Log inStart Free Trial
Allergen Cross-Contact Prevention

Allergen Risk Assessment: How to Identify & Control Cross-Contact

Allergen Risk Assessment: How to Identify & Control Cross-Contact

Quick answer

An allergen risk assessment is the structured process of identifying where allergens enter your food, how cross-contact could occur, and what controls prevent it from happening. It is the foundation of your allergen management system. Without it, your controls are guesswork. With it, you have a documented, defensible system that demonstrates due diligence to EHOs, customers, and in the event of an incident, to a court. An allergen risk assessment is not a one-off exercise. It must be reviewed whenever you change your menu, suppliers, equipment, layout, or procedures. This article walks through the process step by step.

  • An allergen risk assessment maps every point where allergens enter, transfer, and reach customers
  • Start by building a complete allergen register from supplier specifications, not assumptions
  • Walk through your entire operation to identify specific cross-contact hazards at each stage
Try the free Allergen Matrix BuilderDownload allergen matrix template

Key takeaways

An allergen risk assessment maps every point where allergens enter, transfer, and reach customers
Start by building a complete allergen register from supplier specifications, not assumptions
Walk through your entire operation to identify specific cross-contact hazards at each stage
Document controls, responsibilities, monitoring, and corrective actions for each hazard
Review the assessment whenever menus, suppliers, equipment, or procedures change

Step 1: Map Your Allergen Inputs

Start by identifying every point where allergens enter your business. This means every ingredient, seasoning, sauce, oil, garnish, and processing aid you use. For each one, identify which of the 14 declarable allergens it contains. Request full ingredient specifications from all suppliers. Do not rely on product names or assumptions. A "vegetable oil blend" might contain soybean or groundnut oil. A "seasoning mix" might contain celery seed or wheat-derived maltodextrin. Build a complete allergen register: a list of every ingredient with its allergen content. Cross-reference this against your recipe database to create a product-level allergen profile. This is the data that feeds your allergen matrix. If you cannot confirm the allergen content of an ingredient, treat it as if it contains every allergen it might plausibly contain until you can get confirmation. Operating with uncertainty is more dangerous than being cautious.
Allergen Cross-Contact Prevention

Cross-contact controls on the daily routine

Paddl turns your allergen procedures into scheduled checks with a signature, logs any allergen incident with who, what and the follow-up, and keeps the matrix staff answer from up to date. Paddl is £69 per location per month with every feature and a 30-day free trial.

Start free trialAllergen management software
Try the free Allergen Matrix BuilderCompare the best allergen softwareDownload the allergen review recordFoodDocs vs Paddl for allergen records

Step 2: Identify Cross-Contact Hazards

Walk through your entire operation from goods receiving to service and identify every point where an allergen in one product could transfer to another. This includes storage (shared shelving, leaking containers, flour dust), preparation (shared surfaces, equipment, utensils, hands), cooking (shared fryers, grills, ovens, pans), assembly and plating (shared garnish stations, sauce bottles, serving utensils), and service (shared display cases, tongs, serving spoons). For each hazard, note the specific allergens involved and the mechanism of transfer. Be specific. "Cross-contact from fryer" is less useful than "Gluten and fish allergens from battered fish transfer to chips via shared fryer oil and basket." The more specific your hazard identification, the more targeted your controls can be.

Step 3: Evaluate Risk and Define Controls

For each cross-contact hazard, evaluate the likelihood of it occurring and the severity of the consequence. With allergens, the severity is always potentially high because even trace amounts can trigger anaphylaxis in sensitive individuals. So the focus is on likelihood: how probable is it that cross-contact will occur given your current operations? High-likelihood hazards (daily shared fryer use, open flour storage near allergen-free prep) need robust, permanent controls: dedicated equipment, physical separation, sealed storage. Medium-likelihood hazards (occasional shared surface use with cleaning between) need documented controls and regular verification. Low-likelihood hazards (rare ingredients stored in a separate area) may need only standard procedures and monitoring. For each hazard, document the control measure, who is responsible, how it is monitored, and what corrective action is taken if the control fails. This structure mirrors a HACCP approach because allergen cross-contact is fundamentally a hazard management exercise.

