A compliant workplace allergy policy in the UK sets out individual risk assessments, first-aid and adrenaline auto-injector arrangements, catering controls, and clear rules on sharing employee health data, all built on the duty of care in the Health and Safety at Work Act 1974. Start with Anaphylaxis UK’s guidance and the HSE’s risk assessment framework, then adapt the templates below to your own catering and office setup.
TL;DR:
- Workplace allergy policies must incorporate consent, trust, and confidentiality, especially when recording sensitive health information and sharing it only with necessary personnel.
- Proper risk assessments should prioritize elimination and segregation controls over PPE or procedural rules to effectively minimize allergen exposure.
- Using individually sealed, labelled, and prepackaged meals for catering significantly reduces cross-contact risks at workplace events, especially compared to buffets.
- First-aiders need specialized training to recognize symptoms quickly and understand the differences between workplace devices and employee-owned AAIs for emergencies.
- HR teams should integrate catering procurement into allergy policies, ensuring default use of boxed meals for known severe allergies and clear allergen communication with suppliers.
Table of Contents
- What Does a Compliant Workplace Allergy Policy Cover?
- How Do You Run an Individual Workplace Allergy Risk Assessment?
- Safe Catering and Event Controls That Actually Prevent Cross-Contact
- Training, First Aid, and AAI Arrangements for the Workplace
- Privacy, Disclosure, and Reasonable Adjustments Under the Equality Act
- Policy Checklist and Risk Assessment Templates You Can Use Today
- What Running Allergy-Safe Catering Actually Looks Like
- Why HR Should Stop Treating Catering as an Afterthought
- Get Allergy-Safe Catering Without the Extra Admin
- Sources
What Does a Compliant Workplace Allergy Policy Cover?
Every workplace allergy policy needs to define terms before it defines rules. An intolerance causes discomfort; an allergy triggers an immune response; anaphylaxis is the severe, potentially fatal version that needs immediate adrenaline. Blurring these three in your policy wording creates confusion at exactly the moment clarity matters most.
Between 1% and 2% of UK adults live with a diagnosed food allergy or intolerance. In a workforce of 150, that’s likely one to three people whose exposure to the wrong sandwich filling could become a medical emergency.
Your written policy should translate four legal frameworks into plain instructions:
- Health and Safety at Work Act 1974: general duty to protect employee health, which extends to allergen risks.
- COSHH 2002: requires you to assess and control substances that could cause harm, allergens included.
- First Aid Regulations 1981: adequate first-aid cover, decided by a proper risk assessment rather than guesswork.
- Equality Act 2010: severe allergies can qualify as a disability, triggering a duty to make reasonable adjustments.
Assign named owners for each part: HR holds the policy and records, line managers flag new starters with allergies, first-aiders know where AAIs live, and a catering coordinator liaises with suppliers to ensure smooth corporate travel terminology explained. Review the whole document annually, and immediately after any incident.
How Do You Run an Individual Workplace Allergy Risk Assessment?
A risk assessment only works if the employee trusts the process enough to be honest about it. That trust starts with consent, not a form.
- Invite the conversation privately. Ask the employee whether they’re comfortable discussing their allergy and get written consent before recording or sharing any detail beyond what’s necessary.
- Capture the clinical picture. Note known triggers, past reaction severity, current medication, and where their AAI is kept during the working day.
- Walk the workspace. Identify exposure points, shared kitchens, communal snacks, nearby desks, event catering, and rank each by likelihood and severity.
- Choose controls in order of strength. Elimination first (remove the trigger from shared spaces), then segregation (separate prep areas or seating), with PPE or procedural rules as a last resort rather than a first move.
- Write it down and assign owners. Every control needs a named person responsible and a review date, not just a good intention.
- Set review triggers. Repeat annually as standard, and immediately after any reaction, near-miss, or change in role or building.
Anaphylaxis UK’s workplace risk assessment template gives you ready-made fields for all of this, so you’re not building the format from scratch.
Pro Tip: Store the completed assessment separately from general HR files, accessible only to the people who genuinely need it. Mixing it into a shared drive with performance reviews is how confidential health data ends up visible to the wrong manager.
Safe Catering and Event Controls That Actually Prevent Cross-Contact
Buffets are the single riskiest catering format for allergy-aware offices. Shared serving spoons, unlabelled dishes, and guests helping themselves near allergen-heavy trays turn a normal lunch into a guessing game for anyone with a severe allergy.
Boxed, individually sealed meals solve most of that risk in one move. They remove the need for an employee to interrogate a buffet table, and they let a caterer label each box at the point of packing rather than relying on a shared sign that gets moved or ignored.
Build catering safety into your process with these steps:
- Collect dietary requirements through one central intake form, not scattered emails, and only share the summary with caterers after employee consent.
- Give caterers a written allergen list per order, not a verbal heads-up at drop-off.
- Check that boxed meals arrive individually labelled and that buffet trays, where used, are separated by allergen with distinct serving utensils for each.
- Ask your caterer for a written cross-contamination protocol on file, covering how allergen-free boxes are prepared, packed, and kept apart from other orders.
Pro Tip: Ask any prospective caterer one direct question before you book: “What’s your process if two people on the same order have conflicting allergies?” Their answer tells you more about kitchen discipline than any menu ever will.
