Allergen testing records serve two masters: they must satisfy BRCGS auditors and provide a Section 21 due diligence defence in court. Food allergies affect a relatively small proportion of the population, but an allergic reaction can be severe or fatal. This makes resilient allergen management documentation both a legal and operational necessity. Recent compliance data reveals that allergen management performance drops from 82% in mornings to 47% at night. These gaps expose vulnerabilities that auditors and prosecutors exploit. This piece defines what allergen testing records UK food business operators must maintain and specifies mandatory data fields for allergen test result interpretation. It also outlines how to structure documentation that withstands both audit scrutiny and legal challenge when reviewing allergen control systems.
Why Allergen Verification Records Serve Two Masters
Audit compliance vs legal defence requirements
BRCGS auditors assess whether allergen verification records demonstrate systematic process control. Courts determine if those same records prove a business took “all reasonable precautions” under Section 21 of the Food Safety Act 1990. The evidence standard is different between these audiences. Auditors expect documented procedures, allergen ingredient information on specification sheets, labelled containers, current recipes, and records showing cleaning between allergen uses [1]. Courts examine whether the business acted responsibly when an incident occurred and assess the documentation trail against the legal test of reasonable care [2].
Product specification sheets must record allergen ingredients information in written format. Ingredient labels must include this information, and recipes must maintain it [1]. This written record requirement serves audit compliance and provides the contemporaneous evidence base needed for a due diligence defence. The risk assessment should retain a record of the risk management programme to demonstrate due diligence [1]. An FBO cannot prove it identified the risk and implemented controls before an incident happened without this documentation linkage.
The documentation trail that proves due diligence
Knowing how to demonstrate that a business took all steps needed to eliminate or reduce the likelihood of an allergen being present unintentionally requires documented allergen management policies specific to the operation [1]. Regular internal audits of production systems confirm that product formulation matches records of allergenic ingredient use, that finished products match label specifications, that allergen cross-contact controls are implemented properly, and that personnel receive training [1].
Best practise requires written records of allergen requests. Verbal communication in busy kitchens can be misunderstood, unheard, or forgotten [1]. Businesses must break down and assess their evidence after an incident. This is why due diligence systems exist: to evidence that the FBO did all it could to prevent the incident [2]. The business must demonstrate it had a strong allergen management system in place and took all reasonable steps to prevent the incident. This proves it acted responsibly and was not at fault [2].
Audit findings reveal how documentation gaps undermine both compliance pathways. An allergen assessment concluded that a business was compliant in one case, yet the basis for this conclusion had not been recorded [3]. Information on file relating to allergen enforcement contradicted the rating in another case and suggested the premises should have been scored higher risk and visited with greater frequency [3]. These documentation failures expose the business to both audit non-conformances and weakened legal defences.
When records are your only witness
The documentation becomes the business’s witness to what happened and why after an adverse allergic reaction. Food allergen incidents trigger symptoms from mild itching to life-threatening anaphylaxis and require immediate emergency care for severe cases [2]. Most allergic reactions happen within minutes of consuming food, though some are delayed by hours [2]. The FBO’s contemporaneous records are the only objective evidence of what controls were in place, whether staff were trained, whether cleaning was validated, and whether the allergen risk was assessed.
The consistent themes in allergen incidents are lack of information or communication regarding food allergens present in the food and details of the patient’s known food allergy [2]. Over half of documented incidents were due to an incorrect meal being delivered, with evidence of inappropriate food substitutions by kitchen staff and lack of knowledge among both kitchen and ward-based staff [2]. The organisation must report food allergy incidents via incident reporting systems and break down what happened whatever the actual harm [2].
Not providing allergen information when requested is a criminal offence [1]. Businesses must take allegations seriously even if they suspect the claim is false and have confidence in their systems. The FBO must break down the evidence trail it managed to keep before the incident. Records either confirm the business was not negligent or reveal failures that could result in prosecution, penalty notices, or improvement notices from local authorities [1][1].
Section 21 Defence: The Legal Standard for Allergen Records
Defining ‘all reasonable precautions’
Section 21(1) of the Food Safety Act 1990 provides the only complete statutory defence available when enforcement escalates to prosecution. The provision states that “it shall be a defence for the person charged to prove that he took all reasonable precautions and exercised all due diligence to avoid the commission of the offence by himself or by a person under his control” [2]. These 22 words establish a two-part test, and courts have interpreted this as requiring three categories of evidence [2].
