California point-of-sale allergen disclosure, decoded

Before unpacking the language: Section 114093.5 only applies to food facilities subject to the federal menu-nutrient disclosure rule under 21 U.S.C. §343(q)(5)(H). In practice, that means chain restaurants with 20 or more locations offering substantially the same menu items. Compact mobile food operations and nonpermanent food facilities are also exempt by name. Independent single-location restaurants are outside SB 68’s reach for now, though the legislative trend points toward broader coverage. The rest of this guide assumes a covered chain operator. The ADDE Act guide covers the scope and exception edges in more detail.

Health and Safety Code Section 114093.5, added by SB 68, is the operative provision. The statute reads: “Commencing July 1, 2026, a food facility that is subject to Section 343(q)(5)(H) of Title 21 of the United States Code that serves or sells food to the consumer shall provide written notification of major food allergens that the food facility knows or reasonably should know are contained as ingredients in each menu item.” Each clause carries weight. None of them is accidental.

“Written notification.”This eliminates the verbal-disclosure option. A server explaining allergens to a customer on request, or a placard at the host stand that says “Ask your server about allergens,” does not satisfy the statute. The notification must be written. That means it must appear somewhere a customer can read it, in text (or in icons whose meaning is also written out and visible). A kitchen’s internal allergen chart, not shared with customers, does not count. A verbal training program for front-of-house staff, however thorough, does not count. The customer must be able to see the written disclosure themselves.

“Knows or reasonably should know are contained as ingredients.” This is the knowledge standard. What must be disclosed are allergens that are part of the dish’s recipe, including allergens inside purchased components like sauces, spice blends, or pre-made dressings. Cross-contact from shared fryers, prep surfaces, or fryer oil is governed by this same standard. If a facility shares fryer oil between shrimp and fries, fries effectively contain shellfish protein, which the facility knows. The same logic applies to grill cross-contact. Operators who treat cross-contact as outside the mandatory framework are likely to find inspectors disagree. The statute references Health and Safety Code Section 113820.5 for the definition of “major food allergens,” which incorporates the federal list: milk, eggs, fish, shellfish, tree nuts, peanuts, wheat, soybeans, and sesame. Sesame joined the list through the FASTER Act in January 2023, and California inherits that 9th allergen automatically through the cross-reference.

“In each menu item.”Per-item disclosure. Not a generalized allergen warning at the front or back of the menu. Not a blanket “our kitchen uses nuts and dairy” disclaimer. Every dish that contains a covered allergen needs its own specific disclosure. A restaurant with 60 menu items needs 60 individual allergen calls, one per dish. A dish with no covered allergens still needs to be reviewed so the operator can document that fact, but it does not need a disclosure statement if there is genuinely nothing to disclose.

What “written notification” must look like in practice. While the statute itself does not specify font size or placement, CDPH guidance and county inspector practice converge on what written notification must look like in practice. Inspectors apply a reasonableness standard: could a customer standing at the counter, or seated at the ordering table, read the allergen information without asking for a separate document? A disclosure buried in a back-panel paragraph or printed in a color that blends into the menu background does not satisfy this standard. At a counter-service restaurant the written notification needs to be visible at the counter. At a table-service restaurant it appears on the menu the server brings to the table. At a fast-casual operation with a menu board, it is on that board. Online, it is on the ordering interface.

Two related provisions in SB 68 bear mentioning. Section 114093.5(a)(1) permits disclosure directly on the menu, typically as a per-item statement adjacent to each dish. Section 114093.5(a)(2) permits digital disclosure, such as a QR code, but only when paired with a written alternative on-site. That written alternative may be a separate allergen-specific menu, an allergen chart or grid, a booklet, or similar written materials. Section 114093.5(b) addresses how allergens may be communicated: through their common or usual names or through standardized pictograms. The ADDE Act guide covers the broader law and its enforcement timeline in detail.

