Allergen Management & Natasha's Law: UK Compliance Guide
Master allergen management and Natasha's Law compliance. From the 14 major allergens to labelling rules and cross-contamination prevention - your complete UK guide.
Photo: Photo by Poul Hoang on UnsplashAllergen management sits at the heart of safe food service in the UK. Get it right and you protect your customers, your team, and your business. Get it wrong and the consequences - legal, financial, and human - can be devastating. Since Natasha's Law came into force in October 2021, the regulatory bar has been raised significantly. Whether you run a busy city-centre restaurant, a local pub, a hotel kitchen, or a small cafe, this guide gives you everything you need to build a robust allergen management system that keeps you compliant and your customers safe.
What Is Allergen Management?
Allergen management is the systematic process of identifying, controlling, and communicating allergen risks throughout your food business. It covers everything from the ingredients you order and store, to how you prepare and serve food, to the information you provide to customers.
Effective allergen management is not simply a case of printing allergen information on a menu. It is a whole-business discipline that integrates supplier controls, kitchen protocols, staff training, and customer communication into one coherent framework. In the UK, it is underpinned by the Food Information Regulations 2014, the Food Safety Act 1990, and - since October 2021 - Natasha's Law.
Around 2 million people in the UK are living with a diagnosed food allergy, and a further 600,000 have coeliac disease. For these individuals, encountering an undeclared allergen is not an inconvenience - it can be life-threatening. That is the context in which every hospitality business must operate.
Natasha's Law: What Changed and Why It Matters
Natasha's Law - formally known as the Food Information (Amendment) (England) Regulations 2019 - was introduced following the death of Natasha Ednan-Laperouse in 2016. Natasha suffered a fatal allergic reaction after eating a baguette that contained sesame, which was not declared on its packaging. She was 15 years old.
The law came into effect on 1 October 2021 and fundamentally changed the labelling requirements for prepacked for direct sale (PPDS) food. PPDS food is food that is packaged on the same premises from which it is sold - think sandwiches made and wrapped in a cafe, or ready-to-eat items portioned and sealed in a deli.
Before Natasha's Law, businesses could choose to provide allergen information for PPDS food verbally or via a sign pointing customers to ask staff. Under the new rules, every PPDS item must carry a label showing:
The name of the food
A full ingredients list
All 14 major allergens emphasised within that ingredients list (e.g. in bold or a different colour)
This requirement applies across England, Scotland, Wales, and Northern Ireland, though Northern Ireland has its own aligned legislation. Enforcement sits with local authority environmental health officers, and non-compliance can result in improvement notices, fines, or prosecution.
The 14 Major Allergens UK Businesses Must Declare
Under UK food law, there are 14 allergens that must always be declared when present as an ingredient in a food product. These are:
Allergen | Common Sources in Hospitality | Watch Out For |
|---|---|---|
Celery | Soups, stocks, sauces, salads | Celery salt, celeriac, celery seeds |
Cereals containing gluten | Bread, pasta, batter, sauces, beer | Wheat, rye, barley, oats (unless certified gluten-free) |
Crustaceans | Seafood dishes, paella, bisques | Prawns, crab, lobster, crayfish |
Eggs | Baked goods, mayonnaise, pasta, coatings | Glazes, meringue, egg wash |
Fish | Worcestershire sauce, Caesar dressing, fish stock | Fish sauce, anchovies in unexpected dishes |
Lupin | Flour blends, gluten-free products, pastries | Often overlooked; related to peanut allergy |
Milk | Butter, cream, cheese, sauces, baked goods | Lactose, casein, whey, ghee |
Molluscs | Seafood platters, chowders, paella | Squid, mussels, oysters, scallops, clams |
Mustard | Dressings, marinades, sauces, curries | Mustard seeds, powder, leaves, oil |
Nuts (tree nuts) | Desserts, pesto, salads, garnishes | Almonds, cashews, walnuts, pistachios and more |
Peanuts | Satay, confectionery, baked goods, oils | Groundnut oil, monkey nuts, mixed nut products |
Sesame | Bread, burger buns, hummus, Asian dishes | Tahini, sesame oil, sesame seeds as garnish |
Soya | Asian cuisine, meat alternatives, marinades | Soy sauce, tofu, miso, edamame |
Sulphur dioxide and sulphites | Wine, dried fruit, vinegar, processed meats | Must be declared if >10mg/kg or 10mg/litre |
It is important to remember that the obligation to declare these allergens applies even when they appear in compound ingredients. If a sauce contains a small amount of mustard, you still need to declare mustard as an allergen - there is no de minimis threshold for most of the 14.