The first limb demands systematic monitoring: proof that the business managed to keep documented procedures for monitoring food safety hazards and followed those procedures [2]. The second limb requires documented corrective action: proof that when deviations from safe limits were detected, the business took timely, proportionate corrective action and recorded what was done, by whom, and when [2]. The third limb mandates system maintenance: proof that the monitoring system itself remained in working order through adjusted instruments, functioning alert pathways, trained staff and regular management reviews [2].
The defence is ‘all reasonable precautions AND all due diligence’, and the conjunction carries heavy legal weight [2]. A business with perfect monitoring but no corrective action documentation fails. A business with excellent CAPA records but instruments that haven’t been adjusted equally fails [2]. All three limbs must be satisfied at once for the defence to succeed.
How UK courts assess food safety documentation
Case law interpreting Section 21 has established clear patterns about what evidence courts find persuasive and what they dismiss [2]. Courts accept systematic, contemporaneous records that were created at the time the monitoring occurred, not after the fact [2]. Hash-chained digital records with timestamps and sensor serial numbers satisfy this requirement [2]. They also accept evidence of a documented management system, including HACCP plans, procedures, training records and calibration schedules, provided the business can demonstrate the system was followed [2].
Courts accept evidence of corrective action proportionate to the risk: product quarantine, disposal records with quantities and batch numbers, engineer callout tickets, staff retraining evidence and root-cause analysis [2]. The key word is ‘proportionate’. A temperature excursion that resulted in a brief assessment and a note saying ‘all fine’ is not proportionate if the food was held above critical limits for extended periods [2].
Courts reject retrospective documentation created after the business became aware of an investigation [2]. They reject monitoring systems that existed on paper but were not followed in practise, as the gap between documented procedure and actual practise often becomes the prosecution’s strongest evidence [2]. They reject generalised assertions of compliance without specific records, and they reject evidence from instruments that haven’t been adjusted because the accuracy of the reading cannot be verified [2].
The burden of proof in allergen incidents
The burden of proof lies with the person or company accused, but they just need not establish their case beyond all reasonable doubt [2][4]. The accused need only persuade the court that they exercised due diligence on the balance of probabilities [2][4]. This civil standard of proof makes the defence more available than criminal standards, but it still requires substantial documentary evidence.
Courts will decide what ‘reasonable care’ means in each case and will take account of all the facts [2]. A small business might not be required to undertake the same precautions which would be expected of one of the major retailers [2][4]. This proportionality principle applies to the scale of documentation systems, not to the fundamental requirement for allergen safety.
Records as evidence of reasonable care
The only practical way to demonstrate due diligence in a prosecution with food safety is by producing bona fide records of implementation, not merely verbal evidence of precautions taken [2]. There must be a system in place that provides documentary proof that the checks, tests, inspections and supervision to avoid the commission of the offence have been carried out regularly [2].
The Section 21 evidence must be created in real time, with provable integrity, by adjusted instruments and documented staff response to every deviation [2]. Temperature records consistent with the HACCP risk assessment become the only practical acceptable means, along with other food safety measures taken, to demonstrate due diligence to the satisfaction of enforcement officers and criminal courts [2]. A sensor that has not been adjusted for two years, or an alert system that sends notifications to a phone number no one checks, undermines the entire defence whatever how good the underlying data appears [2].
BRCGS Allergen Documentation Mandates
Key clauses requiring allergen verification records
A documented system identifies, controls, educates and communicates allergen risk from raw materials through to finished products. This is what we call an allergen management plan [5]. The plan has a risk assessment of allergen cross-contact and puts controls in place to minimise or eliminate contamination risk [5]. BRCGS Issue 9 expanded clause 5.3.6 to state that allergen warning labels must meet relevant legislation for the country of sale. Companies must document how they think over both legislative and customer requirements [5].
Clause 5.3.8 sets out confirmation requirements for allergen cleaning procedures. Documented evidence must confirm the effectiveness of procedures. This evidence has worst-case production and cleaning trials where all equipment, processes and allergens get a look, targeted test locations such as food contact surfaces and difficult-to-clean areas, and targeted samples where worst-case scenarios are tested using suitably sensitive methods [6]. Accredited methods should be used for confirmation tests and be quantifiable wherever possible. Rapid tests, ATP and lateral flow devices work for verification activities but not for confirmation [6]. Several production runs must provide confirmation data to ensure it is representative and complete [6].
