Christina Jewett and Julie Creswell of the New York Times obtained Michigan’s outbreak correspondence under the state’s open records law and published the dates on August 15. An epidemiologist on the state’s rapid response team asked Yum Brands for Taco Bell’s supply chain records on July 1. She asked again on July 3. She asked a third time on July 6, and some records arrived that day. FDA asked for more on July 8. FDA had everything it needed on July 13.
Twelve days from the first request to a complete answer.
What the rule would have required. Section 204 of the Food Safety Modernization Act — the Food Traceability Rule — requires covered businesses to hand FDA or an authorized representative an electronic, sortable spreadsheet of the required records within twenty-four hours of a request, or within a reasonable time the agency agrees to. Leafy greens are on the covered list. Restaurants are covered too, and that matters more than it sounds, because before this rule farms and restaurants were exempt even from the old one-up, one-back recordkeeping. The compliance date was January 20, 2026. In March 2025 the administration moved it thirty months, to July 20, 2028. Last November, Congress went further and barred FDA from spending appropriated funds to administer or enforce the rule before that same date.
Now the counterfactual, and I am going to do it honestly. Records arriving on July 2 does not mean a recall on July 3. Traceback still takes time after the paper is in hand, and anyone who says otherwise has never watched one. But the interval is not a guess here, because this outbreak ran it. FDA had complete records on July 13. On July 16 the agency announced that its traceback had converged on a single supplier. On July 17 Taylor Farms de Mexico was named and the recall began. That is three to four days from a complete record set to a recall. Give the same three to four days to a July 2 answer and the recall lands in the first week of July.
What sits in the eleven days between. FDA’s own advisory says distribution of the recalled iceberg lettuce ran from June 29 through July 16, confirmed into thirty-one states and possibly eight more. That is an eighteen-day shipping window, and product was still moving the day before the recall. A recall in the first week of July takes the back eleven days of that window off the road. The lettuce in those eleven days is not a projection. It shipped, it was invoiced, and FDA has the customer file.
Who that would have helped, and who it would not. Honesty costs something here and it should be paid. Michigan’s own scientists, working with the state agriculture department, CDC and the University of Michigan, published an interim report last week describing a bimodal curve: illness onsets ran from May 10 through July 18, with distinct peaks from June 21 to 27 and from July 5 to 11. Those exposures were eaten in the middle and end of June. Nothing anyone could have done in July reaches them. CDC says the same thing in plainer words on the outbreak page — most of these illnesses began before the recall. An earlier answer does not undo the first several thousand illnesses, and I am not going to pretend that it does.
What it reaches is the tail, and the tail was not small. On July 16 this outbreak was 1,644 people in five states. It closed at 11,458 laboratory-confirmed Cyclospora illnesses in twenty states, 495 hospitalizations and two deaths, with the last illness onset recorded on August 15. Georgia, Tennessee and Texas were added on August 27. The company’s own recall notice lists best-if-used-by dates running to August 3, on the retail bags and on the foodservice cases alike. People were still eating this lettuce weeks after the recall, and every case of it came out of that June 29 to July 16 window.
The uncomfortable part of that arithmetic is that Michigan would have gotten the least out of it. Michigan found the signal, Michigan did the interviews, Michigan wrote the three emails, and Michigan’s own curve had largely already happened. The people an earlier answer would have spared were mostly in the nineteen other states that came later.
The federal government’s answer. Donald Prater, FDA’s acting deputy commissioner for food, told the Times that even if the twenty-four-hour rule had been in effect it would not have made a major impact on this response. The dates are July 1, July 3, July 6, July 8 and July 13.
I would like to know which of the five he thinks stays where it is.
And the twenty-four hours is not really the point. A company can answer in a day only if the records already exist in sortable electronic form before anyone asks. That is what the rule builds, and that is what the delay postponed. The clock is just the visible part of it.
Taco Bell says it acted immediately, voluntarily and proactively to protect its guests and support health officials. Set that sentence beside a third email from a state epidemiologist on July 6 and let it sit there.
None of this is the fault of the people who worked the outbreak. Nobody on Michigan’s rapid response team voted to move the traceability rule to 2028. Nobody running a traceback wrote the appropriations language forbidding its enforcement. The failure is architectural, and the people who built it were not in the room in July. I have written separately about the other two delays in this outbreak, the fourteen days between a state health department raising public notification with the company and the day the public was told, and the sixty hours lost at the end while the White House read the agencies’ draft press releases. This post is about the first one, because the first one is the one with a rule attached to it.
The argument I would make to the industry, one more time. Traceability draws a line. It says what the problem is, and it says what everything else is not. Without the line the warning has to be categorical, and a categorical warning prices a whole category. Lettuce sales fell everywhere this summer, for growers in Salinas and Yuma who had nothing to do with Guanajuato. The rule the trade associations asked Congress to postpone is the one that would have drawn a line around one plant and left everybody else’s lettuce alone.
Eleven consumer, public health and labor groups asked Congress last month to rescind the funding rider. Nothing has happened. The Food Traceability Rule is law, it is on the books, and FDA may not spend a dollar enforcing it until July 20, 2028. That is next summer, and most of the summer after that.
Credit where it is owed. The Michigan correspondence was first obtained by Bloomberg News, which published it on August 3, and which I missed at the time. Christina Jewett and Julie Creswell reported it out for the Times on August 15, with Caroline Hopkins Legaspi contributing. Neither newsroom found a secret. They found a state health department asking a restaurant company a reasonable question three times in six days, and a rule that would have answered it on the second, sitting on a shelf until 2028.