How Should Retail Food Operators Use Time as a Public Health Control?

A retail food operator should use time as a public health control only as a planned, documented alternative to temperature control. Before the first tray, pan or batch leaves hot or cold holding, the site should have an approved procedure, know which foods it covers, mark the discard time and train the person in charge to discard food when a limit is missed.

TapTick can help teams assign recurring controls, capture exceptions and keep corrective actions visible across sites. See the TapTick features.

What does time as a public health control mean?

Time as a public health control—often shortened to TPHC—means deliberately using a limited period of time instead of continuous hot or cold holding to control pathogen growth in time/temperature control for safety food, or TCS food. It can support operations such as a short food-to-go display, a working supply before cooking or a defined service period.

It is not the same as an accidental temperature failure. If a refrigerator breaks down or hot food falls below its required holding temperature without a planned TPHC procedure, the food has experienced a deviation. A manager must assess it under the applicable corrective-action rule; the site cannot simply start a four-hour clock after discovering the problem.

The FDA model expects the decision to be intentional. Its inspection guidance says inspectors should review direct observations, records, the person in charge and the standard operating procedure. A food establishment can be out of compliance when there is no written procedure or no effective mechanism showing when the discard limit is reached.

Which rule applies?

The FDA released the 2026 Food Code on September 17, 2026. It provides a current model for retail and foodservice regulators, but it does not become law across the United States on publication. State, local, tribal and territorial authorities adopt Food Code editions and may amend them, use a different edition or apply additional approval conditions.

Before introducing TPHC, confirm:

• the retail food code and edition adopted for that establishment;
• whether the local regulatory authority must review or approve the procedure;
• which foods and operating situations may use time instead of temperature;
• whether the local rule offers both four- and six-hour routes;
• how the food must be marked or otherwise identified; and
• any restrictions for highly susceptible populations or specific processes.

FDA maintains both a Food Code adoption page and a directory of state retail food regulations. Those are useful starting points, but an operator should still confirm the current rule with the authority that inspects the individual site.

How the four-hour route works

Section 3-501.19 of the 2026 Food Code model provides a maximum four-hour route. For the usual hot- or cold-held TCS food, the food starts at:

• 41°F or below when removed from cold holding; or
• 135°F or above when removed from hot holding.

The food must be marked or otherwise identified with the time that is four hours after removal from temperature control. By that deadline it must be cooked and served, served if ready-to-eat, or discarded. Food in an unmarked container—or marked with a time beyond the permitted four-hour limit—must be discarded under the model provision.

The 2026 model also describes a specific four-hour starting condition for a ready-to-eat fruit or vegetable that becomes TCS when cut, and for ready-to-eat hermetically sealed food that becomes TCS when opened. These foods may start at 70°F or below if the other conditions in section 3-501.19(B)(2) are met, including marking the four-hour deadline and keeping the food at or below 70°F during that period. Do not apply this exception to other foods by analogy.

Example: a quick-service counter removes a tray of hot TCS food from compliant hot holding at 11:30 a.m. for a planned lunch service. The tray is marked “discard by 3:30 p.m.” If food remains at 3:30 p.m., it is discarded; it is not cooled, relabeled or carried into the next service period.

How the six-hour route works

The six-hour route in the FDA model is for food removed from cold holding. It is not a longer version of the hot-food rule. The model conditions include:

• the food starts at 41°F or below;
• the warmest portion remains at 70°F or below throughout the six-hour period;
• the food is marked with both the removal time and the six-hour discard time;
• the site monitors food temperature, unless ambient air is controlled in a way that ensures the food stays at or below 70°F; and
• food is discarded immediately if it exceeds 70°F, is unmarked or has a mark that exceeds the limit.

The food must be served, cooked and served, or discarded by the six-hour deadline. Returning the food to refrigeration does not reset the clock.

Example: a convenience-store grab-and-go display uses a locally permitted six-hour procedure for a qualifying cold TCS product. A batch leaves refrigeration at 7:00 a.m. and is marked with both “out 7:00 a.m.” and “discard 1:00 p.m.” A check finds the warmest item at 72°F at 10:15 a.m. The batch is discarded then; the team does not wait until 1:00 p.m.

What the written procedure should contain

A useful written procedure should let a trained manager run the control correctly without inventing rules during service. Include:

1. Scope: the exact foods, recipes, pack sizes, display areas and sites covered.
2. Route: whether each item uses the four-hour or six-hour option. Avoid a generic “four or six hours” instruction.
3. Starting condition: the required initial temperature and how staff verify it.
4. Start event: what starts the clock—removal from cold holding, removal from hot holding, cutting specified produce or opening a specified sealed food.
5. Marking method: where the start and/or discard time appears, and how a label, pan, batch and display remain linked.
6. Monitoring: who checks the control, when checks occur and which temperature point is used for a six-hour route.
7. Disposition: whether food is served, cooked and served or discarded at the deadline.
8. Corrective action: the response to missing marks, late food, a temperature above 70°F on a six-hour route or uncertainty about the start time.
9. Previously cooked food: where relevant, how the food met the applicable cooling requirements before TPHC began.
10. Verification: how the person in charge checks that the procedure is followed and reviews repeated failures.

Keep the current procedure at the establishment and available to the regulatory authority where the adopted rule requires it. A head-office document that staff cannot access during an inspection or service is not an effective site procedure.

What each use record should show

The food itself must be marked or otherwise identified as the local rule requires. A supporting operating record can make the decision easier to verify across shifts and sites. Capture:

• site and service area;
• food or batch identity;
• date and the applicable four- or six-hour procedure;
• initial temperature, where required by the procedure;
• time removed from temperature control or otherwise rendered TCS;
• calculated discard time;
• six-hour monitoring temperatures and times, when applicable;
• actual disposition—served, cooked and served, or discarded;
• exception and corrective action; and
• the employee and verifying manager.

Do not let the record replace the required identification on the food. A spreadsheet in the office is little help if staff cannot tell which of two trays reaches its limit first.

What to do when the control fails

The safe default under the FDA model is straightforward: discard food that is unmarked, marked beyond the permitted limit or held past the deadline. On a six-hour route, also discard food once it exceeds 70°F.

Record the immediate action and the cause. Common causes include:

• a batch placed on display before a label was printed;
• staff using the four-hour route but entering a six-hour discard time;
• old and new batches mixed in one pan;
• a clock, label printer or device set to the wrong time;
• a six-hour display unable to keep food at or below 70°F; or
• handover between shifts without a clear owner.

Then prevent recurrence: simplify the mark, separate batches, change the display quantity, add a timed check, retrain the relevant role or stop using the six-hour route in equipment that cannot support it. Repeated disposal is evidence that the process needs redesign, not just another reminder.

How multi-site operators should manage TPHC

Multi-site businesses should not assume one national procedure is legally identical everywhere. Maintain a controlled core procedure, then record the adopted code, local variations and approval status for each jurisdiction.

At minimum, head office should be able to answer:

• Which products use TPHC at each site?
• Which sites use the four-hour route and which use the six-hour route?
• Has each site verified its current local rule?
• Can managers show the procedure and current batch markings?
• How often are food, labels or records found missing or out of limit?
• Are repeated failures linked to an owner and closed corrective action?

Review changes centrally whenever a regulator adopts a newer Food Code edition, a menu changes or a site begins a new food-to-go process. The 2026 Food Code can be a useful benchmark, but the controlled site procedure should always reflect the rule actually in force.