New York City Allergen Law: A Complete Guide for Food Businesses

Running a food business in New York City means operating under one of the most detailed allergen disclosure frameworks in the United States. While federal law sets baseline requirements through the Food Allergen Labeling and Consumer Protection Act (FALCPA) and its 2023 extension to sesame, New York City layers additional local rules on top — creating obligations that catch many operators off guard. Whether you run a brick-and-mortar restaurant, a ghost kitchen, a catering company, or a food product business selling through Shopify, understanding these requirements is not optional. Non-compliance can result in fines, permit suspensions, and significant reputational damage.

The core challenge for most food business owners is that allergen law is not a single document you can read once and forget. It sits across federal statutes, New York State Department of Health guidelines, and New York City Health Code regulations — and the rules differ depending on whether you are a food manufacturer, a restaurant, or an online retailer shipping packaged goods. Many operators discover the gaps in their compliance only after an inspection, a customer complaint, or a serious incident.

This guide walks you through exactly what New York City allergen law requires, who it applies to, what disclosures you must make, how enforcement works, and what practical steps you can take today to get compliant — including tools that make the process manageable for small and growing teams.

Who Does NYC Allergen Law Apply To?

New York City's allergen disclosure requirements apply to a broader range of food businesses than many operators assume. The New York City Health Code, specifically Article 81, covers food service establishments — any operation that stores, prepares, packages, serves, or sells food directly to consumers in the city. This includes restaurants, cafés, food trucks, market stalls, catering operations, and commissary kitchens. If your business touches food and operates within the five boroughs, you are almost certainly covered.

Packaged food manufacturers and retailers face a different but overlapping set of rules. If you produce food in New York City and sell it packaged — whether in your own shop, through third-party retailers, or online — you must comply with federal FALCPA labeling requirements, which mandate clear disclosure of the Big Nine allergens: milk, eggs, fish, shellfish, tree nuts, peanuts, wheat, soybeans, and sesame. Selling through Shopify does not exempt you from these obligations; the FDA considers your product listing and packaging as part of the labeling ecosystem, and shipping to New York consumers brings state and city expectations into play as well.

Ghost kitchens and delivery-only operations are a grey area that regulators are actively clarifying. These operations require a food service establishment permit, which means Health Code Article 81 applies fully. If you are running a delivery brand from a shared kitchen space, you carry the same allergen disclosure responsibilities as a conventional restaurant — including staff training requirements and menu disclosure obligations that are easy to overlook when you have no front-of-house team.

The 14 Allergens vs. The Big Nine: Understanding the Difference

One of the most common points of confusion for food businesses operating across markets is the mismatch between US allergen law and UK/EU allergen law. In the United States, the FDA currently mandates disclosure of nine major food allergens. In the United Kingdom and across the European Union, food businesses must declare fourteen allergens — adding celery, lupin, molluscs, mustard, and sulphur dioxide/sulphites to the list. If your Shopify store ships to both US and UK customers, or if you are a London-based merchant selling into the New York market, you need to manage both frameworks simultaneously.

For New York City specifically, the operative federal list of nine allergens is the baseline you must meet at minimum. However, many NYC food businesses — particularly those serving diverse international populations or operating in competitive premium markets — choose to declare all fourteen allergens voluntarily. This is not just good practice from a customer care perspective; it is increasingly a commercial expectation from buyers, retailers, and corporate clients who operate under UK or EU procurement standards.

Understanding the distinction also matters for product development. If you are formulating a new product and plan to sell it both in New York and through UK-based channels — including marketplaces or Shopify stores serving British customers — building your allergen matrix around all fourteen allergens from the start is significantly more efficient than retrofitting labels and documentation later. Tools like Allergen Matrix are designed to handle multi-jurisdiction allergen tracking in exactly this scenario, giving you a single source of truth across your entire product range.

Menu Disclosure Requirements for NYC Restaurants

New York City requires food service establishments to provide allergen information to customers upon request — and in practice, this means having accurate, accessible records for every menu item. Under Health Code §81.08, establishments must be able to identify which menu items contain the major allergens and communicate this information clearly to customers who ask. This sounds straightforward, but for kitchens running twenty or more dishes with rotating specials, maintaining accurate allergen records is a genuine operational challenge.

The requirement goes beyond simply knowing your ingredients. You must account for cross-contact — the transfer of allergen proteins from one food to another through shared equipment, surfaces, or cooking oil. A fryer used for both breaded chicken and plain chips, for example, creates a cross-contact risk for wheat and egg that must be disclosed if a customer with a relevant allergy inquires. NYC Health Department inspectors assess allergen practices as part of routine inspections, and deficiencies in this area contribute to your overall inspection score and letter grade.

