Allergen Segregation Rule

An Allergen Segregation Rule is an MES-governed constraint set that prevents allergen cross-contact by controlling where, when, and how allergen-bearing and allergen-free materials, WIP, and products may coexist or follow each other in the process. Configured at ISA‑95 Level 3, it encodes a compatibility matrix across products, materials, equipment states, rooms, and storage locations, and it gates execution by requiring cleaning verification, label checks, and specific scans before proceeding.

Under FSMA 21 CFR Part 117, allergen controls are preventive controls that must be implemented and verified, including to prevent cross-contact and ensure correct labeling. Dietary supplements under 21 CFR Part 111 must prevent mixups and maintain sanitation. The rule operationalizes these obligations into dispatching, weighing/dispense, line clearance, changeover, and verification steps with electronic records suitable for review and release.

Part 117 requires hazard analysis (including allergens) and implementation of preventive controls (21 CFR 117.135) with monitoring, corrective actions, verification, and records. Allergen controls in this framework include both physical segregation and labeling accuracy. The MES rule provides systematic, documentable execution controls that align with these subparts and their recordkeeping expectations. For dietary supplements, 21 CFR Part 111 demands the prevention of mixups and contamination through suitable design, sanitation, and control of equipment and operations—conditions that allergen segregation rules directly support.

• 21 CFR Part 117: Preventive controls for allergen cross-contact and labeling; monitoring and verification with records.
• 21 CFR Part 111: Sanitation, equipment, and operation controls to prevent mixups and contamination.
• Electronic records and signatures (21 CFR Part 11): Audit trails, system controls, and e-signature for overrides or critical verifications.
• GS1 master data elements: Standardized allergen attributes on SKUs and trade items to drive rule logic in MES/WMS.

"Allergen controls are a critical subset of preventive controls under FSMA; inadequate controls are a leading cause of Class I recalls."

An effective Allergen Segregation Rule begins with robust master data: each product, intermediate, and incoming lot carries structured allergen attributes (e.g., contains, may contain, dedicated-allergen class). Equipment and rooms maintain an allergen state (e.g., clean-verified, allergen-X dedicated, allergen-exposed-pending-clean). The rule evaluates compatibility at reservation, start, and release gates. It can block co-activity in the same room, on the same line, or in overlapping time windows unless prerequisite cleaning or validated temporal separation is completed.

Key configuration objects

• Compatibility matrix: Product/material allergen classes vs. equipment/room states and location zones.
• Prerequisite steps: Line clearance, sanitation method, swab verification result thresholds, label proofing.
• Scanning points: Material receipt, picking, dispense, charge, label check, WIP move, and release.
• Exceptions: Rework rules, partial-dedication, and scientifically justified temporal segregation with controls.
• Overrides: Controlled by e-signature, reason codes, and automatic creation of deviation/nonconformance records.

The rule primarily resides at ISA‑95 Level 3 within Production Operations Management, intersecting with Quality, Maintenance, and Inventory operations. Level 4 (ERP) holds commercial SKUs and allergen attributes; Level 3 (MES/WMS/LIMS) enforces execution gating and records; Level 2 may implement interlocks; Level 1/0 provide sensor/PLC signals that the MES may use as permissives.

To be effective, the rule must extend beyond production steps. WMS enforces location zoning, pallet compatibility, and pick-path restrictions so incompatible items never cohabit aisles, racks, or pick faces. LIMS provides allergen swab and rinse test results, serving as release conditions for equipment or room state changes. Labeling systems pull authoritative allergen declarations from master data and enforce line-side proofs. Maintenance/CMMS must capture and schedule validated cleaning methods; completion signals and verification data change equipment state in MES.

• Inbound: Receipt scans classify lots by allergen attribute; incompatible dock/rack zones are blocked.
• Dispense: BOH/WIP selection filtered to compatible rooms; two-person verification for label/ingredient identity.
• Production: Start is blocked until prerequisite cleaning, line clearance, and test results meet thresholds.
• Packaging: Label content verification is a release criterion to prevent mislabeling.
• Outbound: Finished goods with allergen attributes are routed to matching storage/shipping zones.

