Natasha's Law Audit: How to Conduct an Annual Allergen Compliance Review

Allergen compliance is not a one-time task. Ingredients change, suppliers change, recipes evolve — and every change is a potential allergen risk if documentation is not updated. An annual allergen compliance audit keeps your Natasha's Law compliance current.

What an Annual Audit Should Cover

1. Label review: Check every PPDS product label against your current recipe. If the recipe has changed since the last label update, the label needs updating.

2. Ingredient supplier review: Review all ingredient suppliers. Have any changed their formulations or introduced new cross-contact risks? Request current allergen specifications from every supplier annually.

3. Staff training records: Confirm allergen awareness training has been completed for all food handling staff in the past 12 months. New starters should be trained at induction.

4. Customer-facing information: Check your website, menu, and any printed materials for accuracy. Outdated allergen information on a live website is a liability.

5. Cross-contact procedures: Review cleaning procedures and equipment use to confirm cross-contact risks are being managed as documented.

Documenting Your Audit

Keep a written record of your annual audit: what was reviewed, what was changed, and who conducted the review. This documentation demonstrates due diligence if a complaint or inspection occurs.

Use Allergen Matrix to maintain and audit your allergen records throughout the year.

When to Trigger an Out-of-Cycle Audit

An annual audit is your baseline, but allergen compliance should not wait twelve months if something significant changes within your business. Any reformulation of an existing product, introduction of a new ingredient, or change of supplier should prompt an immediate targeted review rather than being held over until the scheduled annual cycle. Treating the annual audit as the only checkpoint is one of the most common compliance mistakes food businesses make.

Supplier changes are a particularly high-risk trigger. When a supplier updates their own formulation without notifying you directly, the allergen profile of an ingredient you have used for years can change overnight. Requesting updated allergen specification sheets at the point of switching suppliers — and again at each annual audit — closes this gap. Building this request into your onboarding process for any new supplier creates a consistent paper trail that demonstrates proactive due diligence.

Product launches also require their own allergen review before going live, not after. If you are selling PPDS food through a Shopify store, any new product added to your catalogue should be reviewed, labelled, and recorded before it reaches a customer. Linking your product launch checklist to your allergen documentation process ensures nothing is published without the correct information in place. A rolling audit culture, rather than a single annual event, is what genuinely robust compliance looks like in practice.

How to Structure Your Audit Documentation

Good audit documentation does not need to be complicated, but it does need to be consistent and retrievable. At its simplest, an audit record should capture the date the review was conducted, the name of the person responsible, a list of every PPDS product assessed, and the outcome for each — whether the existing label and documentation were confirmed as accurate, or whether a change was required. Without this structure, audit records become difficult to interpret when reviewed months later by an environmental health officer or a legal representative.

Where changes are identified during the audit, the documentation should record what specifically changed, what action was taken, and when the updated label or record was implemented. Vague entries such as "recipe reviewed — OK" do not demonstrate that a genuine check was carried out. Specific entries, such as "supplier allergen spec requested and received 14 March — no changes to allergen profile confirmed," carry far more weight and show that the review process was substantive rather than procedural.

Storing your audit documentation in a centralised, accessible location matters as much as the quality of the records themselves. Physical folders stored in a back office can be lost, damaged, or inaccessible at the moment they are needed most. Digital records that can be exported, shared, and timestamped offer significantly better protection. Using Allergen Matrix to maintain your product allergen data throughout the year means your audit documentation and your live product records are held in the same place, reducing the risk of discrepancy between what your labels say and what your records show.

Reviewing Your Online Allergen Information

For food businesses selling through Shopify, the website is often the first point of contact a customer has with your allergen information — and for customers with severe allergies, it may be the deciding factor in whether they purchase. This makes your online product pages a critical part of any annual allergen audit. Every product description that references ingredients, allergens, or dietary suitability should be checked against your current recipe and supplier specifications, not simply assumed to be accurate because it was correct when first written.

One of the most common sources of error is copy that was accurate at the time of writing but has since become outdated due to a quiet reformulation or supplier switch. A product that was once described as "made without nuts" may no longer carry that assurance if a new ingredient has introduced a cross-contact risk. Customers making purchasing decisions based on that description have no way of knowing the information has changed unless you update it. An annual audit that includes a systematic review of every live product page closes this risk.

Pay particular attention to any allergen statements that use absolute language — phrases such as "free from," "suitable for," or "does not contain." These statements carry significant weight with customers who have allergies and raise the stakes if they are inaccurate. During your audit, cross-reference every such statement against your current allergen matrix to confirm it is still supportable. If a statement can no longer be confirmed with certainty, it should be amended or removed rather than left in place while you investigate further.

Training Your Team to Support the Audit Process

Allergen compliance is not solely the responsibility of whoever owns the business or manages the kitchen. Every person who handles food, processes orders, or answers customer queries about ingredients is a part of your compliance framework, which means your annual audit should also assess whether your team has the knowledge and confidence to support it. Reviewing training records is a core audit task, but a genuinely useful audit goes further than checking whether a training date has been logged.

Consider whether your staff understand not just the fourteen major allergens but also your specific product range and the particular risks associated with your ingredients and production environment. A team member who has completed a generic allergen awareness course but cannot accurately describe the cross-contact risks in your kitchen is not fully equipped. Building product-specific allergen knowledge into your training programme — and refreshing it whenever recipes or suppliers change — creates a more resilient compliance culture than relying on a one-off annual training session alone.

During the audit, it is worth conducting brief informal conversations with staff who handle food to gauge their practical understanding. Ask how they would respond if a customer called with an allergen query, or what they would do if they noticed an ingredient had been substituted during a busy service. The answers reveal whether your documented procedures are genuinely embedded in day-to-day practice. Where gaps are identified, they should be recorded in the audit report with a clear action plan for how and when they will be addressed.

Preparing for an Environmental Health Inspection

An annual allergen compliance audit is also your best preparation for an unannounced environmental health inspection. Officers assessing compliance under Natasha's Law will look for evidence that allergen controls are actively managed — not simply that labels exist. Businesses that can produce a recent audit record, show current supplier allergen specifications, and demonstrate staff training history are in a fundamentally stronger position than those that rely on the argument that nothing has changed since the labels were first produced.

Understanding what inspectors are likely to ask helps you structure your audit to produce the right evidence. Common areas of focus include the accuracy of PPDS labels relative to current recipes, the availability of written allergen management procedures, and evidence that staff have received appropriate training. If you have used Allergen Matrix to maintain your allergen records, you can demonstrate a live, up-to-date allergen matrix for your full product range — which is exactly the kind of documented system that supports a positive inspection outcome.

It is also worth reviewing any previous inspection findings as part of your annual audit. If a previous inspection identified a specific gap — an incomplete supplier specification, an unlabelled product, or a gap in training records — your audit should confirm that the corrective action was completed and that the issue has not recurred. Demonstrating that you respond to feedback and maintain improvements over time signals a compliance culture rather than a reactive one, which carries weight with enforcement officers and builds customer trust in equal measure.

Try Allergen Matrix free at saltai.app — no credit card required.