Consider a 12-dish menu at a covered casual-dining chain location, modeled on an Italian-American concept with 30 or more locations across California. The menu is a single double-sided laminated card, 8.5 by 11 inches, printed in a dark brown serif typeface on cream stock. Each dish entry follows the same structure: dish name in 14-point bold, a two-sentence description in 11-point regular, and a single line directly below the description in 9-point sans-serif reading “Contains:” followed by the specific allergens.

The pasta carbonara entry reads: “House-made tagliatelle tossed with guanciale, egg yolk, Pecorino Romano, and black pepper. A classic preparation, nothing else. Contains: Wheat (pasta), Eggs (egg yolk), Milk (Pecorino Romano).” The crab-stuffed mushrooms read: “Cremini mushrooms filled with Dungeness crab, cream cheese, and chives, baked until golden. Contains: Shellfish (crab), Milk (cream cheese).” The one dish with no covered allergens, a simple arugula salad dressed with lemon and olive oil, reads: “Contains: None of the 9 major allergens.”

An inspector walking the dining room sees several things. First, every table has a menu. Second, every menu item has a “Contains:” line. Third, the 9-point sans-serif text, while small, is printed in the same dark brown as the rest of the menu, with adequate contrast against the cream background. Fourth, the disclosure language names the specific allergen species (Dungeness crab, not just “shellfish”; Pecorino Romano, not just “milk”). Fifth, the allergen line appears directly beneath the description, not in a footnote block at the bottom of the page.

At the host stand, the restaurant also posts a 4-by-6-inch allergen reference card in a table tent holder, listing the 12 dishes in a grid against the 9 allergens, with check marks where applicable. This is supplementary; the inspector’s primary verification is the in-line menu text. But the placard at the host stand means that a customer at the counter for takeout, who may not receive a full sit-down menu, can still see allergen information at the point of ordering.

What makes this configuration pass: every item carries its own disclosure, the disclosure is in customer line-of-sight at the ordering moment, specific species are named where required, and the format is durable (laminated, not handwritten). The restaurant’s online ordering page mirrors the same “Contains:” structure, and the DoorDash partner portal has been populated with the same allergen data. The inspector checks one of those platforms on a phone while standing in the restaurant. It matches the physical menu. No findings.

The 9-point font size is worth examining. The statute does not set a floor. Inspectors apply a reasonableness standard: could a customer with normal vision read this without extraordinary effort? Nine points in dark ink on a light background, at a reading distance of 12 to 18 inches from a table menu, is readable. Six points would start to raise questions. Anything printed in a color that blends into the background (gray on cream, beige on white) would also draw scrutiny regardless of point size.

Same 12-dish covered chain location. Same cuisine, same dishes. But this menu is a folded four-panel booklet, 5.5 by 8.5 inches when closed. The front cover carries the restaurant name and a photograph. Panels two and three, the interior spread, list all 12 dishes in 12-point serif. No allergen information appears on either panel. The back panel, panel four, has a block of text at the bottom in 6-point italic, printed in a warm beige against the cream booklet stock. It reads: “Our kitchen uses milk, eggs, wheat, soy, nuts, sesame, fish, and shellfish. Guests with food allergies should consult their server.”

An inspector visits during the lunch rush. The inspector picks up a menu from a table, opens it to read the dishes, and finds no per-item allergen information. The inspector flips to the back panel. The allergen text, in 6-point beige on cream, requires the inspector to hold the menu close to read it at all. The finding language in the inspection report: “Allergen disclosure not visible at point of order. Menu allergen statement in back panel 6-point italic, low-contrast color, not associated with individual menu items. HSC 114093.5 requires written notification per menu item at point of ordering.”

Two violations are being cited simultaneously. First, the disclosure is not per-item. The blanket “our kitchen uses...” statement does not satisfy the requirement that each menu item carry its own allergen disclosure. A customer reading the pasta carbonara entry has no way to know from that entry whether it contains eggs, wheat, both, or neither. Second, the disclosure is not visible at the ordering point by any practical standard: 6-point italic in a color indistinguishable from the background cannot be read without bringing the menu to within a few inches of the face.