Allergen Labelling Requirements: PPDS, Pre-packed, and Loose Foods
One area that still causes confusion is understanding which labelling rules apply to which type of food. UK food law distinguishes between three categories:
Pre-packed food - Packaged before sale, away from the point of sale (e.g. a factory-produced ready meal). Must carry full allergen labelling, emphasised in the ingredients list.
Prepacked for direct sale (PPDS) - Packaged on the same premises where it is sold (e.g. a wrapped sandwich made in your cafe). Must carry the food name, full ingredients list, and emphasised allergens under Natasha's Law.
Loose or non-prepacked food - Food sold without packaging, or packaged at the customer's request (e.g. food served at a table or a buffet). Allergen information must still be provided, but it can be communicated verbally, via a menu, or written on a chalkboard - as long as customers are clearly directed to it.
Even for loose food, if you choose to provide written allergen information, it must be accurate and up to date. Many businesses opt for written menus or allergen matrices rather than relying purely on verbal communication - and from a risk management perspective, that is best practice.
5 Practical Ways to Manage Food Allergens in Your Business
Robust allergen management does not happen by accident. It requires deliberate systems and consistent practices across every area of your operation. Here are five core approaches every hospitality business should implement:
Create and maintain an allergen matrix. Document every dish on your menu and identify which of the 14 allergens are present in each one. This should be kept as a live document that is updated whenever recipes or suppliers change. Share it with all kitchen and front-of-house staff.
Control your supply chain. Ensure your suppliers provide accurate allergen information for all ingredients they supply. Request ingredient specifications and technical data sheets. Be vigilant when suppliers substitute ingredients - even a small change can introduce a new allergen.
Implement kitchen segregation and dedicated equipment. Use colour-coded boards, utensils, and preparation areas for allergen-free food preparation. Where possible, designate specific equipment (e.g. a separate fryer) for allergen-free cooking. Label storage containers clearly.
Establish clear communication protocols. When a customer declares an allergy, there must be a structured process for passing that information from front-of-house to the kitchen and back to the customer. This should never rely on memory alone - written tickets, verbal confirmation, and a designated team member to sign off allergen-safe dishes are all important safeguards.
Train all staff regularly. Allergen awareness is not just a concern for chefs. Front-of-house staff, bar staff, and anyone involved in food handling needs to understand the 14 allergens, your specific menu, and what to do when a customer reports an allergy. Training should be documented and refreshed at least annually - or whenever menus change significantly.
Cross-Contamination: The Hidden Risk
Accurate allergen labelling is only part of the picture. Even if your allergen information is perfect on paper, cross-contamination during food preparation can still put allergic customers at serious risk. Cross-contamination occurs when an allergen is unintentionally transferred from one food to another - through shared equipment, surfaces, hands, or utensils.
Common sources of cross-contamination in hospitality kitchens include:
Shared cooking oil in deep-fat fryers (particularly for gluten and fish allergens)
Flour dust in the air during baking or bread preparation
Using the same cutting boards, knives, or tongs without thorough cleaning
Plating allergen-free dishes on surfaces where allergen-containing food has been prepared
Garnishes added incorrectly at the pass (e.g. sesame seeds, nut crumbles)
Staff not washing hands after handling allergen-containing ingredients
Addressing cross-contamination requires both physical controls (equipment, layout) and procedural controls (cleaning routines, order of service, staff behaviour). Your HACCP plan should specifically identify allergen cross-contamination as a hazard and document the control measures you have in place.
A practical tip: consider whether your kitchen can realistically produce a dish that is genuinely free of a given allergen, given your current setup. If you cannot safely guarantee an allergen-free preparation, it is far better to be honest with the customer than to attempt it and cause harm. The Food Standards Agency (FSA) recommends a transparent approach - telling customers what you can and cannot safely accommodate.
What Is the 3-Day Rule for Allergens?
The 3-day rule for allergens is a concept that applies specifically to prepacked for direct sale (PPDS) food. It relates to how allergen information must be maintained when recipes or ingredients change.
In practice, the rule recognises that PPDS products may already be in the supply chain or on sale when a recipe change is made. The principle is that allergen labelling must reflect the current recipe - you cannot continue selling products with outdated labels once a change has been made that affects allergen content. The 3-day reference is often cited in the context of updating allergen information quickly after any ingredient change, rather than allowing a grace period of continued sale.
