Managing allergens correctly is not optional for food businesses in the UK. It is a legal obligation, a moral responsibility, and a core component of good food safety practice.
With an estimated 2 million people in the UK living with a food allergy, and around 600,000 diagnosed with coeliac disease, the stakes could not be higher.
Failing to comply with food allergen law in the UK can result in serious harm to customers, significant financial penalties, and lasting reputational damage.
At FooddSure, we work with food businesses across London, Surrey, Kent, and Buckinghamshire to help them understand and implement allergen compliance as part of a robust food safety management system.
Whether you operate a restaurant, a takeaway, a catering company, or a food manufacturing business, this guide walks you through everything you need to know about food allergen laws in the UK.
UK food allergen law requires food businesses to identify and communicate the presence of 14 specific allergens, either as ingredients or as potential cross-contamination risks. These allergens are listed under the UK Food Information Regulations and are recognised as the most common causes of serious allergic reactions.
The 14 major allergens are:
Each of these must be declared whenever they are used as an ingredient. The declaration must be clearly distinguishable from the rest of the ingredient list, typically through the use of bold text, capital letters, italics, or a different colour.
Food allergen law in the UK is governed by a framework that has evolved significantly over the past decade. Understanding which legislation applies to your business is the first step toward compliance.
The Food Information Regulations 2014 implemented the EU Food Information for Consumers (FIC) Regulation in Great Britain. Post-Brexit, Great Britain retained this legislation as retained EU law. The FIR establishes the obligation for food businesses to declare the 14 major allergens in the ingredient list of prepacked food, clearly emphasised from the rest of the ingredients.
Natasha's Law, which came into force on 1 October 2021, represented one of the most significant changes to allergen labelling in a generation. Named after Natasha Ednan-Laperouse, a teenager who died in 2016 after suffering a reaction to a baguette that did not carry a full allergen label, the law extended full ingredient and allergen labelling requirements to prepacked for direct sale (PPDS) foods.
PPDS food is food that is packaged at the same premises from which it is sold, before the customer selects it. This includes items like sandwiches, salads, sushi, and baked goods packaged in advance by a bakery or cafe. Prior to October 2021, many of these products only required a label with the food name and a note that allergen information was available on request.
Under the current law, the full ingredient list with allergens emphasised must appear on the packaging itself.
Food sold loose or non-prepacked, such as food served at a restaurant table, a market stall, or a school canteen, is also subject to allergen information requirements. In these settings, allergen information does not need to appear in writing, although written menus or allergy matrices are strongly recommended.
It must, however, be available to the customer before they order, either in writing or verbally from a trained member of staff.
If a food business relies on verbal communication to convey allergen information, it must ensure staff are properly trained and capable of answering allergen queries accurately. This is an area where many businesses remain exposed to compliance risk.
"May contain" warnings, known formally as precautionary allergen labelling (PAL), are used when there is a risk of unintentional allergen presence due to cross-contamination during production or handling. These statements are voluntary under current UK law, but they carry significant weight.
The Food Standards Agency (FSA) has been working to introduce a more standardised approach to PAL following years of inconsistency across the industry.
A "may contain" statement must only be used where a genuine, assessed risk exists. It should not be used as a blanket disclaimer where there is no real risk, as this undermines the trust of consumers with allergies who rely on these statements to make safe choices.
At FooddSure, we advise clients to document their allergen cross-contamination risk assessments and use PAL statements only where the risk has been formally identified and verified. This supports both compliance and consumer confidence.
Under UK food allergen law, food business operators (FBOs) carry clear legal responsibilities. These include:
Local authorities and the Food Standards Agency have powers to inspect premises and enforce these requirements. Non-compliance can result in improvement notices, prohibition orders, or prosecution. In the most serious cases involving allergen-related fatalities, criminal liability has been established.
A well-structured allergen management system is the practical mechanism through which food businesses deliver compliance. At FooddSure, we help clients design and implement systems that are proportionate to their size and operations but comprehensive enough to meet legal requirements and protect their customers.
The starting point is a thorough audit of every ingredient used across your menu or product range. This includes reviewing supplier ingredient declarations and specifications, checking for hidden allergens in sauces, stocks, and blended seasonings, and identifying any ingredients that have changed without the allergen profile being updated.
A written risk assessment should identify every point in your operation where allergen cross-contamination could occur, from goods-in to service. This assessment informs your allergen controls, including decisions about dedicated equipment, preparation schedules, and cleaning procedures.
An allergen matrix is a chart that maps every dish or product against each of the 14 allergens, showing which are present as ingredients and which present a cross-contamination risk. The matrix must be accurate, current, and accessible to staff. It also forms the basis of any written allergen information provided to customers.
Every member of staff, not just chefs, needs to understand allergens and their role in keeping customers safe. This includes front-of-house staff who field allergen queries, delivery drivers, and anyone involved in labelling or packaging. FooddSure offers accredited Level 2 and Level 3 food safety training that includes allergen awareness as a core component.
Allergen management is not a one-time exercise. It must be reviewed whenever a recipe changes, a new supplier is introduced, or a new product is added to the menu. We recommend building a scheduled review into your food safety management system, with clear records of each review undertaken.
Through our consultancy and audit work, the FooddSure team regularly identifies the same types of allergen compliance failures across food businesses of all sizes. These include:
Each of these failures represents a potential risk to customers and a point of legal exposure for the business. Our allergen audits and consultancy services are designed to identify these gaps before they result in enforcement action or, more seriously, consumer harm.
Allergen law applies equally to food sold through online platforms, including delivery apps and business websites. If a customer orders through an app, they must have access to accurate allergen information before they place their order. This means your allergen matrix or dish-level declarations must be kept current on every platform through which you sell, not just in your physical premises.
The rise of online food ordering has created a significant compliance gap for some businesses, particularly smaller operators who may update their digital menus less frequently than their physical ones. At FooddSure, we include digital channel allergen communication as part of our consultancy assessments.
FooddSure is a specialist food safety consultancy supporting businesses across London, Surrey, Kent, and Buckinghamshire. We are accredited by the Chartered Institute of Environmental Health (CIEH) and registered with the ICO, which underlines our commitment to professional standards and client confidentiality.
Our allergen compliance services include:
We work with restaurants, takeaways, catering businesses, food manufacturers, cafes, and school food providers. Whatever the size or nature of your operation, we can help you build allergen compliance into your everyday practice, not just your paperwork.