The rule must specify what constitutes an effective allergen changeover: validated cleaning method (dry/wet, CIP), parameters (time, temp, chemistry), inspection criteria, and analytical verification (e.g., ELISA swabs). The MES tracks pre-clean state (exposed), method execution, and verification results. Only when verification passes, the equipment/room state transitions to clean-verified or allergen-free. If a method is validated as ineffective for certain matrices (e.g., nut dust in porous belts), the compatibility matrix forces dedication or escalated cleaning.

Because allergen controls are preventive controls with release impact, electronic records must be attributable, legible, contemporaneous, original, and accurate. The rule should generate automatic, time-stamped audit trails for holds, scans, cleaning completions, swab results, label checks, and overrides. Critical verifications (e.g., line clearance, override of a block) should require Part 11-compliant e-signatures with dual signers where risk-justified. MHRA data integrity guidance and GAMP 5 good practice support role-based access, segregation of duties, and validated workflows for reliable decision-making and defensible release.

• Override governance: reason codes, impact assessment prompts, deviation/QN auto-creation.
• Record linking: Each batch step links to associated scans, cleaning logs, and test certificates.
• Security: RBAC for configuration changes; change control and versioning of the rule logic.
• Reports: Exception reports for near-misses (blocked starts, failed swabs) to feed CAPA.

A strong rule is risk-based. Using HACCP/HARPC, identify where allergen cross-contact can occur (receiving, weighing, open transfers, air handling, rework, packaging). For each hazard point, assign preventive controls and decide if they are CCPs/PCs with monitoring frequency, corrective actions, and verification. The MES implements monitoring tasks, alarm thresholds (e.g., failed label scan), and automates corrective action prompts (e.g., re-clean and re-test) before allowing progression.

1. Map process flow and exposure points for allergens (including rework and dust migration).
2. Quantify severity and likelihood; consider vulnerable product forms (powders, particulates).
3. Define control measures and assign to the rule (zoning, equipment state, label checks).
4. Establish monitoring and verification (swabs, checks, frequency).
5. Validate cleaning and label control effectiveness; document scientific rationale.
6. Continuously improve via deviations, CAPA, and trending of blocks/near-misses.

At the core is a compatibility matrix that relates product allergen class to equipment/room state and location zoning. The matrix implements simple, explainable logic that auditors can follow, while being strict enough to prevent unsafe sequences. It also addresses rework, tooling, and minor ingredients that may introduce unexpected allergens.

• Uncontrolled rework: Reintroducing allergen-bearing rework into non-allergen batches without rule checks.
• Label miscontrol: Artwork/version mismatch or upstream data errors causing incorrect allergen statements.
• Temporal-only segregation without validation: Relying on scheduling alone absent scientific justification and monitoring.
• Equipment state drift: Manual cleans not recorded or verified; state not updated in MES, leading to unauthorized starts.
• WMS/MES misalignment: Zone codes not synchronized; putaway or pick exceptions bypass controls.
• Inadequate override governance: Single-operator overrides with no secondary review or Part 11 e-signature.

Auditors and FDA investigators will ask for the scientific basis of your rule (validation of cleaning, risk assessments), evidence of consistent execution (records, audit trails), and effectiveness (trend demonstrating low/declining near-misses and absence of cross-contact incidents).

V5 implements allergen segregation as a first-class constraint across MES, WMS, LIMS, QMS, and Maintenance. Master data carries GS1-aligned allergen attributes; scheduling and dispatch apply compatibility checks; WMS enforces zone controls; maintenance completes validated cleaning tasks; LIMS returns verification results; and QMS manages deviations and CAPA. All steps are recorded with Part 11-compliant audit trails and e-signatures where required, enabling timely, evidence-based release.