Beverage Equipment Allergen Cross-Contact: Preventive Controls That Keep Products Off FDA Recall Lists

Published: April 12, 2026

When food production equipment malfunctions during a beverage run, the consequences can reach far beyond a single facility. On April 3, 2026, Wawa — the Mid-Atlantic convenience retailer based in Media, Pennsylvania — recalled 16-ounce pints of four beverages: Wawa Iced Tea Lemon, Wawa Iced Tea Diet Lemon, Wawa Diet Lemonade, and Wawa Fruit Punch. The cause: an undeclared milk allergen introduced by "a temporary equipment issue." The scope: 123+ stores across Pennsylvania, Delaware, Maryland, New Jersey, and Virginia. The FDA recall notice is available at FDA.gov.

No illnesses were reported. But the absence of reported harm does not change the nature of the failure — a milk allergen that should never have been present ended up in products distributed to over 123 retail locations. For the estimated 32 million Americans with diagnosed food allergies, and for the subset with severe milk sensitivity, every such product reaching the shelf represents a real risk.

This article is not about what went wrong at Wawa. It is about what your allergen preventive controls program must do to ensure this kind of event does not happen in your facility. Equipment-based allergen cross-contact is a specific, well-understood failure mode — and it is entirely preventable when the right controls are in place.

What Went Wrong: Equipment-Based Allergen Cross-Contact

The Wawa recall narrative is short: a temporary equipment issue. That phrase covers a lot of ground. In beverage manufacturing environments, equipment failures that introduce allergens typically follow one of three patterns:

Incomplete cleaning or sanitation between product runs: Equipment used for a milk-containing product — a dairy-based tea latte, a smoothie, a flavored dairy beverage — is not fully cleaned before the same line runs a non-dairy product. Residual milk proteins remain on filler valves, product contact surfaces, or transfer lines.
Equipment malfunction during changeover: A valve sticks in the wrong position. A manifold connection routes product through a line that was used for a different allergen-containing product. A CIP (clean-in-place) cycle terminates early due to a sensor fault without triggering an alarm or a hold.
Cross-connection or line contamination: Product lines that should be isolated during changeover are inadvertently connected — through a misrouted hose, a failed valve, or human error during line setup — allowing residue from a previous run to enter the current production stream.

Which specific mechanism caused the Wawa recall is not publicly detailed. What the recall language tells us is that milk — a major food allergen under both FALCPA and the FASTER Act — was present in non-dairy beverages due to equipment, not formulation. That distinction matters. A formulation-based allergen error is caught (or should be caught) through label review and hazard analysis. An equipment-based error reaches finished product if — and only if — the equipment sanitation preventive controls fail.

Equipment-based allergen cross-contact bypasses every label review process you have. The product label is correct. The formula contains no milk. But the finished product does. That is the specific failure mode this article addresses.

The Regulatory Framework: What FSMA, FALCPA, and the FASTER Act Require

FALCPA (2004): The Labeling Foundation

The Food Allergen Labeling and Consumer Protection Act of 2004 (Public Law 108-282) established the original eight major food allergens that must be declared on food labels: milk, eggs, fish, shellfish, tree nuts, peanuts, wheat, and soybeans. Milk — the allergen at issue in the Wawa recall — has been a required declaration under FALCPA since the law's effective date of January 1, 2006.

FALCPA requires allergen declaration either in the ingredient list using the common name or in a separate "Contains" statement. But FALCPA is a labeling law. It does not, by itself, require manufacturers to implement controls to prevent allergen cross-contact during production. That obligation comes from FSMA.

The FASTER Act (2023): Sesame as the Ninth Major Allergen

The Food Allergy Safety, Treatment, Education, and Research Act (Public Law 117-11), signed in April 2021, added sesame as the ninth major food allergen, with a compliance deadline of January 1, 2023. The FASTER Act did not change the rules for milk — milk has always been on the list. But its passage serves as a useful reminder that allergen regulations evolve, and your preventive controls program must be designed to adapt as the statutory list changes.

The current Big Nine allergens that require declaration and trigger preventive control obligations under 21 CFR Part 117 are: milk, eggs, fish, shellfish, tree nuts, peanuts, wheat, soybeans, and sesame. Any facility that handles milk-containing and milk-free products on shared equipment is operating with a significant allergen hazard that demands a formal preventive control.

FSMA 21 CFR Part 117: Where the Manufacturing Obligation Lives

The FDA Food Safety Modernization Act's Preventive Controls for Human Food rule — codified at 21 CFR Part 117 — is the regulation that makes allergen control during production a legal requirement, not just a best practice.

