Natasha's Law Enforcement: How the FSA Checks Compliance
Natasha's Law came into force on 1 October 2021, fundamentally changing how food businesses in England, Wales, and Northern Ireland label prepacked for direct sale (PPDS) food. Named after Natasha
Natasha's Law came into force on 1 October 2021, fundamentally changing how food businesses in England, Wales, and Northern Ireland label prepacked for direct sale (PPDS) food. Named after Natasha Ednan-Laperouse, who died in 2016 after eating a Pret A Manger baguette that contained undeclared sesame, the legislation requires full ingredient lists and allergen emphasis on every PPDS item. Two years on from implementation, many food business owners still hold a quiet assumption: that enforcement is patchy, low-priority, or largely theoretical. That assumption is increasingly dangerous.
The Food Standards Agency (FSA) and its devolved equivalents — Food Standards Scotland operates separately — coordinate with local authority environmental health officers to check compliance across markets, cafés, bakeries, food-to-go outlets, and online food businesses. Inspections are not always announced, and the consequences of non-compliance extend well beyond a polite warning letter. Civil penalties, improvement notices, and prosecution are all live options for officers who find unlabelled or mislabelled PPDS products.
This post explains exactly how the FSA and local authorities enforce Natasha's Law, what inspectors look for during visits, what penalties businesses realistically face, and how you can make your Shopify-based food operation audit-ready before someone else makes that decision for you.
What "Enforcement" Actually Means Under Natasha's Law
Enforcement of Natasha's Law does not sit with the FSA directly in most cases — the FSA sets national policy, funds research, and coordinates intelligence, but the on-the-ground work is carried out by Local Authority Environmental Health Officers (EHOs). Every food business registered in the UK falls under a local authority's jurisdiction, and those EHOs have statutory powers to enter premises, inspect records, take samples, and initiate legal proceedings. Understanding this two-tier structure is essential, because it means enforcement priorities can vary by borough or district, even though the law itself is uniform.
In practice, EHOs identify compliance issues through several routes. Reactive inspections are triggered by complaints — a customer reporting an allergic reaction, a tip-off from a competitor, or a social media post flagging an unlabelled product can all generate a visit. Proactive inspections follow the Food Hygiene Rating scheme's scheduling logic, with higher-risk businesses visited more frequently. Online marketplaces and Shopify stores selling PPDS food are increasingly on EHO radar, with several local authorities running targeted sweeps of food businesses operating through digital channels.
When an EHO identifies a Natasha's Law breach, the Food Safety Act 1990 and the Food Information Regulations 2014 both provide the legal framework for action. Officers can issue an improvement notice requiring remediation within a set timeframe, seize or detain non-compliant stock, or refer the case for prosecution. The FSA publishes enforcement data annually, and the trend since 2021 shows a steady increase in allergen-related improvement notices issued across England and Wales.
What Inspectors Look for on a Typical Visit
When an EHO visits a food business to check Natasha's Law compliance, they follow a structured approach. The first priority is identifying which products qualify as PPDS food — items packaged on the same premises where they are sold, before a customer orders them. A fresh sandwich wrapped in cling film and sitting in a chiller cabinet is PPDS. A cake baked to order and boxed in front of the customer is not, though loose food allergen disclosure rules still apply. Getting this categorisation right is the foundation of everything else.
Once PPDS products are identified, the inspector checks that each item carries a label with the product's name, a full ingredient list, and allergens emphasised — typically in bold, italics, or a contrasting colour. They will look at whether the label is permanently attached to the packaging or printed clearly on it, not simply tucked inside a bag. They may also check that your allergen information is consistent between your physical labelling and any digital menus, websites, or Shopify product listings used to promote or sell those items, since inconsistency raises immediate red flags.
Inspectors also assess your allergen management processes more broadly. They may ask to see your supplier specifications, your internal allergen matrix, staff training records, and any documented cleaning procedures for allergen cross-contamination control. A business that has labelled products correctly but cannot demonstrate how it manages undeclared allergen risk in the kitchen will still receive adverse findings. The documentation trail matters as much as the label itself.
The Real Penalties Businesses Face
Many food business owners assume a first violation results in a warning and nothing more. This is sometimes true, but it depends entirely on the severity of the breach and the attitude of the officer's local authority. Improvement notices are the most common first-stage enforcement action for Natasha's Law failures. These are legally binding documents requiring you to fix a specific problem — relabel your PPDS products, introduce a documented allergen management system — within a stated period, typically 14 days for straightforward labelling issues.
