Compliance · Facilities · 13 min read

FSSAI License for Hospital Canteens: What's Actually Required

L.K. Monu Borkala, Founder, OneCity Technologies · Published 22 July 2026 · Updated on 26 August 2026

Running a hospital canteen without a valid FSSAI license is illegal in India, whether the hospital runs it directly or hands it to a third-party contractor on tender. This is not a minor administrative formality. A hospital serves food to some of the most physically vulnerable people in the building, and the rules changed materially in 2026: the turnover thresholds that decide which license a canteen needs were raised sharply, and the old one-to-five-year renewal cycle was replaced with perpetual validity. Here is what is actually required now, what the April 2026 overhaul changed, and what a hospital's compliance tracking needs to cover.

Why hospital canteens specifically carry real regulatory weight

Every hospital serving food, whether to inpatients, staff, or visitors, is treated as a Food Business Operator under the Food Safety and Standards Act, 2006, exactly like a restaurant or catering company. The stakes are higher in a hospital because the people being fed include patients with compromised immunity, post-surgical recovery needs, and dietary restrictions tied directly to their treatment. Unhygienic food handling in a general restaurant is a public health risk; the same lapse in a hospital canteen can directly worsen a patient's clinical outcome. That is why FSSAI registration is treated as non-negotiable for hospital food service rather than an optional formality layered on top of clinical operations.

The three license tiers, and which one a hospital canteen actually needs

FSSAI licensing runs on a turnover-based, three-tier structure. Following the FSSAI order dated 13 March 2026, effective 1 April 2026, the thresholds are: Basic Registration for annual turnover up to ₹1.5 crore, State License for turnover between ₹1.5 crore and ₹50 crore, and Central License above ₹50 crore or for any food business operating across multiple states regardless of turnover. These limits replaced the earlier ₹12 lakh and ₹20 crore boundaries, so a canteen that sat in the State tier under the old rules may now fall inside Basic Registration. Most single-site hospital canteens now sit comfortably within the Basic or State tier; only large hospital groups with multi-state catering turnover above ₹50 crore reach Central. Getting the tier wrong in either direction causes friction, so it is worth classifying against both current turnover and the current thresholds rather than a figure fixed years ago.

What the April 2026 FSSAI overhaul changed

Two connected changes took effect in 2026, and both matter for hospitals. First, the Food Safety and Standards (Licensing and Registration of Food Businesses) Amendment Regulations, 2026 were notified through the Gazette of India in March 2026, and a separate FSSAI order dated 13 March 2026 raised the turnover thresholds described above with effect from 1 April 2026. Second, and more significant operationally, the amendment introduced perpetual validity for FSSAI registrations and licenses. The earlier system, under which a license was granted for one to five years and had to be renewed before expiry, no longer applies. A license now stays valid indefinitely and ceases only on suspension, cancellation, or voluntary surrender. For a hospital that fixed its licensing tier years ago and never revisited it, this is a real reason to re-check classification now rather than assume the original tier and the old renewal obligations still hold.

In-house versus outsourced catering: the obligation stays either way

Many hospitals contract canteen operations to a third-party catering company rather than running food service directly, and a common misconception is that this shifts the compliance burden entirely onto the contractor. FSSAI registration is mandatory whether the hospital runs the canteen itself or hands it to an operator on tender. The requirement attaches to the food business activity happening at that premise, not only to whichever party's name is on the operating contract. A hospital outsourcing catering should confirm the contractor holds a valid, currently active license for that specific premise, rather than trust a general assurance that the operator is "FSSAI registered," because a contractor's license from a different location does not automatically cover a new site.

Premise-based licensing: why a hospital group can't use one license everywhere

FSSAI licensing attaches to a specific physical premise, not to a company as a whole. A hospital chain with ten locations across different cities needs a separate license for each location's canteen, even when the same company, the same menu, and the same operating standards apply at every site. A registered office might hold a Central License while each operating location still needs its own corresponding registration or license appropriate to that location's specific turnover and activity. Hospital groups that assume a single headquarters-level FSSAI registration covers every branch are working from a misunderstanding that surfaces, usually badly, during an inspection at a branch location that was never separately licensed.

Perpetual validity, annual fees, and the obligations that replaced renewal

Because licenses no longer expire, the old task of tracking a renewal date and filing a renewal application before it lapses has gone. What replaces it is not the absence of any obligation but a different one. A food business must keep paying the annual license fee, and it must file the Food Safety Compliance Return (FSCR) by its due date. Missing the annual fee or the FSCR does not produce an expired certificate; it produces a deemed suspension of the license, which is then revoked only after the dues and any applicable penalty are cleared. In practice a hospital's compliance calendar shifts from "renew before expiry" to "pay the annual fee and file the FSCR on time, every year," and a lapse now carries the same practical effect as operating without valid authorisation. An improvement notice can still be issued under Section 32 of the Act where a Designated Officer's inspection finds compliance gaps, and continued non-compliance after such a notice can lead to suspension or cancellation.

