Leading a Foodborne Illness Outbreak or Recall Response

The phone rings on a Sunday morning. A guest says that everyone at her table was sick after dinner on Friday. Or an email from your distributor says that a lot of spinach in your walk-in has been recalled. What you do in the next hour affects people's health, your staff, and whether the business survives.

Nobody thinks clearly in the middle of a crisis. So the time to plan is now. This is a step-by-step response for the person in charge. It doesn't replace direction from your health department, which leads any outbreak investigation, or advice from your lawyer and insurer.

Section numbers here refer to the 2026 FDA Food Code, a model that states and local agencies adopt on their own schedules. Your local rules apply, and they may differ.

What You Will Be Able to Do

• Take an illness complaint without diagnosing, admitting or dismissing it.
• Decide when to stop operations and call the regulator.
• Keep the food, records and evidence that investigators will need.
• Clean up safely after a vomiting or diarrhea event.
• Run a recall from notice through documentation.
• Communicate honestly during an incident, and reopen correctly.

Build the Plan Before You Need It

Write a one-page incident plan, and keep it where any manager can find it. It should have:

• The phone number of your regulator, including after hours
• The contacts for your owner, insurer and lawyer
• A complaint form
• Your written employee illness policy and vomit and diarrhea clean-up procedure, both of which the Food Code calls for
• Who speaks to the public, and who talks to the regulator
• Where recalled or held product goes
• Where to find invoices, temperature logs and schedules

Run a short drill each year. Ask a manager, "A guest just called to say that her family is sick. Show me what you'd do."

Taking an Illness Complaint

Treat every complaint seriously, and stay calm. You aren't deciding what caused the illness. You're collecting facts.

1. Listen and show concern. Say, "I'm sorry you're not feeling well. I'd like to get some details so that we can look into this."
2. Use your form. Record the name and phone number, the date and time they ate, everything they ate and drank, the number in the party and how many are sick, what the symptoms are, when they started, and whether they've seen a doctor.
3. Don't diagnose, and don't argue. Don't say that it couldn't be your food, and don't say that it was.
4. Don't offer payment on the spot. Follow your insurer's guidance. Offering a refund as a courtesy may be fine, but don't admit fault.
5. Suggest that they see a doctor, and give them your local health department's contact information.
6. Check for other reports. Look at your complaint log right away.

Don't assume that the last meal was the cause. CDC says that norovirus symptoms usually start 12 to 48 hours after exposure, and other germs can take days or even weeks. A guest will often blame the last thing they ate. That's why the time of onset, and everything eaten, matter so much.

When to Call the Regulator

The Food Code defines a foodborne disease outbreak as two or more cases of a similar illness from a common food. Under section 8-404.11, the start of an apparent foodborne illness outbreak is an imminent health hazard. You must stop the affected operations right away and notify the regulator.

Don't wait for proof. Your job isn't to confirm the outbreak. That's what the health department does.

Worked example. On Monday morning, you have two complaints. One party of three ate on Friday night. A second, unrelated guest ate on Saturday. Both describe vomiting and diarrhea, and both had the shrimp pasta. That's two separate reports of a similar illness and a shared food. Call the regulator now. Pull the shrimp from sale, and hold what's left.

One complaint, with no pattern, may not meet that threshold, but rules vary. Some agencies want every complaint reported. Log them all. If you aren't sure, call. Your regulator would much rather hear about it from you, and it's much better for your standing if you called them first.

You also have a separate duty under section 8-304.11 to contact the regulator right away when an employee has a reportable illness.

The First Hour

Once you suspect an outbreak, work through this list. Assign tasks, so that you aren't trying to do it all yourself.

1. Stop serving the suspect food. If you don't know what it is, ask the regulator how far to stop.
2. Call the regulator. Do what they say.
3. Hold the food. Don't throw out suspect food. Label it "do not use," and move it to a separate area only if your regulator agrees. Leftovers may be the only evidence of what happened.
4. Check every employee. Ask who's been sick, or who has a sick person at home. Exclude or restrict as the code requires.
5. Secure your records. Pull temperature logs, cleaning logs, invoices and schedules for at least the past several days. Don't change anything.
6. Tell your owner, insurer and lawyer.
7. Pick one spokesperson.
8. Ask before you deep clean. Normal sanitation goes on, but a big cleanout can destroy evidence. Ask the regulator what to do. If there's been a vomiting incident, clean up as your procedure requires.

Warning: Never alter, rewrite or back-fill a log after a complaint. If a record is missing, it's missing. A false record can turn a food safety problem into a legal one, and it can send investigators in the wrong direction while people are still getting sick.

