Here is the article:
A customer with a tree nut allergy orders a dessert at your restaurant. Your waiter hesitates, checks with the kitchen, but nobody knows exactly what's in the chocolate spread used in the cake. This scenario, far from hypothetical, plays out every day in thousands of restaurants. Beyond the very real health risk — anaphylactic shock can occur within minutes — it also represents a major legal liability for the restaurateur. Displaying allergens on your restaurant menu isn't optional: it's a legal requirement, and failing to comply can result in financial penalties and criminal prosecution. Here's everything you need to know to stay compliant in 2026.
Restaurant menu allergens: what the law says in 2026
Allergen regulations in the food service industry rest on two key pieces of legislation that apply to every restaurateur operating in the EU — and similar frameworks exist in the UK, US, and other markets.
The EU Food Information to Consumers Regulation (No. 1169/2011)
The EU FIC Regulation (Food Information to Consumers), which came into force on 13 December 2014, established the overarching framework. Article 44 requires that allergen information be provided to the end consumer for all non-prepacked food — which covers every dish served in a restaurant.
This regulation applies directly in all EU Member States and was retained in UK law following Brexit. Whatever jurisdiction you operate in, allergen disclosure is a legal requirement you cannot afford to ignore.
National implementing rules
Individual countries have their own implementing rules that specify how the FIC Regulation is applied in practice for non-prepacked foods. In the UK, Natasha's Law (2021) further strengthened requirements for prepacked-for-direct-sale foods. Generally, these rules require that:
- Allergen information must be available in writing and accessible to the consumer before purchase
- A written document listing allergens must be kept up to date and available on request
- This document must clearly state the name of the person responsible and the date it was last updated
- Allergens must be emphasised in the ingredients list (in bold, italics, capitals, or a different colour)
In practice, this means that even if you don't display allergens directly on your menu, you must at minimum have an up-to-date written document and provide it to any customer who asks.
The 14 allergens requiring mandatory declaration
The list of allergens subject to mandatory declaration is set out in Annex II of the FIC Regulation. It includes 14 categories:
- Cereals containing gluten (wheat, rye, barley, oats, spelt, kamut, and their hybridised strains)
- Crustaceans and products thereof
- Eggs and products thereof
- Fish and products thereof
- Peanuts and products thereof
- Soybeans and products thereof
- Milk and products thereof (including lactose)
- Tree nuts: almonds, hazelnuts, walnuts, cashews, pecans, Brazil nuts, pistachios, macadamia nuts
- Celery and products thereof
- Mustard and products thereof
- Sesame seeds and products thereof
- Sulphur dioxide and sulphites (at concentrations above 10 mg/kg or 10 mg/litre expressed as SO2)
- Lupin and products thereof
- Molluscs and products thereof
Important note: this list is exhaustive for legal purposes, but it doesn't cover every possible allergy. Some customers may react to unlisted substances (kiwi, banana, avocado, etc.). The law doesn't require you to declare these, but professional diligence and your general duty of care mean you should remain vigilant.
Three accepted methods for displaying allergens
You have several options for informing your customers. Each has its own advantages and limitations.
Option 1: displaying allergens directly on the menu
This is the most transparent method and the one increasingly favoured by restaurants. Allergens are listed directly under each dish, either as text or as standardised pictograms.
Practical example:
Salmon tartare with avocado and sesame — £16 / $18 Contains: fish, sesame seeds, eggs (sauce)
This method has the advantage of being immediately visible. The customer doesn't need to ask for anything. It also reduces the workload for front-of-house staff, who no longer have to field each question individually.
On the other hand, it demands rigorous menu updates whenever a recipe or supplier changes. A dish whose composition changes — even slightly — must have its allergen information updated accordingly.
Option 2: a written document available on request
This is the legal minimum. A folder, notebook, or printed document lists the allergens present in each dish. This document is kept at the front of house or the till and handed to customers on request.
The document must include:
- The name of each dish or preparation
- The allergens present, clearly highlighted
- The name of the person responsible for the establishment
- The date it was last updated
This method has the merit of being simple to implement. But it relies on the customer proactively asking for information and on staff being available to provide it. During a busy service, the document may be misplaced or the waiter too rushed to find it.
Option 3: digital display via a digital menu
More and more restaurateurs are opting for a digital menu accessible via QR code, which has built-in allergen management. The customer scans the code, browses the menu on their phone, and can filter dishes according to their allergies.
This solution offers several advantages:
- Instant updates: change an ingredient and the allergen information updates automatically across all platforms
- Personalised filtering: the customer selects their allergies and only sees dishes they can safely eat
- Traceability: a full change history is maintained, providing evidence in case of inspection or dispute
- Multilingual support: allergen information is accessible to international guests, who make up a significant share of customers in tourist areas
Platforms like ALaCarte.direct allow you to manage this information directly from the menu builder, with no technical expertise required.
