FALCPA 2026 Update: What's Changed for US Food Businesses

The US allergen labelling landscape is shifting in 2026, and if you sell food products to American customers through Shopify, the changes are not optional. The Food Allergen Labeling and Consumer Protection Act (FALCPA) has long been the foundation of allergen disclosure requirements in the United States, but recent updates — including the formal addition of sesame as a major allergen following the FASTER Act of 2021 — are now fully in force, and regulators are paying close attention to compliance across both physical and digital retail. For Shopify merchants selling into the US market, that means your product pages, ingredient listings, and allergen declarations all need to be reviewed.

The core problem for many food business owners is that FALCPA compliance feels abstract until it isn't. A customer with a severe tree nut allergy orders your granola, your product page lists "mixed nuts" without specifying which, and you're suddenly facing a complaint, a potential recall, and lasting reputational damage. These are not edge cases — they happen to small brands every year, and the consequences scale quickly when you're selling across state lines.

In this post, you'll learn exactly what FALCPA now requires, how the 2026 landscape has changed from previous years, which allergens are now covered under federal law, and what practical steps you can take today to protect your customers and your business.

What FALCPA Actually Requires in 2026

FALCPA was originally enacted in 2004 and required that the nine major allergens be declared clearly on food labels — either in the ingredient list using the common name, or in a separate "Contains" statement immediately following. As of January 1, 2023, sesame became the ninth major allergen under the FASTER Act, and enforcement has been progressively tightening since then. By 2026, FDA inspectors and third-party auditors are treating sesame non-disclosure with the same seriousness as peanut or tree nut omissions.

The nine major allergens now recognised under US federal law are: milk, eggs, fish, shellfish, tree nuts, peanuts, wheat, soybeans, and sesame. Each must be declared using its common name — "milk" not "casein," "wheat" not "triticum," "tree nuts" followed by the specific variety in parentheses (for example, "tree nuts (almonds, cashews)"). This specificity requirement catches many food businesses off guard, particularly those importing products from the UK or EU where labelling conventions differ.

For Shopify merchants specifically, FALCPA compliance is not limited to the physical label on your packaging. If you sell food directly to US consumers through your online store, your product descriptions, ingredient panels, and allergen summaries displayed on product pages are considered part of the commercial transaction. The FDA has been clear that misleading or incomplete digital product information can constitute a violation even when the physical label is technically correct.

The Sesame Addition — Why It Still Trips Businesses Up

Despite sesame becoming a federally recognised allergen over two years ago, it remains the most commonly missed declaration in 2026 compliance audits. The reason is partly historical — sesame was not on the FALCPA list for nearly two decades, which means it became embedded in ingredient formulations, shared equipment disclosures, and labelling templates without the same scrutiny applied to peanuts or milk. Many food businesses, particularly small and medium-sized producers, updated their physical packaging but never revisited their Shopify product pages, PDF spec sheets, or menu boards.

Sesame hides in places that are easy to overlook. Tahini, sesame oil, sesame flour, gomashio, and til are all sesame-derived ingredients that must now be declared. More importantly, sesame is frequently present in shared manufacturing environments — a facility that processes sesame crackers on the same line as your supposedly sesame-free protein bars is a liability if you haven't confirmed and disclosed that risk. The FDA expects manufacturers to conduct due diligence on their supply chains and reflect that honestly in their labelling.

For online food retailers, the practical implication is that every product listing that contains sesame or is manufactured in a facility that handles sesame needs a clear, prominent declaration. If you use a "Contains" statement format, it now needs to read "Contains: wheat, sesame" or equivalent — not just a vague advisory. Review every product you stock, every supplier spec sheet you hold, and every ingredient field in your Shopify backend to ensure sesame is treated with the same rigour as your other top allergens.

How "May Contain" and Cross-Contact Disclosures Work in the US

One of the most confusing areas of FALCPA for UK and European merchants expanding into the US market is the different treatment of precautionary allergen labelling (PAL) — commonly seen as "may contain traces of" or "produced in a facility that also handles" statements. In the UK, Natasha's Law governs full ingredient declaration on prepacked foods, and PAL is voluntary but regulated in its accuracy. In the US, the situation is different and often misunderstood.

