Risk Codes for Retail Food Establishments

A Practice from Harris County Public Health (Texas)
For Public Health

At a glance

Use this practice to categorize retail food establishments based on inherent food safety risk and prioritize inspection and oversight resources for higher-risk operations. Harris County, Texas, revised their inspection schedules based on risk to focus their system on foodborne illness prevention.

Inspectors in a restaurant kitchen

Background

Harris County, Texas, is the third most populous county in the United States, with more than 4.7 million residents across 1,778 square miles. Harris County Public Health balances routine inspections of food establishments with responses to emerging public health issues.

Food establishments present different levels of public health risk based on their daily operations, food handling practices, preparation complexity, and the populations they serve. To improve consistency across the jurisdiction, the program shifted to scheduling inspections based on each establishment's inherent operational risk rather than past inspection performance. Investigators assign and verify a baseline risk code, and the electronic system calculates inspection frequency from that code. This helps the program intentionally focus resources where foodborne illness risk is highest.

Key actions

To reduce risks and ensure ongoing use of food safety standards, Harris County Public Health developed a practice to improve how they identified and monitored higher-risk food establishments. Investigators assign a baseline risk code based on operational characteristics and periodically verify risk codes during inspections. They also monitor compliance trends to assess effectiveness. The program included the following activities.

Risk assignment

  • Conduct a baseline risk assessment when an establishment is approved to operate.
  • Assign a baseline risk code (1–3) based on operational characteristics, such as food preparation steps and populations served. A baseline risk code is the minimum classification and cannot be reduced, regardless of inspection performance.

Verification and review

  • Verify risk codes during routine inspections and annual renewal or authorization reviews. Confirm they match observed operations and that the system is scheduling inspections in alignment with risk codes.
  • Reassess risk codes when significant operational changes are identified, such as new or expanded processes, major menu changes, or serving highly susceptible populations. Document any internal approval to change risk codes.

Compliance and oversight

  • Monitor compliance and trends (monthly), including how involved establishment managers are in controlling risk factors for foodborne illness (known as active managerial control).
  • Apply enhanced oversight when compliance history or active managerial control trends meet established escalation thresholds.
  • Use the highest risk code (4)only for establishments under active case management by regulatory and enforcement staff.
    • Return establishments to their baseline risk code once case management is complete unless an elevated baseline is formally approved.
    • Coordinate appropriately with regulatory and enforcement staff.

The health department's food inspection staff attend regular meetings to review updates. They also maintain their Registered Sanitarian licenses and undergo assessments to qualify as investigators in the risk assessment process.

Using this practice

We selected this practice as an example of environmental public health successfully applied in the field. We based our selection on four domains:

  • Effectiveness: Did it solve or help solve the environmental health problem?
  • Feasibility: What conditions and resources are needed to use it?
  • Sustainability: Is it realistically able to continue going forward?
  • Transferability: Could other health departments use it with little to no changes?

Others interested in applying this practice can consider these factors and this health department's experience.

Effectiveness

Short-term results include more accurate risk classification, inspection schedules aligned to inherent risk, and a clear distinction between baseline risk and compliance response. Over time, programs can focus inspection resources on higher-risk operations and track risk code distribution, inspection frequency, repeat foodborne illness risk factors, and active managerial control trends to measure impact.

This practice also aligns with the Food and Drug Administration's Voluntary National Retail Food Regulatory Program Standards (Standards 3, 4, and 6) and established risk-management principles.

Feasibility

This practice built on existing inspection programs and took 1–6 months to implement. It did not require new funding. Other health departments interested in this practice may need the following capacity:

  • Leadership support and staff buy-in
  • An electronic inspection system to assign and track risk codes and inspection frequency
  • Trained, credentialed investigators and supervisors
  • Ongoing training and quality assurance
  • Information technology or data support for system maintenance
  • Adequate staffing to provide enhanced oversight of higher risk facilities

Most of these resources are commonly available in established environmental health programs. The main feasibility constraint is staff capacity.

Sustainability

Health departments can integrate this practice into existing workflows for routine inspections and within existing enforcement regulations. They can embed risk codes in inspection software, which calculates inspection frequency. Compliance data and risk trends can be reviewed regularly to guide oversight decisions.

The ability of health departments to sustain this practice may depend on the following factors:

  • Leadership and staff support
  • Inspection software and data systems
  • Staff training and credentialing
  • Routine quality assurance and performance reviews
  • Workforce retention and succession planning
  • Risk-based inspections prioritized as a core function

The practice does not require ongoing external funding, but it does require stable staffing levels.

Transferability

Programs interested in this practice might want to consider the following actions:

  • Developing a clear basis for a risk classification system based on operational characteristics of food service establishments
  • Defining staff roles and approval authorities
  • Ensuring inspection software can link risk codes to inspection frequency
  • Training inspectors in risk-based decision-making
  • Securing leadership support for a standardized approach
  • Using written procedures for risk assessment, amendments, inspections, and progressive enforcement to support consistent application of risk codes and oversight

The model is highly transferable to other health departments with electronic inspection systems and structured food safety programs. Adequate staffing is essential.

Successes and challenges

Successes

  • Transitioned to scheduling inspections based on inherent risk instead of inspection performance
  • Improved consistency in risk assignment across districts
  • Strengthened defensible inspection scheduling and enforcement decisions
  • Smoothly integrated the new process into existing software and workflows
  • Maintained high staff retention, supporting continuity

Overall, strong leadership, clear policy, and system integration were keys to success.

Challenges

  • Staffing shortages affected inspection frequency
  • Occasional database technical issues caused delays
  • Consistent training and oversight were needed to maintain uniform application


Connections to Essential Services

Documenting how programs contribute to the Essential Public Health Services may help health departments in the accreditation process with the Public Health Accreditation Board. The activities in this practice support and align with these services:

  • Educate (3)
  • Strengthen communities and partnerships (4)
  • Implement policies (5)
  • Utilize legal and regulatory actions (6)
  • Support the workforce (8)
  • Improve or innovate (9)
  • Build public health infrastructure (10)

Resources

Harris County Public Health

Texas codes

U.S. Food and Drug Administration

Citation

In citing this practice in articles, presentations, or elsewhere, we suggest the following citation:

Centers for Disease Control and Prevention. National Center for Environmental Health. Environmental Public Health Practices Gateway. Risk codes for retail food establishments: a practice from Harris County Public Health (Texas). U.S. Department of Health and Human Services, CDC, 2026, https://www.cdc.gov/environmental-health-practice/php/gateway/risk-codes-for-retail-food-establishments.html.

Print
Content Source:
National Center for Environmental Health