FALCPA Allergen Requirements for US Food Businesses

FALCPA Allergen Requirements for US Food Businesses

The Food Allergen Labeling and Consumer Protection Act of 2004 — universally known as FALCPA — is the primary US federal law governing allergen labelling on packaged food. If you manufacture, package, or sell packaged food in the United States, FALCPA almost certainly applies to your products. Understanding what it requires, and how recent updates have expanded it, is essential for any food business operating in the US market.

What Is FALCPA?

FALCPA was signed into law in August 2004 and became effective on 1 January 2006. It amended the Federal Food, Drug, and Cosmetic Act (FD&C Act) to require that packaged foods containing major food allergens clearly declare those allergens on the label. Before FALCPA, allergens could be buried in ingredient lists under scientific names, collective terms, or trade names — invisible to most consumers.

FALCPA applies to packaged food regulated by the FDA. Note that meat, poultry, and egg products regulated by the USDA are subject to different rules under the Federal Meat Inspection Act and Poultry Products Inspection Act.

The Original Eight Major Allergens

FALCPA originally identified eight major food allergens, responsible for approximately 90 percent of serious allergic reactions in the US:

1. Milk
2. Eggs
3. Fish (bass, flounder, cod — species must be declared)
4. Crustacean shellfish (crab, lobster, shrimp — species must be declared)
5. Tree nuts (almonds, pecans, walnuts, cashews, pistachios, etc. — type must be declared)
6. Peanuts
7. Wheat
8. Soybeans

FASTER Act: Sesame Added as the Ninth Major Allergen

The FASTER Act (Food Allergy Safety, Treatment, Education, and Research Act) was signed into law in April 2021 and added sesame as the ninth major food allergen, effective 1 January 2023. This was a significant change — sesame is widely used in processed foods, breads, sauces, and ethnic cuisines, and sesame allergy affects an estimated 1.5 million Americans.

From 1 January 2023, all packaged food products containing sesame must declare it as an allergen on the label, using the same methods required for the original eight allergens.

How Must Allergens Be Declared?

FALCPA provides two approved methods for allergen declaration:

Method 1 — Within the ingredients list: The allergen is declared using its common name in parentheses immediately after the ingredient's name. For example: "flour (wheat)", "lecithin (soy)", "natural flavour (milk)".

Method 2 — "Contains" statement: A separate "Contains" statement immediately follows or is adjacent to the ingredients list. For example: "Contains: Wheat, Milk, Peanuts". If a "Contains" statement is used, it must include every major allergen present in the product — a partial "Contains" statement combined with method 1 is not permitted.

What FALCPA Covers

FALCPA applies to:

• Packaged food sold in the US that is regulated by the FDA
• Imported packaged food sold in the US
• Food sold online to US consumers

It covers allergens that are intentional ingredients — deliberately added to the product. It does not directly regulate cross-contact allergens (the "may contain" or "made in a facility" statements common on US labels), though FDA has published guidance on precautionary allergen labelling.

Exemptions

Some exemptions exist under FALCPA:

• Highly refined oils derived from major allergens — such as highly refined soybean oil or highly refined peanut oil — are exempt because the refining process removes the allergenic proteins
• Flavours and colours derived from major allergens where the allergen has been fully processed away may be exempt, though this is assessed case by case
• Businesses can petition FDA for specific exemptions if they can demonstrate that a particular ingredient form does not cause allergic reactions

Restaurant and Food Service

FALCPA applies specifically to packaged food labels. Restaurants and other food service establishments are not directly subject to FALCPA's labelling requirements — they are regulated primarily at the state level. However, the FDA Food Safety Modernization Act (FSMA) and various state laws require food service operators to be able to provide allergen information on request.

Many states have enacted their own restaurant allergen disclosure laws — Massachusetts and Michigan, for example, have specific requirements for restaurant allergen communication.

Online Sales into the US

If you sell packaged food online to US consumers, FALCPA applies to your packaging. Your product pages should also clearly disclose allergens — both as good practice and because FDA guidance strongly recommends pre-purchase allergen disclosure for online food sales.

For Shopify merchants selling food into the US market, displaying clear allergen information on every product page — before the customer adds to cart — is the right approach. SafeServe, our allergen labelling app for Shopify, makes this straightforward to implement and maintain.

State-Level Allergen Laws

Several US states have enacted laws that go beyond FALCPA:

• Massachusetts: Requires restaurants to ask every customer about food allergies and display allergen awareness posters
• Michigan: Has food allergy awareness training requirements for food service workers
• Rhode Island: Similar training requirements

Businesses operating in multiple US states should be aware that state requirements may be more stringent than federal minimums.

Practical Compliance Steps

1. Audit all products — identify every ingredient in every product and map them against the nine major allergens
2. Review sub-ingredients — if you use compound ingredients (spice blends, sauces, mixes), obtain full ingredient breakdowns from suppliers and check for hidden allergens
3. Update labels — ensure your labels use one of the two FALCPA-compliant declaration methods consistently
4. Check for sesame — if you haven't audited for sesame since January 2023, do so now
5. Train your team — everyone involved in production, purchasing, and labelling should understand your allergen obligations

Managing Supplier Changes and Ingredient Substitutions

One of the most overlooked compliance risks for food businesses is the supplier change. Manufacturers frequently substitute ingredients without prominent notification — a spice blend reformulation, a sauce ingredient swap, or a new co-manufacturer introducing a different grade of oil can all introduce allergens into a product without anyone on your team realising. FALCPA compliance is not a one-time label exercise; it requires an ongoing process that connects purchasing decisions directly to your labelling review workflow.

