Food Allergen Disclosure Laws: Liability, Labeling, and Restaurant Responsibilities

Food allergy incidents in restaurants kill people. An estimated 200 deaths occur annually in the United States from food allergy reactions, and a significant percentage happen in food service settings. Beyond the human tragedy, allergen-related lawsuits have resulted in substantial damage awards for personal injury and wrongful death. Understanding your legal obligations around allergen disclosure is not optional, and the regulatory landscape is expanding rapidly.

The Nine Major Allergens

The FDA recognizes nine major food allergens that account for approximately 90% of food allergic reactions in the United States. According to FDA guidance on allergen labeling, the nine are: milk, eggs, fish, Crustacean shellfish, tree nuts, peanuts, wheat, soybeans, and sesame.

Sesame is the newest addition, added as the ninth major allergen through the FASTER Act, signed on April 23, 2021, with requirements taking effect on January 1, 2023. This is a significant and relatively recent change — sesame allergies are less commonly known than peanut allergies but can be equally severe, and sesame is present in many restaurant ingredients that customers may not associate with it, including some bread doughs, sauces, and spice blends. For kitchen-level protocols on managing these allergens during service, see our guide on food allergen kitchen protocols.

Specificity matters in allergen disclosure. The FDA requires labels to identify the specific variety: not just “tree nuts” but which tree nuts (almond, cashew, walnut, pecan, pistachio, etc.), not just “fish” but the species, not just “shellfish” but the variety. When training staff on allergen communication, this level of specificity needs to be part of the conversation.

Federal Law: What Actually Applies to Restaurants

The primary federal allergen law — the Food Allergen Labeling and Consumer Protection Act (FALCPA) of 2004 — is often cited in discussions of restaurant obligations, but its direct application to restaurants is more limited than most operators assume.

According to the FDA’s guidance, FALCPA’s labeling requirements apply to packaged foods containing major food allergens. For restaurants, this means: if you are selling pre-packaged products — bottled sauces, packaged baked goods, pre-made salads in sealed containers — those packages must comply with full allergen labeling requirements.

Here is the critical exemption that applies to most restaurant transactions: FALCPA does not apply to foods placed in a wrapper or container following a customer’s order at the point of purchase. A sandwich wrapped in paper after ordering, a pizza in a box, a to-go container filled with a freshly prepared meal — all exempt from FALCPA’s written labeling requirements.

However, the 2022 FDA Food Code, as described in FDA guidance, introduced requirements that fill this gap for unpackaged food service. The updated Food Code requires restaurants to inform consumers in writing about major food allergens as ingredients in unpackaged food, and to label major food allergens in bulk food available for consumer self-dispensing. The Food Code is a model regulation adopted by states with modifications, so the specific enforceability of these provisions depends on what your jurisdiction has adopted.

State Laws: The Active and Expanding Landscape

The most significant allergen regulation changes are happening at the state level, where the patchwork of requirements creates different obligations for restaurants in different jurisdictions.

According to Perkins Coie’s analysis, six states currently have restaurant-specific allergen laws: California, Massachusetts, Maryland, Michigan, Rhode Island, and Virginia. Each has different specific requirements, but all impose disclosure or training obligations that go beyond the basic federal framework.

California’s Allergen Disclosure for Dining Experiences (ADDE) Act — established through SB 68 — is the most comprehensive state-level restaurant allergen law to date. When it takes effect in July 2026, restaurant chains with 20 or more locations in California must identify on their menus every major allergen known or reasonably known to be present in each menu item. This is a significant operational requirement for any multi-unit operator with California locations — menu development, ingredient tracking, and staff training all need to be built around allergen identification from the ground up.

Massachusetts has required allergen training and menu disclosure for some time and is frequently cited as a model for other states considering legislation. The Massachusetts approach requires restaurants to have a certified food protection manager trained in allergen awareness, display allergen posters, and inform customers about allergenic ingredients upon request.

The legislative trend is clearly toward more disclosure, not less. Operators who build allergen management systems now are better positioned for the expansion of state requirements than those who wait for a mandate to act.

How Restaurant Liability Works

Allergen liability for restaurants is based primarily on negligence, not strict liability. There is no absolute legal obligation under federal law for restaurants to disclose every ingredient in every dish to every customer. But a duty of care exists, and the failure to meet that duty — when it causes harm — creates legal liability.

Perkins Coie’s analysis of allergen liability identifies the key factors that elevate a restaurant’s legal exposure:

Customer disclosure: When a customer explicitly informs the restaurant of a food allergy, the restaurant’s duty of care is significantly heightened. The customer has put the restaurant on notice. From that point forward, the restaurant has a clear obligation to provide accurate information and take reasonable steps to prevent allergen exposure. Serving a dish with the disclosed allergen after receiving that notice — even through a communication failure between front-of-house and kitchen — is the factual basis for most successful allergen lawsuits.