Maintaining and Reviewing Your Assessment

An allergen risk assessment is a living document. Review it at least annually, but also whenever you change your menu (new dishes may introduce new allergens or cross-contact routes), change suppliers (new ingredient formulations may alter allergen profiles), change equipment or kitchen layout (new cross-contact risks or eliminated ones), have an allergen incident or near-miss (the assessment clearly missed something), or receive feedback from an EHO inspection. Keep a version history showing the date of each review, what changed, and who approved the updated version. Store previous versions so you can demonstrate the evolution of your controls over time. During an EHO inspection, being able to show a current, dated, and recently reviewed allergen risk assessment is one of the strongest indicators of good allergen management. An undated, dusty document suggests it was created to tick a box and never revisited.

What to do next

Build your allergen ingredient register

Request full ingredient specifications from every supplier. Create a master list of all ingredients with their allergen content. Flag any gaps where supplier data is missing.

Conduct a physical walk-through

Walk through your premises from goods-in to service, noting every point where allergens could transfer between products. Photograph hazard points for your records.

Document controls for every identified hazard

For each cross-contact hazard, write down the control measure, responsible person, monitoring method, and corrective action. Compile into a single allergen risk assessment document.

Common mistakes to avoid

Mistake
Creating an allergen risk assessment once and never updating it
Instead
Review whenever menus, suppliers, or procedures change, and at least annually. Date and version your document to show it is actively maintained.
Mistake
Relying on product labels rather than full supplier specifications
Instead
Product labels show allergens in the product itself but may not disclose cross-contact risks during manufacturing. Request full specifications that include "may contain" information.

Frequently asked questions

Is an allergen risk assessment a legal requirement?

The Food Information Regulations do not specifically mandate a written allergen risk assessment. However, you must provide accurate allergen information, and a risk assessment is the standard method for ensuring accuracy. EHOs expect to see one and its absence suggests inadequate controls.

Who should conduct the allergen risk assessment?

The person with the best knowledge of your recipes, kitchen operations, and suppliers. In most businesses, this is the head chef or kitchen manager, ideally with support from someone trained in allergen management or food safety.

How detailed does the risk assessment need to be?

Detailed enough to be useful. Each hazard should be specific (not generic), each control should be actionable (not vague), and each entry should include who is responsible and how compliance is checked. A one-page tick-box form is rarely sufficient for a business with a varied menu.

Should my allergen risk assessment be separate from my HACCP plan?

It can be integrated into your HACCP plan (allergens are a chemical hazard) or maintained as a separate document. Either approach is acceptable as long as allergen hazards are clearly identified and controlled. Many businesses find a separate document easier to manage and update.

Related articles

Allergen Cross-Contact Prevention

Allergen Separation in the Kitchen: Zones, Equipment & Workflow

Allergen Cross-Contact Prevention

Cleaning to Remove Allergens: What Actually Works

Allergen Cross-Contact Prevention

Shared Equipment & Allergen Risk: Fryers, Grills & Prep Surfaces

Allergen Cross-Contact Prevention

'May Contain' Warnings: When to Use Them & Legal Position

Allergen Tools & Resources

What EHO Inspectors Check for Allergen Compliance

Keep exploring

Related resources

How-To Guides

How to Manage Allergens in a Commercial KitchenHow to Set Up Allergen Procedures

Glossary

Cross-Contamination PreventionThe 14 Allergens (UK Law)

Expert Answers

Do I Need an Allergen Matrix?

UK Regulations

Food Information Regulations 2014

Free Tools

Allergen Matrix Builder

Paddl Features

Allergen Management

In-Depth Guides

Allergens as HACCP Hazards: Managing the 14 UK AllergensCCP: Allergen Controls - Segregation & Labelling as CCPs

Need expert help with Allergen Management?

Our hospitality consultants can review your compliance, spot the gaps an EHO will flag, and help you fix them before your next inspection.

Talk to a consultant

Manage Allergen Management digitally

Paddl helps UK hospitality businesses automate allergen management compliance. AI-generated plans, digital records, and inspection-ready documentation.

Start free trialAllergen management software

Choose your cookies

Strictly necessary cookies are always on because the site cannot work without them. Everything else is your choice, and you can change it whenever you like.