What non-compliance actually costs

Operating a food business without a valid FSSAI license or registration is an offence under Section 63 of the Food Safety and Standards Act, 2006, carrying imprisonment of up to six months and a fine of up to ₹5 lakh. Where unsafe food causes actual harm, that is, illness or injury to a patient, staff member, or visitor, Section 59 applies instead, with substantially heavier penalties scaled to the severity of the harm. For a hospital, the reputational and clinical-liability exposure compounds the direct legal penalty: an FSSAI violation tied to a patient health incident becomes evidence in any resulting action about the hospital's overall standard of care, not an isolated food-safety footnote.

What hospital software should actually track

Given the premise-based, turnover-tier, and now perpetual-but-conditional nature of FSSAI licensing, treating it as a filed paper certificate is a real operational risk for any hospital group beyond a single site. Software should track each canteen location's license individually, including its tier, because a group's locations may legitimately sit in different tiers based on each one's turnover. It should track the annual fee due date and the FSCR filing deadline for every location, since a missed payment or return now triggers deemed suspension rather than a simple late fee. It should prompt a periodic turnover re-check against the current thresholds, so a growing canteen that crosses ₹1.5 crore is migrated to the correct category through the FoSCoS portal instead of sitting misclassified. And for outsourced catering, it should track the contractor's license validity as its own item rather than assume a one-time check at contract signing covers the whole engagement.

Food handler training and FoSTaC certification

FSSAI requires food handlers to be trained in basic food safety practices, and the Food Safety Training and Certification (FoSTaC) programme is the standard route hospitals use to meet this requirement. Every canteen or catering unit is expected to have a minimum proportion of trained food safety supervisors on staff, not just general kitchen workers following informal practice. For a hospital canteen, this training requirement sits alongside, and does not replace, any additional clinical nutrition training kitchen staff may need for preparing therapeutic or restricted diets, since FoSTaC covers general food safety rather than diet-specific clinical protocols.

Water testing and kitchen hygiene requirements

Potable water testing is a recurring FSSAI compliance obligation for any food business, and a hospital kitchen serving multiple meals a day carries the same water-safety testing obligation as a commercial kitchen of equivalent scale. Kitchen hygiene requirements cover pest control documentation, waste disposal practices that are distinct from biomedical waste handling even where the two sit physically adjacent, and periodic internal audits against FSSAI's hygiene rating framework. A hospital that keeps meticulous clinical hygiene records but treats kitchen hygiene documentation informally creates an inconsistency a Designated Officer's inspection will notice immediately, given how directly kitchen hygiene ties to patient safety in a hospital.

Clinical nutrition versus general catering: a hospital-specific distinction

A hospital canteen typically runs two food operations under one roof: general catering for staff and visitors, and clinical diet service for inpatients on specific therapeutic diet orders. FSSAI licensing covers both as food business activity, but the clinical side carries an added layer of accuracy requirements a general canteen does not. A diabetic diet, a renal diet, or a post-surgical liquid diet served incorrectly is not just a food-quality lapse; it is a direct clinical safety incident. Hospital software managing dietary orders needs to treat FSSAI compliance and clinical diet accuracy as related but distinct tracking requirements, because a canteen can be fully FSSAI-compliant on food safety grounds while still making a dangerous diet-order error that has nothing to do with FSSAI licensing at all.

Inspection frequency and what a Designated Officer actually checks

FSSAI inspections are not scheduled on a fixed public calendar, and under the 2026 amendment they move to a risk-based, computer-assisted framework that concentrates attention on higher-risk businesses. A Designated Officer's review typically checks license validity and correct tier classification, food handler training and FoSTaC certification status, kitchen hygiene and pest control documentation, water testing records, annual fee and FSCR compliance, and correct labelling where packaged items are involved. A hospital canteen that keeps these records scattered across kitchen management, HR training files, and facilities maintenance makes producing a coherent inspection response much harder than a hospital that maintains them as one consolidated compliance record tied to that premise's license.

Where FSSAI compliance connects to other facility requirements

FSSAI compliance is one of several per-facility regulatory requirements a hospital needs to track consistently. Health Facility Registry registration follows similar location-specific logic, and NABH accreditation reviews food safety documentation as part of its broader quality assessment. Biomedical waste handling, covered in our guide to BMW Rules 2016, often sits physically adjacent to kitchen operations and deserves the same tracking discipline. For hospitals weighing whether a unified platform is worth the switch from managing these separately, why tier-2/3 hospitals need a unified ERP covers the case, and our pricing guide covers what that switch actually costs. For the compliance-tracking side generally, see our full compliance overview, and for sequencing several of these projects at once, our guide to realistic ERP implementation timelines covers how to plan the rollout.

Related compliance pages: fire safety NOC requirements, HAI surveillance and infection control, blood bank management, and emergency and casualty management.

How OneCity's dietary and nutrition module handles this

OneCity's dietary and nutrition module tracks canteen and catering compliance alongside the clinical diet-order workflow it already manages, so license status, annual fee dates, and FSCR deadlines sit next to the same operational data a hospital's food service team already works from daily, rather than in a disconnected compliance folder. For hospital groups running catering across several sites, this uses the same multi-location tracking pattern as other per-facility compliance items such as AERB equipment licensing and biomedical waste manifests: one consistent view per location instead of a separate spreadsheet for every regulatory category.

