EU Allergen Regulation 1169/2011 Explained

EU Allergen Regulation 1169/2011 Explained

EU Regulation 1169/2011 on the provision of food information to consumers is the cornerstone of allergen labelling law across the European Union. If you sell food products into EU markets — whether you are based in the EU or exporting from outside — understanding this regulation is essential. It sets out not just what allergen information must be provided, but how it must be presented, where it must appear, and what exemptions exist.

Background and Scope

Regulation 1169/2011, often called the FIC Regulation (Food Information to Consumers), came into force on 13 December 2014 for most provisions. It replaced a patchwork of earlier EU food labelling directives and created a single, unified framework. Its primary aim is to ensure that consumers have clear, accurate, and consistent food information to make safe and informed choices.

The regulation applies to all food business operators (FBOs) in the EU supply chain — manufacturers, importers, distributors, retailers, and food service operators. It covers food sold pre-packed, non-prepacked (loose), and food sold at a distance (online).

The 14 Major Allergens Under EU Law

The FIC Regulation requires that 14 substances or groups of substances causing allergies or intolerances be declared whenever they are used as ingredients in a food product. These are:

1. Cereals containing gluten
2. Crustaceans
3. Eggs
4. Fish
5. Peanuts
6. Soybeans
7. Milk (including lactose)
8. Nuts (almonds, hazelnuts, walnuts, cashews, pecans, Brazil nuts, pistachios, macadamia nuts)
9. Celery
10. Mustard
11. Sesame seeds
12. Sulphur dioxide and sulphites at concentrations above 10 mg/kg or 10 mg/litre
13. Lupin
14. Molluscs

These must be emphasised within the ingredients list using a typeset that clearly distinguishes them from the rest of the list — typically bold font.

Pre-Packed Food Requirements

For pre-packed food, Regulation 1169/2011 requires a mandatory ingredients list with allergens emphasised. There is no option to omit allergen information or refer consumers elsewhere — it must appear on the label itself. The allergen information must be in a language easily understood by consumers in the countries where the food is marketed.

Minimum font size rules also apply: the mandatory particulars must appear in a font size with an x-height of at least 1.2mm (or 0.9mm for small packages where the largest surface area is less than 80 cm²).

Non-Prepacked Food (Food Service and Loose Sales)

For non-prepacked food — food sold loose in a deli, served in a restaurant, or prepared fresh — allergen information must still be provided, but Member States have flexibility in how this is done. In practice, most EU countries require allergen information to be available in writing (on menus, boards, or separate allergen sheets) and communicated verbally if requested.

Online food service operators selling non-prepacked food must provide allergen information before the purchase is concluded and at the point of delivery.

Distance Selling (Online)

Article 14 of Regulation 1169/2011 covers food sold by distance means — including online shops. Key rules:

• Mandatory food information must be available before the purchase is concluded
• The information must appear on the material supporting the distance selling or be provided through other appropriate means
• All mandatory information must be available at the moment of delivery

For Shopify merchants selling food into the EU, this means your product pages must display full allergen information before checkout. A "see packaging" note is not sufficient.

Country-Specific Implementations

While Regulation 1169/2011 is directly applicable EU law, Member States retain some discretion. For example:

• Germany has additional requirements for certain national traditional foods
• France requires labelling in French
• Ireland follows the regulation but also applies Natasha's Law-equivalent rules for PPDS food

Post-Brexit, Great Britain has its own version of the regulation (retained in UK domestic law) with some divergences — most notably Natasha's Law for PPDS food.

Precautionary Allergen Labelling

"May contain" or "produced in a facility that also handles" statements are not governed by Regulation 1169/2011 — they are voluntary. However, the EU Commission has published guidance encouraging businesses to use PAL only where a genuine risk of cross-contact exists, assessed through a proper allergen risk assessment. Overuse of PAL statements reduces their value to allergic consumers.

Practical Compliance for Online Food Businesses

If you sell food online into the EU market, here is what compliance looks like in practice:

• Every product page must list all ingredients with allergens clearly emphasised
• Allergen filters or search tools on your store are helpful but do not replace mandatory disclosure
• Your packaging must also comply — the online information does not replace the label
• If you add new products or change recipes, update both your storefront and your labels simultaneously

Allergen Matrix, our compliance app for Shopify food businesses, helps you maintain a single source of truth for your allergen data and surface it correctly across your product pages, making EU compliance straightforward to maintain at scale.

