FALCPA and the federal allergen labeling rules

What FALCPA is and what it covers

Congress passed the Food Allergen Labeling and Consumer Protection Act on July 30, 2004. President Bush signed it into law on August 2, 2004, and it became Public Law 108-282. The labeling requirements took effect January 1, 2006, giving manufacturers roughly sixteen months to update their labels before compliance was expected.

FALCPA works by amending the Federal Food, Drug, and Cosmetic Act (FFDCA). Before FALCPA, there was no federal statute that expressly required the major food allergens to be called out by name on a food label. Manufacturers had to list ingredients, but a product could say "natural flavors" or "spices" and legally contain a substance that triggers a life-threatening reaction in a meaningful portion of the population. FALCPA closed that loophole for packaged foods under FDA jurisdiction.

The key mechanism is simple. Under FALCPA, a packaged food is considered misbranded unless the label declares every major food allergen it contains. That declaration can appear in two places: in the ingredient list itself, using the common name of the food source, or in a separate "Contains" statement that follows the ingredient list. A product with almond flour must say "almonds" somewhere visible on the label, not just "nut flour."

FALCPA covers packaged foods manufactured for retail sale and regulated by the FDA. That phrase is doing significant work. The FDA does not regulate everything edible. Meat, poultry, and egg products are regulated by the USDA Food Safety and Inspection Service under a separate set of statutes. FALCPA did not amend those statutes, so a chicken breast from a federally inspected plant is subject to FSIS rules, not FALCPA. The FSIS has encouraged allergen labeling practices consistent with FALCPA, but that is guidance, not a statutory mandate.

Restaurants are also outside FALCPA's direct reach, but the reason is different from the USDA carve-out. Congress chose not to extend FALCPA to food service establishments when it drafted the law. The practical argument was that a restaurant menu changes constantly. A packaged cereal box stays the same for months; what a cook adds to tonight's special may change by tomorrow morning. The regulatory framework that works for a production line at a food manufacturer does not translate cleanly to a short-order kitchen. That said, the absence of a federal restaurant requirement created a gap that state legislatures have since moved to fill.

The law also created a petition process that allows ingredient manufacturers to seek an exemption from allergen labeling for highly refined ingredients. Highly refined oils derived from allergenic sources, for example, can qualify for exemption on the grounds that the refining process removes the proteins that cause allergic reactions. The FDA maintains a public inventory of approved exemptions, and the list is narrow. This matters for operators who need to read supplier specs carefully: "expeller-pressed peanut oil" retains proteins and is labeled; "refined peanut oil" may appear on a label without the allergen declaration if the manufacturer holds an approved exemption.

The original 8 to 9 allergen list

FALCPA identified eight foods responsible for the vast majority of serious allergic reactions in the United States at the time of passage. FDA research at the time indicated these eight accounted for approximately 90 percent of documented food allergy cases. The eight were: milk, eggs, fish, crustacean shellfish, tree nuts, peanuts, wheat, and soybeans.

Each one shows up in restaurant kitchens in ways that are easy to overlook. Milk appears in butter, cream sauces, beurre blanc bases, and baked goods; it also hides in processed meats as a filler. Eggs bind mayonnaise, aioli, pasta dough, and most batters. Fish can cross-contaminate through shared fryer oil, shared prep surfaces, and in sauces like Worcestershire, Caesar dressing, and certain Asian condiments. Crustacean shellfish covers shrimp, crab, lobster, and crayfish; it does not cover mollusks like clams and oysters, which are handled separately under the law. Tree nuts include almonds, cashews, walnuts, pecans, pistachios, and others; peanuts are legumes and are listed as a separate category rather than a subcategory of tree nuts. Wheat shows up in breadings, thickeners, soy sauce (which is typically brewed with wheat), pasta, and many stock bases. Soy appears in edamame, tofu, miso, and as a filler in processed proteins.

That list stayed fixed for nearly two decades. In April 2021, Congress passed the Food Allergy Safety, Treatment, Education, and Research Act, which President Biden signed on April 23, 2021. The FASTER Act, Public Law 117-11, amended section 201(qq) of the FFDCA to add sesame as the ninth major food allergen. Manufacturers had until January 1, 2023 to update labels, making sesame disclosure mandatory for any packaged food produced on or after that date.

The FASTER Act's addition of sesame had some unexpected consequences on the supply side. Some large bakers found it cheaper and simpler to add sesame to their bread formulas intentionally rather than guarantee that shared production lines were sesame-free. Once sesame was added as an ingredient, the label had to say so, which actually made those products safer from a disclosure standpoint even as it made them harder to eat for sesame-allergic consumers. The FDA reviewed this practice and determined it did not violate regulations because the allergen was being declared correctly. Operators sourcing bread products may want to verify whether their supplier's formula changed around 2023 for exactly this reason.