Documentation gaps that trigger major non-conformances
Allergen control failures can lead to severe health risks and reputational damage. Auditors exploit common gaps such as inadequate segregation, improper labelling, or lack of employee awareness [7]. The allergen management system needs review based on risk. Review becomes critical at the time of a change in raw materials or suppliers, a change to the manufacturing process, introduction of new machinery or equipment, or a change to cleaning practises and procedures [5].
Allergen-specific analysis must be carried out to verify system effectiveness. Documentation must demonstrate this, whether related to product, process, or both [8]. Product allergen testing confirms inclusion or exclusion of specified allergens. Process allergen testing confirms cleaning and sanitation effectiveness in removing allergens [8]. Monitoring requirements have manual recording and application of corrective actions when results fall outside acceptable limits. Corrective actions link strongly to the monitoring process to ensure full traceability [8].
Linking HACCP plans to verification evidence
BRCGS auditors expect evidence-based HACCP plans that are systematic, confirmed, and well-laid-out [9]. The verification process reviews, inspects, tests, checks, audits, or otherwise sets up and documents whether items, processes, services, or documents conform to specified requirements [8]. All food safety system elements must be verified on an ongoing scheduled basis. These elements have documented policies, procedures, training, HACCP plans, and operational applications [8].
Confirmation gathers evidence to provide a scientific basis. This basis demonstrates that a procedure, process, or activity will lead to expected results consistently [8]. Confirmation activities are defined within verification schedules and procedures of food safety management systems that have been around [8]. Then, the HACCP plan must link directly to both confirmation reports proving the control works and verification records proving it continues to work.
Audit trail from raw material to finished product
Product certification has an audit of the whole process from raw materials to end-product despatch [9]. Documentation systems must have everything from raw material inspections, batch codes, sanitation logs, calibration certificates, to final product checks [9]. Allergen ingredients information must be recorded in written format on product specification sheets and included on ingredient labels. Recipes must maintain this information, creating the traceable link from supplier to consumer [5].
BRCGS wants evidence that production runs and cleaning protocols are scheduled to prevent cross-contact when handling multiple product lines with different allergen profiles [9]. The traceability test for food raw materials and finished products forms a core audit requirement. This test has printed packaging and labels with food safety and legal information [9].
The Core Record Set Every FBO Must Maintain
Eight categories of allergen testing records are the evidentiary foundations for both BRCGS certification and Section 21 defence. Each category addresses specific audit clauses and legal proof requirements. They create the documentation trail that either exonerates or condemns an FBO when allergen control fails.
Validation study reports and protocols
Physical validation of cleaning procedures requires testing under worst-case soil loading conditions combined with post-cleaning and pre-operational inspection [10]. A risk-based approach uses the product with the highest allergen loading as the basis for Critical Control Point validation studies [4]. Validation protocols must specify testing at eight timepoints from T=0 to T=60 minutes on three separate occasions to prove precautionary allergen labelling is not required [4]. Samples taken before and after thermal processes determine whether the allergen remains detectable in the specific food matrix following heat treatment [11]. Data collected from several production runs will make the validation representative and complete. Testing laboratories must participate in FAPAS proficiency testing rounds and demonstrate expected performance [4].
Routine verification test results
Environmental monitoring swab results cost between £50 and £80 per sample. Detailed CCP testing programmes cost £1,200 to £1,920 per control point [4]. Zone 1 food contact surfaces require concentrated testing as this is where product is most susceptible to allergen cross-contact [11]. Quantitative ELISA results above the published limit of detection trigger mandatory recleaning whatever the parts-per-million figure [11]. Lateral flow devices provide budget-friendly ongoing monitoring after initial ELISA validation. Green/yellow/red scoring eliminates confusion when interpreting results against acceptance criteria [11].
Corrective action and CAPA logs
Root cause analysis documentation must use structured methodologies such as 5 Whys or Fishbone diagrams, with completed RCA forms and investigator sign-off [5]. Investigation reports should be written for external auditors to read, not internal staff. Details must be sufficient that someone unfamiliar with the incident gets the full story [5]. The degree of documentation effort must correspond to the risk level presented by the non-conformance [5]. Verification of corrective action effectiveness requires re-auditing the affected process and confirming root cause elimination. Trend data must be reviewed for recurrence [5].