The host stand has no allergen placard. The restaurant’s website does not list allergens. The Uber Eats page for this restaurant shows the dish names and descriptions but no allergen information in any field. That creates three separate points of non-compliance: the physical menu, the website, and the delivery platform. Under SB 68, each ordering channel is independently required to carry the disclosure. A restaurant that fixes the physical menu but leaves the delivery platforms unpopulated remains non-compliant for online orders.

The fix is not complicated, but it is thorough. The restaurant needs to: (1) add a per-item “Contains:” line to every dish on the physical menu, in legible type and contrast; (2) update the website ordering page with the same information; (3) populate the allergen fields in each delivery platform’s partner portal. The back-panel disclaimer can stay as a supplementary note, but it cannot substitute for per-item disclosure. The ADDE Act overview walks through acceptable formats in more detail, including the specific statutory language on QR codes and allergen chart alternatives.

Section 114093.5 permits several disclosure formats but does not rank them. In practice, each format has a profile of strengths and weaknesses that makes it more or less suitable for different restaurant types. Four formats account for nearly all California chain restaurant compliance approaches.

1. In-line text under each dish description. The allergen disclosure appears as a dedicated line directly below the menu item’s description. The most common structure is “Contains: [Allergen (source), Allergen (source)].” A Caesar salad entry reads: “Contains: Milk (Parmesan), Eggs (dressing), Fish (anchovies), Wheat (croutons).” The disclosure is unambiguously tied to the specific dish; no customer has to interpret a chart or decode a symbol system.

Visibility score: high. The disclosure appears exactly where the customer’s attention already is. Durability score: menu-dependent. Laminated or printed menus hold up, but every recipe change requires a reprint of the relevant section. Update difficulty is the primary weakness, especially for operations that rotate specials frequently or adjust recipes by season. For casual-dining and fine-dining restaurants with stable menus (fewer than 20 updates per year), in-line text is the most defensible format.

2. Allergen icons with a visible key. A set of symbols appears next to each dish, with each symbol representing one of the 9 covered allergens. Common visual systems use a milk carton for milk, a wheat stalk for wheat, a fish silhouette for fish, and so on. The symbols appear in a row after the dish name. The key, showing what each symbol means, must be visible at the ordering point, not just somewhere in the restaurant.

Visibility score: medium to high, depending entirely on key placement. If the key sits at the top of the same menu panel where the dishes appear, the system works well. If the key is on a different panel, the back cover, or a small sign across the room, it functionally fails. Durability score: high, because symbols can be printed in a standardized template and individual dish allergen changes require only updating which icons appear next to that dish, not reprinting descriptive text. This format fits fast-casual and QSR operations best, where menu board space is limited and customers need to process information quickly while in line.

3. Separate printed allergen poster or chart. A standalone matrix, one row per dish and one column per allergen, posted at the order counter or available as a handout. The chart format scales well for counter-service restaurants where customers consult a physical reference document while in line. An inspector can verify it in seconds: the chart either has all current menu items or it does not.

The update problem is acute here. A chart that was accurate three weeks ago may be missing four items added since the last print run. Inspectors cross-reference the chart against the current menu board; any dish on the board but missing from the chart is a violation. A poster also does not serve delivery or online ordering customers at all. If your restaurant uses DoorDash or Uber Eats, a poster at the counter satisfies exactly zero of your delivery-channel disclosure obligations. The chart is best used as a supplement to in-line or icon disclosure rather than as the primary format, unless the operation is counter-only with a tightly controlled, rarely changing menu.

4. QR code linking to a digital allergen sheet. A QR code on the table, counter, or menu card links to a webpage with per-item allergen information. The statute explicitly permits this format. The conditions: the digital destination must actually contain allergen information organized by menu item; and a written alternative must be available on-site for customers who cannot or will not scan a QR code.

