Food Safety Compliance 13 min read

Allergen Controls That Prevent Undeclared Peanut Recalls

J

Jared Clark

July 21, 2026

A recall for undeclared peanuts is, on the surface, a labeling failure. In my experience working with food manufacturers through FDA compliance, though, it's almost never only that. There are usually three or four systems that had to fail simultaneously for an unlabeled allergen to reach a consumer. Khong Guan Corporation's July 2026 recall of Glutinous Rice Balls with Black Sesame Filling — issued because the product may contain undeclared peanuts, posing a serious or life-threatening risk to the estimated 6.1 million Americans living with peanut allergy — follows a pattern I've seen many times. The FDA enforcement action is documented at fda.gov's recalls database. But the more useful question is not what happened. It's what a functioning quality system would have caught before the product left the facility.

Undeclared allergens have been the leading cause of FDA food recalls every year since at least 2019, consistently representing approximately 40% of all Class I and Class II food recall actions. That's not a fringe compliance issue. That's the industry's most persistent quality failure, and it keeps happening for reasons that are almost entirely preventable.

Why Undeclared Allergens Keep Reaching Consumers

The failure modes are surprisingly consistent across facility types and product categories. Understanding them is the first step toward closing the gaps.

Sub-ingredient visibility. When a manufacturer sources a prepared filling, a flavoring, a sauce, or any multi-ingredient component from an outside supplier, the allergen profile of that component depends entirely on the supplier's current formula — and formulas change. A supplier who adds peanut paste to a black sesame filling for cost or texture reasons, or who shifts to shared production lines, may not communicate that change in a way that triggers a label review downstream. The manufacturer's label reflects the formula they knew about at some point in the past, not necessarily the one they're using today.

Change control gaps. FDA's preventive controls rule under 21 CFR Part 117 explicitly requires that ingredient changes trigger a review of the food safety plan, including the allergen hazard analysis. In practice, change control systems at many facilities are applied inconsistently. An ingredient swap that doesn't change the product's appearance, taste, or cost profile can slip through without routing to quality assurance. By the time someone notices, there may be thousands of units in distribution.

Label update lag. Even when a formula change is properly documented, the label change sometimes lags by weeks or months. Pre-printed packaging inventory runs out slowly. Artwork updates get queued behind other projects. Production is running with approved ingredients but on packaging that reflects an older formula. The gap between what's in the product and what's on the label is real, and during that window, the product is non-compliant.

Cross-contact from shared equipment. Even if the formula itself is free of the target allergen, shared production lines introduce risk. If a facility runs a peanut-containing product on the same equipment as a peanut-free product without adequate cleaning verification, finished product testing may detect peanut protein that was never in the recipe. That is still an undeclared allergen recall waiting to happen.

Any one of these gaps can produce a recall. When two or three are present at the same time, it's close to inevitable.

The Regulatory Framework You're Working Within

The Food Allergen Labeling and Consumer Protection Act of 2004 (FALCPA) established the baseline requirement: the eight major food allergens must be declared on any food label in plain language. FALCPA covers milk, eggs, fish, shellfish, tree nuts, wheat, peanuts, and soybeans.

The FASTER Act of 2021 added sesame as the ninth major food allergen, with an effective date of January 1, 2023 — expanding FALCPA's declaration requirements for the first time in nearly two decades. If your facility produces sesame-adjacent products or uses sesame-derived ingredients, and you haven't updated your allergen program since 2022, that's a compliance gap worth closing now.

Beyond labeling, FSMA's preventive controls rule (21 CFR Part 117, effective 2016 for most manufacturers) goes considerably further. Under 21 CFR 117.135(c)(2), allergen controls are classified as preventive controls — not labeling requirements — which means they require a written hazard analysis, monitoring procedures with documented records, corrective action procedures, and verification activities confirming controls are effective. The FDA treats an allergen labeling failure as a food safety failure, not an administrative error. That distinction matters enormously for how seriously manufacturers need to treat their allergen programs.

Under 21 CFR 117.130, the food safety plan must include a hazard analysis that specifically addresses allergen hazards. Under 21 CFR 117.135(c)(2), the plan must include preventive controls for allergen cross-contact and for undeclared allergens resulting from mislabeling. Both require written procedures. Both require monitoring. Both require records. An undeclared allergen recall is prima facie evidence that at least one of these required elements was either absent or non-functional.

