FALCPA and the FDA Recall Process: What Happens When Allergens Are Undeclared

Undeclared allergens are the leading cause of FDA food recalls by category, year on year. Understanding how the recall process works — and what triggers it — helps food businesses build the systems needed to prevent undeclared allergen incidents.

How Undeclared Allergen Recalls Are Triggered

A recall may be initiated by:

• The manufacturer discovering a labelling error during internal review
• A consumer complaint following an allergic reaction
• A retailer identifying label inconsistencies during quality checks
• An FDA inspection finding label non-compliance
• A third-party lab result identifying an allergen not on the label

The Recall Classification System

The FDA classifies recalls by severity:

• Class I: A reasonable probability that consuming the product will cause serious adverse health consequences or death — undeclared major allergens typically trigger Class I
• Class II: A remote probability of serious adverse health consequences
• Class III: Consuming the product is unlikely to cause adverse health consequences

The Business Impact of a Recall

A Class I food recall involves product retrieval from all distribution channels, public notification, press release, and typically, significant media coverage. The financial and reputational cost can be severe, particularly for small producers whose brand is closely tied to their products.

Prevention: The Systems That Matter

The most effective prevention comes from:

• Accurate ingredient and allergen documentation for every product
• A formal process for reviewing labels when formulations change
• Supplier notification requirements for ingredient changes
• Regular label audits against current formulations

What FALCPA Actually Requires From Food Businesses

The Food Allergen Labeling and Consumer Protection Act of 2004 established a clear legal obligation for food manufacturers selling in the United States: the eight major allergens — milk, eggs, fish, shellfish, tree nuts, peanuts, wheat, and soybeans — must be declared on the label in plain, common English. Sesame was added as the ninth major allergen under the FASTER Act, taking effect January 1, 2023. These requirements apply to any packaged food product subject to FDA jurisdiction, which covers the vast majority of retail food items sold through grocery, specialty, and online channels.

The law provides two acceptable methods for declaring allergens. The first is to include the allergen name in the ingredient list itself — for example, listing "whey (milk)" in parentheses immediately after the ingredient. The second is to include a separate "Contains" statement directly after the ingredient list, such as "Contains: Milk, Wheat, Soy." Both methods are legally valid, but they must be accurate, current, and consistent with every ingredient actually used in the formulation. A label that uses a "Contains" statement but omits one declared ingredient, or fails to update after a formulation change, creates a compliance gap that can trigger regulatory action.

For online food retailers and Shopify merchants selling food products, FALCPA compliance extends beyond the physical packaging. The FDA's position is that the information available to consumers at the point of purchase should not mislead them about allergen content. While the primary legal obligation sits with the manufacturer, retailers who publish inaccurate allergen information on product pages carry meaningful responsibility, particularly when that information is used by allergen-sensitive customers to make purchasing decisions. Maintaining accurate, up-to-date allergen data on your product listings is not optional — it is part of operating responsibly in this category.

The Timeline of an FDA Recall: From Discovery to Resolution

When an undeclared allergen is identified, the speed and manner in which a business responds directly affects regulatory outcome and public perception. If the issue is self-identified — through an internal audit, a supplier notification, or a quality control check — the manufacturer is expected to notify the FDA promptly and voluntarily initiate a recall. The FDA strongly encourages voluntary recalls and works cooperatively with companies that engage proactively. A business that discovers a labelling error and acts immediately is in a fundamentally different position than one that receives an FDA warning letter after a consumer complaint or inspection finding.

Once a recall decision is made, the business must submit a Recall Strategy to the FDA, which outlines the scope of the recall, the distribution channels affected, the communications plan, and the method of consumer notification. For a Class I recall involving an undeclared major allergen, the FDA will typically require a press release, direct retailer notification, and often a social media advisory. The business must also conduct effectiveness checks — verified outreach to confirm that downstream distributors and retailers have received the recall notice and are removing the product from sale. This process is more resource-intensive than most small food producers anticipate when they have never been through it before.

The formal closure of a recall requires the business to demonstrate to the FDA's satisfaction that all reasonably recoverable product has been removed from commerce and that the root cause has been identified and corrected. This often involves a Corrective Action Plan documenting the specific changes made to labelling procedures, supplier management, or quality review processes. Recalls are not considered closed until the FDA reviews and accepts this documentation. The entire process, from initiation to formal closure, can take months, and the public record of the recall remains permanently accessible in the FDA's recall database — a lasting reputational consideration for any brand.

How Supplier Changes Become Undeclared Allergen Incidents

One of the most common root causes identified in undeclared allergen recalls is a supplier ingredient change that was not communicated to the food manufacturer, or was communicated but not acted upon before product reached market. Ingredient suppliers reformulate their products, change processing facilities, introduce new shared equipment lines, or substitute sub-ingredients without always notifying every downstream customer. A seasoning blend that was previously free from sesame may be reformulated with a sesame-containing carrier, and if that change is not reflected on the finished product label, the manufacturer is non-compliant under FALCPA regardless of whether they were informed.

Robust supplier management is therefore a critical component of allergen control. Food businesses should require suppliers to provide allergen declarations for every ingredient, to notify customers of any formulation or processing changes in writing before those changes take effect, and to confirm annually that no changes have occurred. These requirements should be written into supplier agreements rather than assumed. The reality is that many small food producers have informal supplier relationships built on trust rather than contractual documentation, and that informality creates compliance exposure that only becomes visible when something goes wrong.

The practical implication for Shopify merchants selling food products is that the allergen information on your product pages must reflect the current formulation, not the formulation that existed when the listing was first created. A product that has been in your catalogue for three years may have gone through several supplier-driven ingredient changes in that time. Without a formal system for reviewing and updating product allergen data whenever a supplier change occurs, the information your customers are relying on may be silently out of date. This is the kind of gap that does not announce itself until it causes a problem.

The Role of Online Product Listings in Allergen Compliance

The growth of direct-to-consumer food sales through Shopify and similar platforms has created a new category of allergen disclosure risk that did not exist when FALCPA was originally written. When a customer purchases a packaged food product in a physical store, they can read the label before buying. When they purchase online, the product description and allergen information on the retailer's website may be the only information they see before committing to purchase. If that information is inaccurate or incomplete, a customer with a serious allergy may receive a product that poses a genuine health risk to them — based on information that the retailer published and controlled.

The FDA has increasingly focused on the intersection of food labelling and e-commerce, and the expectation is clear: online product listings should accurately reflect the allergen content of the physical product. For food brands operating their own Shopify stores, this means treating the allergen section of every product page with the same rigour applied to the physical label. For multi-product merchants carrying third-party food brands, it means establishing a process for verifying and maintaining allergen data for every SKU in the catalogue, and updating that data whenever supplier formulations change.

Displaying allergen information clearly on product pages also serves a practical commercial function beyond compliance. Customers who manage food allergies — or who shop for someone who does — are disproportionately loyal to brands and retailers they trust to get this right. A clear, consistent, easily readable allergen declaration on every product page builds the kind of trust that drives repeat purchases and positive word of mouth. Managing that data systematically rather than ad hoc is the difference between an allergen programme that actually works and one that exists on paper only.

Keep allergen data accurate and display it on your Shopify store with Allergen Matrix at saltai.app.

Try Allergen Matrix free at saltai.app — no credit card required.