The strongest argument for QR-based disclosure is update speed. When a recipe changes, the underlying allergen database can be updated the same day, and the QR destination reflects the change immediately, with no reprinting. For restaurants with high menu velocity, that maintenance advantage is real. The weakness is the ordering experience itself. A customer has to notice the QR code, scan it, and navigate to the right item on the page before they know what allergens are in a dish. That is more friction than reading a “Contains:” line under the dish description. QR disclosure works best as part of a hybrid system: QR for the complete detail, in-line text or icons for the primary disclosure a customer sees without taking out their phone.

Ranked by inspection defensibility across the full range of California enforcement approaches: in-line text (clearest per-item association, least interpretive gap) then icons with co-located key then allergen chart at the counter (reliable for counter-only service, vulnerable to staleness) then QR-only (technically compliant but highest customer friction and requires a physical backup). Most restaurants with more than a few ordering channels end up using two formats, covering the physical menu with in-line text and the digital channels through platform allergen fields.

All California counties enforce SB 68 under the same statutory standard. But each county runs its own inspection program, employs its own inspectors with their own training and checklists, and reflects the local mix of restaurant formats that inspectors see most often. The result is that the same compliance gap can produce a written warning in one county and a scored violation in another, at least during the early enforcement period.

Los Angeles County Department of Public Health. The Los Angeles County Department of Public Health Environmental Health Division conducts roughly 50,000 food facility inspections per year across more than 90,000 permitted food establishments in the county. That volume means inspectors move quickly. LA inspectors have historically emphasized placement and proximity in their approach to consumer information requirements: is the disclosure where a customer would actually look? A disclosure present on the menu but positioned where customers would not reasonably encounter it during the ordering process, such as a dense block of fine print at the very bottom of the back panel, has been flagged in similar contexts as insufficiently visible.

LA County uses a numerical scoring system, where each inspection violation reduces the facility’s score from a starting point of 100. A high-risk violation, which includes failures to disclose required consumer information, can cost more points than a low-risk procedural finding. Facilities scoring below 70% receive a score card and become subject to closure if they fall below 70% twice within twelve months. Critical violations can trigger immediate closure regardless of score. The practical implication: a restaurant with three or four ADDE disclosure gaps on the same inspection could face a meaningful score reduction on its first SB 68 inspection, not just an advisory notice. LA County posts inspection scores publicly via the Los Angeles County Department of Public Health website and on-site grade cards.

San Francisco Department of Public Health. San Francisco’s Department of Public Health Environmental Health Branch inspects approximately 7,000 food establishments in the city. San Francisco inspectors have, in similar consumer-disclosure contexts, focused on whether the disclosure is complete across all ordering channels a given restaurant uses. San Francisco has a higher proportion of restaurants with active delivery platform presence than many California counties, and local enforcement has reflected attention to whether digital and third-party ordering channels match the physical menu’s information. A restaurant with compliant in-dining menus but unpopulated delivery platform allergen fields is more likely to receive a finding in San Francisco than in a county where delivery platforms are a smaller share of the inspection landscape.

San Francisco uses a letter-grade system (A, B, C) posted in restaurant windows. Violations of major consumer-information requirements affect the grade. The city also makes inspection records available online through its Environmental Health data portal, meaning an SB 68 violation becomes part of the public record for any customer researching a restaurant.

San Diego County Food and Housing Division. San Diego County Department of Environmental Health and Quality’s Food and Housing Division inspects roughly 14,000 food facilities. San Diego’s enforcement approach in analogous consumer-disclosure situations has focused on menu completeness, specifically whether temporary or rotating menu items receive the same compliance attention as the core printed menu. Daily specials boards, table tents with seasonal items, and limited-time promotional inserts have been cited more frequently in San Diego’s broader inspection activity than in some other California counties. That pattern suggests San Diego inspectors will pay particular attention to whether specials and inserts carry ADDE-compliant per-item allergen disclosure, not just the laminated main menu.

San Diego County also publishes inspection results through its Environmental Health restaurant inspection database. The county uses a points-based system in which major violations generate larger point deductions. A failing score triggers a re-inspection within 30 days and may result in a closure order if not corrected.

