Allergen Management in South Africa: The Eight Allergens, Cross Contact and May Contain

Home / Guides / Allergen management in South Africa

Allergen control · Food manufacturing

By Mthokozisi Nkosi, food scientist, registered Lead Auditor with Exemplar Global and IRCA, and one of four SAATCA registered R638:2018 Lead Implementers. Founder of ASC Food Safety Consultants. Last updated 9 September 2026.

Which allergens must be declared in South Africa under regulation 43?

Regulation 43 of R146 of 2010 names eight common allergen categories: egg, cow’s milk, crustaceans and molluscs, fish, peanuts, soybeans, tree nuts, and significant cereals containing gluten. Where any of these is present in a product or its packaging material, the presence must be declared. Goat’s milk is treated the same way as cow’s milk under regulation 44(2).

Two details in that list cause most of the label errors I see on audit. The first is that the eight are categories. Regulation 43(2) requires species level naming only for significant cereals. Naming the specific nut, cashew, almond, macadamia, pecan, walnut, pistachio, hazelnut or Brazil nut, is not required by regulation 43, but it is what Codex does and what retailer technical teams increasingly ask for, so I recommend it. For significant cereals the species must be named with “(gluten)” in parenthesis, so a label reads “wheat flour (gluten)” rather than “cereal” or “starch”.

The second is the phrase “or its packaging material”. That pulls coatings, adhesives, liners and anything else that carries an allergenic protein into the same declaration duty as the recipe, which is a question worth putting to your packaging supplier in writing rather than assuming.

There is no quantity in regulation 43 below which an intentionally added allergen stops being declarable. If it is in the formulation, it is declared, whether it is thirty percent of the recipe or a trace carried in a flavouring or a processing aid.

How does the South African allergen list compare with Codex and the EU?

South Africa recognises eight categories. Codex CXS 1-1985 works from a core list that includes sesame and requires sulphite to be declared at 10 mg/kg or more, with a further tier under section 4.2.1.5 that a national authority may add. The European list in Annex II of Regulation 1169/2011 runs to fourteen items, adding celery, mustard, sesame, lupin and sulphur dioxide.

An incoming label that declares celery or sulphites as allergens is not wrong in South Africa, it is simply carrying information the local rules do not demand, and you still have to check that the eight South African categories are declared in the South African form. Going the other way, the eight are a floor and not a ceiling, and sesame is the item that catches South African exporters most often.

The claim that South Africa declares fourteen allergens is the most persistent error in this field. It arrives through European artwork reused for a local pack, a template bought from an overseas consultant, or a generated answer that read Regulation 1169/2011 and assumed it travels. On a site I audited, an exporter had adopted the fourteen item list wholesale for its domestic range, so the pack warned about mustard and celery while the cow’s milk inside “whey powder” was never named anywhere a shopper would look. Declaring more than the law asks does not make up for declaring the wrong things.

One thing to be clear about: the expanded allergen list that appears in the 2023 draft labelling regulations, R3337 in Government Gazette 48460 of 21 April 2023, is a draft. It has been a draft for three years. Design your artwork around R146 of 2010, which is the law, and keep a watching brief on the draft rather than labelling against it.

What does regulation 43 require on the label, and in what form?

Regulation 43(1) gives two routes and they are not alternatives to thinking. Under 43(1)(a) the allergen is declared in parenthesis directly after the ingredient where the ingredient name does not make the allergen obvious. Under 43(1)(b) it is declared in a “Contains” block near the list of ingredients. Most South African labels use both, which is the safer construction.

Where the declaration usually fails is in the ingredient names themselves. Casein, whey powder, sodium caseinate, lactose, albumen, lecithin, semolina, durum, hydrolysed vegetable protein and natural flavouring all carry allergens that a consumer cannot see from the word alone. That is precisely the case 43(1)(a) is written for, so the label reads “sodium caseinate (cow’s milk)” and the “Contains” block repeats it. A “Contains” block on its own, with an opaque ingredients list above it, is a weak label even when it is technically populated.

Gluten free is a separate test with a number attached. Regulation 46(1)(a) permits the claim only where the foodstuff contains no significant cereal as an ingredient, and no derivative of one unless that derivative has been processed to remove gluten, and the end product contains not more than 20 mg/kg of gluten. Removing wheat flour from a recipe does not make a product gluten free if barley malt extract is still in there, and a product made in a flour dusted bakery will not hold 20 mg/kg on the strength of a recipe calculation.

Labelling as a whole, the mandatory particulars in regulation 9, date marking, batch codes and claims, sits in the full guide to South African food labelling regulations. This article stays on allergens.

What is an allergen control policy, and what does regulation 45 expect before you print “may contain”?

