Allergen ControlAllergen Control (FALCPA / FASTER Act compliance)

An allergen-control programme is a documented, validated, verified set of preventive controls designed to ensure that (a) declared allergens reach the consumer correctly labelled, and (b) undeclared allergens do not reach the consumer at all. It is not a single SOP — it is a programme that runs from supplier qualification through receipt, storage, scheduling, production, cleaning, label issuance and finished-product release.

FDA recognises 9 major food allergens under FALCPA + the FASTER Act: milk, eggs, fish, crustacean shellfish, tree nuts, peanuts, wheat, soybeans, and (since 1 Jan 2023) sesame. The EU FIC list adds celery, mustard, sulphites (≥10 ppm), lupin and molluscs to broadly the same set. Canada (CFIA), Australia/NZ (FSANZ), Japan and the UK each maintain their own statutory lists; exporters must work from the union of all applicable lists, not just the home regulator's.

Allergen control starts before the ingredient enters the plant. Suppliers of "allergen-free" or single-allergen-declared raws must provide supporting evidence: allergen-control letters, segregation statements, environmental-monitoring evidence for the supplier's own line, and CoAs that explicitly reference the allergen status. Specifications must list every declared allergen in the ingredient including cross-contact disclosures ("may contain").

• Receiving SOPs verify ingredient labels declare the same allergens as the spec — a substitution by the supplier without notification is one of the most common recall root causes.
• Allergenic and non-allergenic versions of the same ingredient (e.g. soy-free vs soy-containing lecithin) get distinct SKUs, distinct labels and ideally distinct storage zones.
• Bulk deliveries (tanker, silo) require an allergen-specific cleaning certificate from the previous load.

• Dedicated zones, colour-coded scoops, dedicated PPE, dedicated weighing tools — segregation is engineered, not just procedural.
• Allergen storage above non-allergen storage is a controlled risk: any leak or spill cascades downward. Segregation of storage height is part of every credible programme.
• Re-packaged or partially used allergen ingredients must be sealed and re-labelled immediately, with the original allergen declaration preserved verbatim.
• WIP allergen-containing intermediates carry the same allergen statement as the finished product into which they will be incorporated.

The scheduling rule of thumb is well established: run lowest-allergen-burden products first, run allergen-containing products last in the campaign, and validate the cleaning between cycles. The plant's allergen matrix — a grid of every SKU against every regulated allergen — is the operational input the scheduler works from. The matrix lives next to the recipe master and updates with every formulation change.

Allergen cleaning between products must be validated — visual cleanliness is necessary but not sufficient, and ATP alone does not detect allergenic protein. The validation approach mirrors pharma cleaning validation:

1. Pick the worst-case product transition (highest allergen load → most sensitive downstream product).
2. Define swab and rinse sample locations, prioritising hardest-to-clean (HTC) areas.
3. Run three consecutive cleaning cycles with allergen-specific ELISA or PCR-based recovery testing.
4. Set acceptance criterion at or below the analytical limit of quantitation, and well below the VITAL 3.0 reference dose for the allergen.
5. Re-validate on equipment change, cleaning-process change, or new product introduction.

Routine verification uses allergen-specific lateral-flow strips or quantitative ELISA for swab and rinse samples, with ATP as a supplementary indicator of overall cleanliness. The frequency is driven by risk: high-risk transitions (e.g. peanut → non-peanut) verify every run; lower-risk transitions on a periodic-monitoring basis.

Undeclared allergens via label errors — pulled-over labels from a previous run, wrong label rolls, wrong artwork version, ingredient changes not reflected on label — drive the majority of US allergen recalls. Controls:

• Label issuance is two-person controlled: one issues, one verifies against the WO formula and the master artwork.
• Reconciliation at end of run: labels issued = labels applied + labels destroyed + labels returned (no missing labels).
• Label-to-formula reconciliation: every allergen in the formula appears in the ingredient statement; every allergen-containing rework reflected.
• Artwork change control: any ingredient change that adds or removes an allergen triggers an artwork update, a regulatory-affairs review, and a complete depletion of the old label stock before changeover.
• Operator vision-system or barcode check on labels at the line — a misapplied label triggers an immediate stop and reconciliation.

Rework of an allergen-containing product back into a same-allergen product is permitted; rework into a non-allergen-containing or differently-allergen-containing product is forbidden unless the receiving product's label and risk file accommodate it. "Like into like" is the only safe default. Every rework event is recorded against the WO so traceability supports recall scoping.

Every line operator, packer, sanitation team member, scheduler and warehouse worker who touches allergen-containing material must be trained on the allergen programme — and that training must be recorded, time-stamped, role-specific, and refreshed on a defensible cycle. Training that lapses is treated identically to a missing SOP at audit.

• Cleaning validated only with ATP — does not detect allergen protein.
• Allergen matrix maintained in a spreadsheet that drifts from the recipe master.
• Precautionary "may contain" labelling used to mask an unvalidated cleaning programme.
• Sesame still missing from labels and matrix three years after the FASTER Act effective date.
• Supplier substitution accepted without verification that the allergen profile is unchanged.
• Rework into a non-matching product because "it was only a small amount".
• Old label rolls used up after an artwork change rather than destroyed.