Compliance 11 min read

Allergen Labeling Controls That Prevent FDA Chocolate Recalls

J

Jared Clark

May 10, 2026

A recall doesn't start at the FDA enforcement desk. It starts much earlier — at the point where a quality system had a gap and nobody caught it in time. The April 2026 recall of French Broad Chocolates PBC's Bette's Bake Sale Bonbon Collection, triggered by undeclared walnuts in batch numbers 260414 and 260417, is a useful case study precisely because it's so common. Undeclared allergens are the single most frequent cause of FDA food recalls, and confectionery products are among the most vulnerable categories. If you make or co-pack food with complex ingredient matrices, this is worth sitting with.

The recall itself is documented on FDA's recall page. What that page won't tell you is what quality system failure made the recall necessary — and more importantly, what would have prevented it. That's what this article is about.


Why Undeclared Allergens Keep Happening

Undeclared allergens account for roughly 40% of all FDA food recalls in any given year, according to FDA enforcement data. That number has barely moved in a decade. The reason isn't ignorance of the law — most food manufacturers know that the Food Allergen Labeling and Consumer Protection Act (FALCPA) and its 2023 expansion under FASTER Act require clear declaration of the nine major allergens, which include tree nuts like walnuts. The reason is that allergen failures are almost always a systems problem, not a knowledge problem.

In practice, undeclared allergen recalls trace back to a handful of root causes: ingredient substitution without label update, shared production lines without validated cleaning protocols, formula revisions that outpaced label revision cycles, and batch-level documentation gaps that allow a mislabeled or cross-contaminated product to reach distribution. Any one of those can happen in a facility that has a written allergen policy and well-intentioned staff. The policy is not the same thing as the control.

The FASTER Act, which became effective January 1, 2023, added sesame as the ninth major food allergen under 21 U.S.C. § 321(qq). It also reinforced the broader obligation under 21 CFR Part 117 — the Current Good Manufacturing Practice (CGMP) regulations — that allergen controls must be designed, implemented, and verified as part of a food safety plan. For facilities subject to the Preventive Controls for Human Food rule (21 CFR Part 117 Subpart C), that means allergens must be addressed as a hazard requiring a preventive control, with monitoring, corrective actions, and verification activities documented and retained.

The bonbon recall tells us that somewhere in that chain — ingredient receipt, production scheduling, labeling, or final verification — a walnut slipped through undeclared. The question every food manufacturer should be asking right now is: where is my equivalent gap?


What a Functional Allergen Control Program Actually Looks Like

There's a meaningful difference between having allergen controls on paper and having them work in production. I've walked through enough food facility audits at Certify Consulting to know the difference is usually visible within the first hour. Here's what a genuinely functional program looks like across the critical control points.

Ingredient-Level Controls

Every incoming ingredient should carry a current allergen declaration from the supplier, and that declaration should be tied to a specification that gets reviewed whenever a supplier changes their formulation, source, or manufacturing location. This sounds obvious, but supplier-side reformulations are a surprisingly common source of undeclared allergens. A chocolate base that was walnut-free last year may not be this year if the supplier changed a sub-ingredient.

Practical controls at the ingredient level include:

  • Supplier qualification procedures that require allergen attestation as part of onboarding and renewal
  • Certificate of Analysis (COA) review at receiving, not just on file
  • Ingredient change notification clauses in supplier agreements, so you hear about reformulations before they ship
  • Segregated storage for allergenic ingredients, with clear visual identification (color-coding, dedicated bins, physical separation)

Formula and Label Synchronization

This is where I see the most dangerous gaps. A product formula is revised — maybe a flavor profile tweak, maybe a seasonal ingredient substitution — and the label revision cycle doesn't keep pace. In a busy production environment, that lag can be weeks. If a product ships during that window with a label that doesn't reflect the current formula, you have an undeclared allergen situation regardless of how careful your production team was.

The fix is a controlled document process where label approval is a gating step in the formula change workflow, not a parallel track. Under FDA's preventive controls framework (21 CFR § 117.135), allergen controls are a required preventive control for facilities that handle foods with known allergens. A label that doesn't match the formula isn't just a documentation failure — it's a preventive control failure, and it's what FDA will look for in a warning letter or recall investigation.

Key process controls to implement:

  • Formula change requests require a label impact assessment before the change is approved
  • No production of a revised formula until updated labels are on hand and verified
  • Batch records cross-reference the label version in use, not just the formula version
  • Label reconciliation is a required step at production close-out

Production Line and Scheduling Controls

Confectionery environments are particularly susceptible to cross-contact because the production process often involves shared equipment — enrobers, tempering machines, depositors — that carry residue from one batch to the next. If a walnut-filled center runs before a nut-free product on the same enrober, and the cleaning validation isn't confirmed, cross-contact is likely regardless of what the label says.

Allergen cross-contact is addressed in 21 CFR § 117.135(c)(2) as a situation requiring preventive controls when the hazard is reasonably likely to cause illness or injury. Cleaning validation for allergen removal isn't optional in those situations — it requires documented procedures, tested protocols (typically using ELISA or ATP testing as proxies), and records that demonstrate the cleaning was effective, not just completed.

Production scheduling is also a control. Running allergen-free products first in the day, before allergenic products, is a standard risk-reduction strategy. Dedicated equipment for the highest-risk allergens is better. If your facility makes products both with and without tree nuts on shared lines, your allergen control plan should document specifically how cross-contact is prevented — and your records should show it was.