The key implication for your business is this: any time you change a recipe, substitute an ingredient, or switch a supplier, your allergen records must be updated immediately and any pre-labelled stock must be reviewed. Do not wait. Outdated allergen information, even if unintentional, can have fatal consequences and leaves you legally exposed.
Building an Allergen Management System
A sound allergen management system does not need to be complex, but it does need to be documented, maintained, and embedded in your daily operations. Here is what a solid system looks like in practice:
Allergen policy - A written statement outlining your business's commitment to allergen safety, the responsibilities of each role, and the processes in place.
Allergen matrix or register - A comprehensive document listing every product or dish and its allergen content, kept up to date with every menu change.
Supplier management process - A system for obtaining, storing, and reviewing ingredient specifications from all suppliers.
Kitchen procedures - Documented HACCP controls covering allergen segregation, cleaning, and preparation protocols.
Customer communication process - Clear, consistent procedures for handling allergen queries, including what front-of-house staff should say and do when a customer declares an allergy.
Training records - Evidence that all food handlers and relevant staff have received allergen training, including the date and content of training.
Review schedule - A regular review (at least annually, or after any significant menu change) to ensure all elements of the system remain accurate and effective.
Common Mistakes and How to Avoid Them
Even well-intentioned businesses make allergen management errors. Here are the most common pitfalls and how to sidestep them:
Using may contain warnings as a blanket disclaimer. Precautionary allergen labelling (PAL) - such as 'may contain nuts' - is not a substitute for accurate allergen management. It should only be used where there is a genuine, assessed risk of cross-contamination that cannot be controlled. Overuse of PAL can mislead customers and erode trust.
Failing to update allergen records after recipe changes. This is one of the most common causes of allergen incidents. Establish a clear internal process so that any change to a recipe triggers an immediate allergen record update.
Assuming staff already know. Allergen knowledge varies enormously among hospitality workers. Never assume - always train, and always document that training.
Overlooking drinks and garnishes. Alcoholic drinks (especially those containing sulphites), cocktail garnishes, and condiments are frequently missed in allergen audits. Include them in your allergen matrix.
Not verifying PPDS labels are accurate. If you produce PPDS food, conduct regular spot-checks to ensure labels are current, legible, and correctly matched to the product.
Staying Ahead: Allergen Management as a Competitive Advantage
Beyond compliance, excellent allergen management is increasingly a point of competitive differentiation. Customers with allergies and intolerances are loyal to businesses they trust. When you handle allergen queries with confidence, transparency, and genuine care, you build a reputation that drives repeat business and positive word of mouth.
Consider going beyond the minimum requirements: offer a clear, easy-to-navigate allergen menu on your website and in-venue, train your team to have informed and empathetic conversations with allergic customers, and regularly review your processes to look for opportunities to improve. The FSA's allergen guidance is updated periodically and is a valuable free resource.
Allergen management is ultimately about people. Every system, label, training session, and kitchen protocol exists to protect the person sitting at your table. When that responsibility is taken seriously at every level of a hospitality business, compliance becomes a natural by-product of genuinely good practice.
Frequently asked questions
What is allergen management?
Allergen management is the systematic process of identifying, controlling, and communicating allergen risks across a food business. It encompasses supplier controls, ingredient record-keeping, kitchen preparation protocols, allergen labelling, staff training, and customer communication - all working together to prevent allergic reactions and ensure legal compliance under UK food law.
What are 5 ways to manage food allergies?
The five key ways to manage food allergies in hospitality are: maintaining an accurate allergen matrix for every dish; controlling your supply chain and verifying ingredient specifications; implementing kitchen segregation and dedicated allergen-free equipment; establishing clear communication protocols between front-of-house and kitchen when a customer declares an allergy; and delivering regular, documented allergen training to all staff.
What are the 14 main allergens?
The 14 major allergens that must be declared under UK food law are: celery, cereals containing gluten (wheat, rye, barley, oats), crustaceans, eggs, fish, lupin, milk, molluscs, mustard, tree nuts (such as almonds and walnuts), peanuts, sesame, soya, and sulphur dioxide and sulphites. All must be emphasised in the ingredients list of any labelled food product.
What is the 3 day rule for allergens?
The 3-day rule for allergens relates to prepacked for direct sale (PPDS) food and the requirement to update allergen information promptly after any recipe or ingredient change. The principle is that allergen labels must always reflect the current recipe - meaning pre-labelled stock must be reviewed and updated immediately after any change, rather than sold for a grace period with outdated information.