Training and awareness records
Allergen management training matrices document that staff know procedures when asked to provide allergen information. They can handle requests and understand cross-contamination risks during food handling and preparation [6]. Competency sign-off records and assessment evidence demonstrate that designated allergen champions maintain oversight at each production location [12].
Calibration and equipment maintenance
Testing laboratories must verify their own limit of detection and limit of quantification rather than relying on kit manufacturer specifications [4]. ISO 17025 accreditation provides third-party verification of laboratory competence. Calibration certificates for testing equipment establish measurement accuracy [4][13].
Supplier assurance documentation
Suppliers must provide details of allergens handled on their sites and third-party audit certification. Allergen information must be traced one step back before the direct supplier [4]. Supplier scorecards track performance for products carrying Free From claims. Agreements require immediate notification of any changes to ingredient allergen profiles [4][14].
Traceability and batch records
One step forward and one step back traceability requires recording supplier and customer name and address. Product identification details, quantities supplied, and transaction dates must be documented [15]. Batch definition proves which specific production runs are affected by contamination incidents. This allows targeted recalls rather than blanket withdrawals [15]. Traceability information for pre-packed food must be retained for a minimum of 12 months after the product’s shelf life expires [16].
Management review minutes
Allergen management systems require documented review when raw materials or suppliers change. Manufacturing processes alter, new machinery is introduced, or cleaning practises are modified [BRCGS mandate]. Annual traceability system reviews will make information remain easily retrievable in timely fashion. This minimises withdrawal scale and public health impact [15].
Mandatory Data Fields in Allergen Test Result Records
A swab result record without batch identification, sampling location, and operator name cannot support a due diligence defence. Courts and auditors assess allergen test result interpretation by exploring whether specific data fields were captured contemporaneously and create the evidentiary chain that proves controls functioned as designed.
Sample identification and location details
Date and time of sampling, name of person collecting the sample, and precise sample locations are the foundations of traceability required for legal defence [7]. Swab records must specify equipment asset identifiers, food contact zones tested, and batch numbers of products manufactured before and after the allergen changeover. Any result at or above the action limit requires documentation of the failure location. This enables root cause investigation [8].
Testing methodology and kit specifications
Test kit specifications must confirm the kit remained within shelf life, was stored at required temperature, and was run at ambient temperature specified by the manufacturer [8]. The testing method used (lateral flow immunoassay or laboratory ELISA) determines whether results are qualitative or quantitative [8]. Lateral flow devices detect allergens around 10 parts per million, whilst ELISA methods provide quantitative measurement [17].
Quantitative or qualitative results
Quantitative results indicate concentration in mg/kg or ppm. Qualitative results provide detected/not detected determinations [7]. Testing laboratories must verify their own limit of detection and limit of quantification rather than accepting manufacturer claims [18]. Results below the LOD do not prove allergen absence, only that levels fall beneath detection capability.
Acceptance criteria and interpretation
Compare all allergen swab results against the site-validated action limit expressed in ppm or as positive/negative depending on test format [8]. Confirm negative and positive control responses before accepting test batch results as valid [8]. When controls fail, the whole test batch must be rejected and repeated.
Technician identity and authorisation
Document the pass/fail determination and authorising QA signature [8]. Initiate root cause investigation for any allergen swab failure and document probable cause, corrective action taken, and re-swab results [8].
Environmental conditions during testing
Record ambient temperature during test execution and storage conditions of test kits prior to use [8]. Environmental parameters affect assay performance and must be documented to validate result integrity.
Corrective actions initiated
Any result at or above action limit requires stop-and-re-clean response. The line must not release to production without QA management authorisation documented in the changeover record [8].
Verification of effectiveness
Re-swab results following corrective action prove effectiveness and close the CAPA loop [8]. The corrective action remains unverified without documented re-testing.
Validation Reports and Corrective Action Documentation
What a validation study must demonstrate
Validation gathers evidence that a procedure, process, or activity will consistently lead to expected results [19]. The process has qualification of systems and equipment and provides scientific basis for documented control limits nominated within HACCP plans and specifications [19]. A cleaning validation study is a quantitative assessment that ensures cleaning methods minimise unintentional allergen presence in the next produced product when using shared equipment [9]. The validation must be planned, rigorous and represent a substantial piece of work [9].
