Preventing Salmonella in Dairy: What FDA Recalls Reveal

When a small dairy operation issues a recall because of possible Salmonella contamination, the news cycle moves on quickly. What doesn't get covered is the part that actually matters: what went wrong upstream, and what a functioning quality system would have caught before a single package left the facility.

Stoltzfus Family Dairy of Vernon Center, NY recently recalled Sour Cream & Onion cheese curds due to potential Salmonella contamination, according to an FDA safety alert. Salmonella can cause serious and sometimes fatal infections, particularly in young children, elderly individuals, and anyone with a compromised immune system. That's not a footnote — that's the reason this matters.

In my view, the recall itself is less important than what it signals. Recalls like this one tend to trace back to the same family of gaps: inadequate environmental monitoring, inconsistent sanitation verification, or missing pathogen control points in the production process. The good news is that all of these are preventable with the right systems in place.

This article is about those systems.

Why Cheese Curds Carry Specific Salmonella Risk

Not all dairy products carry equal microbiological risk. Cheese curds — particularly flavored varieties like sour cream and onion — deserve extra attention for a few reasons.

Fresh cheese curds are minimally processed. Unlike aged hard cheeses, where extended curing can reduce pathogen load, fresh curds typically move from production to consumer in a matter of days. There's very little time for any built-in kill step to do corrective work if a contamination event happens upstream.

Flavoring ingredients compound the risk. Added ingredients like dried onion, sour cream powder, or seasoning blends introduce additional contamination vectors. Each ingredient supplier is a potential weak link. According to FDA data, a significant proportion of Salmonella outbreaks tied to dairy products involve added ingredients rather than the base milk or curd itself — which means supplier qualification isn't optional, it's load-bearing.

The facility environment matters as much as the product. Salmonella is a persistent environmental pathogen. Once it establishes a niche in a production environment — floor drains, condensation points, conveyor seams — it can contaminate finished product repeatedly across production runs. That's what makes environmental monitoring so critical for facilities handling fresh dairy.

The Regulatory Framework: What FDA Actually Requires

The applicable regulatory framework here is 21 CFR Part 117 — Current Good Manufacturing Practice, Hazard Analysis, and Risk-Based Preventive Controls for Human Food, commonly known as the FSMA Preventive Controls rule. For dairy operations that are not exempt as "very small businesses," this rule has been in effect since September 19, 2016 for large businesses, with staggered compliance dates extending to smaller operations.

The rule isn't abstract. It requires specific, documented controls for specific, identified hazards. Under 21 CFR Part 117 Subpart C, a dairy facility producing fresh cheese curds must:

• Conduct a written hazard analysis that identifies biological hazards (including Salmonella) as reasonably foreseeable risks at specific process steps
• Establish preventive controls — process controls, sanitation controls, and allergen controls where applicable — with documented implementation
• Maintain a supply chain program under 21 CFR Part 117.405–117.430 for ingredients where the hazard is controlled by the supplier rather than on-site
• Implement a food safety plan reviewed and signed by a Preventive Controls Qualified Individual (PCQI)

For small dairy operations specifically, 21 CFR Part 117.201 defines modified requirements — but Salmonella in a ready-to-eat product is the kind of hazard that can't be minimized regardless of facility size.

The FSMA supply chain provisions (21 CFR Part 117 Subpart G) are particularly relevant when flavoring ingredients are involved. If your sour cream powder or onion seasoning comes from a supplier who has not been qualified and approved under a documented program, you're carrying undisclosed risk every time a batch runs.

What a Functioning Quality System Would Have Caught

Let me walk through the controls that, if operating correctly, would have interrupted a contamination pathway before a recall became necessary.

Environmental Monitoring Program (EMP)

An effective EMP for a fresh dairy environment typically includes:

• Zone 1 monitoring (food contact surfaces): swabbing conveyor belts, molds, slicers, and packaging equipment before and after cleaning
• Zone 2 and 3 monitoring (non-food-contact surfaces and surrounding environment): drains, floors near production, equipment exteriors, doorways
• Zone 4 monitoring (areas outside production): loading docks, employee areas, refrigerated storage

Salmonella is what FDA calls an "indicator organism" when found in Zone 2 or 3 — it's a signal that your sanitation program has a gap before it's a food safety event. A facility running a weekly or biweekly EMP with root-cause corrective action protocols will catch that signal. A facility with no formal EMP, or one that samples only food-contact surfaces, won't.

FDA has published specific draft guidance on environmental monitoring for Listeria monocytogenes in RTE environments, and the same zone-based logic applies to Salmonella programs. The infrastructure of a good EMP is the same; the target organism and frequency thresholds differ.

Supplier Qualification and Verification

Under the FSMA supply chain rule, if your hazard analysis determines that Salmonella in an incoming ingredient is a hazard requiring a preventive control — and for flavoring ingredients in a fresh dairy product, it almost certainly is — you need documented supplier verification. That means:

• Approved supplier list with documented approval criteria
• Annual or event-driven supplier audits (on-site or records-based)
• Certificate of Analysis (CoA) review against defined specifications for each lot
• Incoming lot testing or supplier audit as the primary verification activity

A CoA alone is not verification. An approved supplier list with no underlying audit history is not a supplier qualification program. These are the paper systems that look functional until an FDA inspector — or a recall — reveals the gap.

