Allergen management — plan, verification testing and honest labelling
Plain-language summary
A documented allergen plan with a full allergen list, a cross-contact risk assessment, validated and verified controls, testing where profiles share a line, disciplined use of precautionary labels, and training for everyone.
What the clause is really asking
Allergens cause more recalls than any other hazard, so FSSC spells the plan out. It must list every allergen on site in raw materials and finished products, assess all sources of cross-contamination, define the controls, and keep validation and verification as documented information. Where products with different allergen profiles share a production area, verification testing — surface, air and/or product testing — is required at a risk-based frequency. Precautionary ('may contain') labels are allowed only where the risk assessment still shows a consumer risk after every control has been applied; the label never excuses you from the controls or the testing. All personnel get allergen awareness plus training on the controls in their own area. The plan is reviewed at least annually and after any allergen-related recall or withdrawal, a significant change, or industry trends — using trended verification data as an input. For feed (D) and pet food, the clause may be marked not applicable only where the country of sale has no allergen legislation for it and no allergen claim is made.
What auditors look for
Auditors take a shared line, ask for the allergen changeover validation, then ask for the verification testing that proves it keeps working. They read a 'may contain' label and ask for the risk assessment that justifies it. They stop operators and ask what allergens are on the line today and what the control is. They ask for the annual review and the trended test data behind it.
Typical evidence
Allergen matrix (inputs and outputs); cross-contact risk assessment; control measures with validation studies; verification testing schedule and results, trended; precautionary-labelling decision records; allergen awareness and area-specific training records; annual/triggered review records
How to comply — recommendations
Build the allergen matrix from actual raw-material specifications, not memory. Validate each changeover once, then verify on a risk-based schedule and trend the results — auditors want the trend, not a single clean swab. Decide precautionary labels case by case in writing. Train everyone at induction and area-specifically, and put the review on the management-review calendar.
Common nonconformities
Allergen list missing finished-product profiles; validation with no ongoing verification testing on shared lines; 'may contain' used instead of controls; no area-specific training; plan not reviewed after an allergen recall or industry alert
Related clauses
ISO 22000 8.2 (PRPs), 8.5.2 (hazard identification), 8.5.4 (hazard control plan); ISO 22002-1:2025 (allergen management); FSSC 22000 2.5.2, 2.5.9
Get the free ISO 9001:2026 Readiness Scorecard
Free, instant download. We'll only email you the occasional practical quality update — no spam, unsubscribe anytime.
Qlause provides interpretive guidance only and is not a substitute for the standard. Refer to your licensed copy of the relevant standard for the authoritative text.