Allergen training law UK: what Natasha's Law requires of you

Allergens are the single highest-liability area in a restaurant, and the law treats them that way. You are not allowed to "do your best" — you are required to know, and to tell customers accurately, every time. This guide explains exactly what UK allergen law requires, the difference between the everyday duty and Natasha's Law, whether training is mandatory, the penalties, and the menu-change trap that catches careful operators out.

What does UK law require restaurants to do about allergens?

Two layers of duty sit on top of each other. The base layer is the Food Information Regulations 2014 (which enact retained EU Regulation 1169/2011). For any food you sell loose or make to order, you must be able to tell a customer, accurately, which of the 14 named allergens each dish contains — either in writing, or by clearly signposting them to ask staff who can then answer correctly.

The 14 allergens: celery, cereals containing gluten, crustaceans, eggs, fish, lupin, milk, molluscs, mustard, peanuts, sesame, soybeans, sulphur dioxide/sulphites, and tree nuts.

The second layer is Natasha's Law — the Food Information (Amendment) (England) Regulations 2019, in force since 1 October 2021. It applies specifically to prepacked for direct sale (PPDS) food: anything you package on-site before it's ordered — the sandwiches in the grab-and-go fridge, the salad pots, the cakes you bake and wrap. Those items must carry a full ingredients list with the 14 allergens emphasised in the list (bold, underlined or coloured). Food cooked or plated to order is not PPDS — but it still falls under the base-layer duty above.

Is allergen training actually a legal requirement?

This is where managers get understandably confused. There is no single statute that names a mandatory allergen course. But that does not mean training is optional — for three reasons:

• You can't comply without it. The law requires accurate allergen information for every dish. The people taking orders and plating food cannot deliver that unless they're trained on your allergen matrix and on cross-contamination.
• The FSA expects it and provides a free online allergen training module. Environmental health officers routinely ask to see evidence of allergen training, especially since Natasha's Law.
• It's your legal defence. Under the Food Safety Act 1990, demonstrating "due diligence" — that you took all reasonable precautions — depends heavily on documented training. If you can't show staff were trained, you can't run the defence.

So the honest answer is: allergen training is effectively required, even though it isn't spelled out as a named course. Treat "we trained them and here's the dated record" as the standard, not a nice-to-have.

Why does this matter so much? The cases behind the law

Allergen law in the UK was written in response to deaths, and every manager in hospitality knows the names. Natasha Ednan-Laperouse died at 15 in 2016 after eating a baguette that contained sesame not listed on the packaging — her name is on the law. Owen Carey died on his 18th birthday in 2017 after being served buttermilk-marinated chicken with no allergen information on the menu, despite telling staff about his dairy allergy. Celia Marsh, a mother of five, died in 2017 after eating a "dairy-free" wrap that wasn't.

The scale of the underlying risk is not abstract. Around 2.4 million UK adults (6% of the population) have a clinically confirmed food allergy, and UK hospital admissions for food-induced anaphylaxis tripled between 1998 and 2018. Yet 71% of UK hospitality operators still manage allergens entirely on paper or spreadsheets, and around one in five restaurant workers have had no formal allergen training at all.

What are the penalties for getting it wrong?

Enforcement sits with local Environmental Health and Trading Standards. A breach of PPDS labelling or allergen-information rules can carry fines of £5,000 or more per instance. Where a failure causes serious harm or death, the consequences escalate sharply: in 2016 a restaurant owner became the first person in Britain jailed for gross-negligence manslaughter over an allergen death, sentenced to six years. This is the rare corner of food law where getting it wrong can end in a custodial sentence.

The menu-change trap most operators miss

Here is the failure mode that catches even careful restaurants: your allergen matrix is only ever as accurate as your last update. Around a third of allergen incidents trace to a supplier swapping an ingredient — a new buttermilk, a different hummus, a reformulated sauce — that never made it onto the allergen sheet. The matrix on the clipboard says one thing; the kitchen is serving another.

Legally, your information must be accurate at all times. So every menu change, every recipe tweak, and every supplier substitution that touches allergen content triggers two obligations: update the matrix, and make sure the team knows before the item goes out. That's not extra diligence — it's the baseline the law assumes you're already doing.

What good allergen management looks like

• A current per-dish allergen matrix — every menu item, every allergen, kept up to date as recipes and suppliers change.
• A clear front-of-house process — how customers are invited to declare an allergy, and how staff give accurate information and avoid cross-contact.
• PPDS labels on anything packed on-site before ordering, with a full ingredients list and the 14 allergens emphasised.
• Trained staff, with the proof — everyone who handles food or takes orders trained on allergens, with a dated record.
• Change control — a defined trigger so a supplier or menu change updates the matrix and re-alerts the team, not a sticky note that gets lost.

Keeping the matrix, the training and the proof in sync

Everything above is standard practice — the reason it fails is rarely that a manager doesn't care. It's that the allergen matrix, the staff training, and the records all live in separate places and drift apart the moment a supplier changes. That gap is exactly what frunt closes.

frunt takes your allergen matrix and food-safety documents and turns them into allergen training your team completes on their phones — then keeps a dated, versioned record of who's trained on the current version. When the underlying document changes, the matching training is flagged for renewal automatically, so the menu-change duty stops depending on someone remembering. And the audit trail an EHO asks for is already written.

If you run an independent restaurant and the allergen admin is a low-grade permanent worry, that's the friction frunt is built to remove. Get started with frunt, or book a walkthrough to see it on your own menu.