US Food Business Regulations on Shopify: FDA, USDA, and State Requirements

The US food regulatory environment is complex, with jurisdiction split between the FDA, USDA, and individual states. Here's what Shopify food merchants need to know about the regulatory framework for selling food online in the United States.

FDA vs USDA Jurisdiction

The FDA regulates most packaged food — everything except meat, poultry, and processed egg products, which fall under USDA's Food Safety and Inspection Service (FSIS). If you sell shelf-stable packaged foods, produce, dairy, or seafood, the FDA is your primary regulator. If you sell meat or poultry products, USDA applies.

FDA Registration for Food Facilities

If you manufacture, process, pack, or hold food for human consumption in the United States, your facility must be registered with the FDA under the Bioterrorism Act. This requirement applies to most food production operations, including small-scale production kitchens. Registration is free and must be renewed biennially.

Labelling Requirements

Federal food labelling requirements under FALCPA (allergens), the Nutrition Labeling and Education Act (NLEA, nutritional information), and FDA regulations (ingredient list, net weight, identity statement, manufacturer information) apply to all packaged food sold in the US. Online food businesses must ensure their Shopify product pages disclose allergen information pre-purchase.

Ensure your US Shopify food store meets FALCPA allergen labelling requirements with SaltAI.

FALCPA and the FASTER Act: Federal Allergen Law

The Food Allergen Labeling and Consumer Protection Act of 2004, known as FALCPA, established the original framework for major food allergen labelling in the United States. It mandated clear disclosure of the eight major allergens — milk, eggs, fish, shellfish, tree nuts, peanuts, wheat, and soybeans — either within the ingredient list or in a separate "Contains" statement. Failure to comply can result in product recalls, FDA warning letters, and significant reputational damage for your brand.

The FASTER Act of 2021 expanded that list by adding sesame as the ninth major allergen, with full compliance required from 1 January 2023. This change caught many small food businesses off guard, particularly those using sesame oil, tahini, or sesame seeds as minor ingredients in sauces, baked goods, and spice blends. If you updated your physical labels but not your Shopify product descriptions, you may still be out of compliance in practical terms, since online pre-purchase disclosure is an expectation regulators and consumer advocates increasingly scrutinise.

For Shopify merchants, the challenge is maintaining allergen accuracy across every product listing, especially when recipes change or suppliers switch ingredients. A manual approach — copy-pasting allergen information into product descriptions — is error-prone and difficult to audit. Using a dedicated tool like Allergen Matrix allows you to manage allergen data centrally and surface it consistently across your storefront, reducing the risk of disclosure gaps that could put customers at risk or expose your business to liability.

Nutrition Facts Panel Requirements

Most packaged food sold in the United States is required to carry a Nutrition Facts panel as mandated by the Nutrition Labeling and Education Act. The FDA updated the Nutrition Facts label format in 2016, with the revised design — featuring a larger calorie count, updated daily values, and the addition of added sugars — becoming mandatory for most manufacturers by January 2020. Small businesses with annual food sales under one million dollars had an extended deadline, but that grace period has now passed for nearly all US food sellers.

Calculating accurate nutrition information requires either laboratory testing or the use of a recognised nutrient database. The FDA permits the use of nutrient databases for recipe-based foods, which makes home-based and small-batch producers eligible to produce compliant panels without expensive lab work. However, the calculations must be done carefully and documented, because inspectors and retailers will expect your declared values to be defensible. Many Shopify food merchants underestimate how much time and expertise this process demands.

For online sellers specifically, there is a growing expectation — and in some retail contexts, a contractual requirement — that nutritional information be available on the product page, not only on the physical label. Wholesale buyers, marketplace platforms, and increasingly, informed consumers expect to see this data before purchasing. If your Shopify store lists full ingredient and nutritional information alongside your allergen disclosures, you are positioning your brand as transparent and professional, which supports both compliance and customer trust.

