Natasha's Law + UK Food Allergen Compliance — Traceability Beyond the Label

Why allergen traceability is the highest-stakes UK food compliance

Natasha's Law (Food Information (Amendment) (England) Regulations 2019, with parallel regulations in Scotland, Wales, and NI) requires that pre-packed for direct sale (PPDS) foods carry full ingredient labelling with the 14 listed allergens emphasised. The law was named after Natasha Ednan-Laperouse, who died from a sesame allergy from a baguette that had no ingredient labelling.

Enforcement is at local authority Environmental Health level under the Food Safety Act 1990. Penalties range from improvement notices to unlimited fines and imprisonment for the most serious breaches. More importantly, the reputational and human cost of a serious allergen incident is much larger than any fine.

This post walks through what compliant allergen traceability actually looks like beyond the label — the supply-chain ingredient flow that makes the label trustworthy.

The 14 allergens you must declare

Cereals containing gluten (wheat, rye, barley, oats, spelt, kamut), crustaceans, eggs, fish, peanuts, soybeans, milk, nuts (almonds, hazelnuts, walnuts, cashews, pecans, Brazil nuts, pistachios, macadamia), celery, mustard, sesame seeds, sulphur dioxide and sulphites (>10mg/kg or 10mg/L), lupin, molluscs.

Each must be declared and emphasised (typically bold, italic, or underlined) on the ingredient list of any PPDS food.

Where the typical PPDS operation falls short

Recipe records don't carry through to label. The kitchen recipe says "use 2 tbsp tahini" but the label says "sesame seeds." A new staff member doesn't connect the two. The day someone substitutes peanut butter for tahini, the label still says sesame and a customer with a peanut allergy is exposed.

Ingredient supplier change without label re-check. Bakery switches mayonnaise supplier. New supplier's mayonnaise contains soya lecithin where the old one didn't. Label still says the old ingredient list. Next FSA inspection or customer complaint exposes the gap.

Cross-contact in production. Recipes are correctly labelled, but the prep surface used for nut brownies in the morning is used for the gluten-free cake in the afternoon without proper cleaning. Cross-contact contamination doesn't appear on the label and isn't caught.

No supplier specifications retained. When the FSA inspector asks "how do you know the rapeseed oil you use is allergen-free?" the answer is "the supplier said so" but there's no written specification document on file.

PPDS labelling missing entirely. Smaller operations sometimes treat sandwiches, pastries, and prepared meals as "loose" rather than PPDS, missing that anything pre-packed for direct sale at the same point of preparation requires the full label.

The traceability architecture that makes labels trustworthy

1. Per-ingredient supplier specifications on file. For every ingredient in your supply chain, the supplier specification (usually a PDF) documenting the allergens present, the cross-contact risk, the source country, and any allergen-related processing controls. Retained in the inventory system, not in email.

2. Recipe-to-label automatic generation. Recipes are stored with allergen information per ingredient. Labels are generated from the recipe + the supplier specifications, not hand-written. When the recipe changes, the label changes; when the supplier changes (and their allergen profile changes), the label updates automatically.

3. Cross-contact mapping by production area. Each production area is documented for which allergens are present. Recipes that should not be produced in a high-allergen area get flagged. The "may contain" statement is generated from the production-area mapping, not improvised.

4. Lot tracking from supplier to PPDS pack. Every PPDS pack can be traced back to which lot of each ingredient went into it. When a supplier issues a recall on a specific lot of an allergen-containing ingredient, you can identify exactly which packs of which products are affected.

5. Daily allergen audit. Pre-shift check that the recipes being produced match the labels being applied, that the suppliers being used match the suppliers on file, that the production areas have been cleaned per protocol.

The FSA inspection focus

When Environmental Health inspectors arrive (typically unannounced; frequency depends on prior risk rating), they look at:

• PPDS labels on display vs. recipe documentation
• Supplier specifications for high-allergen ingredients
• Cross-contact controls in production
• Cleaning records between allergen / non-allergen production runs
• Staff training records on allergen awareness
• Any complaints, returns, or near-miss events with allergens

A well-prepared operation produces all of the above in 30-60 minutes. A typical operation hunts for two days.

The customer-side disclosure

PPDS labels satisfy the regulatory minimum. Many UK customers expect more — restaurants and cafés that provide full per-dish allergen breakdowns earn customer trust and reduce risk. The FSA recommends a written "allergy information" document accessible at the point of order for any food not pre-labelled.

Where ShelfLifePro fits for UK food allergens

ShelfLifePro stores supplier specifications per ingredient lot, generates PPDS-ready labels from recipe + supplier-spec data, supports cross-contact production-area mapping, and maintains the lot trace from supplier to outgoing pack for recall response. Not a regulatory consultant — the inventory and labelling backbone an FSA-ready operation runs on.

Free 14-day trial.

Related reading

• Allergen cross-contact documentation retail
• Health code temperature logs food retail
• FSMA 204 KDE explained