Under 21 CFR §117.135(c)(2), a food safety plan must include allergen preventive controls where allergens are identified as a hazard requiring a preventive control. Specifically, the rule recognizes four categories of allergen control activities:

Formulation controls — ensuring the product is formulated as intended and allergens in the formula are accurately identified
Labeling controls — ensuring labels accurately reflect the allergens in the finished product
Sanitation controls — preventing allergen cross-contact from shared equipment or lines, including cleaning procedures and sanitation validation
Supplier controls — ensuring ingredients from suppliers do not introduce undeclared allergens

The Wawa recall implicates the third category: sanitation controls. A preventive controls program that addresses formulation and labeling but leaves equipment sanitation to informal or unvalidated procedures has a structural gap — and the Wawa recall is a real-world demonstration of where that gap leads.

Compliance with 21 CFR Part 117 is not optional for covered facilities. It is a regulatory requirement. A failure in allergen preventive controls is not merely a quality system gap — it is a violation of federal food safety law.

The Equipment Sanitation Failure Point: Where Beverage Operations Are Most Vulnerable

Beverage production environments present specific allergen sanitation challenges that dry food or pharmaceutical environments do not. Product is liquid. It flows through every inch of the processing system — tanks, valves, fill heads, transfer lines, heat exchangers, manifolds. When a liquid allergen-containing product runs through that system, residue deposits on every wetted surface. If those surfaces are not fully cleaned and validated before the next run, the residue migrates into whatever product follows.

CIP (Clean-In-Place) Validation

Most beverage facilities use clean-in-place (CIP) systems to sanitize their processing lines between runs. CIP is efficient and effective — when it is working correctly and when it has been validated to remove the specific allergens of concern. The critical failure point is when CIP validation is absent or inadequate.

What allergen-effective CIP validation requires:

Documented CIP protocols that specify cycle parameters: detergent type, concentration, temperature, flow rate, contact time, and rinse steps
Validation studies that confirm the CIP protocol achieves allergen clearance to a defined acceptance criterion — typically below the limit of detection for an ELISA-based test specific to the allergen of concern
Routine monitoring of CIP parameters with defined acceptable ranges and procedures for out-of-specification events
A formal hold-and-test protocol that prevents product release when CIP parameters were not met during a run

The phrase "temporary equipment issue" in the Wawa recall strongly suggests a CIP or changeover process that did not perform as intended. Whether the CIP system had never been validated for milk allergen removal, whether a sensor failure allowed a short cycle, or whether a changeover procedure allowed cross-connection — any of these represents a breakdown in the sanitation control that should have been caught before product was filled and distributed.

Allergen Changeover Procedures

CIP is one layer of allergen sanitation control. Changeover procedures — the documented steps operators follow when transitioning from an allergen-containing product run to a non-allergen or different-allergen run — are a second layer. Both layers must be present and documented.

An allergen changeover procedure for a beverage facility should define:

Which product transitions require a full allergen changeover versus a standard product changeover
The sequence of steps: drain, flush, CIP cycle, visual inspection, allergen swab testing (if applicable), verification sign-off
Who is authorized to verify completion and release the line for the next product
What happens when an allergen swab test returns a positive result — the CAPA protocol, the hold procedure, and the re-cleaning requirements

Procedures that exist only in operators' heads — or that are written but not followed or monitored — are not controls. They are suggestions. The regulatory requirement under 21 CFR §117.135 is for effective controls, which means controls that are implemented, monitored, and verified to work.

What a Complete Allergen Control Program Looks Like

A single sanitation procedure is not an allergen control program. A complete program under 21 CFR Part 117 addresses every pathway through which an allergen could reach a product it should not be in. For a beverage manufacturer, that means:

1. Allergen Hazard Analysis

The starting point for every allergen control program is a documented hazard analysis, as required by 21 CFR §117.130. For each product, the hazard analysis must consider allergens that are intentionally present in the formula, allergens that could be inadvertently introduced through shared equipment, and allergens that could arrive through the supply chain in ingredients.

For a beverage manufacturer that runs both dairy and non-dairy products on shared lines, milk is an identified allergen hazard for every non-dairy product produced on that equipment. That hazard requires a preventive control. Identifying it — and documenting the identification — is the starting point for designing the control.

2. Allergen Matrix

An allergen matrix maps every product in your portfolio to every allergen in every ingredient, including sub-ingredients and processing aids. For a beverage manufacturer, the matrix should also flag which products share production lines with allergen-containing products, because that equipment relationship is itself an allergen risk factor independent of the formula.