Best practice is to require allergen declarations from every ingredient supplier in writing, and to specify in your supplier agreements that any reformulation must be communicated before the changed ingredient ships. Request the full ingredient breakdown — including sub-ingredients — for every compound ingredient you purchase, and store those declarations somewhere your team can access them quickly. When a supplier notifies you of a change, trigger a formal allergen review before updating your purchase orders.

The practical challenge for small and medium food businesses is maintaining this kind of discipline without a dedicated food safety team. Building a simple allergen matrix — a spreadsheet or managed tool that maps every product to every ingredient and every allergen — makes supplier change reviews faster and more reliable. Tools like the Allergen Matrix are designed specifically to support this kind of ongoing management, reducing the manual effort required to keep your allergen data accurate as your supply chain evolves.

Precautionary Allergen Labelling and Cross-Contact

FALCPA does not mandate precautionary allergen labelling — the "may contain traces of" or "manufactured in a facility that also handles" statements you commonly see on US food packaging. These statements are entirely voluntary under federal law. However, the FDA has published clear guidance indicating that precautionary statements should only be used when a genuine, assessed risk of cross-contact exists. Using them as a blanket disclaimer on every product, regardless of actual risk, is considered misleading and is actively discouraged by the FDA.

Cross-contact risk assessment requires you to evaluate your production environment, your cleaning and changeover procedures, and your ingredient handling practices in an honest and documented way. If a genuine risk exists — for example, if peanut products and peanut-free products run on shared equipment without a validated cleaning step between them — a precautionary statement is appropriate and should be included. If your allergen controls are robust and validated, a precautionary statement may not be warranted and could unfairly restrict your product from allergen-sensitive consumers who would otherwise safely purchase it.

For Shopify merchants, this has a direct implication for your product pages. If your packaged product carries a precautionary "may contain" statement, that information should also appear on your online product listing — ideally in a consistent, structured format that customers can find before they add to cart. Displaying this information clearly online is both responsible practice and increasingly expected by food-allergic consumers who rely on digital product information to make safe purchasing decisions.

Labelling for Imported Products Sold in the US

If your food business imports packaged products from outside the United States for sale to US consumers, FALCPA applies fully to those products. The importer of record bears responsibility for ensuring that imported packaged food meets US allergen labelling requirements — you cannot rely on a foreign manufacturer's home-market labelling to satisfy FDA requirements, even if that labelling meets EU, Australian, or Canadian allergen standards.

This creates practical challenges because the major allergen lists differ between jurisdictions. The EU's fourteen regulated allergens include celery, mustard, lupin, molluscs, and sulphur dioxide at concentrations above ten parts per million — none of which are currently mandated under FALCPA. Conversely, US labelling must use common English names for allergens, and species-level declaration requirements for fish and shellfish have no direct equivalent in many other regulatory frameworks. A label fully compliant in the country of manufacture may still require modification or supplementary labelling before it can legally be sold in the US.

The safest approach for importers is to work directly with your overseas manufacturers to produce US-specific label versions, or to apply compliant English-language sticker overlays that add the required allergen declarations without obscuring other mandatory label information. Keep records of every imported product's allergen assessment and the basis on which you determined the US label to be compliant — if the FDA ever queries a product, documented due diligence is your most important defence.

Documenting Your Allergen Compliance Programme

Food businesses that operate without documented allergen management are exposed to significant regulatory and commercial risk. The FDA can and does inspect food manufacturers and importers, and allergen labelling accuracy is a focus area. More practically, a documented allergen compliance programme is increasingly a prerequisite for supplying retailers, foodservice distributors, and online marketplaces — many of which require allergen declarations to be submitted as structured data alongside product listings.

Documentation should cover four key areas: your allergen ingredient register (a complete list of every allergen present in every ingredient you purchase), your product allergen matrix (a cross-reference of every finished product against all nine major allergens), your label review records (evidence that every label has been checked against current ingredient data), and your supplier communication records (written allergen declarations received from each supplier). These four documents, kept current and version-controlled, form the backbone of a defensible allergen compliance programme.

For Shopify merchants managing a product catalogue online, keeping your digital allergen declarations synchronised with your physical label data is an additional discipline that many businesses handle poorly. When a label is updated following a reformulation, the product page must be updated at the same time — not days or weeks later. Building a workflow that treats the online product page as part of the label update process, rather than an afterthought, is one of the most effective steps an online food business can take to reduce compliance risk.

Summary

FALCPA, as updated by the FASTER Act, sets clear requirements for allergen disclosure on US packaged food. With sesame now included as the ninth major allergen, businesses that haven't reviewed their labelling since 2022 should do so immediately. Online food businesses selling to US customers should treat their product pages with the same rigour as their physical labels.

Try SafeServe free on the Shopify App Store and ensure your US allergen declarations are always accurate and up to date.

Try Allergen Matrix free at saltai.app — no credit card required.