Undeclared Allergens: How to Prevent Wheat & Soy Recalls

On February 27, 2026, the FDA announced that Savannah Bee Company was recalling its Honey BBQ Sauce-Mustard (16 FL OZ, Lot B1L1360525, Best Before 05/16/27, UPC 8 50033 93758 9) due to undeclared wheat and soy — two of the nine major food allergens regulated under federal law. According to the FDA recall notice, people with allergies or severe sensitivities to wheat or soy face a risk of serious or life-threatening allergic reactions from consuming this product.

I'm not writing about that recall specifically. What I am writing about is this: the recall was preventable. The allergen controls, labeling verification systems, and supplier qualification protocols that should have caught this failure exist in current FDA regulations — and most food manufacturers either don't have them fully implemented or haven't updated them to reflect recent regulatory changes.

This article breaks down exactly what quality systems would have prevented this outcome, what the current regulatory landscape requires, and how you can audit your own program before FDA does it for you.

Why Undeclared Allergen Recalls Keep Happening

Undeclared allergens are the single leading cause of FDA food recalls year after year. According to FDA recall data, allergen-related recalls consistently represent more than 40% of all Class I food recalls — the most serious category, reserved for situations with a reasonable probability of causing serious health consequences or death.

Wheat and soy are among the nine major food allergens now recognized under U.S. law. The FASTER Act of 2021 (Pub. L. 117-11), signed into law April 23, 2021, added sesame as the ninth major allergen, effective January 1, 2023 — meaning food manufacturers who hadn't updated their allergen control plans by that date were immediately out of compliance. If your allergen program hasn't been touched since 2020, it's already behind.

For context on scale: the Food Allergy Research & Education (FARE) organization estimates that 32 million Americans live with food allergies, including approximately 7 million with wheat allergies and over 4 million with soy allergies. A single undeclared allergen in a mass-distributed condiment is not a minor labeling oversight — it's a public health event.

Citation hook: Undeclared allergens are the leading cause of Class I FDA food recalls, accounting for more than 40% of the most serious recall classifications annually, making allergen control programs a top-tier food safety priority for every regulated manufacturer.

The Regulatory Framework: What FDA Actually Requires

The legal foundation for allergen labeling and control draws from multiple overlapping statutes and regulations. Understanding where each requirement lives is essential for building a compliant program.

Food Allergen Labeling and Consumer Protection Act (FALCPA) — 21 U.S.C. § 343(w)

FALCPA, enacted in 2004, requires that food labels declare the presence of any of the eight (now nine, post-FASTER Act) major food allergens — milk, eggs, fish, shellfish, tree nuts, peanuts, wheat, and soybeans — either in the ingredient list using the common name or in a separate "Contains" statement.

Key compliance requirements under FALCPA: - Allergen declarations must use the common or usual name of the food source - Cross-contact disclosures ("may contain") are voluntary but must be truthful and not misleading under 21 C.F.R. § 101.17 - The declaration applies to all intentionally added allergens, regardless of quantity

21 C.F.R. Part 117 — Current Good Manufacturing Practice, Hazard Analysis, and Risk-Based Preventive Controls (CGMP/PC Rule)

This is where allergen control becomes a quality systems obligation, not just a labeling one. Under 21 C.F.R. § 117.135(c)(2), allergen controls are explicitly listed as a category of preventive controls that a food manufacturer must implement when allergens are identified as a significant hazard through the hazard analysis required by 21 C.F.R. § 117.130.

These allergen preventive controls must include, per 21 C.F.R. § 117.135(c)(2): - Proper labeling - Sanitation controls for cross-contact - Segregation and identification of allergenic ingredients

Furthermore, 21 C.F.R. § 117.140 requires that preventive controls be validated — meaning you must have documented evidence that your allergen controls actually work as intended.

FASTER Act Compliance Deadline — January 1, 2023

This is the regulatory change most manufacturers underestimated. The FASTER Act didn't just add sesame — it required a full review and update of: 1. Hazard analyses under 21 C.F.R. § 117.130 to include sesame as a potential allergen 2. Allergen preventive control procedures under 21 C.F.R. § 117.135 3. Label review and approval workflows 4. Supplier ingredient disclosures

Citation hook: The FASTER Act of 2021, effective January 1, 2023, added sesame as the ninth major food allergen under U.S. law, requiring all FDA-regulated food manufacturers to update their hazard analyses, allergen preventive control plans, and label review procedures to remain in compliance with 21 C.F.R. Part 117.

