Read enough allergen recall notices and a pattern emerges. The food was usually made correctly. What failed was a decision about rework, a pack that said the wrong thing, or a changeover where the old labels never left the line.
All three are cheap to control and expensive to get wrong, and all three happen at the shift level, not the boardroom level.
1. Rework: like into like, or not at all
Rework is the oldest allergen failure in manufacturing. Product containing an allergen can go back only into a product that already declares that allergen, and only where the record shows what went where.
| Situation | Decision |
|---|---|
| Milk-containing biscuit into the same milk-containing biscuit | Permitted. Like into like, recorded. |
| Milk-containing biscuit into a plain biscuit that declares milk | Permitted if the declaration already covers it and the risk assessment allows it. |
| Milk-containing biscuit into a dairy-free product | Never. This is a recall in a bin. |
| Unlabelled rework in an open container | Not a decision at all. Dispose of it, and fix the labelling discipline. |
| Rework held over a shift change or overnight | Only where it is sealed, labelled and the record survives the handover. Most rework failures happen at 06:00. |
The control is boring and it works. Every rework container covered, labelled with product name, allergens, batch and date, and traceable to where it came from and where it went. A rework label should carry, at minimum:
- Product name and originating batch or lot number
- Date and time it was set aside, and by whom
- The originating process or line
- A complete allergen declaration, in the same words the finished product uses
- The product it may be returned into, or “disposal only”
An unlabelled tub on a pallet at the end of a night shift is how good product becomes a recall. If nobody can say what is in it, the only defensible destination is waste.
2. Packaging: the right food in the wrong pack
A mislabelled allergen is a mislabelled allergen even when the food inside is perfect. The chain that produces one runs like this: a recipe changes, or a supplier changes; somebody updates the specification; the declaration has to be recalculated; the artwork is amended, proofed and approved; and the new pack has to reach the line on the day the new recipe runs. Every step is a place to lose control, and the steps are usually owned by different departments.
| Step | Owner | Failure that shows up in a recall |
|---|---|---|
| Recipe or supplier change | NPD or procurement | Technical never hears about it |
| Specification update | Technical | Updated for the new supplier, not for every product using it |
| Declaration recalculated | Technical | Checked against the previous label instead of the specification |
| Artwork amended and proofed | Marketing or packaging | Visual proofing only; nobody verifies the allergen text |
| Approval | Named approver | Approved by whoever was available, with no version control |
| New pack reaches the line | Planning and production | New recipe runs a week before the new pack arrives |
| Old pack withdrawn | Warehouse and production | Old film left on the shelf “until we use it up” |
Two rules prevent most of it:
- Approve against the specification, never against the previous artwork. Checking new artwork against old artwork simply carries the old error forward through every redesign the product ever has.
- Make approval a controlled act. Version number, date, named approver, technical check recorded. “Someone in marketing said it looked right” is not an approval.
3. Line clearance: the old labels have to physically leave
When artwork changes, the old film, labels and sleeves must be removed from the line, quarantined and destroyed under record. Not stacked on the shelf behind the coder. Not left on a trolley near the machine. Not returned to general stock “in case”.
Line clearance before a changeover means somebody physically looked, removed everything belonging to the previous run, and signed that they did. A workable clearance record names:
- The line, the outgoing product and the incoming product
- Every packaging component removed, with quantities
- Where the removed material went: quarantine location or destruction
- Confirmation that the coder, labeller and date-code settings were reset
- The name and signature of the person who inspected, and the time
- A second check by a different person for high-risk changeovers
An auditor will ask to see that signature against a specific date, and will then ask what happened to the material that was removed. “We think it was thrown away” ends badly.
The four routes, underneath all three
Rework, packaging and line clearance are where failures surface. Cross-contact is how allergens get there in the first place, and it travels by four routes:
- People — hands, gloves, sleeves and aprons moving between areas.
- Equipment — scoops, blades, belts and utensils shared across products.
- Air — flour and powder, which travel further than anyone expects and settle on everything downwind.
- Process — rework, shared lines and changeover sequencing.
Every control on a site plan maps to one of those four. If a control does not, it is decoration.
Sequencing: the control that costs nothing
Production sequencing is the cheapest allergen control available, and the most commonly wasted. The principle is simple: run allergen-free products first after a full clean, and allergen-containing products last before one. Beyond that:
- Group products by allergen profile so that changeovers move from fewer allergens to more, never the reverse.
