Supplier Change Control Failures During Food Substitutions

• Substitution exposes the weakest handover in the chain — and in most organisations, that handover is inside the business, not between it and the supplier.
• The highest-risk allergen scenario is not a mislabelled product but an unlabelled ingredient: the product contains something the label does not declare.
• Most allergy-related alerts trace to mislabelling, incorrect packaging and weak version control inside the business, not to supplier failure.
• Under Natasha’s Law, every ingredient change must appear on the full PPDS ingredients list with allergens emphasised — and any label that lags behind a substitution decision creates compliance exposure immediately.
• No production route should bypass alignment of specification, recipe, product data and label availability; verification that only confirms document presence will not catch the failures that matter.

Supplier substitutions cause allergen control failures because they create latent change. Something material shifts upstream, but the hazard only becomes visible downstream at packing, dispatch or after sale.

Substitution itself is not the cause of allergen incidents. Misalignment between the substituted ingredient and the information accompanying it through specifications, artwork, product data and line verification is the cause.

Substitutions rarely happen in calm conditions. They are usually managed while the business is dealing with:

• Tight timescales
• Limited stock
• Retailer service requirements
• Competing production priorities
• Pressure to keep lines running, even when a stop would be the safer decision

In that context, the risk is not simply individual error. A weak handover, outdated label version or unchecked specification change can quickly turn a routine substitution into an allergen information failure.

UK regulators and industry bodies, therefore, focus on change management of allergen information because label-impacting changes routinely outpace the mechanisms intended to keep information aligned (FDF, 2023).

The FSA reinforces the point. Recipe changes that alter allergenic ingredients require a formal risk assessment and disciplined labelling decisions at every step, not assumptions that the system can catch up (FSA, 2024).

The operational question for duty holders is narrow. When substitution happens at speed, where does the control chain stop being dependable?

The allergen control chain breaks down at predictable interfaces in the flow from supplier disruption to packaged product. Six failure modes recur in UK food operations, and they cluster at the same handovers each time.

Substitutions produce two label-product mismatch outcomes the FSA describes explicitly. Labels list ingredients not present, or labels do not list an ingredient that is present (FSA, 2022). The second carries the highest allergen risk because the consumer has no warning of an allergen they may need to avoid.

Label lead times compound the risk. Under disruption, organisations face long delays between a decision and updated packaging being available, which increases the temptation to run through existing stock and manage the change through informal messaging rather than controlled artefacts (FSA, 2022).

Where this fails in practice:

• Commercial pressure continues production while labels lag behind reality.
• Temporary controls (stickers, over-labelling, customer communications) are introduced quickly without the checks applied in routine label governance.
• Short-term deviation becomes a new baseline without the assurance work a baseline requires.

The FSA’s evidence is specific. In scoping review, mislabelling accounted for 54% of allergy alerts, with wrong packaging and allergen contamination also contributing, and a high proportion attributed to internal operational errors (FSA, 2020). Operational and information-control breakdowns inside the business are typically the dominant driver, not supplier unreliability.

Where this fails in practice:

• Documented processes are in place but are not resilient to common disruptions: short-notice reformulations, urgent substitutions, split deliveries, mixed label stock.
• Checks confirm the presence of documents (specifications, Certificates of Analysis) rather than the meaning of the change, including allergen profile changes and whether data updates have completed across all systems.
• Parallel truths exist across Enterprise Resource Planning systems, shared drives, supplier portals and customer data, so different functions can each be correct within their own system and collectively wrong.

The first interface failure is between the supplier and the specification of record. The Food and Drink Federation Guidance on Change Management of Allergen Information is explicit that allergen profile changes can arise from reformulation, new ingredients or additives, or supply chain changes. The guidance sets out formal change management expectations including risk assessment spanning ingredients, process and supply chain (FDF, 2023).

Drift commonly appears here first. The supplier’s change typically becomes real in production before it is reflected in the site’s master record.

Where this fails in practice:

• Emergency sourcing creates approval at pace, compressing technical sign-off into a condensed check because production is already committed.
• Receiving checks validate identity and paperwork, not whether the allergen profile has changed in a way that affects labelling and segregation.
• Supplier documentation is treated as sufficient even when it can arrive late, be ambiguous, or be inconsistently interpreted across functions.

The second interface failure is between the specification and the artwork or label stock. UK recall analysis highlights the scale of allergen-related recalls and patterns consistent with labelling breakdowns, including omission of priority allergens (Yue et al., 2022).

Wider evidence reviews of labelling-error recalls identify packaging or printing error, formulation or ingredient change, supply chain failures, cross-contact and process or manufacturing failures, often with root causes unknown or under-reported (Soon and Abdul Wahab, 2021).