Adequate vs. Inadequate Allergen Controls: What the Gap Looks Like

Here's a comparison of what I typically see at facilities that have avoided allergen recalls versus those that remain vulnerable. The difference is rarely about intent — it's usually about whether the quality system was built to scale with production volume.

Control Area Adequate Program Common Gap
Allergen hazard analysis Updated whenever formula, supplier, or process changes; covers sub-ingredients by name Written once at implementation; rarely revisited unless FDA prompts it
Supplier allergen verification Annual re-disclosure from every ingredient supplier; contract requires notification of changes One-time onboarding form; no refresh cycle; no contractual notification requirement
Label review process Any ingredient or supplier change triggers a QA-gated label review before production runs Label changes managed by marketing; QA involved only during full packaging redesigns
Finished product testing ELISA allergen testing at defined frequency; results linked to specific lots Allergen testing done at product launch; not integrated into ongoing monitoring
Equipment cleaning validation Cleaning procedures validated for allergen removal with swab data Written cleaning procedures exist but have never been validated to demonstrate allergen clearance
Employee allergen training Annual documented training; production staff can identify all nine major allergens General food safety training mentions allergens once; no allergen-specific content
Change control system All ingredient, supplier, and formula changes route through a formal review that includes QA sign-off Changes managed informally by operations and procurement; QA awareness depends on who picks up the phone

The right column isn't a portrait of reckless companies. It's a portrait of companies that grew faster than their quality infrastructure. The quality systems that would have been adequate at 10,000 units per month often haven't been rebuilt to match 500,000 units per month.

The Ingredient and Supplier Verification Layer

The single most common root cause I see in undeclared allergen situations is a supplier-side change that never reached the manufacturer's quality team. This is particularly acute for products with complex fillings, sauces, or multi-component ingredients — exactly the category a glutinous rice ball with filling represents.

A supplier verification program that reliably catches allergen changes needs three things working in concert:

Documented allergen disclosure at onboarding. Every supplier of a food ingredient should provide a written allergen declaration covering both intentional ingredients and cross-contact risks from their facility. Under 21 CFR 117.136 and the FSVP rule (21 CFR Part 1, Subpart L), supplier verification is not optional — it's a required component of the food safety plan.

A contractual notification obligation. Your supplier agreement should require written notice before any formula change, allergen cross-contact change, or production facility change. Without that language in the contract, you're relying on goodwill. In my experience, goodwill is not a preventive control.

Annual allergen disclosure refresh. Supplier formulas change. Suppliers move to new facilities. Shared lines shift. An allergen declaration from two years ago may not reflect current conditions. A simple annual re-verification of allergen status for every ingredient keeps your records current and creates a documented check that will hold up under FDA scrutiny.

None of this is bureaucratic excess. It's the minimum infrastructure required to actually know what's in your product at any given time.

Label Review and Change Control: Where Most Programs Break Down

The label review process is where I see the sharpest gap between policy and practice in food manufacturing facilities. Almost every manufacturer I've worked with has a policy that says ingredient changes require a label review. Far fewer have a system that actually enforces it consistently.

The problem is usually process design, not bad intent. Ingredient changes often happen operationally — procurement swaps a supplier, a sub-ingredient gets reformulated, a filling component shifts. These decisions move fast, driven by cost or availability pressure. Unless the quality system is designed to intercept those decisions before they reach production, the label review happens late, after the fact, or not at all.

An effective label review process under 21 CFR Part 117 looks like this: any change to an ingredient, a supplier, a formula, or a co-manufacturer automatically creates a review checkpoint that requires QA involvement before the change goes live. The review answers two specific questions: Has the allergen profile of this product changed? Does the current label accurately reflect the current allergen profile? Both questions require a documented answer, and production doesn't run until they have one.

Change control also needs to cover artwork management — ensuring that label artwork in circulation is the current approved version, that production is pulling from approved masters, and that pre-printed packaging inventory doesn't create a window where reformulated product ships under an outdated label. That last point is a common source of short-window compliance failures that are genuinely hard to catch without deliberate inventory controls.

Allergen Testing: The Verification Layer That Catches What the Paperwork Missed

Label review and supplier verification address allergen risk at the document level. Finished product testing addresses what the documentation missed. Both are required. Neither replaces the other.