- Schedule the full clean at the point where the profile has to step back down.
- Treat an unplanned schedule change as a risk decision, not a planning one. The most expensive allergen incidents begin with “we swapped the order to catch up”.
- Record the actual sequence run, not the planned one. They differ more often than anyone admits.
Cleaning is the control that is trusted most and verified least
Dry wiping moves powder around. A rinse is not a clean. Sanitiser on a visibly soiled surface achieves nothing against a protein. Allergen cleaning is physical removal first, water where water is permitted, then verification that the surface is genuinely clean before the next product touches it.
Verification is where the work is. A visual check is the minimum. Protein swabs and rapid lateral flow devices give an operational indication at the end of a clean. A validated cleaning study with quantitative analysis, most often ELISA, is what turns “we clean between products” into evidence you can put in front of an auditor or a customer. Validation covers the worst case: the hardest product, the hardest equipment, the shortest realistic changeover, repeated until the result is consistent.
Near misses are the cheapest data you will ever get
A near miss is a recall that did not happen, and it tells you exactly where the system is thin. Record them with the same seriousness as a complaint:
- What was found, where, when, and by whom
- What would have happened had it not been found, stated plainly
- Which of the four routes it travelled
- Whether product was affected, and how it was contained
- The correction, the corrective action, and the date the effectiveness was checked
A site with no recorded near misses is not a site without near misses. It is a site where nobody reports them, and that is a far worse position to be in.
A twelve-month verification plan
| Activity | Frequency |
|---|---|
| Allergen risk assessment review | Annually, and on any change to products, lines or suppliers |
| Cleaning validation (worst case, three runs) | On introduction, and on any change to the procedure or equipment |
| Routine cleaning verification swabs | Every allergen changeover |
| Label and artwork reconciliation against specification | Quarterly, and on every artwork change |
| Rework record audit | Monthly |
| Line clearance record audit | Monthly |
| Supplier specification currency check | Annually, and on any supplier change |
| Allergen training refresher | Annually, and for every new starter before they work unsupervised |
| Traceability and mock recall including an allergen scenario | At least annually |
What an auditor will actually ask
- Show me the allergen risk assessment, and show me where this product sits on it.
- Pick a product. Show me the chain from the last recipe change to the printed pack, with dates.
- Show me a rework record from the last month, and tell me where that rework ended up.
- Show me the line clearance record for the last changeover on this line, and who signed it.
- Show me the validation behind your allergen clean, not the procedure.
- Show me a near miss, and show me that the corrective action was checked for effectiveness.
Frequently asked questions
Can allergen-containing rework go into a different product?
Only into a product whose label already declares that allergen, where the risk assessment permits it and the record shows the quantity, batch and destination. Otherwise it is disposed of.
What must a rework label show?
Product name, originating batch, date and time, the originating line, a complete allergen declaration in the same words the finished product uses, and either the product it may return into or “disposal only”.
How long should line clearance records be kept?
At least as long as the shelf life of the product plus a margin, and in line with your certification scheme’s retention requirement. In practice most sites keep them for the same period as batch records.
Is a visual check enough for an allergen clean?
It is the minimum, not the evidence. Verification typically combines visual inspection with protein swabs, and validation of the cleaning procedure uses quantitative analysis such as ELISA under worst-case conditions.
Why do most allergen recalls involve packaging rather than the process?
Because the process is usually controlled by people who think about allergens all day, and packaging passes through hands that do not. The declaration, the artwork and the changeover are the handover points where ownership is easiest to drop.
Who should sign line clearance?
Somebody who physically inspected the line, not somebody who was told it was clear. The value of the signature is that it names a person who looked.
Should near misses be recorded formally?
Yes. A near miss identifies a weakness before it costs anything, and a site reporting none is usually a site where reporting has been discouraged rather than one with nothing to report.
Which ASC course covers this
For the people who carry these controls on the floor, Allergen Awareness for Food Handlers covers the four routes, rework, labels and line clearance in plain language in two hours, with a video opening each module and a certificate on completion.
For the labelling and artwork chain specifically, Allergen Labelling and Artwork Control takes it from recipe change to printed pack, including obsolete packaging and what an auditor asks. For the site programme, Allergen Management in the Food Supply Chain; for quantitative risk assessment and validated cleaning, Advanced Part 1: Risk Assessment and Cleaning Validation; and for removal science, analytical methods and crisis management, Advanced Part 2.