Guides
Allergen Labelling for Cookies and Snacks
How allergen labelling works for private label cookies and snacks under EU rules, including the 14 legal allergens and how to flag them on pack.
Getting allergen labelling right on cookies and snacks is not optional detail work, it is a legal requirement with real consequences if it is missed. EU Regulation 1169/2011 sets out exactly which substances count as allergens and how they must appear on pack. For a category built on wheat, milk, eggs, and nuts, allergen labelling cookies correctly is one of the first things a private label buyer should check before approving artwork.
The 14 Allergens Recognised Under EU Law
EU food law recognises 14 substances or products that must be declared whenever they are used as an ingredient, an aid to processing, or otherwise present in the finished food. Several of these show up constantly in the cookie and snack category, which makes a clear labelling process essential rather than optional.
| Allergen | Common in cookies and snacks |
|---|---|
| Cereals containing gluten (wheat, barley, oats) | Very common, base flour |
| Eggs | Common, binding agent |
| Milk | Common, butter, milk powder, chocolate |
| Tree nuts | Common, almonds, hazelnuts, cashews |
| Peanuts | Common in some recipes and cross-contact risk |
| Soya | Common, lecithin, protein blends |
| Sesame | Occasional, seeds and oils |
| Sulphur dioxide / sulphites | Occasional, dried fruit |
| Crustaceans, molluscs, fish | Rare in cookies |
| Celery, mustard, lupin | Occasional in savoury snack lines |
Why Emphasis in the Ingredient List Matters
It is not enough to simply list an allergenic ingredient somewhere in the ingredient panel. Regulation 1169/2011 requires each allergen to be emphasised through a typographical distinction, almost always bold text, so it stands out clearly to someone scanning the label quickly. This applies every time the allergen appears, not just the first mention.
Allergen Labelling Cookies: Declared vs Precautionary Statements
There is an important distinction between an allergen that is genuinely in the recipe and a precautionary “may contain” statement used to flag possible cross-contact during production.
Ingredient Allergens
If a recipe uses milk chocolate, the milk and any soya lecithin in that chocolate must be declared and bolded in the ingredient list, because they are deliberately part of the product. This applies just as much to private label protein cookies with whey protein as it does to a classic butter cookie.
Precautionary “May Contain” Statements
A “may contain nuts” or “may contain traces of milk” statement addresses accidental cross-contact, typically from shared equipment or a shared facility. This statement should follow a genuine allergen risk assessment of the production line, not be applied as a blanket disclaimer to every product regardless of actual risk. Overusing precautionary statements can actually work against a brand, since allergic consumers may start ignoring labels that seem to flag everything.
Managing Shared Lines
Any facility producing more than one recipe on shared equipment needs a documented approach to allergen changeovers, cleaning validation, and scheduling, so that a peanut-containing product does not put an allergen-free product at risk without disclosure. This is core to how a private label manufacturer should run its production planning, not an afterthought bolted on at the labelling stage.
Building Allergen Labelling Into the Development Process
The safest approach is to treat allergen labelling as part of recipe development, not a final check before print. Every ingredient and sub-ingredient, including flavourings, coatings, and inclusions, should be checked against the 14-allergen list as soon as a recipe is finalised, and the label copy should be reviewed again if any ingredient supplier or specification changes.
For brands developing a range across our products, from oat cookies to energy balls, this matters even more, since a shared base recipe with different inclusions can quietly introduce a new allergen into one SKU but not another. Keeping allergen data at the recipe level, rather than copying label text between SKUs, avoids that kind of error.
Allergen Labelling for Non-Prepacked and Foodservice Channels
Most private label cookies sold through retail are prepacked, meaning the full allergen statement appears directly on the label. But brands supplying foodservice, cafes, or bulk formats sometimes sell into channels where food is offered loose or non-prepacked, and the rules differ in that context.
Where Information Can Be Provided on Request
For food that is not prepacked, allergen information can be communicated through a notice, a menu annotation, or verbally by trained staff, rather than printed directly on individual packaging. This distinction matters for brands considering a foodservice or bulk bin channel alongside their standard retail packaging, since the compliance approach is different and needs its own process.