Working With Investigators

The health department leads the investigation. Expect them to ask for:

• Your menu, recipes and how each item is made
• Temperature, cooling and cleaning logs
• Staff schedules and illness records
• Invoices, with lot numbers and supplier names
• Sales data, reservation lists and credit card receipts, so they can reach other guests
• Samples of leftover food
• Stool samples from staff, in some cases

They'll also carry out an environmental assessment, which means looking at how your kitchen works, to find out why it happened and not just what food was involved. Give them what they ask for. Cooperating honestly is your best protection. If you have questions about legal limits, talk with your lawyer, but don't delay on food safety steps.

A single food can also be a sign of a much wider problem. Your restaurant may just be one of many places supplied with a contaminated product, so your invoices could help stop a national outbreak.

Managing Staff During an Incident

A sick employee is a likely source in many outbreaks, and a likely victim in others. Speak with each person in private, and use your written policy.

Under the Food Code, staff must report vomiting, diarrhea, jaundice, sore throat with fever and infected wounds. They must also report certain diagnosed illnesses and some exposures. You must exclude or restrict based on the condition, and you must notify the regulator of diagnosed reportable illnesses and jaundice. During an outbreak, your regulator may set rules that are stricter than the normal ones. Follow them.

Don't blame anyone, and don't let the team hunt for someone to blame. If a sick worker is frightened of being punished, they might hide symptoms, and that's how an outbreak grows.

Cleaning Up After Vomit or Diarrhea

Norovirus is hard to kill, and many routine sanitizers won't do the job. The Food Code calls for a written procedure for these events, and for disinfecting with an EPA-registered product, used as the label says, when surfaces are contaminated with bodily fluids.

1. Move people away from the area, and block it off.
2. Discard any exposed food. When in doubt, throw it out.
3. Put on disposable gloves, a mask and an apron. Only trained staff should do this.
4. Remove the material with absorbent towels, and put it in a sealed bag.
5. Disinfect the area and all nearby surfaces.
6. Wash and sanitize food-contact surfaces, rinsing as the label says.
7. Remove the gloves and apron, and wash your hands thoroughly.

CDC guidance for norovirus is to use a chlorine bleach solution of 1,000 to 5,000 parts per million, which is 5 to 25 tablespoons of household bleach (5 to 8 percent) per gallon of water, or a product on the EPA's list of products effective against norovirus. Leave bleach on the surface for at least 5 minutes, then clean the area with soap and hot water.

Don't mix bleach with ammonia or acidic cleaners. Follow your product's label, your safety data sheet and your regulator's direction. If you use a stronger solution on a food-contact surface, rinse it well, then sanitize. Pay attention to things that people touch, such as door handles, faucets, restroom surfaces, menus and card readers.

Reopening

Under section 8-404.12, if you stopped operations because of an imminent health hazard, you need the regulator's approval before you start up again. Expect them to want to see:

• That the cause was found, or that the likely causes were dealt with
• That suspect food is gone, and you've followed their instructions
• That the kitchen is cleaned and disinfected
• That sick employees are off work, and that their return follows the code
• That staff have been retrained

Before your first service, hold a short team meeting. Say what happened, what changed, and how you're going to check it. Then look at the root causes, and update your plan, training and records.

Recalls: The Basics

A recall is when a firm removes a product from the market because it's unsafe or breaks the law. Most food recalls are voluntary, though FDA can order one in some cases. The FDA regulates most foods, and USDA's Food Safety and Inspection Service (FSIS) regulates meat, poultry and processed egg products. You can check both at FoodSafety.gov.

A recall notice usually gives the product name, brand, sizes, lot codes, use-by dates and the reason. The class might come later. Act on the notice as soon as you get it. FDA's rules say that those who receive recalled product should immediately follow the instructions from the recalling firm, and pass the recall on to their own customers where needed.

Sign up for FDA and FSIS recall emails, and make sure your suppliers can reach a real person at your business.