A practical allergen testing protocol for a product like glutinous rice balls with a multi-ingredient filling would include:

  • ELISA-based testing for applicable major allergens at product launch and at any formula or ingredient change — this is the baseline, not the ceiling
  • Periodic lot testing at a defined frequency; quarterly is typical for lower-risk products, monthly is more appropriate for facilities running allergen-containing products on shared lines
  • Allergen swab testing of product-contact surfaces after cleaning, to verify that cleaning procedures are actually removing allergen protein below the threshold defined in your food safety plan
  • Documented linkage of each test result to the specific lot, process conditions, and cleaning records from that production run

Under 21 CFR 117.165, verification activities must include product testing at an appropriate frequency. For allergen controls, "appropriate frequency" should be defined in writing based on a genuine risk assessment — not based on what was convenient to schedule at the time the HACCP plan was written. If your current testing frequency was set more than three years ago and your product mix or production lines have changed since, it's worth revisiting.

Approximately 200,000 emergency department visits per year in the United States are attributable to food allergic reactions, and roughly 32 million Americans live with a diagnosed food allergy. Allergen testing is the last line of defense for a population that has no other option but to rely on the label being accurate.

Employee Training: The Layer That Gets Skipped

Most allergen recalls involve at least one moment where someone in the facility knew something was off, or could have known if they'd had the context to recognize it. Training doesn't prevent all of those moments, but it substantially reduces them — and it's a regulatory requirement under 21 CFR 117.4, which mandates training for all individuals engaged in manufacturing, processing, packing, or holding food.

Effective allergen training for production staff is specific, not general. It covers the nine major food allergens and their clinical significance — not as an abstract regulatory list, but as a practical explanation of why the controls matter. It explains how allergen cross-contact happens and why it's distinct from microbiological contamination. It identifies the specific allergens present in the facility, which products contain them, and which lines are shared. It walks through cleaning procedures and why allergen cleaning is validated differently from routine sanitation. And it makes clear what to do when a question about a label or an ingredient arises — who to call, when to stop a line.

Training records that document who was trained, when, and on what content are both a regulatory requirement and practical evidence of due diligence in the event a complaint or enforcement action does occur. In my view, the facilities that treat allergen training as a real education — not a checkbox — are the ones that catch problems before they become recalls.

Questions to Ask Your Facility Right Now

If your facility produces products with complex fillings, multi-component ingredients, or shared production lines, the Khong Guan recall is a useful prompt for a few specific internal questions. Not audits. Just questions.

When did you last receive updated allergen disclosures from each of your ingredient suppliers? Does your change control system require QA sign-off before any ingredient or supplier change goes into production? Are your finished product labels verified against the formula you're currently using — not the formula that existed when the label was designed? When were your equipment cleaning procedures last validated to demonstrate actual allergen removal?

The gap between companies that avoid allergen recalls and those that issue them is rarely about commitment to food safety. It's usually about whether quality systems were built — and maintained — to match operational reality. Formulas change. Suppliers change. Production lines get shared. The quality system has to keep pace, or the label stops reflecting the product.

At Certify Consulting, I've worked with more than 200 food and supplement manufacturers through FDA compliance programs, including allergen preventive control implementation under 21 CFR Part 117, with a 100% first-time audit pass rate over eight-plus years. The facilities that come through FDA inspections without findings — and avoid the kind of recall that damages brands and endangers consumers — treat allergen controls as a live, maintained quality system. Not a document you wrote in 2018 and haven't touched since.

If you want an independent assessment of where your allergen program stands against current FDA expectations, contact Certify Consulting to schedule a gap assessment. You can also explore our food safety compliance services for manufacturers navigating FSMA requirements.


The Khong Guan Corporation recall referenced in this article is documented in the FDA's official recalls database. Affected lots of Glutinous Rice Balls with Black Sesame Filling were recalled due to undeclared peanuts posing a life-threatening risk to peanut-allergic consumers. FDA source: fda.gov/safety/recalls-market-withdrawals-safety-alerts.

Last updated: 2026-07-21

J

Jared Clark

Principal Consultant, Certify Consulting

Jared Clark is the founder of Certify Consulting, helping organizations achieve and maintain compliance with international standards and regulatory requirements.