Allergen Checklist --- Daily Controls That Prevent a Crisis

Since Natasha's Law came into effect in October 2021, the legal obligations around allergen management have sharpened considerably. Food businesses now face potential criminal liability if an allergen incident can be traced back to inadequate controls. The question an EHO inspector or court will ask is: "What did you do to prevent this?"

A checklist provides the answer. Not just any checklist --- a documented, signed-off, date-stamped checklist that proves you had systems in place and that staff followed them. Without it, you're relying on memory and goodwill. Neither holds up under scrutiny.

The consequences of getting it wrong are not theoretical. Fatal allergic reactions in food settings have occurred in the UK. Even non-fatal incidents can result in prosecution, unlimited fines, mandatory closure, and reputational damage that a small food business may never recover from. A checklist takes minutes per shift. An allergen incident can cost you everything.

Every shift should begin (and end) with a structured set of allergen checks. These are not optional --- they are the minimum standard expected by the FSA. Here's what needs to be verified every day:

Each of these checks should be signed off by a named individual with the time of completion. If a check fails, there must be a documented corrective action --- not just "fixed it," but a specific note on what was wrong and what was done about it.

Many allergen incidents originate not in the kitchen but in the supply chain. A supplier changes the recipe of a sauce you've used for years, introduces a new allergen, and you don't find out until a customer reacts. Supplier checks are your firewall against this risk.

Delivery verification. When a delivery arrives, check that what you received matches what you ordered. A substitution of a "similar" product --- a different brand of bread, a different type of cooking oil --- can introduce allergens you haven't accounted for. Verify the ingredient list on the actual product against your allergen matrix before accepting it into your kitchen.

Spec sheet updates. Every supplier should provide formal ingredient specification sheets, and these must be reviewed whenever they're updated. Don't file them unread. Assign someone to check spec sheet updates against the allergen matrix and flag any changes. A newsletter from a supplier with "recipe improved!" should trigger an immediate allergen review, not a casual scroll.

Supplier assurance records. Keep a log of when spec sheets were last received and reviewed from each supplier. If a supplier hasn't updated their spec sheet in 18 months, that's not reassuring --- it's a red flag. EHO inspectors will want to see that you actively manage supplier relationships, not just passively accept whatever arrives.

When a customer says "I have a nut allergy," the entire chain of communication from server to kitchen and back must work perfectly. This isn't a game of Chinese whispers --- it's a structured process that every team member must follow.

Menu declarations. Every menu should carry a clear allergen statement, but the minimum legal requirement is that you make allergen information available on request. The allergen matrix should be accessible to front-of-house staff so they can answer questions without running to the kitchen. If a customer asks about allergens, the answer must come from the documented matrix, not from a server's best guess.

Special requests. When a customer requests a dish without a specific ingredient, the kitchen must be informed that this is an allergen-related modification, not a preference. "No nuts" because of a preference is different from "no nuts" because of a life-threatening allergy. The second requires full decontamination of surfaces and equipment. Staff need to know the difference.

Staff training. Allergen communication should be part of every staff member's induction training and refreshed regularly. Role-play scenarios help: what do you say when a customer asks about allergens? What do you do if you're not sure? The answer should never be "I think it's fine." It should be "Let me check the matrix."

A paper checklist on the wall has a fundamental weakness: it's only as good as human memory and honesty. Staff forget to tick boxes, tick them without checking, or fill in a week's worth on Friday afternoon. An EHO inspector can tell the difference between a genuine audit trail and a retroactively filled checklist, and the latter will be treated as if it doesn't exist --- or worse, as evidence of falsification.

Digital checklists solve this problem at the root. When a staff member confirms a check on their phone, the confirmation is time-stamped and linked to their identity. Managers can see at a glance which checks are complete and which are overdue. Missing checks trigger alerts before they become compliance gaps. And when the EHO inspector asks to see your allergen controls, you can produce a complete, unbroken audit trail.

The shift from paper to digital isn't just about convenience --- it's about evidentiary weight. A time-stamped digital record with staff identity and consistent completion history is far harder to challenge than a paper sheet with handwritten initials. In the event of an incident, your digital records are your strongest defence.

Even with the best controls, incidents can happen. A supplier error, a miscommunication, a moment of human error --- the question is whether you can demonstrate that you did everything reasonably possible to prevent it.

Immediate response. If a customer reports a suspected allergic reaction, your first priority is their safety. Call emergency services if symptoms are severe. Do not speculate about what may have caused the reaction --- collect all relevant information, including the dish ordered, any modifications, and the time of service.

Evidence collection. Preserve everything: the remaining food (if any), the supplier packaging, the allergen matrix as it stood at the time, any checklists completed that shift, and CCTV footage if available. Do not throw anything away. This evidence will be critical for any EHO investigation.

Incident log. Document everything that happened in a formal incident report: what the customer ate, when, what they reported, what action you took, and what you found when you checked your records. This log is both a legal document and a learning tool --- use it to identify where your controls failed and what needs to change.

EHO notification. Depending on the severity of the incident, you may need to notify your local Environmental Health department. This is not optional for serious incidents. Your allergen checklist and incident response records will be the first documents the EHO requests. If they're complete, dated, and demonstrate genuine due diligence, your position is significantly stronger.