Practically speaking, the most reliable way to meet this requirement is to document every dish in a structured allergen matrix — a grid that maps each menu item against each allergen, including cross-contact risks. This document should be reviewed whenever your recipes, suppliers, or kitchen processes change. Training front-of-house and back-of-house staff to use this document correctly, and to escalate allergy queries to a designated lead, is equally important. Many NYC restaurants laminate a summary version for kitchen stations and maintain a digital version that can be updated centrally.

Allergen Training Requirements in New York City

New York City is one of the few US jurisdictions with a mandatory allergen training requirement for food service workers. Local Law 31 of 2017 amended the Health Code to require that all food service establishments ensure that at least one supervisory-level employee per shift has completed a food protection course that includes allergen awareness. This is separate from, and in addition to, general food handler requirements.

The NYC Department of Health and Mental Hygiene offers an approved Food Protection Course that covers allergen topics alongside food safety fundamentals. Completion is recorded and inspectors may ask for documentation during site visits. Businesses that cannot demonstrate that a trained supervisor was present during a given shift may receive violations that affect their inspection grade. For multi-location operators, ensuring consistent training compliance across sites requires systematic record-keeping and scheduling oversight.

Beyond the legal minimum, leading operators in New York are investing in more comprehensive allergen training that goes beyond the course content. This includes practical simulations of allergy queries, clear protocols for communicating with kitchen staff during service, and defined procedures for handling situations where a dish cannot be made safe for a specific customer. The investment in training is measurably worth it — not just for compliance, but because it reduces the likelihood of serious incidents that carry far greater costs in liability, legal fees, and reputational damage than any training programme.

Online Food Sales and Shopify Compliance

Selling food products through Shopify in New York — or shipping to New York customers from elsewhere — creates a specific set of compliance obligations that many e-commerce operators underestimate. Federal FALCPA requirements apply to packaged food sold online in exactly the same way they apply to retail shelf products. Your product pages, digital labels, and physical packaging must all accurately reflect allergen content, and any discrepancy between them creates both regulatory risk and consumer trust problems.

The FDA's guidance on internet food sales clarifies that the label presented to the consumer at the point of purchase — including online product descriptions — is considered part of the labelling ecosystem. This means your Shopify product descriptions should accurately list allergens, not simply defer to the physical packaging that arrives with the order. If a customer makes a purchasing decision based on your website content and subsequently experiences an allergic reaction, the gap between your digital and physical labelling becomes legally significant.

For Shopify merchants managing a catalogue of food products, maintaining allergen accuracy across product pages manually is slow, error-prone, and difficult to audit. A structured allergen management system that feeds accurate data directly into your product listings dramatically reduces both the administrative burden and the compliance risk. Building this infrastructure early — before you scale to dozens or hundreds of SKUs — is considerably easier than retrofitting it later under regulatory pressure.

Penalties and Enforcement in New York City

The NYC Department of Health and Mental Hygiene enforces food safety and allergen compliance through routine inspections, complaint-driven investigations, and targeted enforcement programmes. Violations are scored on a points system, with more serious infractions attracting higher point values. Accumulating enough points results in a lower letter grade — A, B, or C — which must be prominently displayed at your premises and significantly affects customer footfall and revenue.

Allergen-related violations can attract fines ranging from several hundred to several thousand dollars per infraction, depending on severity and whether the violation is a repeat offence. Inspectors have discretion to impose immediate closure orders if they identify conditions that represent an imminent public health hazard — and an undisclosed allergen in food served to a customer with a known allergy would meet that threshold. Beyond regulatory penalties, a single serious allergic reaction incident can expose your business to civil litigation with damages that dwarf any inspection fine.

The enforcement environment in New York City has become more rigorous in recent years, partly in response to high-profile allergen incidents nationally and growing public awareness. Businesses that treat allergen compliance as a box-ticking exercise rather than a genuine operational priority are increasingly visible to inspectors — and to customers who share their experiences publicly. The reputational cost of a visible allergen failure in a city as connected and competitive as New York can be permanent.

Conclusion

New York City's allergen law is layered, specific, and actively enforced — and it applies whether you run a restaurant, a packaged food brand, or an online food business selling through Shopify. The key takeaways are clear: know which allergens you must declare, maintain accurate and up-to-date allergen documentation for every product and dish, ensure at least one trained supervisor per shift can handle allergen queries correctly, and treat your digital product listings with the same rigour as your physical labels. Compliance is not a one-time task — it requires systems, regular reviews, and a trained team that understands the stakes. Building those systems now, before an inspection or incident forces your hand, is always the right decision.

Try Allergen Matrix free at saltai.app — no credit card required.