The practical takeaway across all three counties: the statutory standard is uniform, but the inspection priorities differ. A restaurant operating in multiple California counties needs to satisfy the full standard in every jurisdiction, while being aware that the initial inspector focus in each county will reflect local enforcement patterns. Compliance built on the strictest reading of the statute, per-item disclosure on every format used for ordering, current as of today’s menu, satisfies all three counties without needing to tailor the approach county by county.

Three categories of omission account for a large share of the SB 68 compliance gaps showing up in pre-enforcement reviews. Each one follows the same pattern: the operator handled the main printed menu correctly but left a secondary format out of the update process.

Handwritten daily specials and chalkboards. The laminated dinner menu has per-item allergen disclosure for all 32 dishes. The chalkboard special at the entrance says: “Tonight: Pan-seared halibut, roasted fingerlings, herb butter.” No allergen disclosure appears on the chalkboard. The dishes on the main menu are compliant; the special is not. The inspector sees the chalkboard while walking in and asks for the allergen information. There is none posted.

The fix is operational, not technical. Every time a new special is written on the board, the allergen information for that dish must be added to the board at the same time. This requires whoever writes the special to know the dish’s allergen profile before chalk meets slate. That means the kitchen’s prep process for specials must include an allergen check as a mandatory step, not an optional one. A laminated allergen card for each special, clipped next to the chalkboard or placed in a table tent holder, is a workable alternative if writing allergens directly on the board is impractical. The point is that a chalkboard dish is a menu item under SB 68, and the statute does not recognize the format distinction between a printed menu and a handwritten board.

Online ordering and third-party delivery menus. A restaurant spends the weeks before July 1, 2026 carefully updating its printed menus with allergen disclosure for every dish. The physical inspection on opening day will likely go fine. But DoorDash is still showing the old menu, imported from the restaurant’s original onboarding data two years ago. The Uber Eats menu has allergen fields that were never populated. The restaurant’s own online ordering page has a “menu PDF” link that downloads the old version without allergen data.

Each of those represents a separate non-compliant ordering channel. SB 68 places the obligation on the operator, not the platform, so “DoorDash controls the page” is not a defense. The practical path: log into every third-party platform’s partner portal and populate the allergen fields for every menu item. Major platforms (DoorDash, Uber Eats, Grubhub) have all added structured allergen fields in anticipation of state requirements. If those fields do not exist on a given platform, the operator can request that the platform add a per-item allergen note field, or add allergen information directly into each item’s description text. The restaurant’s own website ordering page needs the same treatment. Any PDF menu hosted on the site must be the current version with allergen disclosure, not an archived pre-compliance version.

The delivery channel gap is the one most likely to produce a violation during a remote or digital inspection. San Francisco Department of Public Health inspectors have shown interest in whether digital channels are current and complete, and as enforcement programs mature, remote verification of delivery platform menus will likely become more standard across California counties.

Kids’ menus. The children’s menu at most casual-dining restaurants is a separate printed card, often designed with illustrations and crayons included. It typically gets updated on a different print cycle from the adult menu. When the operator updates the adult menu for SB 68 compliance, the kids’ menu often gets deferred to the next print run. But the kids’ menu is a menu. If a customer can use it to place an order, its items must have allergen disclosure.

Kids’ menus also tend to have a higher density of covered allergens per dish than adult menus. Grilled cheese: milk and wheat. Mac and cheese: milk, wheat, eggs (in some pasta). Chicken fingers: wheat (breading), eggs (egg wash). Fish sticks: fish, wheat. Chocolate brownie sundae: milk, eggs, wheat, possibly tree nuts and soy in the chocolate. Nearly every item on a typical kids’ menu contains at least two covered allergens. A kids’ menu with no allergen disclosure is a menu with multiple violations per item.

The update fix is the same as for the adult menu, but on a separate print schedule that must be tracked independently. The cleanest operational approach is to update all menu formats, adults, kids, bar menus, dessert menus, at the same time and on the same review cycle, so no format falls out of sync with current allergen data.