In the hierarchy of food safety hazards, allergens occupy a unique and unforgiving space. Unlike a bacterial contaminant that might cause illness in 24 hours, an allergen can trigger anaphylaxis within minutes. Legally, in both the UK and the EU, the provision of food containing an undeclared allergen is not treated as a quality issue—it is treated as food fraud and a criminal offence.
For a Food Business Operator (FBO), the defence against prosecution or civil litigation rests entirely on documentation. You cannot “see” an allergen the way you can see dirt. You can only prove its absence or controlled presence through written records. This article outlines the essential documents required for a legally compliant HACCP-based allergen management system under Regulation (EU) No 1169/2011 (FIC) and Natasha’s Law (UK).
Part 1: The Legal Foundation — Why Documentation Is Non-Negotiable
In the UK and EU, the law requires you to provide accurate information about the 14 Mandatory Allergens (cereals containing gluten, crustaceans, eggs, fish, peanuts, soybeans, milk, nuts, celery, mustard, sesame, sulphites, lupin, and molluscs).
- Burden of Proof: Under the Food Safety Act 1990 (UK) and Regulation (EC) 178/2002 (EU), the defendant — the food business — must prove they took all reasonable precautions (Due Diligence).
- The Consequence of Missing Paperwork: If a customer has an allergic reaction and you cannot produce a Recipe Specification or Supplier Allergen Statement, you have no defence in court. Fines in the UK for corporate manslaughter relating to allergen deaths now exceed £1 million.
Part 2: The Mandatory Allergen Documentation Pack
An EHO or BRCGS auditor will expect to see a live suite of documents. These are not “set and forget” items; they must be reviewed every time a supplier or recipe changes.
1. The Allergen Risk Assessment (The HACCP Foundation)
Before you write a menu or make a sandwich, you must document the risk.
- Document Name: HACCP Allergen Hazard Analysis
- Ingredient Breakdown: Every raw material listed with its allergen status (Intentionally Present, Cross-Contact Risk, Free From).
- Process Flow Mapping: Identify points where cross-contact is possible (e.g., “Step 3: Slicing bread on shared board after nut bread”).
- UK/EU Nuance: This document must address Precautionary Allergen Labelling (PAL). You cannot use PAL to cover up poor cleaning. The risk assessment must justify why PAL is needed (e.g., “Supplier cannot guarantee nut-free due to shared line”).
2. The Approved Supplier Allergen Matrix
This is the single most important document in an investigation.
- What it is: A spreadsheet or database listing every product you buy, cross-referenced against the 14 allergens.
- Why generic specs fail: Accepting a product spec sheet from a supplier dated two years ago is not due diligence.
- Annual Re-Confirmation: You need written confirmation from the supplier dated within the last 12 months confirming allergen status has not changed.
- Change Notification Clause: Documented proof that you require the supplier to notify you immediately (minimum 24 hours) if they change a recipe to include an allergen.
3. Internal Recipe Specifications (The Blueprint)
- Document Name: Finished Product Specification / Recipe Card
- Sub-Recipe Mapping: If you use a compound ingredient like “Cake Mix,” the spec must list its sub-ingredients (Flour = Gluten, Egg = Egg).
- Version Control: If you change from one mayonnaise brand to another, update the version number and date. If you switch to a vegan mayo with no egg, this requires a full reprint of labels and menus plus a new version number. Failure to update version control is a Major NC.
4. The Allergen Matrix Chart (Visual Management)
The wall chart posted in the kitchen must match the Master Document exactly. If you update the master spreadsheet but forget to reprint the wall chart, you have a Non-Conformity. Both must be current and consistent.
Part 3: Documentation for Natasha’s Law (PPDS) — UK Specific
The UK Food Information (Amendment) Regulations 2019 (Natasha’s Law) created specific documentation requirements for Prepacked for Direct Sale (PPDS) foods — items made on site and wrapped before the customer orders (e.g., a pre-wrapped sandwich in a coffee shop fridge).
- The PPDS Label Record: Retain a digital or physical copy of the exact label applied to that batch. The label must carry the product name plus a full ingredients list with allergens emphasised in bold. Minimum retention period: 3 months after the Use By date.
- Batch Coding Log: Document a link between the batch code on the label and the production date and recipe version used. Example: “Batch 2404A — Ham Sandwich — Recipe v3.1 (01/04/24) — Contains Wheat, Milk.”
Part 4: Documenting the CCP for Allergen Control
In HACCP, allergen control is typically managed as a Critical Control Point (CCP) or a strict Operational Prerequisite Program (oPRP). The monitoring records for this step must be meticulous.
The Changeover Cleaning Record (“All Clear” Sheet) — when switching from a nut-containing product to a nut-free product on a slicing line, the following documented evidence is required:
- Cleaning Method Statement: Documented procedure for allergen cleaning (e.g., “Strip down to component parts. Wash with detergent at 60°C. Rinse.”).
- Visual Inspection Sign-Off: Signed by the supervisor to confirm the machine is visually clean.
- Swab Verification (Best Practice): Allergen rapid test (lateral flow) result logged in the record. A negative swab result is the gold standard of legal defence.
- Pre-Production Check: Signed by the operator confirming the line is clear of previous ingredients before starting the new batch.
Part 5: Common Documentation Failures
| The Failure | The Legal Consequence |
|---|---|
| Missing ingredient spec for a “one-off” garnish | You bought sesame seeds for a salad. Where is the spec? No spec = Major NC with no due diligence defence. |
| Generic “May Contain” without a risk assessment | Overuse of PAL is prohibited. You must demonstrate you tried to source a nut-free alternative. Document that search. |
| Discrepancy between menu and pack | Menu says “Contains Milk.” Label says “May Contain Milk.” The EHO will issue a notice to correct the inconsistency. |
| Not documenting verbal allergen warnings | A customer asks “Is this nut free?” and you advise them it is not. Write it down. Record the refusal of service in the Allergen Enquiry Log. |
Part 6: The Allergen Enquiry Log
This document is often overlooked until it is needed in court. Its purpose is to record every conversation with a customer about their allergen requirements.
What to log: date and time; allergen concerned; staff member answering; the response given (e.g., “Advised customer that dish contains Wheat and Sulphites. Customer chose alternative dish.”).
Why this record is essential: if a customer later claims you confirmed a dish was gluten-free when it was not, a contemporaneous log entry is the evidence that wins the case. Without it, the dispute becomes your word against theirs.
Document to Protect
Allergen documentation is demanding, but it is the only barrier between a busy service and a criminal investigation. In the UK and EU, the expectation has shifted from “trusting the chef” to “proving the process.”
Ensure your HACCP folder contains: a current supplier matrix (under 12 months old); version-controlled recipe specifications; signed cleaning and changeover logs; and a copy of every label produced under Natasha’s Law.
If it isn’t written down, it didn’t happen. And in the case of allergens, if it didn’t happen on paper, the law presumes it didn’t happen in the kitchen.