Compliance & Legislation
The July 1, 2026 deadline is approaching. Here is what happens if your restaurant is not ready — and why the real exposure goes far beyond fines.
By Dylan McDonnell | 8 min read
California's SB 68 — the Allergen Disclosure for Dining Experiences Act — takes effect on July 1, 2026. There is no grace period. There is no phased rollout. If your restaurant chain has 20 or more locations nationally and at least one of those locations is in California, you are expected to be in full compliance on day one.
Most operators who are researching SB 68 penalties are already past the awareness stage. They know the law exists. What they need to understand is the full scope of what non-compliance actually costs — because the fines are the least of it. The liability exposure, the reputational damage, and the precedent that is already being set by analogous compliance lawsuits in other regulatory areas paint a much more serious picture.
SB 68 was signed into law by Governor Newsom on October 13, 2025. The effective date is July 1, 2026. The law applies to any restaurant or similar retail food establishment in California that is part of a chain with 20 or more locations nationally doing business under the same name and offering substantially the same menu items. The 20-location threshold is a nationwide count — if your chain has 20 locations across the country and even one is in California, you are covered.
The law requires written notification of the nine major food allergens contained in each menu item. This disclosure must be at the menu item level — not a general allergen statement for the restaurant, but specific allergen identification for each individual item. The information must appear either directly on physical menus or in a digital format via a QR code displayed on those physical menus, with a printed alternative available for guests who cannot access the digital version.
Critically, the disclosure requirement extends to all digital menus, including the restaurant's website, first-party online ordering through systems like Olo and Toast, and third-party delivery platforms like DoorDash and Uber Eats.
SB 68 is enforced under the existing California Retail Food Code framework. Local health agencies — county health departments — are responsible for enforcement through visual verification and other reasonable methods of compliance checking.
Violations are classified as misdemeanors under the Retail Food Code. The enforcement mechanism follows the existing pattern for food safety violations: inspectors identify non-compliance during routine or targeted inspections, the operator is notified, and repeated or uncorrected violations escalate to monetary fines.
In practice, this means the first violation is likely to result in a notice requiring correction. Failure to correct, or repeated violations across inspections, leads to escalating fines. For a multi-location chain, a single inspection failure at one location can trigger scrutiny across all California locations operated under the same brand.
The fine structure under the Retail Food Code is manageable for most restaurant chains. The exposure that keeps legal teams up at night is everything else.
If a guest with a food allergy has a reaction because allergen information was missing, incorrect, or outdated, the restaurant faces potential negligence claims and personal injury lawsuits. This is not hypothetical — food allergy litigation is a well-established area of law, and SB 68 creates a new, codified standard of care that plaintiffs' attorneys will use as a benchmark.
There is an even more fundamental legal principle at play here. Strict liability applies once an operator is put on notice of a food allergy. If a guest informs your staff of an allergy, and a mistake happens after that point, the operator faces strict liability regardless of whether SB 68 exists. The regulation does not create this obligation — it already exists under common law. What SB 68 does is raise the baseline: it creates a documented, enforceable standard for how allergen information must be disclosed, and failure to meet that standard makes any subsequent incident far harder to defend.
Operators who think allergen disclosure lawsuits are unlikely should look at what has already happened under the Americans with Disabilities Act. Over the past decade, there has been a massive wave of ADA accessibility lawsuits targeting restaurant menus and websites that do not meet compliance requirements for visually impaired users. These cases have generated significant settlements, and an entire cottage industry of plaintiff's firms now specializes in identifying and suing non-compliant businesses.
SB 68 creates an analogous liability surface. Once a codified standard exists for how allergen information must be disclosed, every restaurant that does not meet that standard becomes a potential target — not just for health department enforcement, but for private litigation.
The first restaurant chain to be publicly fined or sued for SB 68 non-compliance will be a national news story. Food allergy advocacy groups are large, vocal, and closely watching this law's implementation. Social media amplifies every incident. A single allergic reaction at a non-compliant restaurant — particularly one that had the resources to comply and chose not to — will generate the kind of coverage that no PR team can manage.
Insurers are paying attention to allergen disclosure regulation. A chain that cannot demonstrate compliance with SB 68 is a chain with an elevated risk profile. Expect underwriters to factor SB 68 compliance into liability insurance assessments, and expect non-compliant operators to see premium increases — or, in some cases, difficulty obtaining coverage at all for allergen-related incidents.
The 33 million Americans with food allergies — and their families — are highly loyalty-driven consumers. Food-allergic diners are more than twice as loyal as average diners to restaurants that accommodate their needs. But the inverse is also true: a restaurant that demonstrates it cannot be trusted with allergen information loses these guests permanently.
SB 68 is the first state-level allergen disclosure law for restaurants in the United States, but it will not be the last. Six other states are already initiating similar legislation, and the advocacy infrastructure that pushed SB 68 through California has publicly stated that this law is a foundation to build on.
For multi-state operators, this means the compliance investment made for California is not a one-state expense. It is the beginning of a national compliance obligation that will expand jurisdiction by jurisdiction over the coming years.
Under SB 68, allergen information must be available at the individual menu item level. This means each menu item must be accompanied by a disclosure of which of the nine major allergens it contains. This information must appear on all physical menus — either printed directly next to each item or accessible via a QR code — and on every digital menu: the restaurant's website, first-party online ordering, and third-party delivery platforms.
Meeting the minimum requirement with static documents — printed allergen charts, PDFs, or manually updated spreadsheets — is technically possible but operationally fragile. Any recipe change, supplier substitution, or menu rotation requires every document to be updated across every location and every channel simultaneously. For a multi-location chain, the best practice is a centralized, automated system that maintains allergen data in real time and propagates it to every surface where a menu exists.
The California Retail Food Code already requires that the person in charge of a food facility have adequate knowledge of major food allergens. Staff need to know what the nine allergens are, how to direct guests to allergen information, and how to respond when a guest discloses a specific allergy.
When a health inspector or a plaintiff's attorney asks when allergen data was last updated and whether the information on the menu matches the current recipe, the operator needs an answer. An audit trail that logs every allergen data change, every review, and every update — timestamped and attributable — is the difference between a defensible compliance posture and an indefensible one.
Even with the deadline approaching, a multi-location chain can get from zero to fully compliant if the approach is right. The key is working with a platform that centralizes the data setup at the corporate level and deploys to all locations and channels simultaneously.
Foodini is a dietary intelligence platform built for exactly this scenario. Named one of Fast Company's Most Innovative Companies in restaurants, dining, and food services for 2026, Foodini automates allergen disclosure across every menu, every location, and every ordering channel.
Whether the goal is a rapid deployment to meet the July 1 deadline or a comprehensive rollout that includes staff training, audit trail configuration, and multi-jurisdiction allergen coverage beyond the nine required by SB 68, the platform is designed to move at the speed the deadline demands.