The allergen matrix is not a one-time document. It must be reviewed whenever a new product is added, whenever a formulation changes, whenever a supplier changes, and whenever production scheduling changes in a way that creates new shared-line relationships.

3. Scheduling and Production Sequencing Controls

One underappreciated allergen control strategy is production sequencing — scheduling allergen-containing runs at the end of a production day or week, so that cleaning occurs before a scheduled shutdown rather than requiring an allergen changeover mid-run. Some facilities design their schedules so that the highest-allergen-content products run last, reducing the frequency of mid-production allergen changeovers and the associated risk of incomplete cleaning.

This is not a substitute for validated CIP and changeover procedures, but it is a meaningful risk-reduction layer that many beverage operations overlook.

4. Supplier Qualification for Allergen Status

Equipment-based cross-contact is only one allergen risk pathway. The other is the supply chain. A milk-free formula can still produce a milk-containing finished product if an ingredient supplier changes their formulation, starts sharing equipment with a dairy product, or uses a dairy-derived processing aid without notifying their customers.

Under 21 CFR §§117.410–117.475, FSMA's supplier program requirements, facilities must conduct verification activities commensurate with the allergen hazard posed by each ingredient. For allergen-sensitive ingredients or ingredients from facilities that process allergens, those verification activities should include allergen-specific documentation review and, for high-risk suppliers, periodic allergen audits.

Testing Protocols That Catch Problems Before Shipping

Controls exist to prevent allergen cross-contact. Testing exists to verify that controls are working — and to catch failures before product leaves the facility. These are two different functions. Many food manufacturers treat testing as their primary control rather than their verification tool. That inversion is a quality system design flaw.

Environmental Allergen Monitoring

Environmental monitoring for allergens is the beverage manufacturing equivalent of environmental pathogen monitoring in a ready-to-eat food plant. Swab samples taken from product contact surfaces after CIP — from filler heads, from transfer lines, from manifold connections — can detect allergen residue before it contaminates the next production run.

The most widely used testing methods for environmental allergen monitoring are:

ELISA (enzyme-linked immunosorbent assay) — laboratory-based testing with high sensitivity, typically capable of detecting allergen residues at parts-per-million levels. ELISA is the gold standard for validation studies and regulatory compliance documentation.
Lateral flow assays (LFAs) — rapid, qualitative or semi-quantitative strip tests that provide results in minutes. LFAs are suitable for routine environmental monitoring as a screening tool, with confirmation by ELISA for positive results.

An effective environmental allergen monitoring program defines: which surfaces are sampled, how frequently, using which test method, what the acceptance criteria are, and what corrective actions follow a positive result. The program should be risk-based — surfaces with the highest probability of allergen retention (gaskets, valves, dead legs, hard-to-clean areas) should be sampled more frequently.

Finished Product Testing

Finished product allergen testing provides a final verification check before distribution. For a beverage manufacturer running milk-containing and non-dairy products on shared lines, periodic finished product testing of non-dairy products for milk is a reasonable verification activity — particularly for products identified as high-risk based on scheduling proximity to dairy runs.

Finished product testing is not a substitute for environmental monitoring and process controls. By the time a finished product test returns a positive result, product has already been produced and is potentially awaiting distribution. The value of finished product testing is: (1) it creates documented verification records that support your food safety plan, and (2) it catches failures before they reach consumers when used as a release criterion for identified high-risk lots.

Under 21 CFR §117.165, verification activities for allergen preventive controls must include "calibration of process monitoring and verification instruments," "product testing," and "environmental monitoring" as appropriate. Finished product testing is explicitly recognized as a verification activity under FSMA.

Lot Traceability and Hold Procedures

Testing without a defined response protocol is incomplete. Every beverage manufacturer needs a documented hold-and-disposition procedure that defines:

When a product lot is placed on hold pending allergen test results
Who has authority to release or condemn a held lot
What investigation steps are triggered by a positive allergen test result
How far back in production the hold extends when a failure is detected

The Wawa recall involved four product types distributed to 123+ stores. The scope of the recall reflects the distribution that occurred before the allergen issue was detected. A robust hold procedure — tied to positive environmental monitoring results or to a documented CIP excursion — would shrink that distribution window.

Labeling as a Last Line of Defense — and Why That's the Wrong Position

Some manufacturers treat allergen labeling as their primary risk management tool: if the label says "may contain milk," they reason, the risk is disclosed and managed. This reasoning misunderstands the regulatory framework and the nature of the risk.