Failure to comply with an improvement notice escalates the matter significantly. At that stage, a local authority can prosecute under the Food Information Regulations 2014, which carries unlimited fines in a magistrates' court for the most serious offences. Crown Court prosecution is also possible for cases involving aggravated risk to public health. Beyond fines, a conviction can result in the business appearing on the FSA's public enforcement register, which is searchable online and visible to customers, wholesalers, and potential retail partners like the premium grocers and hospitality clients many food businesses aspire to supply.
In cases where a product has already reached consumers and poses an imminent risk, EHOs can issue a Prohibition Notice or apply for an emergency prohibition order through a magistrates' court. This can result in a business being closed or specific food products being withdrawn from sale immediately, with no time allowed for remediation. The financial and reputational cost of a withdrawal — recalling stock, notifying customers, managing press coverage — vastly exceeds the cost of getting labelling right in the first place.
How Online and Shopify-Based Food Businesses Are Assessed
There is a persistent misconception that selling food online sits in a regulatory grey area. It does not. Any food business selling PPDS food through a website or Shopify store — click-and-collect sandwiches, pre-made meal kits, artisan baked goods — is subject to the same Natasha's Law requirements as a physical shop. The FSA's guidance is explicit: the label must be on the packaging at the point the customer receives the product, and allergen information must be accurate and accessible throughout the customer journey, including on the product listing page.
EHOs increasingly conduct digital audits alongside physical visits. An officer can review your Shopify storefront before arriving at your premises, cross-referencing the allergen information listed online against what they find on physical packaging. Discrepancies between online descriptions and physical labels are treated as compliance failures in their own right, even if the physical label is technically correct. This means your Shopify product descriptions, ingredient lists, and allergen warnings all need to be maintained with the same rigour as your physical labelling.
The operational challenge for food businesses using Shopify is that product information lives in multiple places — the product description, metafields, third-party apps, and potentially an external PDF menu — and these can drift out of sync as recipes change. Using a structured tool like Allergen Matrix to manage allergen data centrally means that when a recipe changes, the update flows through your Shopify store consistently, reducing the risk of the kind of discrepancy that draws enforcement scrutiny.
Preparing Your Business for an Unannounced Inspection
The businesses that fare best in unannounced EHO visits are those that treat compliance as an operational routine rather than a crisis-response activity. Start by conducting your own internal PPDS audit: walk through every product you make, package, and sell, and confirm which items meet the PPDS definition. Photograph your current labels, compare them against the legal requirements for name, ingredient list, and allergen emphasis, and note any gaps in a simple remediation log.
Next, build a documented allergen management system. This does not need to be elaborate. A clear allergen matrix — listing every product and every allergen present, including cross-contamination risk — combined with dated staff training records and signed supplier specification sheets is sufficient to demonstrate to an EHO that your business manages allergen risk systematically. Regulators distinguish between businesses that have made good-faith, documented efforts and those that have done nothing. That distinction matters when an officer is deciding whether to issue an improvement notice or escalate.
Finally, set a calendar reminder to review your allergen documentation every time a recipe changes, a new supplier is introduced, or a seasonal product is added to your menu. Allergen compliance is not a one-time project — it is a living obligation. Businesses that build this review cycle into their operations, rather than treating it as a box ticked at launch, are the ones that remain compliant and avoid the operational disruption that an adverse inspection always brings.
Conclusion
Natasha's Law enforcement is real, increasing, and increasingly digital-aware. The FSA and local authority EHOs are actively inspecting food businesses, reviewing online stores, and issuing improvement notices to operators who have not met their PPDS labelling obligations. The consequences — unlimited fines, public enforcement records, product withdrawals — are serious enough to threaten the viability of small food businesses operating on tight margins. The good news is that compliance is entirely achievable with the right systems in place.
The key takeaways: understand which of your products are PPDS, ensure every label carries a full ingredient list with emphasised allergens, keep documentation current and accessible, and make sure your Shopify store reflects the same information as your physical packaging. Do not wait for an inspector to find the gaps.
Try Allergen Matrix free at saltai.app — no credit card required.
SaltAI Team
SaltAI builds focused Shopify apps for food merchants and general merchants. Every app is tested in production at a real food store — including Vanda's Kitchen — before it ships.