Natasha's Law and Vending Machines: What the Law Says

If you operate a vending machine that sells food, you may be sitting on a legal compliance problem you don't fully know about yet. Since Natasha's Law came into force in England, Wales, and Northern Ireland on 1 October 2021, thousands of food businesses have overhauled their labelling processes — but vending machine operators have often been left confused about exactly where they stand. The law was introduced following the death of Natasha Ednan-Laperouse, a teenager who suffered a fatal allergic reaction after eating a Pret A Manger baguette that carried no allergen information on its packaging. Parliament's response was unambiguous: full ingredient and allergen labelling must appear on the food itself, not on a nearby poster or a menu board.

The problem for vending machine operators is that the machines complicate every assumption the law makes. Food is pre-packaged, yes — but labelling is often applied at a central kitchen, the machine itself is unstaffed, and customers have no opportunity to ask a member of staff about ingredients before they purchase. That combination of factors creates a specific compliance challenge that many operators have not yet fully resolved.

This post explains exactly what Natasha's Law requires from vending machine operators, how the rules interact with the PPDS (Pre-Packed for Direct Sale) category, and what practical steps you can take today to protect your customers and your business.

What Natasha's Law Actually Covers — and What It Doesn't

Natasha's Law applies specifically to food that is pre-packed for direct sale, known as PPDS. This means food that is packaged at the same premises from which it is sold, before the customer selects or orders it. A sandwich made in a café kitchen and placed in the chiller display before a customer picks it up is PPDS. So is a wrap assembled in the morning and loaded into a vending machine on the same premises later that day. The law requires that every PPDS product must carry a full ingredients list with the 14 major allergens emphasised — typically in bold, italics, or a contrasting colour — directly on the packaging itself.

What the law does not cover is pre-packed food in the traditional sense — products manufactured and packaged at a factory, sealed in branded packaging, and sold to multiple retail outlets. Think of a Walkers crisp packet or a Cadbury bar loaded into a vending machine. Those products are governed by separate retained EU food labelling regulations, which already required full ingredient and allergen labelling on factory-sealed packaging. If your vending machine sells only factory-sealed branded products, Natasha's Law does not create new obligations for you — though you should still verify that all packaging is compliant with existing pre-packed labelling rules.

The grey zone that catches most vending machine operators is when machines are stocked with food made in their own kitchen or a central production facility. If the machine is located on the same premises where the food was prepared, PPDS rules almost certainly apply. If food is prepared at a central kitchen and transported to machines at different locations, the rules may shift — but that does not mean you are exempt, and we will explore that distinction in detail below.

The Same Premises Rule and Why Location Matters

The same premises distinction sits at the heart of how Natasha's Law applies to vending machines. The Food Standards Agency (FSA) guidance defines "same premises" broadly — it refers to the same site or establishment, not just the same room. So if a hospital trust has a central catering kitchen on one floor and vending machines in corridors throughout the building, the FSA would likely consider those machines to be on the same premises. In that scenario, any PPDS food stocked in those machines must carry full ingredient and allergen labelling under Natasha's Law.

Where it gets more complex is multi-site operations. A catering company that prepares food at a single facility and distributes it across vending machines at corporate offices, train stations, or universities is operating across different premises. In that situation, the food technically moves from one premises (the kitchen) to another (the vending location), which means it may no longer qualify as PPDS. Instead, it may fall under the category of pre-packed food, triggering a different — but equally rigorous — set of labelling obligations under retained EU Regulation 1169/2011.

The practical takeaway here is simple: the location of your kitchen relative to your machines determines which legal framework applies, and both frameworks require thorough allergen disclosure. Do not use the "different premises" interpretation as a reason to reduce your labelling standards. If your food is prepared centrally and sent to remote machines, consult the FSA guidance directly and consider seeking advice from your local authority's Environmental Health team. The FSA has published detailed technical guidance on the PPDS definition, and it is publicly available at food.gov.uk.

