The Complete Guide to EU FIC Allergen Compliance for Food Businesses

What is the EU FIC Regulation?

Regulation (EU) No 1169/2011 on the provision of food information to consumers — universally shortened to the FIC Regulation — is the primary piece of EU legislation governing how food businesses must label and communicate food information to their customers.

It came into force on 13 December 2014 for pre-packaged food, and was extended to cover non-pre-packaged food (restaurant meals, deli counters, loose bakery items) from the same date, with member states given the option to set specific national rules for the format of disclosure.

The allergen provisions in Annex II of the regulation are its most practically significant element for most food businesses. They establish a list of 14 substance categories that must always be disclosed when present as ingredients or processing aids in any food sold.

Critically, the regulation applies to all food businesses — whether you're selling a packaged product in a supermarket or serving a meal in a restaurant. The format of disclosure differs, but the legal obligation to disclose does not.

Who does it apply to?

The FIC Regulation applies to all food business operators (FBOs) in the EU. In practical terms this includes:

Restaurants, cafés, takeaways, and food trucks
Bakeries, delis, and butchers selling loose or counter food
Food manufacturers producing pre-packaged goods
Caterers providing food for events, hospitals, schools, or corporate clients
Ghost kitchens and delivery-only brands
Online food retailers selling into the EU
Hotel and hospitality F&B operations
Supermarkets and retailers with in-store food preparation areas

If you sell food to consumers in the EU, the regulation applies to you. There is no minimum size threshold — a single-owner market stall has the same legal obligation as a multinational food manufacturer.

In Ireland, the national implementing legislation is the European Union (Provision of Food Information to Consumers) Regulations 2014 (S.I. No. 489 of 2014), enforced by the Food Safety Authority of Ireland (FSAI) and Environmental Health Officers (EHOs).

The 14 regulated allergens

Annex II of the FIC Regulation lists the 14 substance categories that trigger mandatory disclosure. These were selected based on scientific evidence of the frequency and severity of allergic reactions in the EU population.

Cereals containing gluten

Wheat, rye, barley, oats

Crustaceans

Prawns, crab, lobster

Eggs

All forms

Fish

All species

Peanuts

Including oils

Soybeans

Refined oil exempt

Milk

Including lactose

Tree nuts

Almonds, cashews…

Celery

Including celeriac

Mustard

Seeds, oil, flour

Sesame seeds

Including oil

Sulphites

>10 mg/kg SO₂

Lupin

Flour and seeds

Molluscs

Mussels, oysters…

Some forms of these allergens are exempt from disclosure because scientific evidence indicates they are unlikely to cause an adverse reaction in their processed form. Key exemptions include: fully refined wheat-based glucose syrups and maltodextrins, fully refined soya oil and fat, fish gelatine used as a carrier for vitamins, and certain sugars derived from lactose. A full exemption list is provided in Annex II of the regulation.

Important: exemptions are narrow and technically specific. If you're unsure whether your ingredient is exempt, treat it as non-exempt. The burden of proof in any enforcement action will be on you.

Pre-packaged food requirements

For pre-packaged food — food that is packaged before sale in such a way that it cannot be altered without opening the packaging — the FIC Regulation is explicit:

All 14 allergens must appear in the ingredient list on the label
Allergens must be emphasised using a typographical convention that distinguishes them from the rest of the ingredient list — typically bold, italics, underline, or a different font. The emphasis method must be consistent throughout the label.
The ingredient list must be in a language the consumer can reasonably be expected to understand (in practice, the official language of the country of sale)
Text must meet minimum font size requirements (generally x-height of at least 1.2mm on the package)

An example of compliant emphasis in an ingredient list: "Flour (wheat), sugar, cocoa, milk powder, eggs, sunflower oil, salt". The bolded items are the allergens.

For online food sales, allergen information must be available before the purchase is complete and at the point of delivery. It is not sufficient to provide allergen information only at checkout.

Non-pre-packaged food requirements

This is the section most relevant to restaurants, cafés, caterers, and deli operators. Food that is not pre-packaged — meals prepared and served in a restaurant, food sold loose at a counter, or food packaged on request — is subject to different requirements.

Under Article 44 of the FIC Regulation, member states may establish national rules for how allergen information must be communicated for non-pre-packaged food. In Ireland, the national rules permit several methods:

Written disclosure: An allergen menu, wall chart, chalkboard, or table placard listing allergens present in each dish. This is the most legally secure approach.
Oral disclosure: Staff verbally communicate allergen information when asked. This is permitted but requires documented staff training, a written reference system (so staff know what to say), and a notice informing customers that allergen information is available on request.
Combination: Most businesses use a written allergen menu supplemented by trained staff who can answer follow-up questions.

Oral disclosure without a written backup is high-risk.

If a customer has a serious allergic reaction and you cannot demonstrate that they received accurate allergen information, your liability exposure is significant. Written records are always advisable.