Running a Recall

1. Identify it. Compare the notice to your invoices, your storage, your freezers and any commissary or other locations. Check the lot codes on the case and the package.
2. Stop use. Tell every shift, right away. Mark the item as 86 in your point of sale system.
3. Find it. Look for the item in the walk-in, dry storage, on the line and in prep containers. Check for repacked items, where the original label may be gone.
4. Follow it into your recipes. Anything made with the recalled item counts as affected. Pull your production records and date labels.
5. Separate it. Hold the product in a marked area, away from food and equipment, labeled "recalled, do not use." Keep it until you've received instructions.
6. Follow the firm's instructions. They'll tell you whether to destroy it, or return it for credit.
7. Clean up. If the product could've contaminated surfaces or equipment, clean and sanitize them. For Listeria or an allergen issue, you may need a more careful cleaning. Ask your regulator.
8. Think about who already ate it. Ask your regulator what to do if you've served it. Serious recalls may mean contacting customers.
9. Document it. Record what you received, what you found, what you did, who did it, and when.

Worked example. At 10 a.m., your distributor warns you of a Class I recall of bagged spinach, lot 4471, because of possible Listeria. Your invoices show 6 cases of that lot, delivered Tuesday. You find 2 full cases in the walk-in. Your prep sheet shows that the rest went into 3 items: a salad mix, a quiche and a spinach dip. Date labels show that today's salad mix used the recalled lot, and that the quiche and dip were made on Tuesday and Wednesday. You stop all three, and pull them with the 2 cases. You put all of it in the marked area, then tell the regulator you've served these items since Tuesday. They tell you what to do next.

Cooking isn't a fix. Don't try to cook off or give away recalled food. Don't sell it at a discount, give it to staff, or donate it. Under section 3-701.11, unsafe food must be discarded, or reconditioned by an approved procedure.

Traceability Records

You can only run a recall as fast as your records allow. Keep invoices in order, keep lot codes where you can, and keep original labels until the food is used. When product goes into a new container, write the lot code or the date received on the label.

FDA's Food Traceability Rule will require some businesses, including many restaurants and retail food establishments, to keep records for certain listed foods. These include receiving records with a traceability lot code. Records must be provided to FDA within 24 hours of a request. Small businesses may be exempt, and Congress has barred enforcement before July 20, 2028. Check FDA's website for the latest status.

Speaking to the Public

Name one spokesperson. Everyone else says, "Let me get the manager." Give your staff this exact line, and tell them not to post about it.

• Stick to the facts that you know. Don't guess.
• Show concern for people first.
• Say what you're doing: "We're working with the health department, and we've stopped serving this item."
• Don't blame a supplier or a worker before it's known.
• Don't name an employee or share health information.
• Don't say "no one got sick from our food" unless that's been proven.
• Check your statement with your lawyer and insurer, and don't delay any safety notice while you wait.

Answer questions on social media with one calm message that links to your statement, rather than arguing in the comments.

Learning From It

After the crisis, hold a review within a couple of weeks. Ask: What did we find first, and how? Where did our plan fail? What did we do too slowly? What will change? Update your HACCP plans, training, supplier approvals and contact lists, and keep the file. Your insurer, your regulator or a lawyer may need it years from now.

Common Mistakes

Check Your Understanding

1. A guest calls and says, "I got sick two hours after eating your salad, so it must be your food." How do you respond?

Show concern, take down the details on your form, including everything eaten over the past few days, and suggest that she see a doctor. Don't agree or disagree. Log it, and check for other reports.

2. Your manager wants to throw out all the leftover soup "to be safe," after two guests reported the same illness. What do you say?

Stop serving it, but don't discard it. Call the regulator first. Leftovers may be needed for testing, so label them and keep them separate as instructed.

3. A server vomits in the dining room during lunch. Which cleaning product do you use?

Your procedure's disinfectant, which is either an EPA-registered product effective against norovirus, or a chlorine solution of 1,000 to 5,000 ppm. Your usual sanitizer isn't strong enough. Clear the area, discard exposed food, and use trained staff with protective gear.

4. A recall notice covers a brand of ground beef. Which agency's website would you expect to issue it, and what do you check first?

USDA FSIS covers ground beef. Check your invoices and the lot or establishment number on the packaging against the notice. Then follow the recall into any dishes made from it.

5. You've finished cleaning after an outbreak, and your team is ready. The inspector hasn't called back. Can you open for dinner?

No. After you've stopped for an imminent health hazard, you need the regulator's approval before starting again. Call them and ask what they need to see.

Key Takeaways

• Write your incident plan now, and practice it.
• Take every complaint seriously, collect facts, and don't diagnose or admit fault.
• Two or more cases of a similar illness from a common food means stop and call.
• Hold suspect food and records exactly as they are.
• Clean up vomit and diarrhea with a procedure and product that's strong enough for norovirus.
• In a recall, follow the product into your recipes, separate it, follow the firm's instructions, and document it.
• Use one spokesperson, and reopen only with the regulator's approval.