The Preventive Controls Rule and Food Safety Plans

Under the FDA's Food Safety Modernization Act, most food manufacturers are required to develop and implement a written food safety plan. This requirement, established through the Preventive Controls for Human Food rule, covers facilities that must register with the FDA and requires them to identify hazards, implement preventive controls, monitor those controls, and maintain records demonstrating the plan is working. For small businesses and very small businesses, the deadlines to comply were phased in between 2016 and 2018, meaning the rules apply now regardless of business size.

A food safety plan is not a single document but an ongoing system. It includes a hazard analysis, written preventive controls, a supply chain programme where applicable, a recall plan, and monitoring and verification procedures. If you are producing food from a licensed commercial kitchen or a dedicated production facility, your food safety plan should be in place, reviewed regularly, and updated whenever you add new products or change processes. Regulators can request this documentation during inspections, and the absence of a plan is treated as a serious violation.

Many small Shopify food merchants assume these requirements only apply to large manufacturers, but the FSMA rules were written explicitly to cover smaller producers. Very small businesses — defined as those with fewer than one million dollars in annual food sales — have some modified requirements, and certain exemptions exist for facilities that sell primarily direct to consumers within the same state. Understanding precisely where your business falls within these definitions is important, and consulting with a food safety consultant or your state's department of agriculture can clarify your obligations before an issue arises.

Interstate Commerce and State-Level Licensing

Selling food across state lines via a Shopify store means your business is engaged in interstate commerce, which brings it within federal regulatory jurisdiction regardless of where you are based. This is a critical point that many new food entrepreneurs miss: if you ship a jar of jam from your home state to a customer in another state, you are no longer operating solely under your home state's cottage food or home kitchen exemptions. Federal labelling and facility registration requirements apply from the moment your product crosses state lines.

At the same time, your home state still has its own licensing and inspection requirements for food production. Most states require food businesses operating above the cottage food threshold to hold a food manufacturer's licence, a food handler's permit, or equivalent credentials issued by the state department of agriculture or department of health. These licences typically require a facility inspection before they are granted and annual renewal thereafter. Operating without the appropriate state licence, even when federal registration is in place, can result in fines and orders to cease production.

Some states also have specific requirements for food sold online that go beyond federal standards. California, for instance, has strict labelling requirements for certain substances including acrylamide warnings under Proposition 65, which can apply to foods like coffee, roasted nuts, and some baked products. New York and other states have their own additional allergen or nutritional labelling rules that can layer on top of federal requirements. If you ship nationally, building a compliance checklist that accounts for destination-state requirements is a prudent step that protects your business as it grows.

Product Recalls and Voluntary Correction Procedures

Understanding how the recall process works is something no food business wants to need urgently but every food business should understand in advance. The FDA has authority to mandate recalls under FSMA, though most recalls in the United States are conducted voluntarily after a manufacturer or regulator identifies a safety issue. If you discover that a batch of your product was produced with an undeclared allergen, was contaminated, or was mislabelled in a material way, notifying the FDA promptly and initiating a voluntary recall is strongly advisable — both legally and reputationally.

For Shopify merchants, the operational challenge of a recall is significant. You need to be able to identify which customers purchased an affected product, contact them quickly, and provide clear instructions. This requires good order records, customer contact information, and ideally lot code or batch tracking on your products and labels. Building these systems before you need them is far easier than constructing them under the pressure of an active recall situation. Many small food businesses use spreadsheet-based tracking initially, then graduate to more robust inventory and production management tools as they scale.

Maintaining clear and accurate product information on your Shopify storefront also plays a role in recall preparedness. If your product descriptions, ingredient lists, and allergen declarations are well-maintained and up to date, you have a clearer picture of what was sold, to whom, and with what declared information. Tools that help you manage and audit allergen data across your product catalogue — like Allergen Matrix — contribute directly to this kind of operational readiness, making it easier to identify exposure quickly if a compliance issue ever arises.

---

Try Allergen Matrix free at saltai.app — no credit card required.