Ongoing compliance under perpetual validity

First-time registration gets most of the attention in FSSAI guidance, but the recurring obligations under perpetual validity are where hospitals now most often slip. The annual fee and the Food Safety Compliance Return both fall due each year, and a growing canteen's turnover is worth checking against the thresholds at the same time, because crossing ₹1.5 crore or ₹50 crore triggers a category migration handled through the FoSCoS portal with no modification fee and a fee adjusted to the new category. Food handler training status is worth confirming on the same annual cycle, so a lapsed FoSTaC certificate is caught before an inspection rather than during one. Treating perpetual validity as "nothing left to do" is the trap: the certificate no longer expires, but the annual obligations that keep it in force very much continue.

Multi-tenant hospital campuses and shared food service

Some hospital campuses hold several legally distinct entities on one site: a hospital, an attached diagnostic centre, a medical college, sometimes a separate day-care surgery unit, each potentially served by the same central kitchen. Whether this needs one FSSAI license or several depends on how the entities are legally structured and whether the kitchen operates as a single food business serving multiple internal customers or as functionally separate operations sharing physical space. This is exactly the kind of structural question worth settling with a food safety consultant or the state FSSAI office before assuming a single license covers the whole campus, because an incorrect assumption here surfaces only when an inspector asks which entity's name is on the license for a specific service point.

Documentation a hospital should keep readily accessible

Beyond the license certificate itself, a well-prepared hospital canteen keeps a specific set of records ready for immediate production rather than scattered across departments to be assembled under pressure during an inspection. This includes the current license or registration certificate with its tier visible at a glance, proof of the latest annual fee payment and FSCR filing, FoSTaC certification records for the food handlers currently on staff, recent water testing reports, pest control service records, and, where the canteen is outsourced, the operator's own valid FSSAI documentation for that specific premise rather than a generic corporate certificate from a head office. A hospital that can produce this full set within minutes of an inspector's request signals a genuinely maintained compliance posture; one that needs days to assemble the same records signals the opposite, regardless of whether each individual document, once found, turns out to be valid.

Why this matters more for hospitals than for a typical restaurant

A general restaurant's FSSAI compliance failure is a public health and reputational risk. A hospital's is that, plus a direct clinical governance failure: the same institution asking patients to trust its surgical outcomes, its infection control, and its medication safety is also, through its canteen, responsible for food safety for the same vulnerable population. NABH assessors and hospital quality auditors increasingly expect food safety documentation to be treated with the same rigour as clinical documentation, not as a facilities-management afterthought disconnected from the hospital's broader quality culture. A hospital that runs meticulous infection-control audits but treats canteen FSSAI compliance informally presents an inconsistent quality picture that an experienced assessor notices immediately.

Frequently asked questions

Does a hospital need an FSSAI license if it outsources its canteen to a third party?

Yes. Whether a hospital runs its canteen directly or gives it to a third-party operator on tender, FSSAI registration is mandatory in both cases. Both the hospital and the operator may need to be named on the paperwork depending on the arrangement, and the hospital should confirm the operator's license covers that specific premise.

Which FSSAI license tier does a hospital canteen need?

It depends on annual turnover. From 1 April 2026 the thresholds are Basic Registration up to ₹1.5 crore, State License from ₹1.5 crore to ₹50 crore, and Central License above ₹50 crore or for multi-state operations. Most single-site hospital canteens now fall in the Basic or State tier; only large hospital groups with multi-state catering reach Central.

Do FSSAI licenses still need to be renewed every year?

No. Under the 2026 amendment, FSSAI registrations and licenses have perpetual validity and no longer expire or need periodic renewal; they stay valid unless suspended, cancelled, or surrendered. The annual fee and the Food Safety Compliance Return must still be paid and filed on time, and missing either results in deemed suspension of the license.

Does a hospital group need one FSSAI license or one per location?

One per location. FSSAI licensing is premise-based, so each physical site where food is prepared or served needs its own license or registration, even if the same company operates identical canteens at every hospital in the group.

What's the penalty for running a hospital canteen without an FSSAI license?

Operating without a valid license is an offence under Section 63 of the Food Safety and Standards Act, 2006, attracting imprisonment of up to six months and a fine of up to ₹5 lakh. Heavier penalties apply under Section 59 where unsafe food causes actual injury or illness.

Sources and further reading

The 2026 threshold and perpetual-validity changes come from the Food Safety and Standards (Licensing and Registration of Food Businesses) Amendment Regulations, 2026 and the FSSAI order dated 13 March 2026; check your current requirements and category on the official FoSCoS portal. Threshold and process detail was cross-checked against ClearTax's FSSAI registration guide and reporting on the amendment by TaxGuru. FSSAI rules are updated periodically; confirm the position on FoSCoS or with FSSAI directly before relying on any secondary source, including this one.