Where this fails in practice:

• Artwork updates exist but old packaging stock remains accessible and operationally convenient.
• Sites allow parallel label versions to coexist during transition periods without firm physical and system controls.
• Customer-facing product data lags behind internal changes, so retailers and business customers operate on outdated allergen information.

Production verification is the last point at which a packaging mismatch can be detected before dispatch. The FSA’s manufacturer guidance states that allergy-related withdrawals and recalls are often caused by incorrect packaging or labelling (FSA, 2024). Packing is the primary hazard pathway at this stage because it is where identity is finally fixed for the consumer.

When packaging and contents diverge, upstream controls become irrelevant. The result is a different product, regardless of intent.

Where this fails in practice:

• Line verification can become a ritual rather than a detection system, especially during frequent changeovers and with similar-looking products or components.
• People can rely on visual similarity when product families are intentionally similar.
• Authority gradients discourage stoppage, because the cost of being wrong about a suspicion is immediate while the cost of being right may be invisible until after dispatch.

PPDS labelling creates a distinct interface failure under substitution pressure. PPDS food must be labelled with the name of the food and a full ingredients list, with allergens emphasised within that list (FSA, 2021). The rules removed reliance on informal or verbal allergen controls because those proved unreliable for consumers.

Under substitution pressure, PPDS turns drift into exposure risk. If the ingredient reality changes faster than the label, the pack becomes legally and operationally misleading even when the substitution itself is technically acceptable.

Where this fails in practice:

• Ingredient switches or reformulations happen quickly while label updates lag, particularly where labels are printed in batches or controlled centrally.
• Foods packed on the same premises where they are sold, before the consumer selects or orders them, fall into PPDS scope, but in busy operations sites can treat them like non-prepacked items in practice.
• Substitutions can create mismatches between online product data and what is actually packed and delivered if change control does not force synchronisation across channels.

Supply chain communication is a hazard pathway because substitution risk increases when allergen information channels are inconsistent across suppliers. A study of producer and retailer perspectives on unintended allergen presence describes a lack of common systems for communication with suppliers, and multiple parallel forms and systems for sharing specifications and unintended allergen presence information (Linders et al., 2023).

The structural barrier is the channel design, not the competence of the staff using it. When communication routes between businesses are not uniform, change notification becomes unreliable by design, and substitution decisions taken in good faith arrive incomplete at the receiving site.

Supplier change controls hold under substitution pressure when four conditions are met together. None of these is a heightened standard; each is the baseline expectation under FSA and FDF guidance.

1. Substitution is treated as managed change, not purchasing discretion. The FSA’s substitution guidance during disruption anticipates label mismatch scenarios as the default outcome, which means managed change is the baseline expectation rather than a higher standard (FSA, 2022).
2. There is a single version of the truth, forced through the chain. Where a substitution affects allergens, no route to production may bypass alignment of specification, recipe, product data and label availability. Where the organisation allows parallel truths, drift is likely.
3. Verification is designed for detection, not reassurance. Verification targets the likely failure modes, in particular packaging mismatch on similar product families and during changeovers, rather than confirming that documentation is present.
4. Governance learns beyond operator error. Where most allergen alerts link to internal operational errors, recurrence prevention depends on removing the conditions that make those errors likely: weak handovers, version control gaps, label stock governance and escalation routes that survive hierarchical pressure.

The key conclusion from UK regulatory evidence is that allergen incidents during substitutions originate from information misalignment inside the business, not from the act of substitution itself (FSA, 2020; FSA, 2024; Yue et al., 2022). When the organisation allows parallel truths across specifications, artwork, product data and packaging, allergen incidents become likely regardless of awareness levels.

Training is necessary but not sufficient. It cannot compensate for a system that allows multiple versions of the truth to coexist, or that expects people on a line to detect subtle mismatches at speed with weak verification. Anchored to hard decision points (what triggers a managed change, what stops the line, what evidence is required before product can move), training supports the system. Treated as the primary control, it becomes a reassurance mechanism for structural problems it cannot see or fix.

A practical step that does not rely on blanket exhortations is to run a realistic substitution drill on a high-volume product at production pace. Trace a plausible supplier switch through supplier information, specification versioning, product data, label stock and line verification. The weakness is likely to appear at an interface, and addressing that interface is how controls start to hold.

Addressing the failure chain described in this article begins with those responsible for substitution decisions understanding what a managed change requires and where the control chain is most likely to break.

Human Focus’s Food Allergen Awareness Training covers allergen identification, the regulatory framework, including PPDS requirements under Natasha’s Law and the operational decisions that determine whether allergen information stays aligned through substitution and reformulation.

The course produces a verified record of completion that supports compliance audit trails and is suitable for food handlers, line supervisors, technical staff and managers with allergen control responsibilities.