Labeling Verification at the Point of Packaging

The last line of defense before a product reaches consumers is the packaging station. Most undeclared allergen recalls could have been caught here if a formal label verification step existed. That means a trained person — or an automated vision system — confirming that the label on the box matches the product being packed, by batch and by formula version, before the line runs.

This verification step should be:

  • Documented as a critical activity in the production record
  • Performed at line setup and after any label changeover
  • Recorded with the name of the person who verified, the label version confirmed, and the time
  • Subject to periodic supervisory review

The Regulatory Framework: What FDA Expects

Here's a summary of the key regulations that govern allergen controls for food manufacturers, and what they specifically require:

Regulation Scope Key Requirement Effective/Relevant Date
FALCPA (21 U.S.C. § 321(qq)) All packaged food Declare all 8 major allergens on label Effective 2004
FASTER Act (Pub. L. 117-11) All packaged food Sesame added as 9th major allergen Effective Jan 1, 2023
21 CFR Part 117 Subpart B Facilities subject to CGMP Allergen segregation, sanitation, labeling controls Ongoing
21 CFR Part 117 Subpart C Facilities subject to Preventive Controls Allergen hazard analysis, preventive controls, monitoring, verification Ongoing
21 CFR § 117.135(c)(2) Preventive Controls facilities Cross-contact prevention as required preventive control where allergen hazard is significant Ongoing
21 CFR § 117.190 All Preventive Controls facilities Allergen preventive controls subject to verification activities Ongoing

For small and very small businesses, FDA's compliance deadlines under the Preventive Controls rule have already passed — the final compliance dates for very small businesses (under $1M in annual food sales) were extended to September 2019. There are no remaining extensions. Every facility that manufactures, processes, packs, or holds food for U.S. distribution is expected to be in compliance now.


What a Pre-Distribution Allergen Audit Looks Like

One of the most practical things a food manufacturer can do — especially ahead of seasonal production runs, new product launches, or after any supplier change — is a structured allergen audit. In my work with food clients at Certify Consulting, I've seen this kind of audit catch label-formula mismatches, storage segregation failures, and cleaning validation gaps that would have resulted in exactly the kind of recall we're discussing.

A basic allergen audit covers:

  1. Allergen inventory review — Are all allergenic ingredients identified and current? Does the allergen list match what's actually in the facility?
  2. Formula-to-label verification — For every active SKU, does the current label reflect the current formula? When was this last confirmed?
  3. Supplier documentation review — Do you have current allergen attestations for every ingredient supplier? Have any suppliers changed formulations in the last 12 months?
  4. Cleaning validation records — For shared equipment, are cleaning procedures validated for allergen removal? Are records complete and current?
  5. Training records — Are production staff trained on allergen controls, including cross-contact, segregation, and line changeover procedures? When was the last training?
  6. Corrective action history — Have any allergen-related deviations been documented and resolved? Is there a pattern worth addressing?

This isn't a full audit scope, but it covers the highest-frequency failure points. If you can't answer each of these questions with documentation in hand, that's where to start.


The Cost of Getting This Wrong

The business case for allergen controls goes beyond regulatory compliance, though the regulatory exposure alone is significant. A Class I recall — the FDA's highest severity classification, reserved for situations with reasonable probability of serious adverse health consequences — carries costs that extend well past the direct recall expense. Industry estimates put the average direct cost of a food recall at $10 million when accounting for product retrieval, destruction, regulatory response, and legal liability. Brand damage in consumer-facing categories like artisan confectionery is harder to quantify and often harder to recover from.

Tree nut allergies affect approximately 1.8% of the U.S. population, according to research published in JAMA Network Open, and reactions to tree nuts including walnuts can be severe and life-threatening. That's the actual stakes behind the label. The regulatory framework exists because the health consequence is real — and a quality system that treats allergen controls as a documentation exercise rather than a genuine risk management function is one batch away from finding out the hard way.

The French Broad Chocolates recall involved three SKU sizes across two batch numbers. That's a contained scope by recall standards. But it still required a public FDA posting, consumer notification, and product retrieval — all of which could have been avoided with the controls described above in place and working.


Where to Start If You're Not Sure Where You Stand

If you're reading this because the recall hit your radar and you're wondering whether your own allergen program would hold up under scrutiny, the honest answer is: you probably already know where the gaps are. The facilities that get into trouble aren't usually surprised by what an audit finds. They know the label revision process is slower than it should be. They know the cleaning logs aren't as complete as they could be. They know the supplier specs are a few cycles out of date.

The question is whether those gaps get closed before or after a recall forces the issue.

At Certify Consulting, we've worked with 200+ food and supplement manufacturers on exactly this kind of systems work — building allergen programs that hold up in production, not just on paper. If you want a qualified outside set of eyes on your allergen controls, or if you're preparing for an FDA inspection or SQF/BRC certification audit, contact us at certify.consulting to talk through where to start.

You can also explore our food safety compliance services for a broader look at how we approach preventive controls implementation with clients of all sizes.


Last updated: 2026-05-10

J

Jared Clark

Principal Consultant, Certify Consulting

Jared Clark is the founder of Certify Consulting, helping organizations achieve and maintain compliance with international standards and regulatory requirements.