Contents
Dried chili and peppercorn with a coral wireframe illustrating spice supply chain resilience after ASTA 2026

06 October 2026

After ASTA 2026: Building a Spice Supply Chain Resilient to Structural FDA Import Enforcement

4

min read

What the ASTA 2026 Regulatory Workshop Agenda Signals for Spice Buyers

The American Spice Trade Association's 2026 Regulatory Workshop convenes in Washington, DC on 6–7 October. As an ASTA member, Hubcycle follows the association's regulatory work closely — and while our team is not in Washington this year, the published agenda is itself a clear statement of where US spice regulation is heading.

Read the session list as a whole: an FDA keynote on food policy priorities, New York State heavy metal limits for spices, pesticide MRLs and chemical hazards, cesium-137 and Indonesian spices, validation expectations across the supply chain, FDA's low-moisture foods guidance, genetic testing for spice purity, and trade policy and due diligence for importers. None of these topics is new. What is new is that they now sit side by side as standing compliance obligations rather than one-off incidents.

For procurement and quality teams buying spices for the US market — or supplying customers who do — the message is direct: FDA import enforcement on spices has become structural. It operates continuously, at the border, at the level of individual firms and, increasingly, entire origin regions. A spice supply chain built to absorb that pressure looks different from one built to pass the occasional audit.

From Episodic Recalls to Structural Border Enforcement

FDA's primary tool for imported spices is the import alert, which allows Detention Without Physical Examination (DWPE) of shipments from listed firms. Three alerts define the current landscape. Import Alert 99-19 covers Salmonella and lists spice firms from multiple origins on its Red List. Import Alert 99-42 covers heavy metals and includes ground cinnamon firms listed between 2019 and 2026. Import Alert 99-47 addresses economically motivated adulteration, including lead chromate in ground cinnamon.

Once a firm is on a Red List, every subsequent shipment is detained until the importer proves it compliant. Removal requires evidence that the root cause has been corrected — a single clean laboratory result is not enough. For a buyer, a supplier's import alert status is therefore not a historical footnote: it determines whether product clears the border at all.

The cesium-137 case shows how far this logic now extends. After FDA detected Cs-137 in cloves from an Indonesian exporter in 2025, it issued Import Alert 99-52, requiring shipment-specific certificates for all spices from Java and Lampung from 31 October 2025 — described by Food Safety News as FDA's first use of its FSMA section 801(q) import certification authority. Enforcement can now apply to a region, not just a firm. A buyer who cannot identify the sub-national origin of a clove or nutmeg lot cannot demonstrate that it falls outside the scope.

Heavy Metals: The Bar Is Moving Faster at State Level

There is still no federal action level for lead in spices. In 2024, FDA requested recalls of ground cinnamon products after testing and wrote to the industry on good manufacturing practice, but its lead guidance remains focused elsewhere. ASTA publishes voluntary lead guidance levels differentiated by plant part, with bark spices such as cinnamon at 2.0 ppm and fruits and seeds well below that.

States are moving faster. New York announced in June 2026 that its lead action level will drop to 0.6 ppm from 1 January 2028 for curry, dill seed, dried basil, dried non-bell pepper, nutmeg, sesame and turmeric — 40% below its previous level. The tension between federal and state requirements is precisely why preemption features on this year's ASTA agenda.

The practical consequence for sourcing: heavy metal specifications should be set against the strictest threshold that applies anywhere in the customer's distribution, not the most lenient one. A lot that is compliant today may not be compliant for the same customer in 2028.

Five Building Blocks of an Enforcement-Resilient Spice Supply Chain

Resilience to structural enforcement is not a single certificate. It is a set of capabilities that let a buyer show, lot by lot and at short notice, that a given spice is safe, authentic and correctly sourced.

  • Origin mapped below country level. Every lot should be traceable to its region of origin and processing site. As the Indonesian case shows, country of origin alone no longer answers the question regulators ask.
  • A per-lot Certificate of Analysis against the strictest applicable limits. Microbiology (including Salmonella), heavy metals (lead, cadmium, arsenic) and pesticide residues should be tested per lot and reported with measured values — benchmarked against EU maximum residue limits, ASTA guidance and the relevant state thresholds.
  • Adulteration controls treated as a separate risk. Naturally occurring lead and deliberate adulteration such as lead chromate or colour fraud require different controls. Authenticity testing — including the genetic methods discussed at this year's workshop — belongs in the specification, not only in incident response.
  • Documentation that plugs directly into the importer's FSVP file. Under FSMA's Foreign Supplier Verification Program, US importers must analyse hazards, evaluate and verify each foreign supplier, and take corrective action where needed. A supplier who provides hazard analysis inputs, pathogen-reduction validation data, audit reports and CoAs in a structured format shortens that work considerably.
  • Pre-qualified alternative origins. Because import alerts act on specific firms and regions, a single-source spice programme can stop overnight. Differentiated sourcing across several qualified origins — each documented to the same specification — is the most direct hedge against a detention you did not cause.

Two items deserve a sense of proportion. The FSMA 204 Food Traceability Rule does not list dried spices (only fresh herbs), and its compliance date has moved to 20 July 2028. Food facility registration, by contrast, is immediate: the biennial renewal window runs from 1 October to 31 December 2026, and a lapsed registration stops shipments regardless of product quality.

Turning the Building Blocks into a Joint Qualification Dossier

Most of these requirements fall between functions. Cesium-137 screening, heavy metal limits and unscheduled pesticide residues are regulatory questions with procurement consequences (which supplier), R&D consequences (which formulation) and legal consequences (who carries the import risk). When procurement and R&D each request documentation separately, gaps appear exactly where enforcement lands.

A shared qualification dossier, maintained jointly and reviewed annually, closes that gap. For each spice supplier it should hold:

  • the current FSSC 22000 or other GFSI-recognised certificate, with scope and expiry date verified;
  • recent lot-specific CoAs, with the testing laboratory's accreditation reference;
  • the supplier's testing protocol for heavy metals, pesticide residues and, where origin warrants it, radiological screening;
  • origin mapping for each product, down to region of production;
  • evidence of import alert status for the supplier and its sites;
  • the supplier's deviation management and customer notification procedure.

The cost argument follows. Compliance-grade sourcing can look more expensive on unit price, but a single detention brings examination and testing costs, redirected logistics, emergency replacement at spot prices and, at worst, reformulation. Measured on total cost of ownership, a documented supplier is usually the cheaper one.

EU and US Standards Are Not Interchangeable

One divergence matters particularly for transatlantic sourcing. In the United States, the EPA's January 2025 interim decision keeps ethylene oxide available as a treatment for spices, with added worker protections. In the European Union, ethylene oxide is not authorised for use on food. Spices produced to EU-compliant specifications therefore already meet the stricter of the two positions on fumigant treatment — a point worth making explicitly to customers who sell into both markets.

The reverse is also true: EU compliance does not automatically cover US requirements on FSVP documentation, import alert status or state heavy metal limits. A resilient programme specifies to both.

How Hubcycle Supports Spice Buyers After ASTA 2026

Hubcycle supplies qualified EU-compliant spices and herbs under FSSC 22000 / GFSI certification, with a Certificate of Analysis on every lot, lot-to-lot traceability and differentiated sourcing across multiple origins. Specifications can be fine-tuned on demand, and documentation is structured to support customers' FSVP and audit files.

As an ASTA member, we will review the workshop outcomes as they are shared with members and update our guidance accordingly. In the meantime, buyers who want to stress-test a spice programme against the points above can request a sample CoA, a specification sheet and a traceability walkthrough from the Hubcycle commercial team.

‍

1
Insights