FALCPA for Food Service vs Packaged Goods: Different Rules Apply
FALCPA applies to packaged food but not to food served in restaurants or food service. Understanding where the line falls is critical for food businesses operating across both channels.
One of the most important distinctions in US allergen law is the divide between packaged food (covered by FALCPA) and food service (regulated differently, primarily at state and local level). A food business operating in both channels must understand which rules apply where.
What FALCPA Covers
FALCPA applies to packaged food regulated by the FDA under the Federal Food, Drug, and Cosmetic Act. This includes virtually all packaged food sold in retail stores, online, and direct-to-consumer. The product must carry a label with major allergen declarations.
What FALCPA Does Not Cover
FALCPA does not apply to:
- Food prepared and served in restaurants, cafeterias, or food service establishments
- Raw agricultural commodities (fresh fruits, vegetables, meat, poultry, eggs — though these have separate regulations)
- Certain other food categories under USDA jurisdiction
Restaurant Allergen Requirements
Restaurants in the US are regulated at the state and local level for allergen disclosure. There is no single federal requirement equivalent to FALCPA for restaurant menus. However, many states and cities have menu labelling laws that include allergen disclosure requirements — and the FDA's model Food Code includes allergen disclosure provisions.
Hybrid Businesses
Food businesses that operate both a restaurant and a packaged goods line — selling their own branded products alongside food service — must manage two compliance frameworks simultaneously. The packaged product line requires FALCPA-compliant labels. The food service operation follows applicable state and local rules.
Understanding the Nine Major Allergens Under FALCPA
FALCPA originally mandated disclosure of eight major allergens: milk, eggs, fish, shellfish, tree nuts, peanuts, wheat, and soybeans. In 2023, sesame was added as the ninth major allergen under the FASTER Act, bringing the US list closer to international standards. For packaged goods, each of these must be declared clearly on the label, either within the ingredient list using the common name or in a separate "Contains" statement immediately following the ingredients. The declaration must be unambiguous and use plain language that consumers can easily understand.
For fish, shellfish, and tree nuts specifically, FALCPA requires manufacturers to declare the specific type — for example, "tuna" rather than simply "fish," or "cashews" rather than "tree nuts." This level of specificity matters enormously for consumers managing serious allergies, as sensitivities often differ between species within the same broader category. Packaged food brands that operate Shopify stores selling direct-to-consumer must reflect this same specificity in any allergen information displayed on product pages, not just on physical labels.
It is worth noting that FALCPA's allergen list differs from those in other jurisdictions. The UK and EU recognise 14 allergens, including mustard, celery, sulphites, and lupin, which are not on the US federal list. Brands that export or sell internationally through Shopify need to maintain separate allergen data sets for each market. This is one reason centralised allergen management tools, rather than manual label reviews, are increasingly valuable to growing food businesses managing multiple sales channels simultaneously.
How State and Local Rules Fill the Food Service Gap
Because FALCPA does not extend to food service, the regulatory landscape for restaurants and cafeterias is fragmented across all fifty states. Some states have enacted robust allergen disclosure laws that require staff training, menu notations, or written documentation of allergen information. Massachusetts, for example, has had mandatory allergen awareness training requirements in place for years, and requires restaurants to provide written allergen information upon customer request. Other states have far less prescriptive frameworks, relying primarily on the FDA's model Food Code as a voluntary guide for local health departments to adopt.
The FDA's model Food Code does include provisions relating to allergen disclosure and consumer advisories, but adoption is not mandatory at the federal level. Local health departments decide whether and how to implement the model Food Code's recommendations. This means that a restaurant group operating locations in multiple states may face genuinely different compliance obligations at each site — a complexity that many growing hospitality businesses underestimate until an incident or inspection brings it to light.
For food service operators who are also building a packaged goods line to sell through Shopify or other online channels, this jurisdictional patchwork creates an additional planning challenge. Compliance work that feels complete for the restaurant side may not translate meaningfully to the packaged goods side, and vice versa. Building separate, clearly documented allergen matrices for each channel from the outset is a far more efficient approach than trying to retrofit compliance documentation after products are already on sale.
