Grocery Manufacturers Association (GMA, now part of the Consumer Brands Association). Taiwan exporters should request their US importer's preferred hazard analysis format and provide information in that format to streamline the documentation process. LNH31 Global provides FSVP documentation templates specifically designed for Taiwan food exporters, covering the 15 most common product categories exported from Taiwan to the US.

Under FSVP, the US importer must evaluate each foreign supplier's food safety performance before importing food from that supplier, and must re-evaluate periodically (at least every 3 years or sooner if there are changes). The evaluation must consider: (1) the hazard analysis results (what hazards are present and what controls are needed), (2) the foreign supplier's food safety procedures and practices, (3) the supplier's compliance history with FDA import alerts, warning letters, and recalls, (4) the food safety regulatory system in the supplier's country, and (5) any other relevant factors such as third-party audit results or customer complaint history.

Based on the supplier evaluation, the importer must determine and conduct appropriate verification activities. These activities are risk-based and can include one or more of the following: on-site audits of the foreign supplier's facility (conducted by a qualified auditor using a recognized food safety standard such as SQF, BRC, FSSC 22000, or a supplier-specific audit protocol), sampling and testing of imported food (testing for specific hazards identified in the hazard analysis), review of the supplier's food safety records (HACCP plans, monitoring records, corrective action records, testing results), and other activities appropriate for the specific food and supplier.

On-site audits are not required for every supplier under FSVP, but they are required when the hazard analysis identifies a hazard requiring a supply-chain-applied control and there is "reasonable probability" that exposure to the hazard will cause serious adverse health consequences. In practice, FDA inspection guidance indicates that on-site audits are expected for suppliers of high-risk products including seafood, juice, and low-acid canned foods. For moderate-risk products (most Taiwan food exports including snacks, teas, sauces, and dried goods), a combination of third-party certification, testing, and document review is typically sufficient.

Taiwan food manufacturers can proactively strengthen their position in supplier evaluations by obtaining GFSI-recognized food safety certifications. Certifications recognized under the Global Food Safety Initiative (GFSI) include SQF (Safe Quality Food, levels 2 and 3), BRC Global Standard for Food Safety, FSSC 22000, and IFS Food. Approximately 68 percent of major US importers accept GFSI-recognized certifications as the primary supplier verification activity under FSVP, reducing the need for additional audits or testing. SQF certification, administered by the Food Marketing Institute, is the most common in the US market and costs approximately $8,000 to $20,000 for the initial certification of a Taiwan food manufacturing facility, including auditor travel expenses.

Testing programs complement audit-based verification for specific hazards. Common testing requirements for Taiwan food exports include microbiological testing (total plate count, coliforms, Salmonella, Listeria for ready-to-eat foods), heavy metal testing (lead, cadmium, arsenic, mercury -- particularly important for tea, spices, and rice-based products), pesticide residue screening (multi-residue analysis by LC-MS/MS), and mycotoxin testing (aflatoxins for nuts and grains, ochratoxin A for coffee and spices). Testing should be performed by ISO 17025-accredited laboratories in Taiwan (such as SGS Taiwan, Intertek Taiwan, or SuperLab) with results reported in a format that meets FDA requirements. Provide COAs with each shipment to your US importer.

FSVP record keeping requirements are specific and strictly enforced. US importers must maintain the following records for at least 2 years: the hazard analysis for each food, documentation of supplier evaluations, records of verification activities (audit reports, test results, document reviews), corrective action records, and records of the qualified individual's credentials. Records must be maintained in English and must be available for FDA review within 24 hours of a request during an inspection. Electronic records are acceptable if they meet FDA requirements for electronic record keeping (21 CFR Part 11). Taiwan exporters should maintain copies of all documents provided to their US importers and be prepared to provide additional documentation within 48 hours of a request.

Corrective actions are required when an FSVP importer determines that a foreign supplier is not producing food in accordance with US safety standards, or when the importer identifies a food safety problem through verification activities. Corrective actions may include: discontinuing the use of the foreign supplier until the issue is resolved, requiring the supplier to implement specific corrective measures (enhanced testing, process modifications, facility improvements), modifying the frequency or type of verification activities, and, in severe cases, terminating the supplier relationship entirely. All corrective actions must be documented, including the rationale for the action taken and verification that the corrective action was effective.

Penalties for FSVP non-compliance are substantial and escalating. The FDA can issue warning letters (which become part of the public record and can trigger buyer and retailer scrutiny), import alerts (which result in automatic detention of all shipments from the identified foreign supplier or importer without physical examination, effectively blocking imports), and civil monetary penalties of up to $10,000 per violation per day for individuals and $100,000 per violation per day for corporations. In fiscal year 2025, the FDA placed 127 new foreign facilities on import alert due to FSVP-related violations, including 8 facilities in Taiwan.

Taiwan food exporters can minimize FSVP-related risks by implementing the following practices: (1) obtain and maintain GFSI-recognized food safety certification (SQF, BRC, or FSSC 22000), which provides the strongest evidence of supplier food safety competence; (2) provide comprehensive documentation packages to US importers proactively, rather than waiting for requests; (3) maintain a dedicated English-speaking contact for FSVP-related communications with US importers; (4) conduct and share results of regular product testing for the hazards most relevant to your product category; (5) promptly notify US importers of any changes to manufacturing processes, ingredient suppliers, or product formulations; and (6) maintain your own internal food safety management system with documented procedures, monitoring records, and corrective action logs.

The qualified individual requirement specifies that certain FSVP activities (hazard analysis, supplier evaluation, determination of verification activities) must be performed by a "qualified individual" who has the education, training, or experience necessary to perform the assigned activities. The qualified individual does not need to be an employee of the importer -- external consultants can serve in this role. For Taiwan food exporters, having your food safety team complete the FDA's FSVP training curriculum (available online through the International Food Protection Training Institute or IFPTI) demonstrates food safety competence and strengthens your standing in supplier evaluations. The PCQI (Preventive Controls Qualified Individual) certification, obtained through a 2.5-day course from the Food Safety Preventive Controls Alliance (FSPCA), is widely recognized and costs approximately $800 to $1,200 per person.