Staff Training Still Matters
Even where allergen information can legally be provided on request, relying on staff to answer accurately requires proper training and an up-to-date reference for every recipe in a range. A private label brand supplying a foodservice channel should make sure its allergen documentation is passed along clearly to whoever is handling customer queries at the point of sale.
Reviewing Allergen Status When Suppliers Change
Allergen risk is not fixed once a recipe launches. A change in ingredient supplier, even for something as simple as a chocolate chip or a flavouring, can introduce a new allergen or cross-contact risk that was not present in the original recipe.
Building a Supplier Change Check Into Quality Processes
Any time an ingredient specification changes, whether due to a new supplier or a reformulation by the existing one, the allergen declaration should be reviewed again rather than assumed to be unchanged. This is a standard part of a proper allergen management process, and it protects both the consumer and the brand from an outdated label reaching the shelf.
Documenting the Review
Keeping a simple record of when an ingredient specification was last checked against the allergen list, and by whom, makes it far easier to demonstrate due diligence if a question ever comes up from a retailer or a food safety authority. This kind of documentation is a normal expectation of any facility working toward IFS Food certification, which is in progress at our facility.
Allergen Labelling and Multi-Language Packaging
Brands distributing across several EU countries need their allergen statement translated accurately for each market, not just approximated from the original language version. This is one of the areas where a translation error is most consequential, since a mistranslated allergen term could mislead a consumer with a genuine allergy.
Standardising Allergen Terminology
Working from a consistent, pre-approved list of allergen terms in each required language, rather than translating each new label from scratch, reduces the risk of an inconsistent or incorrect term appearing on one SKU but not another. This is especially useful for a growing range where new flavours or formats launch regularly across multiple markets.
Reviewing Translated Labels Before Print
Any translated allergen statement should be checked by someone with genuine fluency in that language and familiarity with EU allergen terminology before the label goes to print, rather than relying solely on a translation service without a food labelling background. This extra review step is a small cost relative to the risk of an incorrect allergen statement reaching a shelf.
Want a second check on your allergen statement before your next print run? Contact us and our team will review your ingredient list against the EU’s 14 recognised allergens.
Cookie Label reviews allergen labelling as a standard part of onboarding any new private label recipe at our facility in Slovakia. Our services team can also advise brands supplying industries like sports nutrition or grocery retail on how precautionary statements should be handled for shared production lines.
Frequently asked questions
- How many allergens must be declared under EU law?
- EU Regulation 1169/2011 lists 14 allergens that must be declared whenever they are present as an ingredient, including gluten-containing cereals, eggs, milk, tree nuts, peanuts, soya, and sesame. Cookies and snacks commonly need to flag several of these at once, since wheat flour, milk, and nuts are typical ingredients.
- How should allergens be highlighted in the ingredient list?
- Allergens must be emphasised within the ingredient list using a typographical distinction from the rest of the text, most commonly bold type, so they stand out to someone scanning the label. Simply listing an allergen ingredient in plain text without emphasis does not meet the requirement.
- What is the difference between an allergen ingredient and a 'may contain' warning?
- An allergen ingredient is something intentionally used in the recipe and must be declared in bold within the ingredient list, while a 'may contain' or precautionary allergen statement warns about the risk of unintentional cross-contact during manufacturing. The precautionary statement is voluntary in principle but should only be used when a genuine risk assessment supports it, not as a blanket disclaimer.
- Do private label cookies need allergen information for shared production lines?
- Yes. If a facility produces multiple recipes on shared equipment, a proper allergen risk assessment should determine whether cross-contact is a realistic risk for a given product, and any resulting precautionary statement should reflect that assessment rather than being applied automatically to every SKU. This protects both consumers with allergies and the brand's credibility on pack.
- Can allergen information be provided only on request rather than on the label?
- For prepacked food sold directly to consumers, allergen information must appear on the label itself, not only on request. Information provided only verbally or on request applies to non-prepacked food sold loose, which is not how private label cookies are typically sold at retail.