Allergen Control: Step-by-Step

On January 1, 2023, sesame became the ninth major food allergen in the United States. Plants that had run the same allergen program for years suddenly had to re-map every line, re-check every label, and re-train every team — because one more protein now carried the same legal weight as milk, egg, and peanut.

Most allergen programs fail in the same places: an ingredient nobody mapped, a cleaning step nobody validated, a label nobody checked at changeover. This guide walks through the ten steps that keep those gaps closed, written for the people who actually run the line.

Step 1 — Know exactly which allergens you’re managing

US law names nine major food allergens: milk, eggs, fish, crustacean shellfish, tree nuts, peanuts, wheat, soybeans, and sesame. FALCPA (2004) set the original eight; the FASTER Act, signed April 23, 2021, added sesame effective January 1, 2023 (FDA’s Q&A on food allergens including the FASTER Act).

If you export, other lists apply. EU Regulation 1169/2011, Annex II names fourteen — the US nine plus celery, mustard, lupin, molluscs, and sulphites above 10 mg/kg (EU 1169/2011 Annex II). Codex’s global labelling standard (CXS 1-1985, section 4.2.1.4) now lists sesame plus specified tree nuts — almond, cashew, hazelnut, pecan, pistachio, walnut — and lets national authorities add others such as mustard, celery, lupin, and buckwheat.

Sesame changed programs overnight

Sesame hid inside “spice” and “flavor” declarations for years. FASTER pulled it into the light: any form of sesame — seeds, oil with protein, tahini, spice blends — must now be declared by name, and preventive controls must treat it like every other major allergen. Facilities that handled sesame casually in 2022 had to rebuild supplier questionnaires, cleaning procedures, and label reviews within months.

Your Monday-morning action: pull your ingredient list and highlight every item containing any of the nine. If one is missing — a seasoning blend, a bakery improver, a release agent — your map is already wrong.

Step 2 — Build an allergen map of the whole plant

An allergen map shows where each allergen lives: which raw materials contain it, which lines run it, which equipment touches it, where it gets stored. Walk the plant with a floor plan and mark every point. Raw material warehouse, staging areas, mixers, conveyors, packaging lines — all of it.

What a finished map looks like

One page per production line works best. Columns: process step, allergen present, form (powder, liquid, particulate), and the control in place. A bakery running milk buns and sesame rolls on shared ovens would show both allergens at the divider, oven, and cooling rack — with the control listed at each point (dedicated trays, sequencing, validated cleaning).

The allergens your suppliers add for you

Compound ingredients carry surprises. A “natural flavor” can contain milk protein. A spice blend can carry wheat as a carrier. Cocoa powder can be made on shared lines with hazelnut. Your map is only as honest as your supplier data — which is why Step 3 exists.

Step 3 — Lock down your suppliers

FDA’s rules push allergen control upstream: 21 CFR 117.135 expects food allergen controls to cover protection from cross-contact “during storage, handling, and use” and correct finished-product labeling (21 CFR 117.135). If a supplier ships an ingredient with an undeclared allergen, your plant owns the failure.

Ask every supplier for a current allergen statement: which of the nine their ingredient contains, which are handled in their facility, and what controls prevent cross-contact. Re-ask annually and whenever a formulation changes. File the answers where the receiving team can see them — a statement buried in a purchasing folder helps nobody at the dock.

Step 4 — Schedule production from cleanest to dirtiest

Run non-allergen products first, then products containing allergens, ordered from fewest allergens to most. A plant making plain crackers, milk crackers, and peanut cookies runs them in exactly that order. Each run contaminates the line a little more; sequencing means you clean once, at the end, instead of between every product.

Dedicated lines or dedicated equipment for the heaviest allergens (peanut is the usual candidate) removes the question entirely. Where dedication is impossible, schedule allergen runs last in the day or week so cleaning happens before the next allergen-free product.

Step 5 — Clean like an auditor is watching

Cleaning between different allergen profiles is where most cross-contact happens. Two words matter here, and they don’t mean the same thing.

Validation proves the method; verification checks the execution

Validation answers: does this cleaning procedure actually remove the allergen? You prove it once — run the procedure, then test food-contact surfaces with an allergen-specific method (ELISA swab, lateral flow device) and confirm results sit below your target. Change the procedure, the equipment, or the allergen, and you re-validate.

