Allergen Incidents and Recalls: How to Manage a Food Safety Crisis

A customer emails at 9pm on a Friday night. They've had an allergic reaction after eating your product, and they believe the ingredient label is wrong. Within minutes, you're dealing with a potential hospital visit, a social media post gaining traction, and a legal liability that could shut your business down. This is not a hypothetical — allergen-related incidents are one of the most serious crises a food business can face, and the speed of your response in the first 24 hours will define the outcome.

The scale of the problem is significant. In the UK, the Food Standards Agency investigates hundreds of allergen-related incidents annually, and product recalls linked to undeclared allergens are among the most common food safety actions taken. In the US, the FDA's recall database consistently shows allergens as a leading cause of Class I recalls — the most serious category, reserved for products where there is a reasonable probability of serious health consequences. For Shopify food merchants, the risks are compounded by the fact that your products can reach customers across multiple regions, making traceability and response even more complex.

This post will walk you through exactly what to do when an allergen incident or recall occurs. You'll learn how to build a crisis response framework, communicate with regulators and customers, manage a product recall, and — critically — prevent the same situation from happening again.

Understanding What Counts as an Allergen Incident

Not every customer complaint is a crisis, but every allergen-related complaint must be treated as one until you can confirm otherwise. An allergen incident broadly refers to any situation where a product may have caused harm, or where a labelling error could lead to harm — whether or not a reaction has actually occurred. This includes incorrect or missing ingredient declarations, cross-contamination during production, a supplier sending the wrong ingredient, or a customer reporting an adverse reaction after consuming your product.

Under UK law, specifically the Food Safety Act 1990 and the Food Information to Consumers Regulation (EU FIC, retained post-Brexit), food businesses are legally required to provide accurate allergen information for the 14 major allergens: celery, cereals containing gluten, crustaceans, eggs, fish, lupin, milk, molluscs, mustard, tree nuts, peanuts, sesame, soya, and sulphur dioxide. In the US, the Food Allergen Labeling and Consumer Protection Act (FALCPA) and its 2023 update adding sesame as a ninth major allergen create similar obligations. A failure to meet these requirements is not just a regulatory breach — it is a direct risk to human life.

The moment you receive a complaint that mentions an allergic reaction, activate your incident response procedure immediately. Document the complaint in full, including the customer's name, contact details, the product purchased, the batch or lot number, and the nature of the reaction described. Do not wait to see if the situation escalates before beginning your investigation — by then, more product may already have reached more customers.

Building Your Crisis Response Framework Before a Crisis Happens

The businesses that handle allergen incidents well are the ones that prepared before anything went wrong. A crisis response framework is a documented set of procedures that your team can follow under pressure, without needing to make decisions from scratch. At minimum, this should include a named incident lead, a communication protocol, a supplier contact list, and a recall procedure. If you're a solo operator, these documents still matter — they'll keep you focused when you're stressed and under scrutiny.

Your incident lead should be the person with the most knowledge of your production process and supply chain. They're responsible for gathering facts, liaising with regulators, and authorising any public communications. Critically, they should not be the same person managing your social media or customer service during the incident — emotional pressure and public-facing messaging are a dangerous combination. Assign roles clearly and make sure every team member knows what is expected of them.

Review your framework at least twice a year, and every time you introduce a new product or change a supplier. A procedure written for your original five-product range becomes inadequate the moment you scale to twenty SKUs with three new contract manufacturers. Keep supplier contact details, product specification sheets, and batch traceability records somewhere that can be accessed quickly — not buried in an email chain from eighteen months ago.

How to Communicate with Customers During an Allergen Incident

Communication is where many food businesses make costly mistakes. The instinct to minimise, delay, or stay silent while you "gather more information" is understandable, but it almost always makes the situation worse. Customers who feel ignored escalate — to social media, to regulators, and occasionally to journalists. Your first response to an allergen complaint should be prompt, empathetic, and honest about what you know and don't yet know.

If a customer reports a reaction, respond within two hours if at all possible. Acknowledge the seriousness of their experience, ask for the specific product details and batch information, and advise them to seek medical attention if they haven't already. Do not speculate about cause or liability in this first contact — simply gather information and confirm that you are investigating urgently. If the product is still available for sale online, pause the listing immediately while you assess the risk.

