Incident Management, Product Withdrawal & Recall Procedure

Prepare for incidents before they occur

Documented contingency arrangements are established and maintained in advance for credible scenarios that may disrupt normal operations or affect product integrity. The procedure identifies examples such as loss of utilities, fire or flood, contamination events, demonstrated or suspected malicious acts, and other situations that may affect food safety, legality, authenticity or quality.

Preparedness is not limited to a response statement. The procedure requires communication pathways, escalation triggers and coordination mechanisms to be defined so that incident management and product-status decisions can be made in line with the responsibilities it assigns.

Withdrawal and recall arrangements must also be capable of being implemented at any time, including outside normal working hours. Up-to-date key-contact information supports internal coordination, customer and distribution contact, supplier involvement where relevant, certification body notification, regulatory contact and emergency or specialist support where required.

Allocate authority for escalation, decision-making and communication

Senior management is responsible for ensuring that effective arrangements, authority and resources are available for incident management, product withdrawal and product recall. Significant incidents, withdrawals, recalls and system-test outcomes are also subject to senior-management review so that learning can feed continual improvement.

Technical or quality management coordinates incident management activity, assesses potential impact on food safety, legality, authenticity or quality, leads withdrawal or recall decision-making where required, coordinates communications, manages applicable certification body notification and oversees testing of the arrangements.

Department managers and functional leads provide operational support, records and agreed actions within their areas of control, while all employees are required to report potential incidents without delay and comply with instructions issued during incidents, withdrawals or recalls.

Assess the incident before deciding the product response

Reported incidents are recorded with a unique reference and assessed for severity, potential impact and need for escalation. The assessment considers whether the incident may result in unsafe, illegal, non-authentic or non-conforming product being released to customers.

Where escalation is required, incident management arrangements are activated to coordinate relevant personnel, communicate instructions and oversee containment and management activity. If product integrity may be affected, the procedure requires a decision on whether withdrawal, recall or neither action is appropriate.

The procedure preserves an important product-status distinction. Where affected product remains under the physical control of the site and has not entered the supply chain, it is managed through the Non-Conforming Product Control Procedure. Withdrawal or recall is considered only where affected product has moved beyond the site’s direct control.

Distinguish recall, withdrawal and no withdrawal or recall

Recall is initiated where affected product has been placed onto the market or may have been exposed to consumers, and where the incident presents or may present a risk to food safety, legality or authenticity. The decision criteria cover hazards that have been identified or cannot be ruled out, incorrect labelling, composition or claims that may render the product unsafe, illegal or misleading, compromised authenticity, and insufficient distribution or traceability information to ensure containment before consumer exposure.

Withdrawal applies where affected product has entered the supply chain but can be identified and intercepted before consumer exposure. The procedure also includes significant quality defects that breach specification or customer requirements where the affected product can be intercepted before reaching consumers.

No withdrawal or recall is initiated where an incident relates solely to product quality, does not present a risk to food safety, legality or authenticity, and can be effectively managed through internal controls or customer agreement. In those cases, the incident is managed through non-conforming product controls and corrective action as appropriate.

Document the decision and the rationale behind it

Every withdrawal, recall or no-withdrawal/no-recall decision is documented. The required record includes the affected product and batch or lot information, distribution status at the time of the decision, the classification of the issue, the decision taken, the rationale, personnel involved, the date and time, and any escalation, notification, withdrawal or recall actions initiated.

This decision record is a central strength of the procedure because it links risk classification, product distribution, authority and action in one evidence trail. It allows the business to show not only what decision was made, but why that decision was appropriate based on the information available at the time.

Execute withdrawal or recall under controlled coordination

Where withdrawal or recall is initiated, activity is coordinated to identify affected product, communicate with relevant internal and external parties, monitor progress and verify that the objective has been achieved.

The procedure requires key timings to be recorded, including incident identification, the withdrawal or recall decision, key notifications and communications, and completion of product recovery and reconciliation activities. A structured logistics approach covers confirmation of product identity and distribution status through traceability, recovery from the supply chain, returns, segregation or controlled holding, disposal or destruction where required, and reconciliation of affected quantities against product recovered, returned, destroyed or otherwise accounted for.

Quantity reconciliation is used to verify the effectiveness of the withdrawal or recall activity. That makes product recovery a managed and reviewable process rather than a communication exercise alone.

Control external communication and specialist support

A documented communication plan defines who must be informed, the triggers for communication, responsibility for preparing, approving and issuing communications, the communication methods to be used and arrangements for handling enquiries where applicable. Records show the audience notified, information provided, date and time, and the individual authorising release.

Where a significant incident, withdrawal or recall meets certification body notification criteria, the certification body is notified within three working days of the incident being identified. Sufficient information to assess the impact on the ongoing validity of certification is then submitted within 21 calendar days of the initial notification.

The procedure also provides for external agencies to be engaged where specialist advice or services are required. Depending on the nature and severity of the incident, this may include analytical laboratories, regulatory authorities, legal advisers or other relevant specialists, with records maintained of the reason for engagement, advice or services provided and actions taken in response.

Test the arrangements and improve the system

Incident management, product withdrawal and product recall arrangements are tested at least annually using realistic scenarios. Testing assesses decision-making effectiveness, communication and notification arrangements, coordination between relevant personnel and external parties, and execution capability, including traceability, reconciliation and product recovery.

Incidents, withdrawals, recalls and system-test outcomes are reviewed to identify lessons learned and determine whether root cause analysis is required. Where required, root cause analysis and corrective and preventive action are progressed through the Corrective & Preventive Action Procedure, with outcomes recorded and monitored for effectiveness.

Personnel with responsibilities under the procedure receive role-appropriate training in incident identification, escalation, decision-making responsibilities, withdrawal and recall arrangements, and their role during incidents, recalls, withdrawals and testing.

Maintain evidence across the incident lifecycle

The procedure identifies the records needed to demonstrate how the response operated. These may include incident reports, assessment and escalation records, withdrawal and recall decision records, distribution-status confirmation, activity logs, product recovery and reconciliation records, key timings, communication records, certification body notifications, external agency engagement, test records, review outcomes and training evidence.

Those records give technical and quality teams a structured basis for reviewing the effectiveness of the response, demonstrating how decisions were made and showing how improvement actions were identified and followed through.

A procedure connected to the wider FSQMS

Within the Food Industry Hub FSQMS Policies and Procedures Suite, this procedure sits at the point where incident detection, product-status decision-making, traceability, non-conforming product control, communication, corrective action and records come together.

It deliberately excludes detailed complaint investigation, corrective and preventive action system operation, non-conforming product controls, traceability system design and document or record-control mechanics, because those are governed by related procedures. This keeps the incident, withdrawal and recall procedure focused on escalation, decision authority, response coordination, product recovery, communication, testing and review.

For manufacturers strengthening their documented FSQMS, the procedure provides a practical framework for managing incidents and supplied-product risk without blurring the distinction between internal product control, withdrawal from the supply chain and consumer-level recall.