Sesame hides in ways that are less obvious than peanuts or shellfish. Tahini, the sesame paste used in hummus, is the most common vector. Sesame oil appears in Asian-style dressings, marinades, and finishing sauces. Sesame seeds top burger buns, brioche, and rye breads and can migrate in bakery production. Halvah and some Middle Eastern sweets are built on sesame paste. Gochujang and some fermented pastes contain sesame. For detail on how sesame became the ninth allergen and what that means for restaurant menus specifically, the FASTER Act guide walks through the supply-chain audit in depth.

The nine-allergen list under FALCPA plus FASTER is the same list that California's ADDE Act adopted by reference. States that enact their own restaurant allergen disclosure laws typically do not define the allergen list from scratch; they incorporate the federal definition. That is by design. It keeps the regulatory landscape consistent and means that when a new allergen is added at the federal level, state laws that reference the federal definition pick it up automatically without requiring a new legislative session.

What FALCPA does NOT require of restaurants

FALCPA imposes no obligation on restaurants to disclose allergens on their menus. That is the core fact every operator needs to understand. You can run a full-service restaurant in any state without a single allergen disclosure on your menu and be in perfect compliance with federal law, assuming no state law applies to you.

The law's scope is limited to "foods regulated under the Federal Food, Drug, and Cosmetic Act." When you read the statutory definition, that phrase points to packaged consumer products sold through retail channels, not to meals prepared on-site at a food service establishment. The FDA's primary authority over restaurants comes through different channels: the Federal Food, Drug, and Cosmetic Act's misbranding and adulteration provisions can reach any food in interstate commerce, the FDA works through the Food Code to set model standards for retail food safety, and the agency can conduct inspections of food service facilities. But none of that authority translates into a mandate that your menu must list allergens next to each dish.

FALCPA also does not require restaurants to maintain any particular documentation about the allergens in their dishes. It requires no training, no written policy, no kitchen procedures for allergen separation. All of that was left entirely to voluntary practice or state law.

The 2022 FDA Food Code introduced the closest thing to a federal recommendation on restaurant allergen disclosure. That edition of the Food Code, for the first time, called on retail food establishments to provide written notification of the nine major allergens as ingredients in unpackaged food served to customers. The notification could take the form of a brochure, a menu notice, a placard, a digital link, or any other effective written means. The 2022 Food Code also added sesame to the major allergen list, consistent with FASTER.

There is a critical distinction here. The FDA Food Code is a model code, not a statute. It has no legal force until a state or local jurisdiction formally adopts it. As of this writing, 49 of the 50 states have adopted some version of the FDA Food Code, but versions vary and adoption is not uniform. California, notably, maintains its own California Retail Food Code rather than adopting the FDA model. A state that has adopted the 2022 Food Code has incorporated the written notification recommendation into enforceable state regulation. A state still operating under an older Food Code version has not. That inconsistency is part of why operators cannot assume a single uniform rule applies across state lines.

There is also no private right of action under FALCPA. A consumer who suffers an allergic reaction from a restaurant meal cannot sue the restaurant for violating FALCPA, because FALCPA did not impose a duty on the restaurant in the first place. Liability claims in that scenario go through state tort law and state food safety codes, not through the federal allergen labeling statute.

How state laws like ADDE fill the federal gap

State legislatures started moving on restaurant allergen disclosure years before California passed the ADDE Act. Massachusetts was the first, signing the Food Allergy Awareness Act in January 2009. Rhode Island followed in 2012. Those early laws focused on awareness rather than disclosure: they required restaurants to post allergy awareness posters in staff areas, train at least one employee in allergen safety, and include a notice on menus telling guests to inform their server about allergies. They did not require menu-level allergen labeling for individual dishes.

For more than a decade, the state-law landscape stayed at that level. States passed training requirements, poster mandates, and consumer notification policies. Item-by-item allergen disclosure on menus, the kind that actually lets a guest scan a menu and know whether the pasta contains eggs, remained voluntary everywhere in the United States.

California changed that. Governor Newsom signed SB 68, the Allergen Disclosure for Dining Experiences Act, on October 13, 2025. The ADDE Act takes effect July 1, 2026. It is the first U.S. state law to require allergen disclosure at the menu-item level for a defined class of restaurants. The law covers food facilities that operate 20 or more locations nationally under the same trade name, maintain substantially the same menu across those locations, and have at least one location in California. Independent restaurants with fewer than 20 locations are not covered.

The ADDE Act adopted the federal nine-allergen list by reference. Every covered chain must disclose, for each standard menu item, whether it contains milk, eggs, fish, shellfish, tree nuts, peanuts, wheat, soy, or sesame. Disclosure must appear on all physical menus, digital menus, apps, websites, drive-thru displays, and kiosks. Operators can use written text, common names, or standardized pictograms. Restaurants that use a QR code or digital method must provide a print alternative for accessibility. The law covers intentional ingredients; it does not require disclosure of cross-contact risks from shared equipment.

What makes the ADDE Act significant beyond California is the pattern it establishes. The law shows that menu-level allergen disclosure is workable and enforceable for large chains, which removes the practical objection that has kept federal legislators from extending FALCPA to restaurants. Other states are watching the implementation closely. Rhode Island introduced a broader menu-labeling bill in 2024 that would have required allergen warnings directly on menus; that bill died in committee, but the interest is there.