Who carries out inspections and what are the penalties for non-compliance?
Inspection authorities
Allergen compliance inspections are carried out by food safety and trading standards authorities. In the UK, this falls to local authority Environmental Health Officers and Trading Standards. In the EU, national food safety agencies handle enforcement. In the US, the FDA and local health departments oversee compliance. Typically, these bodies:
- Verify that consumer information is accurate and not misleading — covering allergen declarations and menu claims
- Check that food safety standards are met, including proper allergen management procedures
Inspections may be scheduled (as part of routine sector audits) or unannounced (following a complaint or report). The inspector will check that you have an allergen information system in place, that it's up to date, and that it's genuinely accessible to consumers.
Hygiene inspection results are increasingly made public and searchable online, adding a reputational dimension to compliance.
Penalties you could face
Failing to meet allergen information requirements can result in a range of penalties:
- Fixed penalty fines (up to £5,000 / €1,500) for failure to provide written allergen information
- Higher fines and prosecution for misleading consumers about the nature or composition of food
- In the event of a serious allergic incident, charges can escalate to endangering life or even manslaughter / involuntary homicide, carrying potential prison sentences
Beyond criminal penalties, your civil liability is also at stake. A customer who suffers an allergic reaction at your establishment can seek compensation for damages. And if the investigation reveals that allergen information was unavailable or inaccurate, your position will be extremely difficult to defend.
How to implement rigorous allergen management
Step 1: carry out a complete inventory of your ingredients
Start by listing every ingredient used in your kitchen, including:
- Raw products (meat, fish, vegetables, fruit)
- Semi-prepared products (stocks, shop-bought sauces, ready-made pastry)
- Condiments and seasonings (soy sauce, mustard, oils)
- Baking products (flours, powders, flavourings)
- Oils and fats (watch out for groundnut/peanut oil)
For every purchased product, keep the supplier's technical data sheet. This is the document that allows you to identify allergens present, including potential traces from cross-contamination on production lines.
Key point: when you switch suppliers for the same product, the composition may differ. One brand's stock cube might contain celery while another doesn't. Always double-check.
Step 2: create an allergen record for each dish
For every recipe on your menu, create a record that covers:
- The full list of ingredients
- Which of the 14 regulated allergens are present
- Any potential cross-contamination risks in the kitchen
A simple table format works very well:
| Dish | Gluten | Crustaceans | Eggs | Fish | Peanuts | Soya | Milk | Tree nuts | Celery | Mustard | Sesame | Sulphites | Lupin | Molluscs |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Quiche lorraine | X | X | X | |||||||||||
| Salade niçoise | X | X | X | X |
This table must be updated every time a recipe changes, a supplier is switched, or a new dish is introduced.
Step 3: train your team
Allergen management isn't just the chef's responsibility. Every member of your team should:
- Know the 14 regulated allergens and be able to identify them
- Know where to find the information: where the allergen folder is kept, how to check the digital menu, who to ask in the kitchen if in doubt
- Have the right reflexes when a customer reports an allergy: never play it down, never guess, always verify
- Know emergency procedures: recognise the signs of an allergic reaction, know how to call emergency services (999/112/911), know the location of any adrenaline auto-injector (EpiPen)
Include an allergen module in your induction training for every new member of staff. Regular refreshers, especially when the menu changes, are essential. This training can be incorporated into the obligations set out in your employee contracts.
Step 4: manage cross-contamination in the kitchen
The legal obligation covers allergens present in the recipe itself. But in practice, cross-contamination in the kitchen poses a real risk. Some best practices:
- Dedicate chopping boards and utensils to preparations free from major allergens (gluten-free, nut-free, etc.)
- Organise storage to separate allergenic ingredients from others (separate shelves, sealed containers)
- Clean work surfaces between different preparations
- Use separate cooking oils: don't fry prawn tempura in the same oil as chips intended for a customer with a shellfish allergy
- Clearly label allergens in storage: colour-coded labels, specific markings
If despite these precautions a cross-contamination risk remains, state it clearly: "May contain traces of…". While not strictly mandatory under the FIC Regulation, this advisory statement is strongly recommended by food safety authorities and provides you with legal protection.
Common mistakes you must avoid
Mistake #1: relying on verbal communication alone
"Ask your server" is not enough. The law requires a written record. Verbal information can supplement what's written, but it cannot replace it. During an inspection, the officer will ask to see the document. If you have nothing to show, you're in breach.
Mistake #2: failing to keep records up to date
Your supplier changes the recipe for their barbecue sauce and adds mustard. If you don't update your allergen record, you're providing false information. This is not only dangerous but legally constitutes misleading the consumer.