For wider customer communications — for example, if you've identified a labelling error that affects multiple batches already sold — transparency is your best asset. A clear, factual message explaining what the issue is, which products are affected, and what customers should do is far more credible than vague reassurances. Consider proactive email outreach to recent purchasers of the affected product. The short-term cost of this honesty is far smaller than the long-term cost of a covered-up incident becoming public.

Working with Regulators: FSA, Local Authorities, and the FDA

In the UK, food business operators have a legal duty to notify the Food Standards Agency (FSA) and their local authority environmental health team if they have reason to believe a product they've placed on the market poses a risk to human health. This is not optional — failure to notify can result in criminal prosecution. The FSA operates a rapid alert system, and in serious cases, they will work with you on a coordinated public recall. Contact your local authority first, as they are your primary point of enforcement contact.

In the US, FDA-regulated food businesses must report serious adverse events linked to food products, and the FDA has the authority to mandate recalls for products that present a Class I risk. In practice, most recalls are voluntary and initiated by the business itself — but the FDA expects to be notified promptly, and their recall database is public. Being proactive with regulators consistently results in better outcomes than being reactive. Regulators are not primarily looking to punish businesses that make honest mistakes; they are looking to protect public safety and will work constructively with businesses that demonstrate the same priority.

Document every interaction with regulators meticulously. Keep records of when you called, who you spoke to, what was agreed, and what actions you took as a result. This paper trail protects you legally and demonstrates due diligence — a critical factor if your case ever reaches a court or tribunal.

Executing a Product Recall: Practical Steps for Shopify Merchants

A product recall involves removing a product from sale and, where possible, recovering product already in customers' hands. For Shopify merchants, this starts by immediately unpublishing the affected product listings and disabling any active discount codes or automations that might allow purchases to continue. If you fulfil through a third-party logistics provider, notify them in writing immediately and get written confirmation that picking of the affected SKU has stopped.

Identify every order containing the recalled product using your order management data. Export a full order list filtered by product and date range — this is your recall population. Contact every customer on that list directly, explaining what the issue is, requesting they stop consuming the product, and providing clear instructions for return or disposal. Offer a refund or replacement without making customers jump through hoops; friction in the recall process reduces participation and increases your liability exposure.

Tools like Allergen Matrix can significantly reduce your exposure before a recall ever becomes necessary, by helping you maintain accurate, up-to-date allergen declarations across your entire product catalogue. But even with the best prevention systems in place, knowing how to execute a recall efficiently is essential operational knowledge for any food business selling online.

Preventing the Next Incident: Supplier Controls and Label Audits

The majority of allergen incidents trace back to two root causes: supplier changes and labelling errors. A supplier quietly reformulates an ingredient without notifying you. A new team member copies last month's label template without checking the latest specification. A printer produces a batch with the wrong panel. Each of these failures is preventable with the right controls in place.

Establish a supplier change notification policy — a written agreement with every ingredient supplier that they must inform you before changing any ingredient formulation, including processing aids and carriers. Many allergen cross-contamination incidents occur because a supplier changed their own manufacturing site or introduced shared equipment, affecting the allergen status of an ingredient without changing its name or appearance. Annual supplier audits, or at minimum annual allergen questionnaires, are standard practice for any food business serious about compliance.

Conduct a label audit every time a product is reformulated, every time a supplier changes, and at least annually for all products. Compare your live website listings, your physical packaging, and your current product specification sheets against each other — discrepancies between these three sources are a red flag. Build a sign-off process that requires a second person to verify allergen information before any label change goes live.

Conclusion

Allergen incidents and recalls are high-stakes situations that test every aspect of your food business — your processes, your communication, your supplier relationships, and your regulatory knowledge. The businesses that emerge from these crises with their reputation intact are the ones that prepared in advance, responded quickly and transparently, and treated customer safety as the non-negotiable priority it is. A crisis framework, clear communication protocols, and robust supplier controls are not luxuries for large manufacturers — they are baseline requirements for any food business operating at scale online.

The key takeaways are simple: know your legal obligations in your market, build your response procedures before you need them, communicate honestly with customers and regulators, and invest in the systems that prevent incidents from occurring in the first place. Start with your allergen declarations — they're the foundation everything else is built on.

Try Allergen Matrix free at saltai.app — no credit card required.