Guide

Food Allergen Control: FALCPA, the Big 9, and the Discipline That Stops a Recall

Undeclared allergens are the single largest cause of Class I food recalls in the United States — consistently above 40% of all Class I events in FDA enforcement reports. The Food Allergen Labeling and Consumer Protection Act (FALCPA, 2004) defined the original Big 8; the FASTER Act (2021, effective 1 January 2023) added sesame as the ninth major allergen. On top of label compliance sits a manufacturing discipline that almost every Class I undeclared-allergen recall traces back to: scheduling, cleaning validation, line clearance, changeover verification, supplier control and rework discipline. This guide is the operating manual for getting both right.

Start free trial Free trial, no credit card, onboard in days, not months.

The Big 9 and what counts as a 'major food allergen'

Under FALCPA as amended by the FASTER Act the nine major food allergens are: milk, eggs, fish, Crustacean shellfish, tree nuts, peanuts, wheat, soybeans, and sesame. The label must declare each major food allergen present using its common name, either in a 'Contains:' statement immediately after or adjacent to the ingredient list, or parenthetically within the ingredient list (e.g., 'lecithin (soy)'). Highly refined oils derived from a major allergen are exempt from declaration under FALCPA. Cross-contact (unintentional incorporation) is not declared on the ingredient list — it's controlled at the plant or, where residual risk remains after controls, communicated via Precautionary Allergen Labelling (PAL).

Precautionary Allergen Labelling — 'may contain' is not a free pass

Precautionary Allergen Labelling ('may contain peanuts', 'produced in a facility that processes wheat') is voluntary under FALCPA — but FDA, Codex (CXG 76-2017) and most GFSI schemes (BRCGS 5.3, SQF 11.2, FSSC 22000) require that any PAL statement be the result of a documented risk assessment, not a blanket disclaimer. A 'may contain' statement that exists because cleaning is unreliable is not a defence — it's evidence that the allergen programme is broken. The 2024 FDA draft guidance on cross-contact reinforces this. Modern practice (VITAL 3.0 from the Allergen Bureau) sets reference doses per allergen so PAL is triggered only when post-controls residual exposure exceeds the reference dose.

Scheduling, line clearance and changeover verification

The first control against cross-contact is scheduling — running allergen-free product before allergen-containing, and within allergens running from low-to-high risk. The second control is line clearance — a documented changeover with cleaning to a defined standard. The third control is changeover verification — visual inspection plus surface ATP plus, for high-risk transitions, allergen-specific lateral flow testing (LFT) of swabs or first-product rinse. FDA 483s in this area almost always cite missing changeover verification records or LFT thresholds without scientific basis.

Cleaning validation: not the same as cleaning verification

Cleaning validation establishes (with science) that a documented cleaning procedure reliably removes a target allergen below a defined threshold under worst-case conditions; cleaning verification confirms (on each event) that the validated procedure was executed. Validation runs at first introduction of a new allergen, new equipment, new chemistry, or major procedure change. Verification runs on every changeover. Auditors will pull both — and the most common gap is a verification record without an underlying validation file, or a validation file from 2018 that no longer matches the equipment.

Supplier control and rework: the two leaks every recall investigation finds

Supplier control: an undeclared allergen in an incoming ingredient (the supplier changed a co-line, the spec didn't catch it) defeats every downstream control. The approved supplier programme must include the supplier's allergen profile per material, change-control on supplier process moves, and certificate-of-analysis evidence for sensitive materials. Rework: putting allergen-containing finished product back into an allergen-free SKU is the single most common root cause in undeclared-allergen recalls. Rework discipline must restrict reincorporation to the same SKU with the same allergen profile, or to a more-inclusive SKU.

A 60-day allergen-programme readiness path

Days 1–10: portfolio mapping — Big 9 profile per SKU, label declarations audited, PAL inventory reviewed against actual cross-contact risk. Days 11–25: cleaning validation file refresh per allergen pair and equipment; verification records and LFT thresholds documented. Days 26–40: scheduling rules formalised; changeover checklists deployed; line-clearance training refreshed. Days 41–50: supplier allergen-profile refresh and change-control test; rework rule audit. Days 51–60: mock undeclared-allergen recall — pull one finished-product lot through to consumer-facing notification inside the recall plan timeline.

Standards covered in this guide

Each standard, retailer code or assurance scheme referenced above has its own deep-dive page with scope, audit detail and common pitfalls.

Where this lives in V5 Ultimate

The clauses above aren't theoretical — every one maps to a shipped module and an industry profile. Jump to the parts of the product that turn this guide into evidence on a Monday morning.

Modules that do the work

Allergen QMS

Big 9 declaration and PAL on the BOM.

Cleaning validation control

Validation files tied to equipment and allergen pair.

Changeover CAPA

Verification failures route to CAPA automatically.

Supplier allergen control

Allergen profile and change-control on the supplier file.

Industries this hits hardest

Food & beverage Bakery & confectionery Ingredients & dry mixes

Frequently asked

When did sesame become a major allergen?

The FASTER Act of 2021 added sesame as the ninth major food allergen under FALCPA, effective 1 January 2023. From that date sesame must be declared in the same way as the original Big 8.

Do I have to use a 'Contains:' statement?

No — declaration via parenthetical names inside the ingredient list (e.g. 'lecithin (soy)') satisfies FALCPA on its own. The 'Contains:' statement is an alternative many manufacturers use because it's clearer to consumers. If you use both, they must be consistent.

Are highly refined oils exempt?

Highly refined oils derived from a major food allergen are exempt from declaration under FALCPA. Cold-pressed, expeller-pressed and extruded oils are not exempt. The exemption is narrow and frequently misread — confirm the refining process before relying on it.

Is precautionary allergen labelling required for cross-contact risk?

PAL is voluntary under FALCPA, but if you use it, FDA, Codex and GFSI schemes expect it to result from a documented quantitative risk assessment (VITAL 3.0 is the recognised method). Blanket 'may contain' statements without an assessment are increasingly cited as poor practice and can themselves trigger labelling concerns.

See it on your shop floor.

Free trial, no credit card, onboard in days, not months.

Start free trial See pricing →Browse all resources →