California Craft Beer Food Safety: Where ABC, FDA, and CDPH Authority Actually Overlap

By /

How California and Federal Agencies Divide Authority Over Your Brewery

Running a craft brewery in California means operating under more regulatory bodies than most new owners initially expect, and understanding which agency controls what is the first step to staying compliant. Operating a craft beer brewery, including a microbrewery, taproom, or brewpub, is subject to licensure from the California Department of Alcoholic Beverage Control (ABC), and this is the agency most brewery owners think of first. Most small-scale California brewery operations are licensed under the Type 23 Small Beer Manufacturer license, used by regional craft breweries producing less than 60,000 barrels annually, microbreweries producing less than 15,000 barrels annually, and brewpubs, with privileges and limitations generally identical to the standard Type 01 Beer Manufacturer license.

ABC licensing, however, governs your authority to manufacture and sell alcohol. It does not cover food safety. That authority sits with the FDA at the federal level, working alongside the federal Alcohol and Tobacco Tax and Trade Bureau (TTB), which retains separate jurisdiction over alcohol formulation, labeling, and taxation. FSMA specifically defines alcoholic beverages as food, bringing breweries, wineries, cider producers, and distilleries under direct FDA regulation for the first time, without affecting TTB’s existing authority. This means your brewery answers to TTB for what you are allowed to brew and how you label it, and separately to the FDA for how safely and sanitarily you brew it.

At the state level, if your brewery also manufactures, repackages, labels, or warehouses other processed food products beyond beer itself, you may additionally need to register with CDPH’s Food and Drug Branch under the Processed Food Registration program. This typically becomes relevant for breweries selling packaged food items, canned goods, or anything beyond beer itself through their taproom or retail operation, separate from the beer manufacturing process.

Why Breweries Get Partial FSMA Exemptions and What That Actually Covers

The food safety framework for breweries is built around a partial exemption structure that surprises many owners who assume either full exemption or full compliance, when the reality sits in between. As per 21 CFR 117.5, alcoholic beverage facilities are exempt from several portions of FSMA, but need to comply with some of the requirements regardless of overall exemption status.

Specifically, breweries and distilleries are exempt from Subpart C, Hazard Analysis and Risk-based Preventive Controls, and Subpart G, the Supply-Chain Program, but must comply with Subparts A and B, covering sanitary conditions and training of employees in personal hygiene, and Subpart F, covering recordkeeping. In plain terms, your brewery does not need a formal HARPC-style food safety plan the way a typical packaged food manufacturer does, but you absolutely do need documented Good Manufacturing Practices, properly trained staff, and records demonstrating both.

Staff competency requirements apply regardless of your exemption status. Sites that only manufacture alcoholic beverages still need to ensure that staff meet competency requirements outlined in 21 CFR 117.3, with staff involved in any aspect of the food production process required to be qualified for their jobs and trained on food safety principles, including personal and facility hygiene, and this training must be documented to verify staff competencies. An inspector who finds your team has never received documented food safety training, even informally, is finding a real compliance gap, not a technicality.

It is worth understanding why beer carries some inherent protection that lower-risk this exemption framework, while also understanding where that protection breaks down. Beer is inherently relatively safe due to the brewing process itself, including the boil, hop bitterness compounds, ethanol content, low pH, carbon dioxide, and limited available nutrients for pathogen growth. However, trends toward lower alcohol content beers under 1 percent ABV, adding fruit juices, and brewing without hops all reduce these natural protective barriers and make beer more susceptible to pathogen contamination than a traditional, fully hopped, standard-strength beer. If your brewery is producing hard seltzers, low-ABV session beers, or fruited sours with significant juice additions, your actual food safety risk profile is meaningfully different from a traditional IPA, even though both fall under the same regulatory exemption framework.

The Practical Control Points California Breweries Need to Manage

Even without a mandatory HACCP plan, your brewery’s GMP and sanitation program needs to address specific, identifiable risk points that an FDA or CDPH inspector will check.

The first area is equipment and surface sanitation, governed under the sanitary operations requirements of Subpart B. Food contact surfaces and utensils must be cleaned, non-food contact surfaces including floors, ducts, pipes, and tanks must be cleaned, and portable utensils and equipment must be cleaned, sanitized, and properly stored. Equipment construction matters here directly: stainless steel with sanitary welds and smooth seams minimizes bacterial accumulation, while wood or soft metals that splinter or corrode create harborage points for contamination that no amount of after-the-fact cleaning fully resolves.

The second area is allergen and cross-contact control, which becomes increasingly relevant as breweries diversify into fruited, spiced, and flavor-adjunct beers. Allergens like peanut butter, chocolate, and similar additions used in specialty beers create real cross-contact risk if shared equipment, lines, or fermentation vessels are not properly cleaned between batches. Your sanitation program needs documented procedures for preventing this, particularly if you run both allergen-containing and allergen-free beers through the same equipment.

The third area is spent grain handling, which catches many small breweries off guard because it seems unrelated to food safety at first glance. If spent grain is being sold or given to farmers for animal consumption, a formal food safety plan is generally not required, but breweries are still expected to assure there is no physical contamination of the spent grain before shipping, such as trash or cleaning chemicals entering the container holding the grain, and general sanitary conditions apply during transport. However, if your brewery processes the spent grain further, drying it, pelletizing it, or otherwise transforming it before it leaves your facility, you move into compliance with separate Animal Food Good Manufacturing Practices requirements under 21 CFR 507, a meaningfully higher bar than simply donating wet spent grain as-is.