Best practice: with every delivery, check the labels on products received. Compare them against the technical data sheets you hold. Any change must trigger an update to your allergen records.
Mistake #3: forgetting drinks and sides
Restaurant menu allergens don't just apply to main courses. Remember to include:
- Cocktails and drinks: eggnog contains eggs and milk, a smoothie may contain tree nuts, beer contains gluten
- Sauces and condiments served on the side: mayonnaise (eggs, mustard), soy sauce (soya, wheat), pesto (tree nuts, milk)
- Desserts: often the most allergen-heavy items (gluten, eggs, milk, tree nuts)
- Bread served at the table: gluten, sometimes sesame, sometimes milk
Mistake #4: using non-standardised pictograms
If you choose pictograms rather than text, make sure they're easily understood. There is no official standard mandating a specific set of pictograms, but the most widely recognised icons are those used by food safety training bodies. Always include a visible legend.
Mistake #5: overlooking daily specials and recommendations
A daily special put together that morning must meet the same requirements as a permanent menu item. The chef must systematically identify the allergens before service and communicate this information to the front-of-house team.
Allergens and special menus: weddings, events, and team buildings
If you host private events such as weddings or culinary team building events, allergen information requirements apply with equal rigour.
For a wedding or banquet menu, best practices include:
- Collect guests' allergy information in advance via a form sent by the organiser
- Offer alternatives for each major allergen identified
- Clearly mark adapted plates during service (colour-coded sticker, specific place card)
- Keep a written record of the menu served and any adaptations made
This is particularly sensitive: at an event with many guests, the risk of mix-ups is multiplied. A gluten-free dish mistakenly served to the wrong person can have serious consequences.
The question of "traces" and "may contain"
The "may contain traces of…" statement causes a great deal of confusion among restaurateurs.
What the law says: the FIC Regulation does not require you to declare traces resulting from unintentional cross-contamination. This statement is voluntary, not mandatory.
What common sense says: if you know there is a cross-contamination risk in your kitchen (shared equipment, nearby storage), declaring it is a precautionary measure that protects both your customers and yourself.
What to avoid: systematically adding "may contain traces of all allergens" across your entire menu. This practice, sometimes used as a legal safety net, is considered abusive by food safety authorities. It renders the information meaningless and prevents allergy sufferers from making an informed choice.
The right approach is to assess the actual cross-contamination risk for each preparation and only mention traces where a genuine risk exists.
Protecting your allergic customers' data
When you collect information about your customers' allergies — particularly for events or through a loyalty programme — you are processing health data. This data benefits from enhanced protection under data protection laws such as GDPR (in the EU and UK) and similar regulations elsewhere.
In practice:
- Only collect the information that is strictly necessary
- Do not retain this data beyond the event or service in question
- Do not share it with third parties without the customer's explicit consent
- Ensure that only those who need the information have access to it (the chef, the floor manager)
For more on this topic, see our guide on customer data protection in restaurants.
Mandatory allergen information: 2026 compliance checklist
Use this checklist to verify that your establishment is fully compliant:
- [ ] A written document listing allergens by dish is available and up to date
- [ ] This document includes the name of the person responsible and the date it was last updated
- [ ] All 14 regulated allergens are covered
- [ ] Technical data sheets from all suppliers are kept on file and accessible
- [ ] Allergens are clearly highlighted (bold, colour, pictograms) in the documentation
- [ ] Front-of-house staff know where to find the information and how to communicate it
- [ ] Kitchen staff know the procedure for updating records when a recipe or supplier changes
- [ ] Daily specials and recommendations are subject to the same rigour as permanent menu items
- [ ] Drinks, desserts, sides, and sauces are included in the documentation
- [ ] Measures to prevent cross-contamination are in place
- [ ] An emergency procedure for allergic reactions is known to the entire team
- [ ] Staff training includes an allergen component
Conclusion: act now, not after an incident
Managing allergens on your restaurant menu is not just another piece of paperwork. It's a legal obligation that protects your customers' health and your own liability as a professional.
Steps to take starting today:
- Carry out an inventory of all your ingredients and identify the allergens present in every recipe
- Create or update your written reference document, complete with date and the name of the person responsible
- Train your team: a 15-minute briefing before the next service is enough to lay the groundwork
- Put an update process in place: every time a supplier or recipe changes, the allergen record must follow
- Consider switching to a digital menu to automate allergen management and offer a smoother experience for your customers
Don't wait for a food safety inspection or, worse, an allergic incident to get compliant. Allergen disclosure is one of the simplest and most cost-effective investments you can make: it costs almost nothing to implement, yet it can save you from devastating consequences — for your customers and for your business.