A variance in food safety is a written approval from a regulatory authority that allows a food establishment to deviate from one or more requirements of the food code. It’s essentially official permission to do something differently than the standard rules require, granted only when the authority is satisfied that the modification won’t create a health hazard. The FDA Food Code defines it as “a written document issued by the regulatory authority that authorizes a modification or waiver of one or more requirements of this Code.”
Variances exist because the food code can’t anticipate every safe preparation method. Some techniques, like sous vide cooking or fermenting, don’t fit neatly into standard rules about temperature, packaging, or processing. A variance lets an operator use these methods legally, provided they can prove the food will still be safe.
When a Variance Is Required
You don’t need a variance for everyday cooking and food handling. Variances come into play when you want to use a specialized process that falls outside what the food code covers by default. The most common situations include:
- Smoking or curing food as a preservation method
- Using additives like vinegar to make a food safe without traditional temperature control
- Reduced oxygen packaging of foods that need temperature control (vacuum sealing, sous vide)
- Operating a live shellfish display tank
- Sprouting seeds
- Any non-standard preservation method such as canning, pickling, drying, freeze-drying, or fermenting
The common thread is risk. Each of these processes creates conditions where dangerous bacteria can thrive if something goes wrong. Vacuum-sealed foods, for example, create a low-oxygen environment where Clostridium botulinum (the bacterium that causes botulism) can grow and produce toxins. Smoked or cured meats can harbor Listeria or Salmonella if time, temperature, and salt levels aren’t carefully controlled. The variance process forces operators to prove they understand these risks and have a plan to manage them.
What the Variance Protects Against
The specific pathogens a variance is designed to control depend on the food and the process. Meats and poultry carry risks from Clostridium botulinum, Salmonella, E. coli, Listeria, and Staphylococcus aureus, among others. Fish and seafood add Vibrio species to that list. Even fruits and vegetables can harbor Salmonella, E. coli, and Listeria.
Reduced oxygen packaging is a particularly common reason for variance requests, and the primary concerns there are botulism and Listeria. The 2013 FDA Food Code clarified that only foods packaged under reduced oxygen methods that don’t already control for these two organisms require a variance. Sous vide products, for instance, must be vacuum-packed, cooked in the bag, rapidly chilled, and refrigerated at temperatures that prevent the growth of cold-tolerant pathogens. Under current rules, these products can be held at 41°F for up to 7 days after cooling, or frozen and stored for up to 30 days.
How to Apply for a Variance
The application process varies by jurisdiction, but the core requirements are consistent across the country because they stem from the FDA Food Code. You’ll need to submit three things to your local or state regulatory authority:
First, a written statement identifying exactly which food code sections you want to deviate from and what you’re proposing to do instead. Second, an analysis explaining how your alternative approach will address the same public health risks that the original code sections were designed to prevent. Third, a HACCP plan if your variance involves a specialized process (which it almost always does).
Some jurisdictions charge a review fee. In Washington, D.C., for example, complete applications are reviewed within 30 days, though mailed submissions may take an additional two weeks. Your local health department will have its own application form and submission process. Some states, like North Carolina, route applications through a dedicated variance committee that includes a food scientist alongside representatives from industry and public health agencies.
The HACCP Plan Requirement
A HACCP plan (Hazard Analysis and Critical Control Points) is the backbone of most variance requests. It’s a written document that identifies every food safety hazard in your process and explains exactly how you’ll prevent, eliminate, or reduce each one.
The plan follows seven principles. You start by analyzing what could go wrong at each step of your process, then identify the specific points where you can control those hazards. For each control point, you set measurable limits. If you’re smoking meat, that might be a minimum internal temperature held for a specific duration. If you’re acidifying a product, it could be a target pH level.
Next, you establish how you’ll monitor those limits (temperature checks, pH readings, visual inspections), what you’ll do if something falls outside the safe range, and how you’ll verify the whole system is working. Finally, you document everything. Monitoring records need to be dated and signed by the person doing the checks. This paper trail is what an inspector reviews to confirm you’re following through on what your variance promises.
Monitoring should be continuous when possible, such as with automated temperature loggers. When continuous monitoring isn’t feasible, the frequency needs to be reliable enough to catch problems before unsafe food reaches a customer.
Keeping Your Variance Active
Getting a variance approved isn’t a one-time event. The 2022 FDA Food Code added a requirement that the approved variance document must be maintained at the food establishment. If an inspector visits and the variance isn’t available onsite, the establishment can be marked out of compliance on the inspection report.
Beyond the variance document itself, all related records, including HACCP monitoring logs, corrective action reports, and verification documents, must be kept at the facility for at least two years from the date they were created. Your food safety plan must stay onsite at all times. Other records can be stored offsite as long as they can be retrieved and provided within 24 hours if an inspector requests them. Electronic records count as onsite if they’re accessible from the location.
A variance typically specifies a duration, and you’ll need to indicate how long you’re requesting coverage when you apply. If your process changes, your ingredients change, or you move to a new facility, you may need to submit a new variance or amend the existing one.
How a Variance Differs From an Alternative
In some areas of food safety regulation, particularly under the FDA’s Produce Safety Rule, you’ll also encounter the term “alternative.” The distinction matters. An alternative lets you use a different method to meet a specific standard without needing prior approval. Variances, by contrast, require a formal petition and FDA or regulatory authority approval before you can implement them. In both cases, the bar is the same: you must demonstrate that your approach provides the same level of public health protection as the standard requirement. For variances, that burden is documented, reviewed, and approved in writing before you begin.