FALCPA and Private Label: Who Is Responsible for Allergen Labelling

Private label food products — where you put your brand on a product manufactured by a third party — are a popular model for Shopify food businesses. But FALCPA allergen labelling responsibility follows the label, not the manufacturer. Here's what private label sellers need to understand.

The Brand Owner Bears Responsibility

Under FALCPA, the responsible party for allergen labelling is the firm whose name appears on the label. If your brand name is on a private label product manufactured by a contract manufacturer, you are legally responsible for ensuring the allergen declarations on that product are accurate and compliant. This responsibility cannot be contractually transferred to the manufacturer — the FDA will come to you first.

What to Demand from Your Manufacturer

Before you sell any private label product on your Shopify store, you need from your manufacturer: a complete ingredient specification including all processing aids and manufacturing adjuncts; a confirmed allergen profile for the finished product; documentation of allergen cross-contact controls in their facility; and confirmation that their production process has not changed since the last allergen review. This documentation should be updated annually and whenever you are informed of a formulation change.

Contract Protections Are Not Enough

Having a contract with your manufacturer that makes them responsible for allergen accuracy provides some commercial recourse if something goes wrong — but it doesn't protect you from FDA regulatory action. The FDA will issue warning letters and compel recalls from the brand owner, not the manufacturer. Your contract indemnification may give you the ability to recover costs, but the regulatory action lands on you.

Online Product Pages Under Private Label

When selling private label food through Shopify, your product pages must display accurate allergen information that matches the physical product. If your manufacturer updates a formulation, they must notify you, and you must update your Shopify product pages before the new product ships. A centralised allergen management tool eliminates the risk of mismatch.

Manage allergen declarations for all your private label products in one place with SaltAI.

Understanding the FALCPA Major Allergen List in a Private Label Context

FALCPA requires that the nine major food allergens — milk, eggs, fish, shellfish, tree nuts, peanuts, wheat, soybeans, and sesame — be declared clearly on any packaged food label sold in the United States. As a private label brand owner, you need to confirm that your manufacturer has accounted for every one of these allergens in the finished product specification, not just in the primary ingredient list. Processing aids, flavour compounds, and carrier ingredients can all introduce allergens that never appear on the raw ingredient purchase order you might review during onboarding.

The challenge with private label is that you are rarely present on the production floor. You are relying on documentation your manufacturer provides, which means your due diligence process has to be exceptionally thorough. Requesting a full allergen matrix for the product — one that maps each ingredient and sub-ingredient against the FALCPA list — is not an unusual ask. Reputable contract manufacturers will have this documentation ready. If a manufacturer is reluctant or vague about providing it, that is a meaningful red flag before you commit your brand name to their product.

It is also worth noting that FALCPA covers both intentional inclusion and cross-contact. Your manufacturer's documentation should address both scenarios separately. A product that contains no milk in its formulation but is manufactured on shared equipment with dairy-containing products still requires careful consideration, and depending on the allergen load and controls in place, a precautionary statement may be appropriate. As the brand owner, you are responsible for ensuring that decision is made with accurate information, not assumed.

Formulation Changes and Your Notification Obligations

One of the highest-risk scenarios in private label is the silent formulation change — where your manufacturer substitutes an ingredient, changes a supplier, or adjusts a processing method without proactively informing you. Under your supply agreement, you should have an explicit clause requiring written notification of any formulation change before production of the next batch, not after. This notification window gives you time to review the allergen implications, update your physical label artwork, and update your Shopify product listings before the new inventory arrives at your warehouse or fulfilment centre.

The FDA does not accept "my manufacturer didn't tell me" as a defence against a misbranding violation. If a product bearing your brand name reaches a consumer with an inaccurate allergen declaration, you are the responsible party regardless of the internal communication failure. This is why allergen documentation management cannot live only in your email inbox or a shared folder. A structured system that ties product records to version-controlled allergen data gives you an audit trail and a clear point of accountability when questions arise.

When you do receive notification of a formulation change, your process should be sequential and documented. First, obtain the updated ingredient specification and allergen matrix. Second, assess whether any new allergens have been introduced or any existing allergen risks have changed. Third, revise your label artwork through your approved artwork workflow. Fourth, update your Shopify product page to reflect the new allergen information. Fifth, confirm with your fulfilment operation which inventory is the old batch and which is the new, so you can manage the transition period without mismatched products reaching customers. Allergen Matrix is built to support exactly this kind of version-controlled update process.

Multi-SKU Private Label Ranges and Scaling Risk

Many Shopify food businesses that start with a single private label product eventually build out a range — sauces, snacks, condiments, baked goods — often sourced from multiple contract manufacturers across different facilities. Each manufacturer brings its own allergen control environment, its own documentation standards, and its own communication practices. The allergen management challenge that felt manageable with one product becomes genuinely complex when you are running ten or fifteen SKUs from three different production sites, all carrying your brand name and all your regulatory responsibility.

The scaling risk here is not just about volume. It is about the fragmentation of information. If your allergen data lives in separate emails, supplier portals, PDF specifications, and product listing drafts, you have no reliable way to confirm at any given moment that every product page on your Shopify store accurately reflects the current physical product in your warehouse. This is the scenario that precedes a recall — not negligence, but information fragmentation that makes errors invisible until a customer reports a reaction or a routine audit surfaces a discrepancy.

Building a centralised allergen register for your private label range is the practical solution. This register should record the confirmed allergen profile for each SKU, the date of the most recent manufacturer review, the version of the label artwork that corresponds to that profile, and the date your Shopify product listing was last updated to match. When your manufacturer notifies you of a change, you update the register first, then cascade the change through artwork and listings in a controlled sequence. This approach transforms allergen management from a reactive scramble into a repeatable operational process.

Recalls, Warning Letters, and the Real Cost of Non-Compliance

FDA enforcement under FALCPA is a real and present risk for private label brand owners, not a theoretical concern. Undeclared allergen recalls are among the most common food recalls in the United States, and a significant proportion involve private label products where the communication chain between manufacturer and brand owner broke down. A Class I recall — the most serious category, reserved for situations with a reasonable probability of causing serious adverse health consequences — carries reputational and financial costs that can be existential for a small Shopify food business.

Warning letters from the FDA are publicly posted on the agency's website, which means a compliance failure becomes a matter of public record that customers, retailers, and media can find. For a brand built on Shopify where customer trust is your primary commercial asset, a publicly posted warning letter about undeclared allergens is extraordinarily damaging. The cost of investing in robust allergen documentation and online listing accuracy is trivially small compared to the cost of managing the aftermath of a recall or an enforcement action.

Beyond the regulatory consequences, there is the direct human cost. FALCPA exists because undeclared allergens cause serious injuries and fatalities every year. As a brand owner, your commitment to allergen labelling accuracy is not only a legal obligation — it is a straightforward duty of care to the customers who trust your brand. Building systems that make allergen accuracy reliable and verifiable is the right thing to do, and it is also the thing that protects your business when regulators, insurers, or plaintiffs' solicitors ask you to demonstrate what controls you had in place.

---

Try Allergen Matrix free at saltai.app — no credit card required.