Precautionary allergen labeling — "may contain," "manufactured in a facility with," "processed on shared equipment with" — is not recognized under FALCPA as a required disclosure. It is an industry practice, and FDA has historically discouraged overuse of precautionary labeling because it reduces consumer confidence in the label's accuracy and can mask actual allergen contamination in products that carry the advisory without real risk.

More fundamentally: under 21 CFR Part 117, allergen cross-contact is an identified hazard requiring a preventive control. The regulatory framework does not allow a manufacturer to substitute a precautionary label statement for an allergen preventive control. If allergen cross-contact is a reasonably foreseeable hazard, you must implement controls to prevent it. Labeling comes after controls — it does not replace them.

The correct model: allergen preventive controls (including validated CIP and changeover procedures) are the primary control. Environmental monitoring and finished product testing are verification. Labeling is a communication tool that accurately reflects the product's formulation. In that model, a non-dairy product label carries no milk advisory — because the controls are effective and verified. If your controls are not effective enough to make that statement confidently, the answer is better controls, not a precautionary label.

What a Robust Preventive Controls Program Looks Like: The Full Quality System Picture

The Wawa recall is a useful case study not because Wawa is a small or unsophisticated operator — they are not — but because it demonstrates that equipment-based allergen cross-contact is a risk that can materialize even in established operations. The question for your facility is not whether your operation is as large as Wawa's. The question is whether your allergen preventive controls program would catch what their process apparently missed.

A robust program under 21 CFR Part 117 has these elements in place and documented:

Written Food Safety Plan with allergen hazard analysis covering all product/equipment combinations, including shared-line relationships
Documented allergen preventive controls that specifically address equipment sanitation — not just formulation and labeling
Validated CIP protocols with allergen-specific validation data confirming removal to below the limit of detection
Documented allergen changeover procedures with defined steps, sign-off requirements, and CAPA protocols for deviations
Allergen matrix covering all products, all ingredients (including sub-ingredients), and all shared-line relationships
Environmental allergen monitoring program with defined surfaces, frequencies, methods, and corrective action procedures
Finished product testing program with risk-based testing frequency for products identified as high-risk based on shared-line exposure
Hold and disposition procedures tied to CIP excursions and positive allergen test results
Supplier qualification program with allergen-specific verification requirements for high-risk ingredients
Allergen training program for production, sanitation, and scheduling personnel
CAPA system that captures allergen control deviations and drives systemic corrective action — not just one-time fixes

Every one of these elements is either explicitly required or clearly contemplated under 21 CFR Part 117. The regulation does not prescribe exact methods — it prescribes outcomes. Your allergen preventive controls must be effective, which means they must be validated, monitored, and verified. How you design the system is your decision. Whether it works is FDA's determination during an inspection.

Allergen Preventive Controls Compliance Checklist: Beverage Manufacturers

Use this checklist to assess your current allergen preventive controls program against 21 CFR Part 117 requirements. Each item represents a discrete compliance obligation or recognized best practice.

Control Element	Regulatory Basis	Status Check
Written food safety plan with allergen hazard analysis	21 CFR §117.126, §117.130	Does your hazard analysis address shared-line allergen risks by product?
Allergen preventive controls documented for each identified hazard	21 CFR §117.135(c)(2)	Are sanitation controls explicitly included, not just formulation and labeling?
CIP protocol validated for allergen removal	21 CFR §117.135, §117.160	Do you have allergen-specific validation data (ELISA) for your CIP cycles?
Allergen changeover procedures documented and trained	21 CFR §117.135(c)(2)	Are procedures written, trained, and followed consistently by all shifts?
CIP parameter monitoring with defined acceptable ranges	21 CFR §117.145	Are CIP parameters logged and reviewed? Are OOS results defined?
Hold procedure for CIP excursions	21 CFR §117.150	Is product automatically held when CIP parameters are not met?
Environmental allergen monitoring program	21 CFR §117.165	Are post-CIP swab samples taken from high-risk surfaces? How often?
Finished product allergen testing for high-risk lots	21 CFR §117.165	Is finished product tested before release for high shared-line risk products?
Supplier qualification with allergen verification	21 CFR §§117.410–117.475	Do supplier specs explicitly disclose allergen status, including shared equipment?
Allergen training records for production and sanitation personnel	21 CFR §117.4	Are training records current? Do they cover equipment-based cross-contact risks?
CAPA system for allergen control deviations	21 CFR §117.150	Are allergen deviations captured in CAPA? Are root causes addressed systemically?
Allergen matrix covering all products and shared-line relationships	21 CFR §117.130 (hazard analysis)	Is the matrix current? Does it include scheduling/line-sharing information?