Nut bans and blanket prohibitions are tempting but generally discouraged as a primary control. They’re near-impossible to enforce once staff bring in their own food, and a ban can create false confidence that the risk has been removed when it hasn’t.
Training, First Aid, and AAI Arrangements for the Workplace
Your first-aiders need more than a certificate that mentions anaphylaxis in passing. They need to recognize symptoms fast, know exactly where AAIs are kept, and understand the difference between workplace stock devices and an employee’s own prescribed injector.
Structure training around three groups:
- First-aiders: symptom recognition, AAI administration, and when to call 999 versus monitor.
- Nominated colleagues near a known allergy sufferer: how to spot a reaction starting and who to alert immediately.
- Managers: incident reporting steps and how the policy applies to their team.
Accredited courses like AllergyWise give workplace staff a structured way to build this competence rather than relying on a single leaflet during induction. Decide whether you’ll hold workplace stock AAIs, store any employee-owned devices safely and accessibly, and write the emergency response steps and incident reporting process into the policy itself so nobody improvises during a crisis.
Privacy, Disclosure, and Reasonable Adjustments Under the Equality Act
Confidentiality and safety pull in opposite directions unless you handle disclosure deliberately. Get explicit written permission before sharing an employee’s allergy details with anyone beyond first-aiders, their direct manager, and the catering coordinator.
A severe allergy can meet the threshold for disability under the Equality Act 2010, which means:
- Reasonable adjustments might include a separate workstation away from a shared kitchen, or guaranteed boxed meals at every catered event rather than buffet access alone.
- Onboarding is the natural moment to invite disclosure, but never pressure it. Some employees prefer to wait until a specific event (an offsite, a client lunch) makes it relevant.
- Frame the ask supportively: “Let us know if there’s anything about food or the workspace we should plan around,” works better than a form that feels like a compliance checkbox.
Policy Checklist and Risk Assessment Templates You Can Use Today
Keep the working document short enough that managers actually read it. A one-page checklist beats a thirty-page policy nobody opens twice.
- Define allergy, intolerance, and anaphylaxis in plain terms at the top of the policy.
- Reference the individual risk assessment template and set its review cadence: annual, plus post-incident.
- List named responsibilities: HR, first-aiders, catering coordinator, line managers.
- State AAI storage locations and who is trained to use them.
- Set the catering rule: boxed meals as default for known severe allergies, written allergen lists to every supplier.
- Confirm data-handling rules: written consent required, access limited to those who need it.
| Template element | What it should capture |
|---|---|
| Employee details | Name, role, consent date, who else has access |
| Allergen and reaction history | Trigger, severity, past incidents |
| Medication and AAI location | Device type, storage point, expiry check owner |
| Workplace exposures | Kitchen, desk, events, travel |
| Controls agreed | Elimination, segregation, review date |
Store completed assessments securely, separate from general personnel files, and pair the checklist with Office Lunch’s food safety checklist for the catering side of the policy.
What Running Allergy-Safe Catering Actually Looks Like
At Theofficelunch, dietary requirements come in through a single intake form attached to every order, not a scattered email thread the day before a meeting. That form feeds directly into how boxes get packed and labelled, so nothing depends on someone remembering a verbal note.
Boxed meals get sealed and labelled individually, kitchen staff use separate utensils for allergen-free orders, and Natasha’s Law labelling requirements apply to every prepackaged item that leaves the kitchen. On a recent office order with three separate dietary flags, the fix wasn’t a single “allergen-free” buffet tray. It was three clearly labelled boxes, each one traceable back to the person who ordered it.
Why HR Should Stop Treating Catering as an Afterthought
The biggest gap in workplace allergy policy isn’t legal knowledge. Most HR teams can quote the Health and Safety at Work Act correctly. The gap is treating catering decisions as an operational detail handled by whoever books the sandwiches, rather than as part of the policy itself.
A risk assessment that’s thorough on paper collapses the moment a well-meaning office manager orders a buffet lunch because “it’s easier for a big group.” The policy needs to reach into procurement decisions, not stop at the HR filing cabinet. That means the person booking catering for a twelve-person meeting needs to know, without asking, that boxed meals are the default when anyone on the guest list has a flagged allergy.
I’d also push back gently on the instinct to over-document. Some employers respond to allergy risk by building an elaborate sign-off process that discourages employees from disclosing in the first place. The goal isn’t paperwork volume. It’s a short, clear process that an employee trusts enough to actually use, and a catering habit that removes the guesswork before it becomes a medical emergency.
— Efe
Get Allergy-Safe Catering Without the Extra Admin
Writing the policy is half the job. Executing it, order after order, without HR chasing dietary spreadsheets, is the other half. Theofficelunch handles that second part: centralized dietary intake on every booking, individually labelled boxed meals as standard for flagged allergies, and Natasha’s Law compliant packaging on anything prepackaged.
You get labelled menu options built for offices with mixed dietary needs, plus lead-time guidance so your team never has to rush a safe order the morning of a meeting. If you’re updating your policy this quarter, pair it with a caterer who already builds allergen controls into the packing process rather than promising them verbally. Get a quote for your next office order through Theofficelunch’s London catering page and see labelled boxed options before you book.
This article is general information, not a substitute for advice from a qualified doctor. Consult a qualified healthcare professional about your own circumstances before acting on anything here.