A food business may know the major allergens and still have weak allergen controls. A supplier can change an ingredient. A cook can use the wrong utensil. A surface may not be cleaned well enough. A recipe can change while the allergen list stays the same.
Small gaps like these can lead to allergen cross-contact, wrong allergen information, or undeclared allergens reaching a customer.
An allergen control plan is one part of a wider food allergen safety system. It shows where allergens enter the operation, where mistakes can happen, who is responsible, and what workers should do.
This matters even more in 2026. The new FDA Food Code was released on September 17, 2026, and includes clearer attention to allergen cross-contact and food safety management systems.
An allergen control plan is a written system for finding and controlling allergen risks. It follows allergens from the time ingredients enter the business until food reaches the customer.
A good plan should answer six simple questions:
For FDA-regulated food facilities covered by the Preventive Controls for Human Food rule, food allergen controls can be required as written procedures when allergens are hazards that need preventive controls. The FDA says those procedures must address allergen cross-contact and correct allergen labeling on packaged foods.
Restaurants and retail food businesses do not always fall under those same federal manufacturing rules. Their requirements often depend on state and local food rules. A written allergen control program can still give managers a clear way to organize daily allergen safety.
An allergen control plan also is not the same as a HACCP plan. HACCP covers a wider food-safety system, while an allergen control plan focuses on allergen risks.
For example, an allergy policy may say allergy orders must follow a special process. An SOP explains exactly how the worker prepares the order. The allergen matrix shows which allergens are already in that menu item.
The allergen control plan connects all of them.
A written system, however, cannot do the work by itself. Employees still need to recognize allergens, understand cross-contact, and know what to do when a customer raises an allergy concern. Food Allergen Awareness Training covers the U.S. Big 9, cross-contact, safe food handling, customer communication, and allergen-control practices for food-service and food-manufacturing teams.
The 2026 FDA Food Code gives food businesses and regulators an updated model for retail and food-service safety.
It is important to understand what that means. The Food Code is not one federal law that automatically applies to every restaurant in the country. FDA describes it as a model that states local, tribal, and territorial agencies can adopt into their own rules.
The latest allergen guidance includes several changes that matter to this topic. FDA says the 2026 edition includes clarification around allergen cross-contact. The official summary of 2026 Food Code changes also adds a “Food Safety Management System” definition and lists a new Major Food Allergen Framework among its supporting documents.
The Food Code also places more focus on active management. In simple terms, food safety should not be something a manager checks once and forgets. The controls have to work during normal daily operations.
No.
A food manufacturer may be covered by FSMA preventive-control rules. A restaurant may instead work mainly under state and local retail food rules.
For covered manufacturing facilities, the FDA says the written food-safety plan must identify hazards and include written preventive controls when needed. Those controls may include allergen, sanitation, process, and supply-chain controls.
Restaurants have a different setup. Their exact duties depend on where they operate and which food code or local rules have been adopted.
This is similar to the wider difference between HARPC and HACCP: two food-safety systems may share the same goal while using different rules, controls, and documents.
Current guidance also makes one point very clear: procedures only work when people understand them. Managers may write the rules, but servers, cooks, receiving staff, cleaners, and supervisors are the people who carry them out.
The United States currently recognizes nine major food allergens under federal law.
|
U.S. Major Food Allergen |
|
Milk |
|
Eggs |
|
Fish |
|
Crustacean shellfish |
|
Tree nuts |
|
Peanuts |
|
Wheat |
|
Soybeans |
|
Sesame |
Sesame became the ninth major allergen on January 1, 2023, under the FASTER Act. The current FDA food allergy guidance lists the same nine allergens.
These nine foods are a good starting point for an allergen control plan, but they are not the only foods that can cause allergic reactions. FDA notes that many other foods can cause reactions in sensitive people.
No.