Enforcement and Penalties

Enforcement of Regulation 1169/2011 sits with national competent authorities in each EU Member State, and the consequences of non-compliance are serious. Authorities can issue improvement notices, require product recalls, impose fines, and in the most serious cases pursue criminal prosecutions. The severity of penalties varies by country — Germany and France in particular operate robust inspection regimes — but no EU market should be treated as leniently enforced. Food safety authorities routinely conduct both planned and reactive inspections of online food businesses, and a complaint from a single consumer can trigger a formal investigation.

For online sellers, the enforcement landscape has become more rigorous since EU market surveillance authorities began treating e-commerce food listings as subject to the same scrutiny as physical retail. Regulators can purchase products through your Shopify storefront, review the product page information at the point of sale, and inspect the physical label on arrival. If the information on your product page is absent, incomplete, or inconsistent with your packaging, that inconsistency alone can constitute a breach — even if no consumer has been harmed.

The reputational risk compounds the regulatory risk. Enforcement actions against food businesses are frequently made public, and a product recall linked to undisclosed allergens generates significant negative press coverage. For small and medium-sized food businesses building brand trust in competitive EU markets, the cost of a single compliance failure can far outweigh the investment required to get labelling right from the start. Building a robust, documented allergen management process is not merely a legal obligation — it is a core business risk management activity.

Managing Allergen Data Across a Growing Product Range

One of the most common practical challenges for food businesses is maintaining accurate allergen information as their product range grows. When you launch your first five products, managing allergen data manually is feasible. When your catalogue reaches fifty or a hundred SKUs — each with its own recipe, supplier base, and variant options — the risk of errors increases substantially. A single ingredient swap from a supplier, or a reformulation to reduce cost, can change the allergen profile of a product without an automatic alert to update your storefront or reprint your labels.

The discipline required is systematic. Every product should have a documented recipe or specification sheet that lists every ingredient, its supplier, and the allergens it contains — both intentional ingredients and potential cross-contact allergens from the supplier's manufacturing environment. These specification sheets should be version-controlled, so you always know which version of a recipe corresponds to which batch of product on sale. When a recipe changes, your allergen data and your Shopify product page should be updated simultaneously, not sequentially, and certainly not days or weeks apart.

Using a dedicated tool to manage this process removes much of the manual overhead and reduces the risk of human error. Allergen Matrix is designed specifically for Shopify food merchants who need to maintain accurate allergen data at scale, surfacing the right information on the right product pages automatically when your underlying data changes. For businesses selling into the EU market, where the regulatory standard is high and enforcement is real, this kind of systematic approach is the difference between confidence and anxiety every time you change a recipe.

Allergen Labelling for Compound Ingredients

A frequently misunderstood aspect of Regulation 1169/2011 is how it applies to compound ingredients — ingredients that are themselves made up of multiple components. If you use a pre-made spice blend, a sauce, or a pastry base as an ingredient in your product, you are responsible for disclosing the allergens within that compound ingredient on your finished product label. You cannot simply list "spice blend" and consider your obligation discharged. Every allergenic component within that blend must be identified and emphasised in your ingredients list.

This creates a direct dependency on your suppliers. Your allergen declarations can only be as accurate as the information your ingredient suppliers provide to you. Best practice is to obtain a formal allergen declaration or specification sheet from every ingredient supplier, and to request updated documentation whenever a supplier changes their own recipe or manufacturing processes. Many small food businesses discover gaps in their supplier information only when they begin a formal allergen audit — and those gaps represent genuine regulatory and safety risks that must be addressed.

The practical implication for Shopify merchants is that your allergen data pipeline runs from supplier specifications, through your internal recipe management, and out to your product pages and labels. A break anywhere in that chain creates compliance exposure. Reviewing your compound ingredient declarations as part of your annual labelling review — or whenever you onboard a new supplier — is a straightforward habit that significantly reduces your risk profile under Regulation 1169/2011.

Summary

EU Regulation 1169/2011 sets a high bar for allergen disclosure — one that applies equally to pre-packed products, loose food, and online sales. Food businesses operating in the EU, or selling into EU markets, must treat this regulation as non-negotiable. The cost of compliance is far lower than the cost of an enforcement action or, worse, a customer harmed by undisclosed allergens.

Try Allergen Matrix free at saltai.app — no credit card required.