For a detailed breakdown of what ADDE requires, which restaurants are covered, how enforcement works, and what a compliant menu looks like, see the ADDE Act guide.

The federal vs state regulatory split

Running a restaurant puts you at the intersection of at least three distinct regulatory regimes, each with its own authority, its own allergen rules, and its own enforcement mechanism. Understanding which layer does what helps you know which rules actually bind you and which are recommendations you can choose to follow.

The first layer is FDA jurisdiction over packaged food. The FDA administers FALCPA and FASTER through its authority under the FFDCA. Every packaged ingredient that comes through your receiving dock from a commercial distributor falls under this layer. Supplier labels on those products are the legal output of that system. When a sauce supplier's label says "Contains: wheat, soy," that statement was produced under FALCPA and carries legal weight. The supplier is the regulated party, not you.

The second layer is USDA Food Safety and Inspection Service jurisdiction over meat, poultry, and certain egg products. USDA-inspected products carry the USDA mark of inspection and are regulated under the Federal Meat Inspection Act, the Poultry Products Inspection Act, and the Egg Products Inspection Act. FALCPA does not apply to these products. FSIS has its own allergen labeling guidance and encourages practices that parallel FALCPA's requirements, but the statutory basis is different and the enforcement is separate. Operators sourcing meat and poultry need to read FSIS-inspected product labels with awareness that the legal framework behind those labels is not identical to the framework behind an FDA-regulated product.

The third layer is state health department authority over retail food service. State agencies license your restaurant, conduct routine inspections, investigate complaints, and enforce the state's version of the food code. This is the layer that has actual regulatory contact with your day-to-day operation. When a state adopts the 2022 FDA Food Code, the written allergen notification recommendation in that code becomes an enforceable state regulation and shows up in inspection checklists. When a state passes a statute like California's ADDE Act, compliance becomes a condition of your operating license.

There is a fourth overlay worth knowing about: the federal menu labeling rules under the Affordable Care Act, which require chain restaurants with 20 or more locations to post calorie counts on menus. The ADDE Act intentionally keys its coverage threshold to the same 20-location standard used in the federal menu labeling rules. That alignment is not accidental. A restaurant that is already subject to federal calorie disclosure requirements has infrastructure for menu standardization that makes allergen disclosure operationally feasible. Lawmakers used that existing category as the baseline for the new requirement.

What this means for an operator is that the question "does this allergen rule apply to me" does not have a single answer. You need to know your location count, your state, and which version of the food code your state health department enforces. A 25-location chain operating only in states that adopted the 2020 Food Code is in a different position from a 25-location chain that has one California location. The California location brings ADDE compliance obligations that the other locations do not have. Multi-state operators need to track each state's food code adoption history and any state-specific statutes separately.

Records you should still keep

FALCPA creates no documentation requirement for restaurants. You are not legally obligated to maintain supplier spec sheets, archive product labels, or keep batch records for kitchen preparations. But the absence of a legal obligation is not a good reason to skip the documentation.

Supplier spec sheets are the foundation. Every packaged ingredient your kitchen uses comes with a product specification that lists ingredients, allergens, and often cross-contact warnings. Those spec sheets are generated by your supplier's quality team to reflect the FALCPA-compliant label and the manufacturing controls at the production facility. When you receive a spec sheet and file it, you create evidence that you knew what was in each product at the time you received it. When a supplier reformulates without telling you, the gap between the old spec sheet and the new label becomes auditable. That documentation has saved operators from liability claims when they could show they were using confirmed allergen-free products up until the date a supplier changed its formula.

Keep FALCPA-compliant product labels or label images for any pre-packaged items you resell to customers without further preparation. A bottle of hot sauce sold at the counter, a bag of granola available at checkout, a bottle of salad dressing you put on tables instead of pouring from it in the kitchen: all of those are packaged food products that your customer is consuming directly. If the label was valid when you purchased the product, you should be able to show it on request.

Allergen-specific records for house-made items are worth building even if your state does not currently require them. A simple matrix that lists each house-made item and the allergens present in its recipe gives your staff a reference point for answering guest questions and gives you a baseline for compliance if your state adopts a new allergen disclosure rule. If you have been running the matrix for two years before a law passes, your compliance work is already mostly done.

Training records matter in states with staff training requirements, and increasingly in general. Massachusetts and Rhode Island both require documented training; other states may add similar requirements. Even where training records are not legally required, they demonstrate that your team had adequate knowledge to handle allergen requests safely. That demonstration is relevant if a guest claims an allergic reaction and the question is whether the restaurant was negligent in its procedures.

For California operators subject to the ADDE Act, the documentation requirements are more specific. See the ADDE Act guide for the full picture of what the state expects you to maintain and how menu information must be presented.

One underestimated documentation category is supplier change notifications. Request in writing from every major ingredient supplier that they notify you before any formula change that could affect allergen content. Some suppliers do this proactively. Most do not unless you ask. Putting the request in writing and keeping a copy of the response means you can show that you took reasonable steps to stay informed about what was in your products.