The United States uses the Big 9 under federal allergen law. UK food law uses 14 listed allergens, including celery, mustard, lupin, mollusks, and sulphites, as well as several foods also found on the U.S. list. The UK Food Standards Agency allergen guidance explains those 14 allergens and the related food-business duties.
A U.S. business should not copy a UK Big 14 checklist and assume it describes U.S. law.
A risk assessment of allergens means checking every point where an allergen can enter food, move into another food, or be listed incorrectly.
Think of the process as a chain:
Supplier → Receiving → Storage → Recipe → Preparation → Equipment → Cleaning → Label or Menu → Service → Customer
An effective allergen control program checks each step.
For example, a restaurant may control peanuts well in the kitchen but still miss a change made by a supplier. A new sauce may now contain peanuts or sesame. If the ingredient record and menu are not updated, a server may give the customer old information.
That is why food allergen hazards should be checked across the whole operation, not only at the cooking station. The same step-by-step thinking is used in a HACCP hazard analysis, where each part of the food process is reviewed for hazards before controls are chosen.
Start with every ingredient used in the business.
Do not check only obvious foods such as peanut butter, milk, or eggs. Look at sauces, seasonings, breads, dressings, oils, desserts, spice mixes, toppings, and garnishes. Also check subingredients.
A simple working list may look like this:
Update the list whenever the supplier, product, recipe, or menu changes.
Allergen control begins before food reaches the kitchen.
Keep current ingredient information from suppliers. Check labels, product sheets, and subingredients.
Do not assume a product is unchanged because you have bought it for years. A supplier may change the recipe, seasoning, oil, or ingredient source.
That change can create undeclared allergens if your own records, menus, or labels still show the old information.
FDA even warns that some manufacturers changed recipes after sesame became a major allergen, which is why checking ingredients for sesame changes remains important.
A useful rule is simple: do not approve an ingredient substitution until the allergen information has been checked.
Receiving staff are often the first people who can catch a product change.
Workers should check that the item delivered matches what was ordered and that current allergen information is available.
Once food enters storage, reduce the chance that spills, leaks, or loose ingredients can reach other foods.
This can mean using sealed containers, clear labels, safe shelf placement, marked bins, or separate storage where needed.
The goal is not to put every allergen in a different room. The goal is to know where the risk is and keep it under control.
Allergen cross-contact happens when an allergen is moved into another food by mistake.
It can happen through:
A meal can contain no peanut in its recipe and still pick up peanut protein from a dirty utensil or shared surface.
Cross-contact is also different from germ-based cross-contamination. Wider food-safety systems such as the seven HACCP principles deal with several kinds of hazards, but allergen proteins need controls made for allergen risk.
A good allergen plan should tell workers exactly what to do when equipment is shared and when separate equipment is available.
“Clean the table” is not enough.
Good allergen cleaning procedures should explain:
what is cleaned, how it is cleaned, when it is cleaned, who does it, and how the business checks the work.
FDA studied allergen removal on food-contact surfaces in retail food settings. Its allergen cleaning and transfer study found that a full wash-rinse-sanitize-air dry process was effective at removing allergen residue and reducing transfer under the study conditions. Pre-scraping also helped, and wet wipes performed better than dry wipes in the tests.
The study also found that the surface itself matters. Allergens were harder to remove from textured plastic than from stainless steel or wood in that research.
The lesson is simple: a quick wipe is not the same as a full cleaning process.
Food may be prepared correctly and still cause a problem if the allergen information is wrong.
For packaged foods covered by federal allergen-labeling rules, the food source of a major allergen must be declared. FDA explains that this may be done in the ingredient list or through a properly used “Contains” statement.
An allergen warning also should not be used as a replacement for good allergen control. FDA states that advisory statements such as “may contain” should be truthful and should not replace good manufacturing practices.
Good allergen food labeling also depends on good version control. If a recipe changes but the label, allergen matrix, online menu, or printed menu does not, customers may receive wrong information.
For most FDA-regulated packaged foods, the federal major-allergen system covers the Big 9.