Documenting the worst-case cleaning scenario
Worst-case scenario testing involves choosing the hardest conditions such as allergens that are difficult to clean, abundant or high in protein content [20]. Testing strategies should concentrate on the most demanding conditions and prove that if a cleaning protocol removes problematic allergens, it will also eradicate less challenging ones [20]. Documentation must record all decisions made before starting validation. This has reasons behind which allergen to target and decisions on where to take swabs [9]. Three successive runs are advisable and provide greater assurance that the procedure can be applied consistently [21].
How to record corrective actions properly
Corrective action is mandatory when a deviation to the quality system occurs, especially at a Critical Control Point [19]. Root cause analysis using established methods should break down food incidents and identify mechanisms [14]. Food businesses should then develop mitigation steps that prevent future incidents and continuously improve allergen management plans by applying findings from root cause investigations [14].
Re-validation and re-verification cycles
Once validation demonstrates the cleaning procedure is acceptable, it should not need repeating unless there is a change to the manufacturing process, cleaning method or ingredients used [9]. Re-validation at a frequency of 2 to 4 times per year is recommended depending on the complexity of the allergen cleaning procedure [21]. Re-validation is also recommended when any changes are made to formulation, equipment matrix, processing conditions, procedure parameters or allergen test kit type [21].
Linking failures to process improvements
Analytical results should indicate where improvements are needed when cleaning is shown not to be sufficient, and validation should be repeated [9]. Under those circumstances where equipment cannot be cleaned to an acceptable level, the validation has given evidence that precautionary allergen labelling should be used [9].
Supporting Records: Training, Calibration and Change Control
Three categories of supporting documentation underpin allergen testing records: personnel qualification, measurement accuracy, and system development controls.
Allergen management training matrices
Staff require documented allergen and food hypersensitivity training on an annual basis to appreciate potential risks of providing incorrect information [10]. Individual training record cards must capture this training. Competency needs regular review and refresh when incidents or near misses occur [22].
Competency sign-off and assessment records
All staff who handle ingredients or serve food must complete allergen awareness briefing and sign to confirm understanding [23]. Assessment of competency at completing manual allergen record forms requires marking with the employee’s name, date, and assessor identity before personnel can complete forms for food service [22].
Calibration certificates for testing equipment
Calibration certificates improve adherence to food safety standards and are among the most common requests made by assessors during audits [24]. Certificates prove instruments are traceable to UKAS-accredited standards and demonstrate instrument accuracy [24].
Change control for new allergens or processes
Changes that affect allergen labelling on pre-packed products require documented actions and additional communications. Information sharing across the supply chain becomes essential [25]. Allergen management procedures need periodic review, especially when you have operations change [26].
Document retention schedules and legal minimums
Records must be kept for as long as needed. Authorities define retention periods for each record class and disposal actions at period end [27].
Audit trails in digital record systems
Role-based permissions tied to training certificates block task access when training expires [4]. Electronic signatures and immutable audit trails ensure records remain attributable and tamper-evident [4].
Documentation Errors That Undermine Your Defence
Six documentation patterns undermine both audit outcomes and Section 21 defences, changing otherwise adequate systems into legal liabilities.
Retrospective record completion
Records created after the business becomes aware of an investigation carry zero evidential weight in court proceedings. Auditors detect retrospective completion through sequential numbering gaps and identical handwriting spanning multiple dates. Batch records completed outside production hours also raise red flags.
Inconsistent dating and signatures
Baseline compliance audits reveal that doctor name and signature fields were absent in all reviewed records [11]. Inconsistent date formats and missing authorising signatures signal weak accountability. Unsigned corrective actions point to fragmented processes [11].
Missing links between validation and verification
Verification without validation means checking a process that never proved it could work. Validation without verification means proving it once and hoping it stayed true [28]. Both weaknesses surface during audits [28].
Failure to document negative results
Negative test results provide evidence that cleaning protocols functioned as designed. Documenting only failures creates an incomplete record set. The system’s effectiveness over time cannot be demonstrated without complete records.