Label Format Requirements for Packaged Food
FALCPA prescribes not just what allergen information must appear on a label, but how it must appear. The two permitted formats are: declaring the allergen in parentheses within the ingredient list — for example, "flour (wheat)" — or using a separate "Contains" statement placed immediately after the ingredient list. Manufacturers cannot mix these two approaches on the same label in a way that creates ambiguity or omission. Both formats must use the common name of the food source, not scientific or technical terminology that ordinary consumers would not recognise.
Font size and placement are also regulated. Allergen declarations must appear in a type size no smaller than the type used for the ingredient list itself, and the "Contains" statement must appear contiguous to the ingredient list rather than in a separate section of the label. These requirements exist because even a technically correct allergen declaration is ineffective if it is visually buried or formatted in a way that makes it easy to overlook. For small food brands producing labels in-house, these formatting rules are an easy area to get wrong inadvertently.
Digital product listings on Shopify and other e-commerce platforms introduce an additional layer of consideration. While FALCPA governs the physical label on the packaged product, the FDA has also issued guidance indicating that online food sellers should make allergen information accessible to consumers before purchase. Displaying accurate, complete allergen data on product pages — ideally structured consistently across all SKUs — is both a practical customer service measure and a sensible risk management step for any food brand selling direct-to-consumer online.
Cross-Contact and Its Regulatory Status
Cross-contact — the unintentional transfer of an allergen from one food to another during production — is a significant concern for consumers with serious allergies, but it sits in a legally ambiguous space under FALCPA. The law mandates disclosure of intentional ingredients that are major allergens. It does not explicitly require disclosure of potential cross-contact, which is why advisory statements such as "may contain traces of peanuts" or "produced in a facility that also processes milk" are voluntary rather than mandatory under federal law. Despite being voluntary, these statements are widely used and are taken seriously by allergen-sensitive consumers.
The FDA has issued guidance on cross-contact and has signalled increasing scrutiny of advisory labelling practices, particularly where such statements are used inconsistently or appear to substitute for adequate manufacturing controls rather than supplement them. A business cannot use a "may contain" statement as a catch-all to avoid addressing genuine cross-contact risks in its production process. Regulators expect that precautionary advisory statements reflect real and documented manufacturing risks, not a blanket disclaimer applied to every product regardless of actual production conditions.
For food businesses managing both packaged goods and food service operations, cross-contact documentation requirements differ meaningfully between channels. In a packaged goods context, cross-contact risks should be documented in allergen risk assessments and reflected in HACCP or food safety plans. In food service, the obligation typically flows through staff training requirements and, where applicable, state-mandated allergen disclosure procedures. Keeping these records separate and channel-specific avoids confusion and makes it far easier to respond clearly if a regulator or customer raises a question.
Practical Compliance Steps for Dual-Channel Food Businesses
Food businesses operating in both packaged goods and food service should begin by mapping every product and menu item against the allergen frameworks relevant to each channel. For packaged goods sold through Shopify or retail, that means confirming FALCPA compliance for all nine major allergens on every label and product listing. For food service operations, that means identifying which state and local requirements apply to each location and ensuring that staff training, menu documentation, and customer disclosure procedures are in place and current. Treating these as two separate compliance workstreams, with their own documentation, is the most reliable approach.
Ingredient change management is one of the highest-risk areas for dual-channel businesses. When a supplier reformulates an ingredient or a manufacturer switches to a new source, that change may affect allergen declarations across multiple products simultaneously. Without a systematic process for tracking ingredient changes and cascading updates to labels, product pages, and staff training materials, a single supplier change can create compliance gaps in multiple channels at once. Building allergen data management into procurement and production processes — rather than treating it as a labelling afterthought — significantly reduces this risk.
Technology plays a meaningful role in making dual-channel allergen compliance manageable at scale. Centralised allergen matrices that connect ingredient data to both product labels and digital listings allow food businesses to update information in one place and push accurate data across all customer-facing touchpoints. For Shopify-based food brands, this means allergen information on product pages stays consistent with what appears on physical packaging, reducing the risk of discrepancies that could mislead consumers or attract regulatory attention. Tools designed for this purpose are increasingly accessible to independent food businesses, not just large manufacturers.
Manage allergen information across both your packaged products and Shopify store with Allergen Matrix at saltai.app.
Try Allergen Matrix free at saltai.app — no credit card required.
SaltAI Team
SaltAI builds focused Shopify apps for food merchants and general merchants. Every app is tested in production at a real food store — including Vanda's Kitchen — before it ships.