Under FALCPA, cross-contact disclosures are voluntary — the FDA does not require precautionary statements, but it does require that they be truthful and not misleading if used. This creates a practical problem: if you include a "may contain peanuts" advisory on your product page but have never actually assessed your manufacturer's cross-contact risk, you are both potentially misleading consumers and failing to take the documented steps that would defend you in a legal dispute. The voluntary nature of PAL does not mean it's consequence-free.

The emerging best practice for US-facing Shopify stores in 2026 is to conduct a formal allergen risk assessment for each product, document the results, and use PAL statements only where a genuine, identified risk exists. If your chocolate bar is made in a facility that handles tree nuts on separate dedicated equipment with validated cleaning procedures, a blanket "may contain tree nuts" statement is arguably both unnecessary and misleading. Precision matters here, both for consumer safety and for your legal defensibility.

What Shopify Merchants Must Do with Digital Product Listings

Your Shopify store is a point of sale under US consumer protection law, and the information you publish there about your food products carries legal weight. This means your product page ingredient lists must match your physical labels exactly — any discrepancy between what's on the packet and what's on your product page is a compliance risk. If your manufacturer updates a formula and you update the label but forget to update the Shopify description, you have created a potentially dangerous information gap.

The most effective way to manage allergen information across a product catalogue is to centralise it. Instead of manually writing allergen declarations into each product's description field and hoping they stay consistent, use a structured approach where allergen data lives in one place and populates product pages automatically. This is exactly what tools like Allergen Matrix are built for — giving food merchants a systematic way to track, display, and update allergen information across their Shopify store without manually editing every listing.

Practically speaking, your Shopify product pages should display: a full ingredient list in descending order of weight, a clear "Contains" statement listing all FALCPA-covered allergens present, any relevant precautionary statements where risk has been formally assessed, and a visible indicator if a product is free from a specific allergen (with appropriate qualification). Shoppers with allergies scan for this information quickly — burying it in a long description block or leaving it entirely to the physical label is both a legal risk and a lost opportunity to build customer trust.

Penalties, Recalls, and the Real Cost of Non-Compliance

The consequences of FALCPA non-compliance are not theoretical. The FDA has the authority to issue warning letters, mandate recalls, and pursue injunctions against companies that repeatedly or wilfully mislabel food products. In 2024 and 2025, sesame-related recalls increased significantly as enforcement attention caught up with the FASTER Act timeline. A single undeclared allergen can trigger a Class I recall — the most serious category, reserved for situations where there is a reasonable probability that consuming the product will cause serious adverse health consequences.

Beyond regulatory penalties, the commercial cost of a recall is severe. A mid-sized food brand recalling a single SKU across US distribution channels can face costs ranging from $50,000 to several hundred thousand dollars, factoring in logistics, retailer chargebacks, PR management, and lost sales during the recall period. For a Shopify-native brand without a dedicated compliance team, a recall can be existential. Prevention through accurate labelling is not a bureaucratic exercise — it is risk management.

For Shopify merchants, the reputational damage compounds the financial one. Reviews, social media, and press coverage of allergen incidents spread quickly, and customers with food allergies are highly networked communities. A transparent, well-labelled store builds lasting loyalty; an undeclared allergen incident can undo years of brand equity overnight.

Conclusion

FALCPA in 2026 is more demanding than it has ever been, with sesame now fully embedded in enforcement priorities and digital product information held to the same standards as physical packaging. The practical takeaways for food business owners are clear: audit every product listing for all nine major allergens, treat sesame with the same rigour as peanuts and milk, use precautionary statements only where risk has been formally assessed, and ensure your Shopify store reflects exactly what's on your physical labels. Compliance is not a one-time task — it requires regular review as formulations and suppliers change. The good news is that the right tools make systematic allergen management achievable without a dedicated compliance team.

Try Allergen Matrix free at saltai.app — no credit card required.