Inaccurate information: If a customer asks about a specific allergen and a server provides incorrect information — either because they do not know or because the recipe was recently changed — and an allergic reaction results, the restaurant’s liability is clear. The customer relied on the restaurant’s representation.

Cross-contamination: Many allergen incidents in restaurants involve not the disclosed allergen in the main dish, but cross-contamination during preparation. A dish that contains no peanuts by recipe may pick up peanut protein from a surface, utensil, or cooking oil shared with a peanut-containing item. Cross-contamination liability cases are particularly difficult for restaurants because the contamination is often invisible and unintentional.

→ Read more: Preventing Cross-Contamination: Allergen Control and Kitchen Safety Protocols

Menu representation: If your menu says “gluten-free” or “nut-free” and the dish is not reliably free of those allergens due to cross-contamination risk, you have potentially created a negligent misrepresentation claim.

Damages in allergen-related lawsuits can be substantial. Wrongful death claims involving fatal anaphylaxis have resulted in multi-million dollar verdicts and settlements. Personal injury claims for hospitalization, medical treatment, and lasting health effects also generate significant damages.

Advisory Statements and Menu Language

Advisory statements — “may contain traces of nuts,” “prepared in a facility that also processes wheat” — are voluntary for restaurants but serve an important risk management function. They cannot replace accurate allergen information, but they communicate the reality of shared kitchen environments and inform customers with severe allergies to make their own risk assessment.

The Perkins Coie analysis notes that these voluntary statements help manage liability risk by setting accurate expectations. However, they do not provide complete immunity. If a restaurant routinely prepares dishes in the same pan as an allergen and serves a customer who has disclosed that allergy without warning them of the cross-contamination risk, an advisory statement on the menu may not insulate the restaurant from liability.

Menu language around allergens needs to be precise and consistently accurate. “Gluten-free options available” requires that you can actually deliver a reliably gluten-free preparation, not just that the base recipe contains no gluten. The delta between the marketing claim and the operational reality is where liability lives.

Training: The Operational Core of Allergen Management

Allergen management is fundamentally a people problem. You can have perfect ingredient records and a well-designed menu, but if a server does not recognize that “aioli” contains eggs or a cook does not know that your house sauce contains sesame, the documentation is irrelevant.

Perkins Coie identifies staff training as an increasingly required element by state and local health codes. Massachusetts requires certified allergen-trained managers. California’s ADDE Act will expand training requirements for covered chains. The trend toward mandatory training reflects the reality that knowledge gaps in front-of-house and kitchen staff are the proximate cause of most allergen incidents.

Effective allergen training covers:

• The nine major allergens and where they appear in common ingredients
• How to read ingredient lists and preparation records
• Cross-contamination prevention: separate surfaces, utensils, cooking oils, and preparation areas
• How to respond when a customer discloses an allergy — including escalating to a manager or chef
• What “may contain” advisory statements mean and when they are appropriate
• Menu items that contain each allergen and where allergens can be hidden in common preparations

Training documentation matters. A training log that shows dates, employees trained, and content covered is evidence in a liability defense. “We train all our staff” without documentation is not a defensible position in litigation. Build allergen training into your staff training programs and track completion.

→ Read more: Dietary Accommodations and Allergen Management: A Complete Restaurant Guide

Practical Risk Management Checklist

Building a defensible allergen program requires systems, not just policies:

Maintain detailed ingredient records for every menu item. Document every ingredient, including sub-ingredients of compound sauces, marinades, and garnishes. When a vendor changes a product formulation, the allergen record needs to update immediately.

Create a clear customer communication protocol. When a customer discloses an allergy, the protocol should be: acknowledge the disclosure, describe the steps you will take, and loop in the kitchen before preparation begins. If the restaurant cannot reliably prevent exposure, tell the customer honestly rather than guessing.

Establish allergen-free preparation procedures. For the most severe allergen concerns (peanuts, tree nuts, shellfish), consider whether you have the physical setup to prepare genuinely allergen-free dishes. If not, honesty about your kitchen’s limitations is better than a promise you cannot keep.

Review your menu claims. Audit every “gluten-free,” “nut-free,” or similar designation to ensure it can be delivered reliably, accounting for cross-contamination risk.

Track menu changes and communicate to staff. Recipe changes that add or remove allergens need to be communicated to all staff immediately, not at the next training session.

Document every allergen-related incident or near-miss. An operational log of incidents — including how they were handled — is both a management tool and potential legal documentation.

The direction of allergen law is toward more disclosure, more accountability, and more explicit staff training requirements. Operators who build these systems proactively are better protected against liability and better positioned for the regulatory requirements that are already in the pipeline. Pair your allergen management program with the right insurance coverage to ensure you are protected if an incident occurs despite your best practices.

→ Read more: Food Safety Compliance: Protecting Your Guests and Your Business

→ Read more: FDA Calorie Menu Labeling: Legal Requirements for Restaurant Chains