How to disclose correctly

Correct allergen disclosure requires that you know exactly what allergens are present in every product you sell. In practice, this means:

Maintain an ingredient-level product database. For every item on your menu or in your product range, you need a complete ingredient list — not just the obvious allergens, but every ingredient including sauces, dressings, marinades, stocks, and processing aids.
Account for cross-contamination risk. If a naturally gluten-free item is prepared in a kitchen that also handles gluten-containing products, you need to consider and disclose that risk.
Update your records when recipes change. Changing a supplier, swapping an ingredient, or adding a new menu item requires a review of your allergen records. This is where businesses most commonly fail inspections.
Train all staff. Anyone who could be asked about allergens by a customer — front-of-house, kitchen staff, delivery drivers — needs to know your allergen policy and how to answer queries accurately.
Keep records. Documentation is everything in an enforcement action. You need to be able to show an EHO the basis for every allergen claim on your menu or label.

"May contain" warnings

"May contain [allergen]" (also called Precautionary Allergen Labelling, or PAL) refers to warnings used when a food does not intentionally contain an allergen, but there is a genuine risk of contamination through shared equipment, shared facilities, or supply chain exposure.

PAL is not regulated by the FIC Regulation — it is entirely voluntary. There is no legal requirement to include "may contain" warnings, and there is no standardised legal definition of what they mean.

This creates two practical problems:

Some businesses use "may contain" warnings defensively, adding them to everything, which makes them meaningless to consumers with allergies who need to rely on them
Other businesses omit "may contain" warnings even where genuine contamination risk exists, which creates safety risk

Best practice is to use PAL statements only where there is a real, assessed risk of cross-contamination, based on a formal allergen risk assessment of your facility and processes. Blanket PAL use is not good practice and can actually undermine consumer trust.

The EU Commission and FSAI have both published guidance on responsible PAL use. A Food Allergy Management Plan that includes a formal contamination risk assessment is the recommended approach for any food business that handles multiple allergens.

Penalties for non-compliance

In Ireland, enforcement of the FIC Regulation is primarily carried out by Environmental Health Officers (EHOs) working under the Health Service Executive (HSE) on behalf of the FSAI. Inspections can be routine, complaint-triggered, or follow an allergic incident.

Penalties under the European Union (Provision of Food Information to Consumers) Regulations 2014 include:

Fixed payment notices: On-the-spot financial penalties for specific contraventions, typically €300–€1,500
Prosecution for summary offences: Fines of up to €5,000 and/or up to 6 months imprisonment on conviction
Prohibition orders: EHOs can prohibit the sale of specific products, close an operation, or require corrective action before trading can resume
Closure orders: In serious cases, a food business can be closed pending investigation

Beyond regulatory penalties, a serious allergen incident — a hospitalisation or fatality — carries criminal liability exposure for the business owner and potentially their key staff, in addition to civil claims.

The FSAI publishes enforcement actions on their website. The reputational damage of appearing on that list — and the associated press coverage — is often more damaging than the fine itself.

Common mistakes food businesses make

Relying on verbal disclosure only

Without a written backup system, you cannot demonstrate to an EHO that your staff gave accurate information. One inconsistent answer from a staff member is sufficient grounds for enforcement action.

Not updating allergen records when recipes change

Supplier changes are the most common source of undisclosed allergens. A new bread supplier using sesame seeds, a sauce that now contains mustard — these changes must trigger a full allergen review.

Using allergen information from menu aggregators as your compliance record

Platforms like Deliveroo or Just Eat display allergen information, but that information came from you. The compliance obligation remains with the food business, not the platform.

Assuming "gluten-free" means no allergen disclosure needed

A gluten-free product may still contain milk, eggs, nuts, or sesame. Every item requires a full allergen review, regardless of what it doesn't contain.

Blanket "may contain all 14 allergens" labelling

This is not compliant. The FIC Regulation requires specific disclosure of allergens that are present. Blanket PAL statements are not a substitute for ingredient-level allergen assessment.

Not training new or seasonal staff

Staff turnover is the weak link in most allergen management systems. A customer who asks about allergens and receives incorrect information from an untrained employee creates the same liability as having no system at all.

How to implement allergen compliance: a practical checklist

Getting compliant does not require a consultant or a complex system. It requires a consistent process, good documentation, and regular review. Here is a practical implementation checklist:

Create a complete ingredient-level record for every product you sell, including sauces, stocks, marinades, and garnishes

Map each ingredient to the 14 regulated allergens

Assess cross-contamination risk in your facility for each product

Create a customer-facing allergen disclosure — a printed menu, wall chart, or digital display

Establish a process for reviewing allergen records whenever a recipe, ingredient, or supplier changes

Train all staff who interact with customers or prepare food on your allergen policy

Keep training records — name, date trained, and what they were trained on

Appoint an allergen lead — one person responsible for maintaining your allergen management system

Review the full system at least annually, or following any allergic incident

Keep copies of supplier specifications for all ingredients as evidence for your allergen claims

The FSAI provides free guidance documents and template allergen matrices on their website at fsai.ie. The Allergen Bureau's VITAL (Voluntary Incidental Trace Allergen Labelling) program offers a risk assessment framework for cross-contamination decisions.