An allergen control policy is the documented system that keeps an allergen out of a product that does not declare it. Regulation 45 of R146 of 2010 makes it the precondition for precautionary labelling, and it requires the risk, the way the risk was assessed and the steps taken to avoid it to be written down. R146 prescribes no wording for the statement itself.

in the case where precautionary labelling is utilised, the risk, the manner of assessing the risk, and the steps taken to avoid the risk of allergen cross-contamination, shall be documentedRegulation 45, R146 of 2010, Government Gazette 32975

in the case where precautionary labelling is utilised, this shall not be utilised to circumvent the implementation of GMPs and an effective allergen control policy (ACP)Regulation 45, R146 of 2010, Government Gazette 32975

Regulation 45 does not care that you meant well. A “may contain” statement is the last step of a documented process, not a substitute for one. Printing it on everything you make, on the theory that a warning cannot hurt, fails on three fronts at once.

It fails on compliance, because the statement without the assessment behind it is exactly the circumvention regulation 45 addresses, and an inspector or a second party auditor who asks for your assessment and gets a shrug has found a finding, not a control. It fails commercially, because retailers and food service customers screen for blanket precautionary labelling during listing reviews and it costs you shelf space. And it fails the consumer, because when every pack in the aisle says “may contain nuts”, the allergic shopper stops reading the warning at all.

What an allergen control policy actually contains: an inventory of every allergen entering the site, an allergen matrix mapping those allergens to lines and products, raw material and supplier information, the risk assessment, segregation and sequencing rules, cleaning procedures with their validation, rework rules, artwork and label control, training records, and a verification and review cycle with a trigger for change. If a document called “Allergen Policy” on your server is one page of intent, it is a statement of belief, not a policy.

A precautionary statement also never covers an allergen you deliberately put in the product. If peanut is in the recipe, it is a regulation 43 declaration. “May contain peanuts” on a product that does contain peanuts is a mislabelled product.

Where does cross contact actually happen on a production line?

Cross contact is the transfer of an allergen from one product to another where it is not declared. It happens through seven repeatable routes: shared equipment, rework, airborne dust, production sequencing, the cleaning method itself, storage and decanting, and the movement of people, tools and packaging.

Of those seven, the one that produces the most undeclared allergen problems in my audit experience is the last: the process was fine and the pack was wrong. The right product went into film carrying an old declaration, or a recipe change went live before the artwork did, or a promotional pack from a different market was used to clear a shortage. Line clearance and packaging reconciliation are allergen controls, even though they sit in a different chapter of most quality manuals.

How do you build an allergen risk assessment and set a production sequence?

Start from materials, not from products. List every allergen entering the site through raw materials, processing aids, lubricants, packaging and cleaning chemicals, with the supplier attached. Map those to lines and products in an allergen matrix. Then, line by line, ask which allergen can move from the previous product to the next one and through which of the seven routes, and decide the control before you consider a label statement.

The order of controls is a hierarchy, not a menu. Remove the allergen where reformulation is realistic. Where it is not, separate it: a dedicated line, a dedicated room, or dedicated time. Where separation is partial, sequence production to reduce transfer and clean to a validated standard between blocks. Only what remains after all of that is residual risk, and only residual risk that is genuine and documented justifies a precautionary statement.

Setting the sequence

Run the product with the fewest allergens first. Group products that share an allergen profile so you change over within a block rather than across one. Put the product carrying the most allergens last in the block, immediately before the full validated clean. Never sequence around a clean you have not validated.

Sequencing fails at the planning desk far more often than it fails on the line. The version of this I see most often is a schedule pulled forward on a Friday afternoon to chase a customer order: the planner moves a peanut containing run ahead of a children’s biscuit, the approved sequence sits in a quality manual that planning has never opened, and nobody in the room knows a rule was broken. Write the sequencing rules into the planning procedure itself and require a QA signature on any deviation from the approved order.

Allergens belong in your hazard analysis as a chemical hazard, controlled largely through prerequisite programmes with specific control points at changeover, rework and labelling. If your HACCP study lists allergens as a hazard and then leaves the control column blank, the study has identified a problem and stopped there. Our HACCP guide for South African teams covers how those control points are documented.

How do you validate an allergen clean, and what evidence does an auditor want?

Validation is the one off exercise that proves your documented cleaning procedure removes the target allergen under worst case conditions. Verification is the routine check afterwards that the validated procedure was followed. Confusing the two is the single most common allergen finding I raise on site, usually in the form of daily ATP swabs offered as proof that a changeover clean removes milk protein.

Hydrolysed and fermented proteins may not be detected by a kit raised against the intact protein, so soy sauce and hydrolysed whey behave differently from the raw material. High heat processing alters protein structure and can lower recovery, so a validated result on a raw mix does not transfer to a baked product. Matrix effects, from fat, cocoa, tannins and some polyphenols, interfere with immunoassays, which is why the laboratory needs to know the product it is testing.

Worst case is what you validate against: the hardest product to clean, the longest run, the heaviest soil, the least accessible part of the machine. Sampling points matter more than the choice of kit, so document them with a diagram of the equipment and mark where each swab was taken. Most certification schemes and second party auditors expect the exercise repeated over consecutive changeovers rather than proved once, and expect requalification when the equipment, the product, the chemical or the procedure changes.

Can allergen rework go into a different product?

Only where the receiving product already declares every allergen the rework carries. The default rule is like into like: rework goes back into the same product it came from. Rework has to be identified at the moment it is created, with product name, batch, date and allergen profile on the container, and recorded against the batch that receives it so that a recall can pull both.