Sanitation Controls and Verification

21 CFR Part 117.135(c)(3) specifically requires sanitation controls that address the cleanliness of food-contact surfaces and the prevention of cross-contamination. Sanitation is not just about cleaning — it's about verifying that cleaning worked.

Verification activities should include:

• Pre-operational ATP swabbing with documented acceptance criteria
• Visual inspection by a qualified individual before production start
• Master sanitation schedule covering hard-to-clean areas (drains, gaskets, overhead structures) on a defined frequency
• Sanitation standard operating procedures (SSOPs) with step-level detail, not general instruction

In my experience working with dairy clients, the most common failure mode here isn't willful neglect — it's inadequate SSOPs that leave too much to individual interpretation, combined with no verification step that would catch a missed area.

Process Controls: The Kill Step Question

For cheese curds made from pasteurized milk, the kill step has already occurred upstream — but pasteurization protects against the hazard in the milk, not against post-pasteurization contamination introduced during production. That distinction matters.

When a fresh cheese curd product has a Salmonella concern, the contamination source is almost always post-pasteurization: the environment, an ingredient, or a sanitation failure on a food-contact surface. The process control conversation isn't about whether you pasteurized — it's about whether your post-pasteurization controls are sufficient to prevent recontamination.

This is where the hazard analysis does real work. If a facility's food safety plan treats pasteurization as the only Salmonella control and doesn't address post-pasteurization contamination as a separate hazard pathway, the plan has a fundamental gap.

Comparison: Facilities That Recall vs. Facilities That Don't

The differences between operations that experience Salmonella recalls and those that don't aren't usually about intention. They're about system maturity.

The facilities in the left column often have paper systems that look functional. The gap isn't paperwork — it's whether the system is actually producing the verification data it claims to produce.

How to Assess Your Own Dairy Operation's Risk

If you're running a dairy operation or consulting for one, here are the questions I'd start with:

On the food safety plan: When was it last reviewed by your PCQI? Has it been updated to reflect any new ingredients, new suppliers, or new product lines? If the plan hasn't been touched since it was originally written, it's not functioning as a living document.

On environmental monitoring: Do you have a written EMP with defined sampling locations, sampling frequency, and acceptance criteria? When you find a positive, what happens next — and is that process documented?

On supplier qualification: For each ingredient in your flavored curd formulation, have you identified whether Salmonella is a hazard requiring a preventive control at the supplier level? If yes, what is your verification activity for each lot, and how is it documented?

On sanitation: What's your pre-operational verification process? Who signs off before production starts, and what are they actually verifying?

On corrective action: If your environmental monitoring found Salmonella in Zone 2 tomorrow, what would happen in the next four hours? If you can't answer that question quickly, the system has a gap.

These aren't hypothetical questions. They're the questions an FDA investigator is going to ask after a recall — and they're far easier to answer before one happens.

Practical Steps to Reduce Salmonella Risk in Fresh Dairy Production

Here's a working sequence for operations that want to close gaps proactively:

1. Commission a gap assessment against 21 CFR Part 117. Identify where your current food safety plan, sanitation program, and supplier qualification program deviate from the regulatory standard. Do this before your next FDA inspection, not after.

2. Stand up or upgrade your EMP. Define zones, establish swabbing locations, set frequency, and write the corrective action protocol for a positive result. Train the people who collect samples. Start trending your data.

3. Audit your ingredient suppliers. For any flavoring ingredient in a fresh or minimally processed dairy product, verify that your supplier has been qualified and that your verification activities for each lot are documented and current.

4. Test your food safety plan against a Salmonella scenario. Run a tabletop exercise: assume you got a positive on a food-contact surface during production. Walk through your corrective action procedure. Identify the gaps before they become real gaps.

5. Engage a PCQI — not just as a credential. The FSMA Preventive Controls rule requires that your food safety plan be prepared, or its preparation overseen, by a PCQI. That person should be actively reviewing monitoring results and signing off on plan modifications, not just listed on the cover page.

6. Consider finished product testing as a verification activity. For high-risk fresh dairy products, a hold-and-test approach — where finished product is held pending pathogen testing results before release — provides a final catch net. It's not a substitute for upstream controls, but it's a meaningful layer.

At Certify Consulting, I've worked with 200+ food and beverage clients on exactly these systems, and the pattern I see most often is a gap between what the food safety plan says and what is actually happening on the floor. Closing that gap is the work. Learn more about our food safety consulting services or explore how we approach FDA compliance readiness.

The Regulatory Stakes Are Real

Salmonella in a ready-to-eat product triggers mandatory recall under 21 U.S.C. § 350l (FSMA Section 206), FDA's mandatory recall authority. Unlike voluntary recalls, a mandatory recall order can be issued immediately, is publicly disclosed, and carries reputational consequences that are disproportionate to the facility's size.

The FDA's enforcement posture on preventive controls has sharpened in the years since FSMA's staggered compliance dates concluded. Inspection findings for 21 CFR Part 117 violations — particularly failure to conduct a hazard analysis, failure to implement supplier verification, and failure to validate process controls — are increasingly showing up as the predicate for formal enforcement action, not just 483 observations.

A facility that builds the quality system now is in a fundamentally different position than one that waits for an inspection to reveal the gaps. The cost of a gap assessment and system upgrade is a fraction of the cost of a recall — and that's before the reputational math.

Last updated: 2026-05-17