The fourth point worth tracking is your facility’s qualified facility status and FDA registration. Your brewery, regardless of size, generally must register with the FDA as a food facility, and your specific exemptions depend on factors including employee count and annual sales. Breweries with 500 or more full-time equivalent employees across the parent corporation faced earlier compliance deadlines than small businesses, and breweries with average annual sales under $1 million fall into a separate “very small business” category with its own documentation requirements. Knowing which category your brewery falls into determines exactly which subparts of 21 CFR 117 apply to you specifically.

Staying Compliant as Your California Brewery Grows

A brewery’s regulatory profile changes as it scales, and the GMP and exemption framework that applied when you were a five-barrel nano-brewery does not necessarily apply unchanged once you cross thresholds in employee count, production volume, or sales. Reviewing your FSMA category status periodically, not just at initial registration, is worth building into an annual compliance check rather than assuming your original classification remains accurate indefinitely.

If your brewery adds new product lines, particularly lower-ABV beers, hard seltzers, or heavily fruited and adjunct-driven beers, your GMP documentation should reflect the different risk profile these products carry compared to traditional beer styles. The natural antimicrobial properties that make standard beer relatively low risk do not necessarily extend to every variation your brewhouse produces, and your sanitation and quality control documentation should be specific enough to address this rather than treating all products as carrying identical risk.

Staff training documentation needs the same ongoing attention as your equipment maintenance log. New hires brought on as your taproom or production team grows need documented food safety and hygiene training before they are working with product, not informally absorbed knowledge from coworkers. An FDA or CDPH inspector reviewing your records expects to see training documentation tied to specific employees and dates, not a general statement that staff are trained.

What Causes California Breweries to Run Into Compliance Issues

The most common gap found in brewery food safety inspections is documentation that does not match actual practice, particularly around staff training and sanitation logging. A brewery that genuinely maintains clean equipment and trains new hires informally, but has no written record of either, is in a weaker compliance position than the cleanliness of the facility alone would suggest, because the recordkeeping requirement under Subpart F exists specifically to demonstrate ongoing compliance, not just a clean facility on the day of inspection.

The second recurring issue involves spent grain handling once a brewery processes it further than simple as-is donation. Breweries that begin drying or pelletizing spent grain for a value-added animal feed product, without realizing this shift moves them into Animal Food GMP territory under 21 CFR 507, find themselves out of compliance with a regulatory framework they did not know applied to a byproduct stream they considered secondary to their core beer business.

The third issue is allergen cross-contact control in breweries that have organically expanded into flavor-adjunct and fruited beer lines without updating their original sanitation procedures to reflect the new ingredients now running through shared equipment. A brewery’s original GMP documentation written for straightforward malt, hops, and yeast production does not automatically cover the allergen risk introduced by a peanut butter stout or a beer brewed with tree nut additions, and this gap surfaces specifically when an inspector asks about allergen controls that the original documentation never anticipated.

The inspection you just passed? It will happen again.

California brewery operations are re-inspected regularly and every sanitation log, training record, and corrective action needs to be documented every time. HACCPEasy Platform gives your team a digital compliance system so the next inspector visit is a non-event.

  • Operators log sanitation checks, training, and corrective actions in real time
  • Require photo evidence of equipment cleaning, allergen controls, or any critical step
  • If-Then logic flags deviations and locks the workflow until resolved
  • One tap exports your full 180-day audit history when an inspector walks in

Start your 30-day free trial — no credit card required

Bottom line

California craft breweries answer to multiple regulators with distinct authority: ABC for manufacturing and sales licensing, typically the Type 23 Small Beer Manufacturer license for most craft operations, TTB for formulation and labeling, and the FDA for food safety under FSMA, with CDPH potentially involved if your brewery handles other processed foods beyond beer itself. Breweries receive a partial FSMA exemption, excused from formal HACCP-style preventive controls planning but still required to comply with sanitary conditions, employee hygiene training, and recordkeeping requirements. Documented GMPs covering equipment sanitation, allergen cross-contact prevention, and spent grain handling are the practical compliance backbone for most breweries, and staff training records need to demonstrate, not just assume, food safety competency. Breweries expanding into lower-ABV beers, fruited beers, or value-added spent grain products should reassess their documentation against the new risk profile these products introduce.

FAQ

  • Does my California brewery need a HACCP plan? Generally no. Breweries are specifically exempt from the Hazard Analysis and Risk-based Preventive Controls subpart of FSMA, which is the formal food safety plan requirement most packaged food manufacturers must follow. You still must comply with Good Manufacturing Practices covering sanitary conditions, employee hygiene training, and recordkeeping, even though a formal HACCP plan is not required for beer production itself.
  • What license do I need to open a small brewery in California? Most craft breweries, microbreweries, and brewpubs in California operate under the ABC’s Type 23 Small Beer Manufacturer license, which authorizes production and sale for breweries producing fewer than 60,000 barrels per year and carries the same privileges as the standard Type 01 license at a lower fee. This is separate from any food safety registration that may apply if you also produce or sell other processed food products.
  • Do I need to register my brewery with the FDA? Yes, generally. Even though breweries receive partial FSMA exemptions, your brewery still needs to register with the FDA as a food facility and comply with the subparts of 21 CFR 117 covering sanitary conditions, employee training, and recordkeeping. Your specific compliance category and any additional exemptions depend on factors like your facility’s employee count and annual sales volume.
  • Can I sell my spent grain to local farmers without extra food safety paperwork? Generally yes, if you are donating or selling the wet spent grain as-is for animal feed without further processing. You still need to ensure the grain is not physically contaminated before shipping and that transport conditions are sanitary. If you process the spent grain further, such as drying or pelletizing it before it leaves your facility, you move into a different and more demanding regulatory category under Animal Food Good Manufacturing Practices.
Scroll to Top