Who the Preventive Controls Qualified Individual is, the activities only they are allowed to do under 21 CFR 117, the two ways a person qualifies, and whether your own owner or staff can be it.
Do these first
Real help from real food people
Chef Diego runs a real food plant. If this page didn't get you there, tell us — a person reads every message.
After this lesson you can name who your preventive controls qualified individual is, tell whether they qualify by training or by experience, and know what the recognized course involves before you pay for a seat — instead of finding out an auditor expects the answer and you do not have one.
The previous lesson ended on the one requirement HACCP never had: a specific person has to prepare the plan. That person is the PCQI, and the title trips people up because it sounds like a certificate you frame on the wall. It is a role the rule defines, not a license.
A is defined in 21 CFR 117.3 as a qualified individual who has completed risk-based preventive-controls training at least equivalent to an FDA-recognized standardized curriculum, or who is otherwise qualified through job experience to develop and apply a food safety system.
Notice that definition sits on top of a broader one. A plain is anyone with the education, training, or experience their job requires to handle food safely. Every person doing the work should be a qualified individual for their task. The PCQI is the narrower one: a qualified individual who also carries the preventive-controls knowledge to build and defend the plan. Do not confuse the two — an operator who is perfectly qualified to run the cook step is not, by that fact, qualified to write the Food Safety Plan.
The rule ties the role to the plan directly. Under 21 CFR 117.126(a)(2), the Food Safety Plan must be prepared, or its preparation overseen, by one or more preventive controls qualified individuals. No PCQI, no valid plan.
The reason this role matters is that the rule reserves a specific set of jobs for it. 21 CFR 117.180(a) lists the activities one or more preventive controls qualified individuals must do or oversee:
Prepare the Food Safety Plan
Writing the plan itself, or overseeing whoever writes it. This is the anchor duty that ties back to 117.126(a)(2).
Validate the preventive controls
Confirming, with scientific and technical evidence, that a control is actually capable of controlling the hazard it is assigned to — the the rule calls for.
Review records
Reviewing the monitoring and corrective-action records that prove the plan is being run, within the timeframes the rule sets.
Reanalyze the plan
Reworking the plan when something changes — a new product, a new hazard, a control that failed — so it does not drift out of date.
The same section reserves the written judgment calls that go with those jobs for the PCQI too: the justification for validating a control later than the first 90 days of production, the determination that a control does not need validation, and the justification for reviewing records on a longer cycle than 7 working days. The pattern is consistent — the decisions that shape whether the plan is sound belong to the qualified person, not to whoever happens to be free that week.
The PCQI does not have to touch everything
The rule says these tasks must be done or overseen by a PCQI. A team can build the plan, run the monitoring, and keep the records; the PCQI's signature is on the preparation, the validation, the record review, and the reanalysis. It is oversight of the safety-critical decisions, not a requirement that one person do every task by hand.
Not every food business needs a PCQI, because not every food business needs a Food Safety Plan. The obligation is downstream of two questions the earlier course works through: does the Preventive Controls rule reach your facility at all, and does your hazard analysis identify a hazard requiring a preventive control? If the answer to both is yes, you need a written Food Safety Plan — and the moment you need that plan, 117.126(a)(2) means you need a PCQI to prepare or oversee it.
So the honest sequence is: settle whether the rule applies to you first, then whether your hazards pull in preventive controls, and only then go find your PCQI. Deciding you need one before you have confirmed the rule reaches you is putting the cart before the horse. This lesson assumes you have reached the point where the answer is yes.
Here is the part operators most often get wrong: they assume the only way to become a PCQI is to take the course. The rule sets out two paths, and the course is only one of them. 21 CFR 117.180(c)(1) spells them both out.
Training
Successfully complete training in the development and application of risk-based preventive controls at least equivalent to what the FDA-recognized standardized curriculum covers. In practice this is the recognized course, described below.
Job experience
Be otherwise qualified through job experience to develop and apply a food safety system. The rule is specific about the bar: the experience only counts if it has given the person knowledge at least equivalent to what the standardized curriculum provides. Years on a line are not automatically enough — the experience has to reach the same knowledge the course would have taught.
Two things about that experience path are worth holding onto. It is a real, legal route — you are not required to hold a course certificate to be a PCQI. But the equivalence bar is high, and if you claim it you should be ready to show the background that clears it, because an auditor will ask how the person qualifies. A certificate is easy to point to; experience you have to document.
One more clause settles a question many small operators worry about. The rule says the preventive controls qualified individual "may be, but is not required to be, an employee of the facility." You can grow your own PCQI on staff, or you can bring in an outside consultant to hold the role. Both are allowed.
When the rule says "a standardized curriculum recognized as adequate by FDA," it is pointing at a specific one. The Food Safety Preventive Controls Alliance (FSPCA) developed the Preventive Controls for Human Food curriculum, and its own page states plainly that this course is the standardized curriculum recognized by FDA and that completing it is one way to meet the requirements for a preventive controls qualified individual. Many training providers — university extension programs, industry associations, private consultants — deliver that same FSPCA curriculum under licensed lead instructors, so "the FSPCA course" and "a provider's PCQI course" usually mean the same content.
Two numbers people ask about — how long it takes and what it costs — are exactly the numbers that move, so treat them as things to check rather than facts to memorize.
Never budget off a number you saw once
Both the hours and the price above are dated to July 2026 and will drift. Before you commit, open the specific provider's current registration page and read their live course length and fee. Do not carry a price from a blog, an old quote, or this lesson into your budget as if it were fixed — confirm it at the source you are actually buying from.
For a small operation the practical question is whether the owner or a lead can simply be the PCQI, rather than hiring someone. The answer is yes. Nothing in the rule reserves the role for a consultant or a full-time food-safety hire — the person "may be, but is not required to be, an employee," and they qualify by the same two paths as anyone else. An owner who takes the recognized course, or who has genuinely equivalent experience, can hold the role.
The trade-off is about judgment, not permission. The PCQI is who validates your controls and signs off on the plan an auditor will scrutinize, so the person needs to actually carry the knowledge, not just the title. A common middle path is to have an owner or lead complete the training and hold the role day to day, while bringing in an outside PCQI for a fresh set of eyes on the initial plan or a major reanalysis. Whichever way you go, keep the paperwork: 21 CFR 117.180(d) requires that the training be documented — the date, the type of training, and who was trained — and if you are leaning on the experience path, that record is the qualifying background you will want on file.
With the person named and qualified, the next question is the one the plan is really about: what do these preventive controls look like once you are running them on the floor?
Do this in your operation