Restaurant menu rules are different and may depend on the state, city, business type, or local food rules. FDA also notes that federal packaged-food allergen requirements generally do not apply in the same way to food put into a wrapper or container after a customer's order at the point of purchase.
The key point is to know which rule applies to the food you sell.
A plan works better when every person knows their part.
Employees also need to know what not to do.
They should not guess about ingredients. They should not promise a meal is safe when they do not know. They should not make an unapproved substitution. They should not ignore a customer's allergy concern because service is busy.
Clear roles turn written rules into daily action.
If nobody checks the system, small gaps can stay hidden.
Useful records may include supplier information, ingredient lists, allergen matrices, recipe changes, staff-training records, cleaning records when used, plan updates, incidents, near misses, and corrective actions.
Checking asks:
Did we follow the control?
Corrective action asks:
What do we do when we did not?
This follows the same check-and-fix logic used in broader preventive food-safety systems. A HACCP plan, for example, also uses monitoring, corrective action, checking, and records to show that controls are working.
Allergen management in the food industry does not look the same in every workplace.
A restaurant may care most about the customer's allergy request, shared equipment, menu information, and the final plate.
A manufacturer may focus more on production scheduling, packaged-food labels, rework, line changes, and written preventive-control records.
This difference is one reason a factory allergen plan should not simply be copied into a restaurant.
The goal may be the same, but the daily risks are different.
Poor allergen control does not always begin with one huge mistake. Often, several small mistakes line up.
The restaurant switches to another sauce because the normal product is unavailable.
The new sauce contains sesame.
Nobody updates the recipe file or allergen matrix.
A server checks the old information and tells the customer the dish does not contain sesame.
The first failure happened before cooking even began.
A customer reports a food allergy.
The server passes the message to the kitchen, but a cook uses a utensil that touched another food.
The recipe itself may contain no allergen, but cross-contact can still happen.
A chef adds a new garnish.
The garnish contains a major allergen.
The kitchen knows about the change, but the printed menu, online menu, and allergen list still show the old recipe.
These are common allergen concerns because each part of the operation may look fine by itself. The allergen issues appear when the parts stop matching each other.
A simple process is
Write → Assign → Train → Check → Correct → Review
Write clear steps first.
Then give each step to a person or role.
Train workers so they understand what the rule means.
Check that the rule is being followed.
Correct mistakes when they happen.
Review the system so the same problem is less likely to happen again.
That is what turns a written document into an effective allergen control program.
There is no reason to wait for a customer reaction before reviewing the plan.
Update or review it when there is a meaningful change, such as:
The 2026 Food Code is a good example of why food-safety systems need review when guidance changes. FDA added new food safety management language and allergen-related supporting material in the latest edition.
A near miss is a mistake that is caught before unsafe food reaches the customer.
For example, a manager may notice the wrong garnish on an allergy order before the plate leaves the kitchen.
Do more than replace the meal.
Find out what happened, stop the immediate problem, check whether other food is affected, find the cause, update the process when needed, and retrain workers if the mistake shows a knowledge gap.
A near miss is a warning. Use it before it becomes an actual incident.
Use this checklist to review your current system:
If several boxes are empty, start with the highest-risk gap first. Fixing one real weakness is more useful than adding more paperwork that nobody follows.
A plan can explain the supplier checks, storage rules, cleaning steps, labels, cross-contact controls, and employee duties.
But people still have to follow it.
A server needs to know when to stop and ask for help. A cook needs to understand why a shared utensil matters. A receiving worker needs to notice when an ingredient changes. A manager needs to keep the allergen information current.
If staff do not understand those risks, even a detailed plan can break down during a busy shift.
Food Allergen Awareness Training gives food handlers, kitchen staff, servers, supervisors, and managers structured training on the Big 9, cross-contact, safe food handling, labeling awareness, customer questions, and emergency response. It can support the written procedures already used in your operation without replacing the business's own legal or food-safety responsibilities.
News
News
News