Compliance & Legislation
When a guest orders through DoorDash, Uber Eats, or Grubhub and has an allergic reaction because allergen information was wrong or missing — who is liable?
By Dylan McDonnell, Founder & CEO, Foodini | May 2026 | 8 min read
A restaurant in California gets 35% of its orders through DoorDash. The DoorDash menu listing for that restaurant was built from a photo of a physical menu, supplemented by descriptions the restaurant submitted eighteen months ago. Since then, the kitchen has changed suppliers for two core proteins and rotated in a new sauce. The allergen information on DoorDash reflects none of those changes.
On July 1, 2026, that restaurant is non-compliant. The gap is not on the physical in-store menu, which the operator updated. The gap is on the third-party platform — a channel they treat as someone else's system, managed by someone else's team, and therefore someone else's problem.
This is the most common SB 68 compliance misconception I encounter: operators who have done the work on their in-house menus but have not addressed delivery platforms because they believe the platform bears some share of responsibility for what is displayed there. They do not.
California's SB 68 requires that any restaurant chain with 20 or more locations nationally and at least one California location disclose the nine major food allergens for every menu item on "all physical and digital menus."
The current consensus view among legal firms advising restaurant groups is that "all digital menus" means the restaurant's own website, first-party online ordering platforms, and third-party delivery platforms: DoorDash, Uber Eats, Grubhub, Instacart, and any other delivery or ordering application where a consumer can see a menu and place an order.
The obligation runs to the operator, not to the platform. If a menu exists in any digital form that a consumer can access to make ordering decisions, allergen information must be present and accurate on that surface. The restaurant is the party that bears the exposure when disclosure is absent or inaccurate.
When an allergic guest orders through a delivery platform, has a reaction because allergen information was wrong, and decides to take legal action, the restaurant is the primary target.
Most major delivery platforms have menu management tools that allow operators to add allergen information. DoorDash, Uber Eats, and Grubhub all have some form of this. The challenge is that these tools require the operator to populate them — they do not pull allergen data automatically — and many operators have either not used them or populated them with information that is now outdated.
For a chain with 50 California locations and a presence on three delivery platforms, manually maintaining accurate allergen information across 150 platform listings — and updating every listing every time a recipe or ingredient changes — is not operationally sustainable.
Can a disclaimer replace allergen disclosure on delivery platforms?
No. The law requires accurate per-item allergen disclosure. A blanket disclaimer does not satisfy that requirement and does not eliminate liability.
What if a franchisee manages their own delivery listing?
SB 68 applies to both franchisors and franchisees. A non-compliant franchisee listing exposes both parties.
Does this apply to ghost kitchens?
Yes. A delivery-only ghost kitchen has the same SB 68 obligations applied entirely to its delivery-platform menus.
Foodini connects allergen data from your recipe system to every digital surface — in-store, website, first-party ordering, and third-party delivery platforms — so one change at the source propagates everywhere automatically.
See how Foodini handles multi-channel allergen disclosure →