Most operations can answer the backward question. Where did this bird come from, which hatchery, which parent flock. Far fewer can answer the forward one at speed: this vaccine batch turned out to have a problem, so which birds received it, and where are those birds now. Food safety law asks both, and the second one is where systems fall over.
Key takeaways
- Article 18 of Regulation 178/2002 requires identification of the supplier and of the businesses supplied, at every stage. Backward alone is non-compliance.
- Food chain information must reach the slaughterhouse at least 24 hours before the birds arrive, and the operator must refuse animals that arrive without it.
- Treatment records are required even when the withdrawal period is zero, which is exactly the case for most vaccines and exactly why they get skipped.
- In the United States, vaccines are licensed by USDA APHIS, not by the FDA. Getting that wrong in an export file costs time you will not have.
The forward direction is the one that is tested
Article 18 of Regulation (EC) No 178/2002 is short and it is symmetrical. Food and feed business operators must be able to identify any person from whom they were supplied a food, a feed or a food-producing animal, and they must have in place systems and procedures to identify the other businesses to which their products have been supplied. One step back, one step forward, at all stages of production, processing and distribution.
The reason the forward leg matters more in practice is Article 19. When an operator considers that a product it has placed on the market is not compliant, it must immediately initiate withdrawal procedures, inform the competent authority, and recall from consumers where other measures are not sufficient. Every hour spent working out which lots are affected is an hour during which the recall has to be drawn wider than it needs to be. The width of a recall is a direct function of the precision of the records, and that is a cost line, not a compliance line.
What each text actually demands of a poultry holding
The three obligations overlap without being interchangeable, and operations get caught out by assuming that satisfying one satisfies the others.
| Instrument | What it requires | Who reads it |
|---|---|---|
| Regulation (EC) No 178/2002, Art. 18 | Identify supplier and customer businesses, at all stages | Competent authority, in an incident |
| Regulation (EU) 2019/6, Art. 108 | Treatment records including product, batch, quantity, group treated, prescribing veterinarian and withdrawal period, kept five years | Veterinary inspection |
| Regulation (EC) No 853/2004, Annex II, Section III | Food chain information delivered at least 24 hours before arrival, covering health status and medicines with a withdrawal period above zero | Slaughterhouse operator and official veterinarian |
| Regulation (EC) No 2160/2003 and its implementing acts | Salmonella sampling attached to an identified flock, against Union reduction targets | National control programme |
The slaughterhouse line is the one with teeth. Under Annex II Section III of Regulation 853/2004, the slaughterhouse operator must request, receive, check and act upon food chain information, and must not accept animals onto the premises without it. A lorry turned away at the gate on a Friday afternoon is not a paperwork problem, it is a welfare problem and a logistics problem within the hour.
Where the vaccine record breaks, and why it is usually the same place
Vaccination records fail for a reason that looks harmless. Most poultry vaccines carry a zero withdrawal period, so the person administering them concludes there is nothing to declare and writes nothing down, or writes it down at the end of the shift from memory.
Two things then go wrong. The record required under Article 108 of Regulation (EU) 2019/6 is required regardless of whether the withdrawal period is zero, so the file is incomplete before anyone noticed. And the batch number, which is the only thing that connects a vial to a group of birds, is the field most likely to be reconstructed later from an empty box that has already been discarded.
The second recurring failure is group identity that changes after the record was made. A house is recorded as one treated group, then the birds are split across two lorries, two slaughter days or two customers. If the record identifies the group by house and the despatch identifies it by consignment, the chain is broken at exactly the join a recall has to cross. The fix is unglamorous: the identifier used at administration has to be the identifier used at despatch, or a documented mapping between the two has to exist before anyone needs it.
The mechanics of building that record set, and the identification technologies that support it, are covered separately in our guidance on implementing full traceability for animal vaccines. The point here is narrower: a record that cannot survive a change of group identity is not a food safety record.