If any of these elements is missing, incomplete, or not currently effective, that gap represents both a regulatory compliance risk and a recall risk. The Wawa recall demonstrates that these are not theoretical gaps — they produce real enforcement events with real distribution scope.

Conclusion: The Equipment Issue That Never Had to Happen

The phrase "temporary equipment issue" in the Wawa recall notice describes a real technical event. But it also points to a quality system question: what controls were in place to detect that equipment issue before product was filled, coded, and shipped to 123+ retail stores?

The answer, in a properly designed allergen preventive controls program, is several layers of detection: real-time CIP parameter monitoring that triggers a hold when parameters are not met; post-CIP environmental swab testing that detects allergen residue before the next run begins; finished product testing that serves as a release criterion for high-risk product combinations. Any one of those layers, functioning as designed, would have caught the milk contamination before distribution.

FSMA's preventive controls framework was built precisely for this: to move food safety from reactive to preventive, from detection after the fact to control before the product leaves the facility. The regulatory requirement is clear. The tools — validated CIP, environmental monitoring, allergen swab testing — are well-established. The question is whether your facility has assembled those tools into a system that works as an integrated whole.

If you are not confident the answer is yes, that is the work to do now — before a temporary equipment issue becomes a multi-state recall.

Related reading: See our guide on FSMA Preventive Controls for Food Facilities and our analysis of Undeclared Allergens: Prevention Over Recalls.

FAQ: Beverage Allergen Cross-Contact and FSMA Compliance

Q1: Does FSMA require beverage manufacturers to validate their CIP systems for allergen removal?

Yes. Under 21 CFR §117.160, process preventive controls must be validated to confirm they are capable of controlling the identified hazard. Allergen cross-contact is an identified hazard for facilities that run allergen-containing and allergen-free products on shared equipment. Validation of the CIP protocol for the specific allergens of concern — typically demonstrated through ELISA testing of post-CIP rinse water or surface swabs — is required to support the preventive control.

Q2: What is the difference between allergen cross-contamination and allergen cross-contact?

FDA uses the term "cross-contact" to describe the unintentional incorporation of a food allergen into a food that does not contain that allergen in its formula. Cross-contamination is a term typically associated with microbial hazards. The distinction matters in regulatory language — 21 CFR Part 117 specifically addresses "allergen cross-contact" as a category of hazard requiring preventive controls under the sanitation provisions of the rule.

Q3: Does FDA require allergen testing of finished beverage products?

FSMA does not mandate a specific testing frequency or protocol, but 21 CFR §117.165 requires verification activities to confirm that allergen preventive controls are effective. Finished product testing is one recognized verification activity. The scope and frequency should be risk-based — products from lines with higher allergen cross-contact risk warrant more frequent testing. A facility running dairy and non-dairy beverages on the same equipment without any finished product allergen testing has a verification gap under 21 CFR Part 117.

Q4: What are the FASTER Act compliance obligations for beverage manufacturers in 2026?

The FASTER Act (Public Law 117-11) added sesame as the ninth major food allergen with a compliance deadline of January 1, 2023. For beverage manufacturers, this means sesame must be declared on labels if present, and facilities that handle sesame-containing products (tahini-based drinks, sesame-flavored beverages) alongside sesame-free products on shared equipment must include sesame in their allergen hazard analysis and preventive controls. The milk allergen at issue in the Wawa recall is unaffected by the FASTER Act — milk has been a declared allergen under FALCPA since 2006.

Q5: What should a beverage manufacturer do immediately after discovering an allergen cross-contact event?

The immediate steps are: place all potentially affected product on hold; notify your quality and regulatory leadership; initiate a root cause investigation; determine the scope of the distribution of potentially affected product; and assess whether a voluntary recall is required based on the scope of allergen presence and the health risk to sensitive populations. FDA should be notified if a recall is initiated. Parallel to these response steps, the CAPA system should be activated to capture the root cause and drive systemic corrective action — not just a one-time cleaning of the equipment at issue.

Jared Clark is the principal consultant at Certify Consulting and holds credentials including JD, MBA, PMP, CMQ-OE, CPGP, CFSQA, and RAC. He has served 200+ food and regulated-industry clients with a 100% first-time audit pass rate. Visit certify.consulting or thefdaexpert.com for more information.