Inadequate corrective action closure
Corrective actions lacking verification of effectiveness leave the CAPA loop open [19]. Auditors cannot confirm root cause elimination or process restoration under such circumstances.
Poor version control on procedures
Unclear acceptance criteria create inconsistent decisions. Inconsistency represents a major audit vulnerability [28]. The system operates on opinions rather than controls when supervisors interpret borderline results differently [28].
Preparing Records for Audit and Legal Scrutiny
The rapid evidence retrieval test
Auditors arrive unannounced and expect allergen verification records within minutes, not hours. Almost 50% of site failures relate to missing, incomplete, or incorrect documentation [5]. The retrieval test measures whether a QA manager can produce the complete allergen evidence pack for any production line within 15 minutes.
Organising by BRCGS clause and legal requirement
BRCGS Clause 5.3 requires documented allergen policy, site-specific risk assessment, validated cleaning procedures, ongoing verification records, allergen training records with competency verification, rework segregation logs, label review procedures, and annual mock recall documentation [29]. Organising records by clause number creates audit trail arrangement, so this approach makes sense.
Creating a master index of allergen records
A master index cross-references each record type against its BRCGS clause, retention period, and storage location. Digital CMMS systems generate and retain records as production, cleaning, and changeover activities occur. This eliminates manual assembly during audit preparation [29].
Mock audit preparation checklists
Run through allergen protocols, cleaning schedules, and training records to identify gaps before the auditor does [5]. Mock audits reveal documentation that isn’t available and creates perception of non-compliance even when controls exist [5].
Ensuring records tell a coherent story
Records must be timestamped, attributable to specific personnel, and retained for durations required by customer specifications or regulatory requirements [29]. Common omissions include allergen handling procedures, pest control reports, signed cleaning schedules, and up-to-date training records [5].
Conclusion
Allergen verification records serve two purposes: they must satisfy BRCGS auditors and provide Section 21 due diligence defence in court. The eight core record categories outlined here are the foundations of your evidentiary case when prosecution or audit scrutiny arrives. Contemporaneous documentation created at the time proves controls functioned as designed, while retrospective records carry zero legal weight.
Conduct a 15-minute retrieval test for your allergen evidence pack. Records should be organised by BRCGS clause, and corrective actions must be documented with root cause analysis. Verify that every swab result has the twelve mandatory data fields. Your records either defend the business or condemn it. Documentation gaps that seem minor during production become fatal weaknesses when facing prosecutors who understand which evidence auditors and courts just need.
Key Takeaways
Allergen verification records must simultaneously satisfy BRCGS auditors and provide legal defence under Section 21 of the Food Safety Act 1990, requiring meticulous documentation that proves due diligence.
• Maintain eight core record categories: validation studies, verification results, CAPA logs, training records, calibration certificates, supplier documentation, traceability records, and management reviews • Document twelve mandatory data fields for every allergen test result: sample ID, location, methodology, results, acceptance criteria, technician identity, environmental conditions, and corrective actions • Create contemporaneous records in real time – retrospective documentation carries zero legal weight in court proceedings and undermines audit credibility • Implement worst-case cleaning validation with quantitative testing across multiple production runs to prove allergen removal effectiveness under demanding conditions • Establish 15-minute evidence retrieval capability by organising records according to BRCGS clauses and maintaining a master index for rapid audit response
Effective allergen documentation transforms from operational necessity to legal shield when incidents occur. Records either defend your business or condemn it – there’s no middle ground when facing prosecution or audit scrutiny.
FAQs
Q1. What are the 14 allergens that must be declared under FSA regulations? UK food law requires businesses to declare 14 major allergens: celery, cereals containing gluten (wheat, rye, barley, oats), crustaceans, eggs, fish, lupin, milk, molluscs, mustard, nuts (almonds, hazelnuts, walnuts, cashews, pecans, Brazil nuts, pistachios, macadamia nuts), peanuts, sesame seeds, soybeans, and sulphur dioxide/sulphites at concentrations above 10mg/kg or 10mg/litre.
Q2. When must allergen information be provided for food sold online? For prepacked food sold through distance selling methods such as websites or phone orders, allergen information must be provided at two critical points: before the purchase is completed (typically displayed on the product page) and at the point of delivery (on the food packaging itself).