Salmonella monitoring: where animal identity meets the food safety target
Regulation (EC) No 2160/2003 and its implementing acts are the clearest illustration of why animal traceability and food safety traceability are the same subject. The Union targets are expressed as a share of flocks: a maximum of 1 % of breeding, broiler and turkey flocks positive for the relevant serotypes, and a reduction target of 2 % or less for adult laying hen flocks infected with Salmonella Enteritidis and Salmonella Typhimurium.
A target expressed per flock only works if a flock is an object that exists in the records. Laying flocks are monitored every 15 weeks from 24 weeks of age, and broiler flocks are sampled within a defined window before slaughter, so the sample, the house, the flock and the eventual consignment all have to resolve to the same entity. Where they do not, a positive result cannot be acted on proportionately, and the response widens to whatever unit the paperwork can actually describe.
Vaccination adds one further wrinkle worth flagging to any team that reads its own serology. Vaccinated birds can produce antibody responses that complicate the interpretation of a serological result, which is precisely why the vaccination history has to be attached to the flock record and available to whoever interprets the test. Interpretation of any specific result is a matter for your veterinarian, not for a management system.
If your file has to satisfy a United States authority
One correction is worth making because it appears constantly in supplier documentation and in trade files. In the United States, veterinary biologics, which is to say vaccines, bacterins, antisera and diagnostic kits, are licensed and regulated by the USDA Animal and Plant Health Inspection Service, through its Center for Veterinary Biologics, under the Virus-Serum-Toxin Act. The FDA, through its Center for Veterinary Medicine, regulates animal drugs, animal food and animal medical devices, which is a different set of products.
The two agencies maintain a joint charter to settle jurisdiction for the small number of animal biologicals where the boundary is unclear. For an exporter, the practical consequence is that a vaccine licence number, a serial release record and a drug approval are not interchangeable documents, and citing the wrong agency in a dossier is the kind of error that returns as a request for clarification weeks later.
Questions that come up when a system is being reviewed
How long do treatment records have to be kept?
Article 108 of Regulation (EU) 2019/6 requires keepers of food-producing animals to keep the records available for at least five years, including for products administered with a zero withdrawal period. Commercial contracts and assurance schemes frequently ask for longer, so check the longest requirement that binds you rather than the legal minimum.
Does blockchain solve traceability?
It addresses one specific problem, which is whether a record was altered after the fact. It does nothing about whether the record was correct when it was written, and in poultry operations the error rate at the point of entry is the dominant source of failure. Any technology assessment that does not start with data capture at the house is answering the wrong question.
What has to be sent to the slaughterhouse, and when?
Food chain information must reach the slaughterhouse operator no less than 24 hours before the animals arrive, save in the specific circumstances the regulation allows. It covers the health status of the holding of provenance or the regional status, and veterinary medicinal products or other treatments administered within the relevant period with a withdrawal period greater than zero, with dates of administration and withdrawal periods.
Who owns the traceability data generated by our equipment?
Access to data generated by connected products is now governed at EU level by the Data Act, Regulation (EU) 2023/2854, applicable since 12 September 2025. Where vaccination or monitoring equipment records your operational data, the access and portability question is worth settling in the supply contract rather than discovering it at renewal.
A traceable batch that no longer works
Perfect records on a vaccine that spent four hours above its storage range document a failure rather than preventing one. Temperature control is the other half of the same file.
Sources: Regulation (EC) No 178/2002, Articles 18 and 19; Regulation (EU) 2019/6, Article 108; Regulation (EC) No 853/2004, Annex II, Section III; Regulation (EC) No 2160/2003 and Commission Regulation (EU) No 200/2012; USDA APHIS Center for Veterinary Biologics and the APHIS/FDA jurisdiction charter; Regulation (EU) 2023/2854 (Data Act). Consulted August 2026.
Published previously, fully revised on 15 August 2026. General regulatory and operational guidance for professional operations. National implementation of EU rules varies, and sampling, interpretation of serology and any specific vaccination protocol are matters for your competent authority and a qualified veterinarian.