Rework is the control that quietly collapses under production pressure. On a site I audited, a bin of allergen containing product was standing at the end of a line at changeover with masking tape on the lid and a batch number in marker pen. The operator’s explanation was reasonable on its own terms: same base recipe, nobody wants to write off good product, the shift is behind. The label on the receiving run had not changed. That is an undeclared allergen and a recall, created by a decision that took four seconds and left no paperwork.

Rework containers are closed, labelled and stored in a defined place, not open bins parked next to the line. Rework has a shelf life and a maximum inclusion rate that are written down. The batch record for the receiving product names the rework batch used, because without that link your traceability exercise cannot say how far the problem spread. If the only way you can use a particular rework stream is by adding a precautionary statement to the receiving product, you have made a yield decision and dressed it as a safety decision.

How do supplier controls and specifications carry allergen risk into your site?

Most allergens on your site arrive on a truck. The specification for every raw material should state the allergens present as ingredients, the allergens handled on the supplier’s site and on the supplier’s line, and whether the supplier applies precautionary labelling. A certificate of analysis rarely tests for allergens at all, so treat it as a quality document rather than as allergen assurance.

The failure mode that catches good sites is silent change. A supplier reformulates, or second sources during a shortage, or moves production to another packing site, and nobody tells the customer because the specification did not require it. Write a change notification clause into the supply agreement, require written notice before any change to composition, site or process, and check it at approval and at review rather than once at listing.

Imported ingredients arrive in the exporting country’s declaration format, so an EU origin ingredient names allergens against a fourteen item list and may not present the eight South African categories the way regulation 43 wants them. Category names on an incoming specification, “vegetable oil”, “natural flavouring”, “starch”, also hide the species you need for your own label. Ask for the species in writing.

For tankers and bulk tips, the previous load declaration and the wash certificate are allergen documents, and they belong in the receiving check, not in a file that is opened only when something goes wrong. How to check all of this at a supplier, and how to run the audit that tests it, is covered in our guide to internal and supplier auditing.

What does an undeclared allergen recall look like, and how does it happen?

It rarely starts with a laboratory result. It starts with a consumer reaction or a customer complaint, and within hours you are running traceability to see how many batches carry the same defect. Section 2 of the Foodstuffs, Cosmetics and Disinfectants Act 54 of 1972 prohibits selling a falsely described foodstuff, and section 11 lets an inspector take samples and detain product.

The mechanisms repeat across every site I have worked in. Artwork was approved against a superseded recipe. The recipe changed and the label change followed two weeks later. The correct product ran into the wrong film. A supplier changed an ingredient and the specification was never reissued. Rework carried an allergen into a product whose label does not declare it. A changeover clean was documented but never validated. Or a free from claim was made on a line that also runs the allergen, which converts an ordinary product into a high risk one on the strength of a marketing decision.

What follows is expensive in a way the initial risk assessment never models: stock destroyed, retailer recall charges, listing suspension, public notice, and a second party audit within weeks. The recovery work is a proper root cause analysis, and the root cause is almost never “operator error”. It is a control that existed on paper and had no owner on the floor. Our root cause analysis course guide sets out how to run that investigation, and An Overview of Root Cause Analysis, R649 is the short version for a team that needs the method this month.

Who on site needs allergen training?

Anyone whose decisions can move an allergen. That is wider than QA: production supervisors set the run order, operators handle rework, cleaners perform the control that the validation was written for, planners change the sequence, buyers change the supplier, and product developers create the risk in the first place. Regulation 10(1) of R638 of 2018 puts the duty for training and training records on the person in charge.

any other person working on the food premises, is suitably qualified or adequately trained in the principles and practices of food safety and hygiene, as appropriate, by an inspector or any other suitable personRegulation 10(1)(b), R638 of 2018, Government Gazette 41730

R638 goes on, at 10(1)(c) and 10(1)(d), to require routine assessments of the impact of that training and training programmes and records kept, updated and made available to an inspector on request. It names no course, no provider and no unit standard. What an inspector or an auditor actually evaluates is whether the people doing the work can explain the control they perform, and whether you can produce the record. General food handler duties under R638 are covered in our food handler training guide and the wider premises duties in the Certificate of Acceptability guide.

For a manufacturing site, the practical split is this. Everyone who touches product needs allergen awareness: what the eight categories are, why the segregation rules exist, what to do about a spill and a stray pack. Supervisors, cleaners, planners and QA need the working course, because they operate the controls. The person who signs artwork, defends the “may contain” statement, or answers a retailer’s allergen questionnaire needs the labelling regulatory content as well.

Frequently asked questions

ASC Food Safety Training · Leading with Science. Ensuring Food Safety. · Fully online, serving all of South Africa and beyond · info@ascfoodsafety.com · WhatsApp +27 61 483 0381 · SAATCA registered training centre (TC No. 065) · FoodBev SETA accredited provider No. 587/00337/1900 · B-BBEE Level 1 · Registered Lead Auditor (Exemplar Global and IRCA) · Consulting and document toolkits at ascfoodsafety.com