Manufacturers who used this deadline as an opportunity to do a full allergen program review are better positioned today. Those who only updated their labels for sesame and moved on likely left gaps that could produce the same outcome we saw in the Savannah Bee recall.

What Quality Systems Would Have Prevented This Recall

Let's be specific. The Savannah Bee recall involved undeclared wheat and soy in a condiment — a complex, multi-ingredient sauce with mustard as a component. Mustard is a potential wheat cross-contact risk depending on the processing facility; soy-derived ingredients appear in countless emulsifiers, natural flavors, and modified food starches. Here's what a robust quality system would have caught:

1. Supplier Ingredient Disclosure and Qualification Program

A compliant supplier qualification program under 21 C.F.R. § 117.136 (Supply-Chain Program) requires that manufacturers implement supplier verification activities for ingredients that present a significant hazard — which allergen-containing ingredients absolutely do.

For any incoming ingredient, a qualified allergen control program requires: - Ingredient specification sheets that explicitly declare the presence or absence of each of the nine major allergens - Certificates of Analysis (COA) reviewed for allergen information, not just for chemical or microbiological parameters - Allergen attestation letters from suppliers confirming manufacturing environment allergen status - Periodic re-qualification — at minimum annually, and any time a supplier changes their formulation, facility, or sourcing

A sauce manufacturer using mustard as an ingredient must know whether that mustard is processed in a facility that handles wheat. If that information isn't captured in the supplier file, the label review is flying blind.

2. Formulation Change Control Procedures

Many undeclared allergen recalls trace back not to an original formulation error, but to an undocumented formulation change — a supplier switched a sub-ingredient, a buyer sourced a replacement ingredient during a shortage, or a co-manufacturer made a process adjustment. These are change management failures.

A robust change control procedure should require: - Formal change request documentation for any raw material substitution - Allergen impact assessment as a mandatory field in the change request - Label review and approval as a prerequisite to production using the new ingredient - Lot-level traceability linking formulation version to finished goods

Under 21 C.F.R. § 117.135(d), allergen preventive controls must include procedures for monitoring, corrective actions, and verification. Change control is the upstream mechanism that feeds all three.

3. Label Review and Approval Workflow

Every finished product label should pass through a documented multi-step review before it goes to print and before it goes on the product. That review should explicitly include an allergen reconciliation step — comparing every allergen-containing ingredient in the formulation against the label declaration.

Best practice label review checkpoints: - Allergen reconciliation matrix: ingredients vs. label declarations - Review by a qualified individual (QI) as defined under 21 C.F.R. § 117.3 - Sign-off by both R&D/formulation and regulatory/labeling functions - Pre-production label verification before each production run (not just at label design stage) - Annual label audits against current formulations

This is where most small-to-mid-size food manufacturers have gaps. Label review happens at product launch but rarely gets repeated systematically. A formulation update in year two of a product's life can create an allergen mismatch that goes undetected for months.

4. Allergen Cleaning Validation and Cross-Contact Controls

Even when labels are correct for intentionally added allergens, cross-contact during manufacturing can introduce undeclared allergens. Under 21 C.F.R. § 117.35 (Sanitation controls) and § 117.135(c)(2), manufacturers must have validated cleaning procedures for allergen cross-contact.

Allergen cleaning validation should include: - ELISA or lateral flow immunoassay testing of equipment swabs post-cleaning - Environmental monitoring data establishing cleaning effectiveness - Defined allergen run scheduling (allergen-free runs before allergen-containing runs, or vice versa) - Rinsate or finished product ATP/allergen testing where risk warrants

5. Pre-Shipment Finished Product Allergen Testing

For high-risk products — complex sauces, multi-ingredient condiments, products made on shared lines — allergen testing of finished product before release adds a critical catch. This isn't universally required by regulation, but it is a recognized industry best practice that demonstrates due diligence and supports the validation requirements of 21 C.F.R. § 117.140.

Lot release criteria should include allergen testing for: - Any product where a label states "free from" or makes negative allergen claims - Products manufactured on shared equipment with known allergens - Any lot produced after a formulation or supplier change

Comparison: Minimum Regulatory Requirements vs. Best Practice Allergen Controls

Practical Compliance Guidance: A 30-Day Allergen Program Audit

If this recall prompted you to pull out your allergen control plan and feel uncertain about what you're reading — or if you don't have one — here's a practical 30-day roadmap.