Q3. What records must food businesses maintain to demonstrate allergen due diligence? Food businesses must maintain eight core record categories: validation study reports, routine verification test results, corrective action logs, training and competency records, calibration certificates for testing equipment, supplier assurance documentation, traceability and batch records, and management review minutes.
Q4. How long should allergen-related documentation be retained? Traceability information for pre-packed food must be retained for a minimum of 12 months after the product’s shelf life expires. Other allergen records should be kept for durations specified by customer requirements or regulatory standards, with retention periods defined for each record class.
Q5. What constitutes a valid Section 21 defence in allergen incidents? A valid Section 21 defence requires proving that the business took all reasonable precautions and exercised due diligence. This demands contemporaneous documentation showing systematic monitoring, proportionate corrective actions when deviations occurred, and evidence that the monitoring system itself was maintained through calibrated instruments, trained staff, and regular management reviews.
References
[1] – https://www.devonsomersettradingstandards.gov.uk/business/food-law-guidance/allergens-in-food/
[2] – https://www.williamfry.com/knowledge/food-safety-law-and-the-defence-of-due-diligence/
[3] – https://www.food.gov.uk/our-work/audit-of-allergen-controls-and-relevant-open-audit-actions-0
[4] – https://sgsystemsglobal.com/uk-food-standards-fsa/
[5] – https://www.auditpoint.co.uk/food-safety/food-safety-audit-preparation
[6] – https://www.food.gov.uk/business-guidance/allergy-training-for-food-businesses
[7] – https://cdnmedia.eurofins.com/eurofins-us/media/12158865/whitepaper-food-allergen-environmental-monitoring-guide.pdf
[8] – https://oxmaint.com/industries/food-manufacturing/allergen-changeover-cleaning-verification-checklist-food
[9] – https://www.rssl.com/media/ayohzhst/rssl-white-paper-cleaning-validation-in-allergen-management.pdf
[10] – https://www.food.gov.uk/business-guidance/allergen-checklist-for-food-businesses
[11] – https://pmc.ncbi.nlm.nih.gov/articles/PMC12718090/
[12] – https://www.anaphylaxis.org.uk/my-account/media-centre/membership-news/how-to-train-your-staff-on-allergen-safety/
[13] – https://www.food.gov.uk/research/review-of-allergen-analytical-testing-methodologies-estimation-of-costs
[14] – https://www.fdf.org.uk/globalassets/resources/publications/guidance/allergen-recall-prevention-guidance.pdf
[15] – https://www.food.gov.uk/sites/default/files/media/document/draught-guidance-on-food-traceability-withdrawals-and-recalls-consultation.pdf
[16] – https://completefoodsafety.co.uk/blog/food-traceability-lets-get-your-records-straight/
[17] – https://www.sqfi.com/docs/sqfilibraries/code-documents/tip-sheets/tip-sheet-17-allergen-management.pdf?sfvrsn=aeb37125_9
[18] – https://www.food.gov.uk/research/review-of-allergen-analytical-testing-methodologies-stakeholder-engagement
[19] – https://haccp.com/information/allergen-management/
[20] – https://foodindustryhub.com/food-industry-knowledge-centre/know-allergen-cleaning-validation/
[21] – https://www.food-safety.com/articles/11362-best-practise-considerations-to-enhance-the-effectiveness-of-allergen-cleaning-and-validation
[22] – https://www.swavesey.cambs.sch.uk/attachments/download.asp?file=3185&type=pdf
[23] – https://www.tewv.nhs.uk/wp-content/uploads/2021/10/Food-Allergen-Procedure.pdf
[24] – https://www.klipspringer.com/blogs/a-complete-guide-to-equipment-calibration/
[25] – https://www.fdf.org.uk/fdf/resources/publications/guidance/change-management-of-allergen-information/
[26] – https://www.fao.org/fao-who-codexalimentarius/sh-proxy/en/?lnk=1&url=https%253A%252F%252Fworkspace.fao.org%252Fsites%252Fcodex%252FStandards%252FCXC%2B80-2020%252FCXC_080e.pdf
[27] – https://ico.org.uk/for-organisations/foi/freedom-of-information-and-environmental-information-regulations/retention-and-destruction-of-information/
[28] – https://sgsystemsglobal.com/glossary/allergen-validation/
[29] – https://oxmaint.com/industries/fmcg/fmcg-allergen-management-cleaning-validation-changeover