Pasteuriser Temperature Excursion: Hold, Rework or Release?
You are the quality head of a 6,000 L/day fruit-juice bottling plant in Hoshiarpur. The line fills 200 mL PET bottles of mixed fruit juice (pH 3.6, 12 °Brix) by hot fill: juice is heated to 92 °C, held 30 s, filled at not less than 88 °C, inverted for 2 min, then water-tunnel cooled. The validated critical limit for the pasteuriser is 90 °C for 30 s. On Tuesday the chart recorder shows the outlet temperature falling to 78 °C between 10:40 and 11:05. The operator kept filling; 1,860 bottles were packed as lots B-241 and B-242, and you were told only at 14:00. Six hundred of those bottles are already loaded on a tempo for a Patiala distributor. A retained bottle from B-241, analysed at 13:00, gives a total plate count of 40 cfu/mL and yeast and mould below 10 cfu/mL. Your state FSSAI licence is current and an HACCP surveillance audit is due in three weeks.
1. What is the immediate disposition of lots B-241 and B-242, including the 600 bottles already loaded on the tempo? Justify your decision on hazard grounds rather than on the laboratory result.
Read the worked answer
Decision: place both lots and the loaded tempo under hold; do not release and do not dispatch.
Reasoning
- The recorded condition (78 °C for about 25 min) is below the validated critical limit of 90 °C/30 s, so the process did not deliver its intended lethality. This is a CCP deviation and must be handled as a corrective action (HACCP principle 5) with a recorded disposition, not as a paperwork correction.
- The pH of 3.6 limits growth of proteolytic Clostridium botulinum, so that is not the driving hazard. The realistic survivors are vegetative pathogens (Salmonella, E. coli O157:H7, Listeria monocytogenes) and heat-resistant spoilage organisms such as Alicyclobacillus and mould spores, any of which can survive a sub-lethal heat step in an acid product.
- The TPC of 40 cfu/mL proves nothing about safety. A single sample cannot demonstrate absence of pathogens, the count is a general index rather than a target-organism test, and the sample was drawn two hours after the event, allowing injured cells to recover or die unpredictably. Releasing on this result would be a judgement error.
- Practical disposition options: re-pasteurise the unshipped bottles after decanting, only if the product is still within its allowed rework window and sensory quality is verified; otherwise reject and destroy with a witness record. The 600 bottles on the tempo must be recalled to the plant immediately with a written hold notice to the distributor.
- Record everything: deviation time, volume, batch codes, decision, authoriser, and verification that the hold was physically enforced (segregated, red-tagged area).
2. How would you establish the root cause, and which corrective actions must be in place before the HACCP audit?
Read the worked answer
Root-cause investigation
- Establish why the temperature fell: steam pressure dip, product pump speed increase, fouling of the heat exchanger, or a sticking divert valve. Check the steam log, the flow meter and the maintenance register for that morning.
- Establish why filling continued: no audible alarm, no automatic divert, no clear authority for the operator to stop the line, and production pressure on hourly output targets.
- Establish why reporting took three hours: no escalation rule and no same-shift record review.
- Check the calibration status of the indicating thermometer and the chart recorder thermocouple; an out-of-calibration instrument changes the interpretation of the whole chart.
Corrective actions to commit to with dates
- Fit an audible and visual alarm plus an automatic divert-to-rework valve that trips below 90 °C, so a deviation cannot be filled.
- Hourly CCP checks signed by the operator, with a supervisor review of records within 24 hours.
- Written stop-work authority and retraining for all line operators.
- Quarterly calibration of the recorder and reference thermometer, plus a temperature-distribution study or validated challenge test on the pasteuriser.
- Escalation matrix displayed at the line.
Why this order: engineering controls remove the hazard at source and are stronger than training alone; the auditor will look for verification evidence, not just a training register.
3. What do you communicate to the distributor and to the FSSAI auditor, and which records must exist to support your position?
Read the worked answer
To the distributor: an immediate written hold notice covering lot codes B-241 and B-242, a request to return the 600 bottles and not to sell any stock already delivered, and a replacement consignment from a verified lot. Do this the same day; a quiet product swap without documentation converts a process deviation into a traceability failure.
To the auditor: disclose the deviation openly and present the corrective-action record with completion dates and verification results. Concealing it is worse than the deviation itself, and the audit will compare the chart against dispatch records anyway.
Records that must exist
- The pasteuriser chart and the operator log for the shift.
- A deviation report with a hazard assessment, the hold records, and the disposition (rework or destroy) signed by an authorised person.
- Traceability records one step back and one step forward: which juice concentrate lot, which bottles, which distributor.
- Verification evidence for the new alarm and divert valve (commissioning test, calibration certificate).
- The revised HACCP plan page showing the critical limit, monitoring frequency, corrective action and verification.
Recall question: a formal recall is not triggered here because the affected lots have not reached consumers; if any quantity had been sold, the FSSAI recall procedure and a public notice would be required. Explain that distinction to the auditor rather than leaving it ambiguous.