Allergen management — plan, verification testing and honest labelling

Plain-language summary

A documented allergen plan with a full allergen list, a cross-contact risk assessment, validated and verified controls, testing where profiles share a line, disciplined use of precautionary labels, and training for everyone.

What the clause is really asking

Allergens cause more recalls than any other hazard, so FSSC spells the plan out. It must list every allergen on site in raw materials and finished products, assess all sources of cross-contamination, define the controls, and keep validation and verification as documented information. Where products with different allergen profiles share a production area, verification testing — surface, air and/or product testing — is required at a risk-based frequency. Precautionary ('may contain') labels are allowed only where the risk assessment still shows a consumer risk after every control has been applied; the label never excuses you from the controls or the testing. All personnel get allergen awareness plus training on the controls in their own area. The plan is reviewed at least annually and after any allergen-related recall or withdrawal, a significant change, or industry trends — using trended verification data as an input. For feed (D) and pet food, the clause may be marked not applicable only where the country of sale has no allergen legislation for it and no allergen claim is made.

What auditors look for

Auditors take a shared line, ask for the allergen changeover validation, then ask for the verification testing that proves it keeps working. They read a 'may contain' label and ask for the risk assessment that justifies it. They stop operators and ask what allergens are on the line today and what the control is. They ask for the annual review and the trended test data behind it.

Typical evidence

Allergen matrix (inputs and outputs); cross-contact risk assessment; control measures with validation studies; verification testing schedule and results, trended; precautionary-labelling decision records; allergen awareness and area-specific training records; annual/triggered review records

How to comply — recommendations

Build the allergen matrix from actual raw-material specifications, not memory. Validate each changeover once, then verify on a risk-based schedule and trend the results — auditors want the trend, not a single clean swab. Decide precautionary labels case by case in writing. Train everyone at induction and area-specifically, and put the review on the management-review calendar.

Common nonconformities

Allergen list missing finished-product profiles; validation with no ongoing verification testing on shared lines; 'may contain' used instead of controls; no area-specific training; plan not reviewed after an allergen recall or industry alert

Resources for this clause

• ArticleHACCP plan explained: the 12 steps, a worked hazard analysis, and where CCPs end and OPRPs begin
• ArticleFSSC 22000 Version 7 explained: what changed, the dates that matter, and how to prepare for the upgrade audit
• Toolkit · $29HACCP Plan ToolkitA complete HACCP study in one workbook: rate likelihood and severity and the significance answers itself; answer five plain-English questions and the workbook tells you whether it is a CCP, an OPRP or a prerequisite programme.
• Free downloadFSSC 22000 V7 Gap ChecklistEvery change from FSSC 22000 Version 6 to Version 7 as a tracked project — V6 audits end on 30 April 2027, and this is the file that gets a site to its upgrade audit with the evidence ready.
• Free downloadHACCP Flow & Product Description TemplateThe first five steps of a HACCP study — the two documents every hazard you find later is built on, and the two where more studies go wrong than anywhere else.
• Free masterclass · ~18 minFSSC 22000 V7 MasterclassV6 audits end 30 April 2027. Every V7 change clause by clause — the new ISO 22002 family, allergen testing, culture evidence, fraud/defence competence, food loss & waste targets — and a 90-day plan.