.png)
A PCQI (Preventive Controls Qualified Individual) is the person FDA's Preventive Controls rule requires every covered food facility to have doing or overseeing four specific tasks: preparing the food safety plan, validating preventive controls, reviewing monitoring and corrective-action records, and reanalyzing the plan when something changes. The requirement is codified at 21 CFR 117.180, and a facility can be cited for not having one even if the underlying food safety plan itself looks fine on paper.
What a PCQI actually has to do or oversee
Per §117.180(a), one or more PCQIs at a facility must do or oversee: preparation of the food safety plan; validation that preventive controls actually work; review of monitoring and corrective-action records (within 7 working days unless a longer timeframe is separately justified in writing); and reanalysis of the plan, at least every three years or whenever a significant change occurs. None of these have to be performed personally by the PCQI — the rule says "do or oversee" — but someone with that title has to be accountable for each one.
Who qualifies as a PCQI
Under §117.180(c)(1), a PCQI must have "successfully completed training in the development and application of risk-based preventive controls at least equivalent to that received under a standardized curriculum recognized as adequate by FDA," or be "otherwise qualified through job experience to develop and apply a food safety system." In practice, most people take this to mean two paths: the standardized route (typically the FSPCA's 2.5-day Preventive Controls for Human Food course) or an experience-based route, where a facility documents that someone's actual work history gave them equivalent knowledge. Either way, §117.180(d) requires the training itself — dates, type, and who was trained — to be documented in records.
A PCQI does not have to be an employee. The rule explicitly allows the role to be filled by a consultant or outside qualified individual, which is common for smaller manufacturers that don't have a dedicated food safety hire.
Do you need a PCQI on staff, or can you outsource it?
Either works under the rule as written, but the practical tradeoff is availability. Plan reanalysis, record review, and validation all happen on a schedule, and a PCQI who isn't around when a corrective action needs signing off becomes a bottleneck. Many small and mid-size manufacturers use a combination: an outside PCQI (consultant or contracted food safety professional) for the initial plan build and periodic reanalysis, with an internal, trained staff member handling the ongoing record-review cadence day to day — as long as that internal person also meets the PCQI qualification bar for the tasks they're doing.
PCQI vs. the plan itself
A PCQI is a person, not a document — but the two are tightly linked. Our guide to HARPC and the FSMA food safety plan covers what the plan the PCQI oversees actually has to contain, and our guide to building a food safety plan walks through the five core components in more detail.
Where IONI fits
A PCQI's record-review workload gets heavier the more monitoring logs and corrective actions a facility generates — and harder to keep inside the 7-working-day window when records live across binders and spreadsheets. See how IONI keeps monitoring records, corrective actions, and plan reanalysis connected and ready for PCQI review.
Frequently asked questions
Does every food facility need a PCQI?
Facilities covered by FDA's Preventive Controls for Human Food rule (21 CFR Part 117) need at least one PCQI, with limited exemptions for qualified facilities under the small/very small business provisions.
Can a consultant serve as a facility's PCQI?
Yes. 21 CFR 117.180(c)(1) says a PCQI "may be, but is not required to be, an employee of the facility," so an outside consultant who meets the training or experience bar can fill the role.
How long is PCQI training valid?
The rule doesn't set an expiration date on standardized PCQI training itself, but the facility must document the training and keep records demonstrating the individual remains qualified for the tasks they oversee.
What's the difference between a PCQI and a qualified auditor?
A PCQI oversees a facility's own food safety plan, records, and reanalysis. A qualified auditor, defined in the same section (117.180(c)(2)), is the person who conducts onsite supplier audits under the supply-chain program — a related but separate role.
