EU Food Regulations: Hygiene, Labeling, and Enforcement

EU food regulations form a single, farm-to-fork legal framework that applies uniformly across all 27 member states and rests on one rule: no unsafe food may be placed on the market.¹ Around that rule sit dedicated regulations covering hygiene, labeling, additives, pesticide residues, traceability, novel foods, genetically modified organisms, geographical quality labels, imports, and official controls. If you produce, sell, or import food anywhere in the EU, these are the rules you have to meet.

The Rule That Governs Everything

Regulation (EC) No 178/2002, known as the General Food Law, is the foundation every other food regulation builds on. It applies to all stages of production, processing, and distribution of food and animal feed, and it establishes the risk analysis approach, the precautionary principle, and the transparency obligations that shape everything downstream.²

Article 14 defines when food is unsafe: either harmful to health or unfit for human consumption. That judgment takes into account normal conditions of use across the supply chain, the information given to consumers on the label, probable cumulative toxic effects, and the sensitivities of specific consumer groups such as children or people with allergies.¹ If any food in a batch is found unsafe, the entire batch is presumed unsafe unless a detailed assessment proves otherwise.

The same regulation created the European Food Safety Authority (EFSA), which provides the scientific risk assessments that underpin EU food law. EFSA evaluates the science; the European Commission and member states decide what to do about it. Before a food additive is approved, a pesticide residue limit is set, or a novel food is allowed onto the market, EFSA’s assessment comes first.

Hygiene Rules and HACCP

Regulation (EC) No 852/2004 places direct responsibility on food business operators to make sure their products are safe. Every operator beyond the primary production stage must implement permanent procedures based on the seven principles of Hazard Analysis and Critical Control Points (HACCP).³ Those principles are:

Identify hazards at each step of production.
Pinpoint the critical control points where control is essential to prevent or eliminate a hazard.
Set measurable critical limits, such as temperature, time, or pH, that each control point must meet.
Monitor those limits continuously.
Define corrective actions for when a limit is breached.
Verify through testing and review that the system works.
Keep written records of everything.

Regulation (EC) No 853/2004 layers additional requirements onto food of animal origin. Establishments that handle meat, dairy, eggs, or fishery products must be approved by the competent authority following an on-site inspection, and every product leaving an approved facility must carry an identification or health mark.⁴ The oval-shaped mark with the country code and approval number is regulatory proof that the facility met hygiene standards before a single product shipped.

What Must Appear on a Food Label

Regulation (EU) No 1169/2011 sets the labeling rules for pre-packed food sold anywhere in the EU. Every package must show:⁵

The name of the food.
An ingredients list in descending order of weight.
Allergen declarations (gluten, nuts, milk, eggs, and the other listed substances) highlighted within the ingredients list.
The net quantity.
A date of minimum durability or a “use by” date.
Storage conditions and instructions for use.
The name and address of the food business operator.
The country of origin or place of provenance, mandatory for certain categories including fresh and frozen meat.
A nutrition declaration covering energy, fat, saturates, carbohydrate, sugars, protein, and salt.
Alcoholic strength for beverages above 1.2% by volume.

Labels must appear in the official languages of the member state where the product is sold, and misleading imagery or claims about a product’s nature are prohibited. The regulation also sets minimum font sizes to keep the mandatory information legible.⁶

Wine is a partial exception. Since December 2023, wine producers must provide ingredient lists and nutritional information through a QR code or web address on the bottle, following amendments to Regulation (EU) No 1308/2013 introduced by Regulation (EU) 2021/2117. The physical label must still carry the alcohol content, allergens, bottle size, and energy value, and information delivered through the QR code must be factual, not marketing.

A harmonized mandatory front-of-pack nutrition label, which would replace national schemes like the Nutri-Score or the Keyhole with a single EU system, has been under discussion but is stalled. As of early 2026, the European Commission has not tabled a formal proposal, citing polarized views among member states.⁷ National voluntary schemes remain in place in the meantime.

Additives and Pesticide Residues

Regulation (EC) No 1333/2008 controls food additives, covering colorants, sweeteners, preservatives, and other substances added for a technological purpose.⁸ The system runs on a positive list: if an additive is not on the list, it cannot be used. To be added, a substance must pass three tests — a safety evaluation by EFSA, a demonstrated technological need, and assurance that its use will not mislead consumers.⁹ An additive that would disguise poor-quality ingredients or make a product appear better than it is cannot be authorized. EFSA also re-evaluates approved additives against current science, and substances found to raise safety concerns are removed from the list.

Pesticide residues fall under Regulation (EC) No 396/2005, which sets maximum residue levels (MRLs) for pesticides in or on food and feed.¹⁰ An MRL is the highest concentration allowed when the pesticide has been applied according to good agricultural practice. Where no MRL has been set for a specific pesticide-crop combination, a strict default of 0.01 mg/kg applies, essentially a detection threshold.¹¹ National authorities run regular sampling programs; products exceeding an MRL can be pulled from shelves and batches destroyed. Imported food must meet the same MRLs as domestically produced food.

Traceability and the Rapid Alert System

Article 18 of the General Food Law requires every food and feed business operator to maintain traceability at all stages of production, processing, and distribution. In practice, that means “one step back, one step forward”: operators must be able to identify who supplied them and who they supplied.¹ Records must cover supplier names and addresses, product descriptions, delivery dates, and customer information, and they must be available to authorities on demand. Internal systems must also link incoming ingredients to outgoing finished products, so a contaminated batch of one ingredient can be tied to every product it went into.