Verification answers: did we clean properly today? Visual inspection, pre-op checklists, ATP swabs, periodic allergen swabs. This runs every shift or every changeover. Verification never replaces validation — it only confirms the validated procedure was followed.

Yeah, but actually: a negative swab isn’t zero

Allergen test kits have limits of detection, and they detect specific proteins — a kit built for peanut won’t see milk. A negative result means “below what this kit can see,” not “allergen-free.” Set your target with that in mind, document which kit and which allergen you tested for, and never let a negative swab talk you out of a scheduled cleaning.

Step 6 — Control rework ruthlessly

Rework containing an allergen can only go back into a product with the same allergen profile. Peanut cookie rework goes into peanut cookies — never into plain crackers. Tag rework containers with the allergen content at the point of generation, not later. “I’ll label it at the end of shift” is how undeclared allergen gets into a product.

Keep a rework log: source product, allergen profile, destination product, quantity, date. Auditors read this log first when they suspect cross-contact, because rework is the quietest route an allergen takes into the wrong product.

Step 7 — Verify labels at every changeover

Wrong labels on right product — or right labels on wrong product — trigger recalls every year. Build label verification into the changeover procedure: the operator compares the label roll or printed label against the production order’s allergen statement before the first case leaves the line. Two people check at the first packaging run after any changeover; one person checking their own setup misses their own mistakes.

Store labels for different allergen profiles separately, and destroy obsolete labels when formulations change. A discontinued “contains milk” label sitting in the label room is a recall waiting for a tired operator.

Step 8 — Train people on what allergens actually do

Codex’s allergen management code (CXC 80-2020) names inadequate employee training as one of the main causes of allergen incidents. Training should cover: which allergens your plant handles, where they are, why cross-contact matters, and what each person’s role is — the mixer operator, the sanitation crew, the label room, the warehouse.

IgE-mediated food allergy symptoms can appear within minutes to one or two hours of eating the food — hives, swelling, breathing difficulty, blood pressure drop, and at worst anaphylaxis, which can kill (CXC 80-2020, hazard characterization). People handle allergens more carefully when they understand the consequence isn’t a failed audit but someone’s emergency room visit.

Step 9 — Use “may contain” only when it’s honest

Precautionary allergen labeling (PAL) — “may contain peanuts,” “made in a facility that also processes milk” — warns consumers about unintended allergen presence. Codex adopted PAL guidelines as an annex to CXS 1-1985: PAL comes only after allergen management practices per CXC 80-2020 are in place, and only where cross-contact still can’t be prevented. PAL is not a substitute for cleaning.

For deciding when PAL is warranted, the VITAL program (Australia/New Zealand, voluntary) gives reference doses based on clinical data — the 2019 scientific panel set ED01 values (protecting 99% of allergic consumers): peanut 0.2 mg, milk 0.2 mg, egg 0.2 mg of protein (VITAL 3.0 Food Industry Guide). The action-level formula is straightforward:

Action level (ppm) = Reference dose (mg) × (1000 ÷ reference amount (g))

Example: cross-contact egg in a biscuit with a 40 g serving — 0.2 × (1000 ÷ 40) = 5 ppm. Below the action level, no PAL statement; at or above it, PAL is warranted. US manufacturers can use this logic even though VITAL itself is voluntary — the math is the same everywhere.

Step 10 — Know what auditors will ask for

Under 21 CFR 117.135(b), preventive controls must be written. An auditor checking your allergen program wants: the hazard analysis naming allergens as hazards, written allergen controls, cleaning validation records, verification records (pre-op checks, swab results), supplier allergen statements, training records, label verification records, and the rework log. Missing records read as missing controls.

Walk your own program quarterly with fresh eyes. Pick one product, trace every allergen touchpoint from receiving to shipping, and check that each control on paper actually happens on the floor. The gap you find yourself is the finding an auditor won’t.

The one-line version

Allergen control is ten habits, not one document: know your nine, map them, squeeze suppliers, schedule clean-to-dirty, validate then verify cleaning, cage the rework, check every label, train for consequences, earn your “may contain,” and keep records an auditor can follow. Plants that do all ten don’t fear the allergen question — they answer it before it’s asked.