What Must Actually Appear on the Label

Whether your vending machine food falls under PPDS or pre-packed rules, the allergen labelling obligations are substantive and specific. For PPDS food, every pack must display the name of the food and a full ingredients list in which the 14 major allergens are emphasised. The 14 allergens under UK law are: celery, cereals containing gluten (wheat, rye, barley, oats), crustaceans, eggs, fish, lupin, milk, molluscs, mustard, peanuts, sesame, soybeans, sulphur dioxide and sulphites (above 10mg/kg), and tree nuts. Each of these must be visually distinguishable from the rest of the ingredients list — bold typeface is the most common approach.

The label must appear on the packaging itself or on a label attached to the packaging. It cannot legally appear only on the vending machine's exterior panel, a nearby wall poster, or a QR code that links to a website. While digital menus and QR codes are useful supplementary tools, the FSA is clear that they do not satisfy the labelling requirement for PPDS food. The allergen information must be physically present on the product the customer takes away. This requirement is non-negotiable.

For food businesses managing a wide range of products across multiple vending sites, tracking which recipe contains which allergens — and keeping that information accurate as recipes change — is genuinely difficult. A structured approach using a tool like Allergen Matrix can help you build and maintain accurate allergen records for every product, making it significantly easier to produce compliant labels at scale and update them when formulations change.

Enforcement, Penalties, and Real-World Risk

Local authorities are responsible for enforcing Natasha's Law, and Environmental Health Officers (EHOs) have the power to inspect your premises, examine your food labelling, and issue improvement notices if they find non-compliance. In serious cases, businesses can face prosecution and unlimited fines under the Food Safety Act 1990 and associated regulations. Beyond fines, the reputational damage from a publicised allergen incident — or an enforcement notice — can be catastrophic for a food business of any size.

The risk is not purely theoretical. Since Natasha's Law came into force, local authorities across England have been conducting targeted inspections of food businesses, including sites with vending machines. The FSA has also signalled that allergen labelling enforcement remains a priority area. A single incident involving a customer with a severe allergy — anaphylaxis can occur within minutes — can result in a fatality, a coroner's inquest, and civil litigation, in addition to criminal prosecution. Businesses have faced legal action where labels were present but inaccurate, not just where they were absent entirely.

The sensible position is to treat allergen labelling as a critical safety process, not a paperwork exercise. Train whoever prepares your food and applies your labels to understand that accuracy is a safety issue. Review your labelling every time a recipe changes, a supplier changes, or a new product is added to your range.

Practical Steps for Vending Operators to Get Compliant

Getting compliant does not require a legal team or an expensive consultant — it requires a clear process. Start by auditing every product in every machine and categorising it as either factory-sealed pre-packed (already labelled at source) or prepared in your own facility (requiring your own labelling). For any product in the second category, create a full recipe card that lists every ingredient, including sub-ingredients from compound ingredients like sauces or dressings. Sub-ingredients are a common source of hidden allergens — a pre-made curry paste, for example, might contain celery or mustard that is not obvious from the product name.

Once you have accurate recipe records, design a label template that meets FSA requirements: product name, full ingredients list, allergens emphasised in bold. If you produce food at volume, invest in a label printer that can generate these labels reliably. Many food businesses use thermal label printers with templates built in Canva or purpose-built software. The cost of a reliable labelling setup is trivial compared to the legal and reputational risk of a compliance failure.

Finally, build a review cycle into your operations. Set a recurring calendar reminder — monthly or quarterly — to check that every active product's label still accurately reflects its current recipe. Supplier ingredient changes happen without warning, and a label that was accurate six months ago may not be accurate today.

Conclusion

Natasha's Law applies to vending machine operators in ways that are specific, enforceable, and genuinely important for customer safety. Whether your machines stock PPDS food or factory-sealed products, you have legal obligations around allergen disclosure — and the consequences of getting it wrong range from enforcement action to irreversible harm to a customer. The core requirements are clear: full ingredients lists, allergens emphasised, labels on the packaging itself, and accurate records that keep pace with recipe changes.

The key takeaways are these: identify which legal category your products fall into, build reliable recipe records, produce compliant labels for every PPDS product, and review your labelling regularly. These are not burdensome steps — they are basic operational hygiene for any food business that takes safety seriously.

Try Allergen Matrix free at saltai.app — no credit card required.