When a risk is identified, the Rapid Alert System for Food and Feed (RASFF) is what spreads the word. Established under Article 50 of the General Food Law, RASFF lets food safety authorities in all member states exchange information about health risks in real time.¹² It operates around the clock, and urgent notifications trigger product recalls and border rejections. The combination of mandatory traceability records and a centralized alert network is what allows the EU to react to contamination events within hours rather than weeks.

Novel Foods, GMOs, and New Genomic Techniques

Any food not consumed to a significant degree within the EU before May 15, 1997, is classified as a “novel food” under Regulation (EU) 2015/2283 and requires authorization before sale.¹³ The definition covers food with intentionally modified molecular structures, food derived from cell or tissue cultures, food produced from microorganisms or algae, and food created through production processes that significantly change composition or nutritional value. Authorization requires an EFSA safety evaluation, and only foods that clear the safety criteria and do not mislead consumers are added to the Union list. As of early 2026, no application for cell-cultured meat has been submitted for EU authorization.¹⁴

Genetically modified food and feed go through a separate authorization under Regulation (EC) No 1829/2003, which requires an EFSA risk assessment, traceability, and compulsory labeling. A tolerance threshold of 0.9% applies for the adventitious or technically unavoidable presence of authorized GMO material, below which labeling is not required.

Plants obtained through new genomic techniques (NGTs) are treated in two tiers. NGT1 plants (with no more than 20 genetic modifications from the parent variety) go through a lighter verification process and are not subject to mandatory GMO labeling on the final product, though seed bags must be labeled “NGT1.”¹⁵ All other NGTs (NGT2) remain subject to the full GMO authorization, traceability, and labeling regime. No NGTs of either category are permitted in organic production.

Geographical and Traditional Quality Labels

Regulation (EU) No 1151/2012 protects agricultural products and foodstuffs linked to specific places or traditional methods through three distinct labels.¹⁶

Protected Designation of Origin (PDO): every stage of production must take place within a defined geographical area, and the product’s quality or characteristics must be essentially tied to that area’s natural and human factors. Roquefort cheese and Kalamata olives are examples.
Protected Geographical Indication (PGI): at least one production step must occur in the defined area, and the product’s quality, reputation, or other characteristic is linked to its geographical origin. This is a less restrictive standard than PDO.
Traditional Speciality Guaranteed (TSG): the focus is on traditional composition or production methods rather than geography, with “traditional” meaning proven usage over at least 30 years.

Registered names are protected across the EU against misuse, imitation, or evocation that could mislead consumers about a product’s true origin, and unauthorized use can lead to injunctions and financial damages.

Rules for Food Imported From Outside the EU

Food imported into the EU must meet the same safety standards as food produced inside it. For products of animal origin, the requirements are especially strict. The exporting country must first be approved by the European Commission through a desk-based assessment and potentially an on-site audit. Only then can individual establishments within that country apply to be placed on the EU’s authorized list.¹⁷ Each establishment must comply with the hygiene standards in Regulation (EC) No 853/2004, and the exporting country’s competent authority is responsible for verifying compliance and maintaining the list.⁴

Every shipment entering the EU is processed through TRACES, the Trade Control and Expert System, which is the mandatory online platform for issuing the Common Health Entry Document (CHED) required for consignments of animals, animal products, and certain plant-based food and feed.¹⁸ Exporters need an EU Login account to access the platform. On arrival, consignments undergo official controls at designated border control posts before being released.

Inspections, Enforcement, and Penalties

Regulation (EU) 2017/625 governs how member states enforce all of the rules above. Competent authorities must perform regular official controls on a risk basis, covering all operators at all stages of the supply chain, with higher-risk operations facing more frequent inspections.¹⁹ For imports, every consignment of animal products and certain other categories undergoes mandatory documentary checks, while identity and physical checks are conducted at frequencies set by the Commission based on the product’s risk profile and the exporting country’s compliance history. Authorities can order recalls, impose temporary operating bans, require corrective actions, and revoke establishment approvals.

Penalties themselves are set at the member state level, not by EU regulation, so specific fines and criminal sanctions vary across the 27 countries. What the EU framework guarantees is that every member state must have penalties that are effective, proportionate, and dissuasive. Depending on the violation and the jurisdiction, that can mean administrative fines, mandatory product withdrawals, criminal prosecution, or facility closures.

1
EUR-Lex. Regulation (EC) No 178/2002 of the European Parliament and of the Council
2
European Commission. General Food Law
3
European Commission. BTSF Booklet – HACCP
4
EUR-Lex. Regulation (EC) No 853/2004 of the European Parliament and of the Council
5
EUR-Lex. Regulation (EU) No 1169/2011 of the European Parliament and of the Council
6
European Union. Regulation (EU) No 1169/2011 – On the Provision of Food Information to Consumers
7
European Parliament. Proposal for a Harmonised Mandatory Front-of-Pack Nutrition Labelling
8
EUR-Lex. Regulation (EC) No 1333/2008 of the European Parliament and of the Council on Food Additives
9
European Commission. EU Rules on Food Additives
10
EUR-Lex. Regulation (EC) No 396/2005 of the European Parliament and of the Council
11
European Commission. EU Legislation on MRLs
12
European Commission. RASFF
13
EUR-Lex. Regulation (EU) 2015/2283 of the European Parliament and of the Council
14
European Food Safety Authority. The Safety of Cell Culture-Derived Food – Ready for Scientific Evaluation
15
European Parliament. Plants Produced by Certain New Genomic Techniques
16
EUR-Lex. Regulation (EU) No 1151/2012 of the European Parliament and of the Council
17
European Commission. Non-EU Countries Authorised Establishments
18
European Commission. TRACES
19
EUR-Lex. Regulation (EU) 2017/625 of the European Parliament and of the Council