Days 1–7: Document Inventory - Pull your current Food Safety Plan (hazard analysis + preventive controls) - Confirm allergen hazards are addressed for all nine major allergens, including sesame - Pull all current product labels and compare against current formulations - Identify any products that have had ingredient changes since last label review

Days 8–14: Supplier File Review - For every allergenic ingredient, confirm allergen disclosure documentation exists in the supplier file - Identify any suppliers without current allergen attestation letters - Flag any ingredient where allergen status is listed as "unknown" or not addressed

Days 15–21: Procedure Gap Assessment - Review change control SOP — does it require an allergen impact assessment? - Review label approval SOP — does it require allergen reconciliation before production? - Review cleaning SOPs — are allergen cleaning procedures documented and validated?

Days 22–30: Corrective Action and Update - Update hazard analysis for any identified gaps - Issue supplier questionnaires for any unaddressed allergen disclosures - Schedule label reviews for any products with unverified allergen accuracy - Document all findings and corrective actions in your preventive controls records

Citation hook: A 30-day internal allergen program audit — covering the Food Safety Plan, supplier allergen disclosures, label review procedures, and change control SOPs — is the most cost-effective intervention a food manufacturer can take to reduce undeclared allergen recall risk under 21 C.F.R. Part 117.

The Cost of Getting This Wrong

The business case for robust allergen controls isn't just regulatory — it's financial. A single Class I allergen recall can cost a small-to-mid-size food manufacturer $10 million or more when accounting for product retrieval, destruction, regulatory response, legal liability, and brand damage. According to a study published in the Journal of Food Protection, the average direct cost of a food recall is approximately $10 million, with indirect costs — lost sales, consumer trust erosion, insurance premium increases — often exceeding direct costs.

For a company like Savannah Bee Company, built on a premium brand identity in the specialty food space, the reputational impact of a Class I allergen recall may outlast the financial one.

The investment in a compliant allergen control program — supplier qualification, validated cleaning procedures, systematic label review, and employee training — is a fraction of that exposure.

How Certify Consulting Helps Food Manufacturers Build Recall-Proof Allergen Programs

At Certify Consulting, I've helped more than 200 food manufacturers build and audit allergen control programs that withstand FDA scrutiny. With a 100% first-time audit pass rate across eight-plus years of practice, my approach is practical: I work with your existing food safety plan, identify the specific gaps, and help you close them with documented procedures your team can actually execute.

Allergen compliance isn't a one-time project — it requires living systems that respond to formulation changes, supplier changes, and regulatory updates like the FASTER Act. If you're not sure whether your current program would have caught what Savannah Bee's program missed, that uncertainty is worth resolving before FDA finds the answer for you.

Learn more about our food safety and allergen compliance services at thefdaexpert.com or explore our FDA recall prevention resources.

Frequently Asked Questions

Q: What are the nine major food allergens under U.S. law? A: Under FALCPA (2004) and the FASTER Act (2021), the nine major food allergens are: milk, eggs, fish, shellfish, tree nuts, peanuts, wheat, soybeans, and sesame. Sesame was added as the ninth allergen effective January 1, 2023.

Q: What does 21 C.F.R. Part 117 require for allergen controls? A: Under 21 C.F.R. § 117.135(c)(2), food manufacturers must implement allergen preventive controls when allergens are identified as a significant hazard in the required hazard analysis. These controls must include proper labeling, sanitation to prevent cross-contact, and segregation of allergenic materials. Controls must also be monitored, have corrective action procedures, and be validated under § 117.140.

Q: How often should a food manufacturer review product labels for allergen accuracy? A: At minimum, labels should be reviewed at initial product launch, after any formulation or ingredient change, and at least annually as part of the Food Safety Plan review required under 21 C.F.R. § 117.170. Best practice also includes a pre-production allergen reconciliation check before each production run for complex or high-risk products.

Q: What is the FASTER Act and when did it take effect? A: The FASTER Act (Pub. L. 117-11) was signed into law on April 23, 2021, and added sesame as the ninth major food allergen under U.S. law, with an effective compliance date of January 1, 2023. Food manufacturers were required to update hazard analyses, allergen preventive controls, supplier qualifications, and label declarations to address sesame by that date.

Q: Can a "may contain" or advisory allergen statement substitute for a proper allergen declaration? A: No. Advisory statements like "may contain wheat" are voluntary and address potential cross-contact — they do not satisfy the FALCPA requirement to declare intentionally added allergens. If wheat or soy is an intentional ingredient or component of an ingredient in a formulation, it must be declared on the label regardless of quantity.

Last updated: 2026-03-04

Jared Clark is the principal consultant at Certify Consulting and the author of thefdaexpert.com. He holds credentials including JD, MBA, PMP, CMQ-OE, CPGP, CFSQA, and RAC, and has served more than 200 FDA-regulated clients with a 100% first-time audit pass rate.