When a food‑service or gastronomy business buys packaging, utensils or other consumable supplies, the liability for any contaminant, migration or defect falls squarely on the buyer. A breach can trigger costly recalls, brand damage and legal action under the EU Product Liability Directive 85/374/EEC (or the UK Consumer Protection Act 1987). This guide walks you through the concrete steps a procurement manager should take – from drafting the request for quotation (RFQ) to checking certificates, running audits, handling incoterms and lead times, and finally three practical habits that keep product‑liability exposure low.
Translate Legal Risk into Technical Requirements
Before you even open a supplier database, map the liability landscape onto the technical attributes of the product you intend to buy. In the food‑packaging sector the two most common liability triggers are:
- Migration of chemicals from the material into food, breaching EU Regulation 1935/2004 or US 21 CFR Parts 174‑179.
- Physical hazards such as sharp edges, inadequate sealing or contaminant‑laden surfaces that could cause injury or contamination.
For a ceramic plate destined for a high‑end restaurant, the RFQ must request compliance with the EU Ceramics Regulation (Regulation EU No 10/2011) and a test report showing lead and cadmium levels below the legal limits. For a PET beverage bottle, you need to specify the migration limit for antimony (as set in EU Regulation 10/2011) and request a full compliance certificate against ISO 22000:2018 food‑safety management.
Document these requirements in a “Product‑Liability Specification” section of the RFQ. Use exact phrasing – e.g. “Material must be certified to EU Regulation 1935/2004 and pass overall migration testing at 10 days × 40 °C, with a total migration not exceeding 10 mg/dm².” This eliminates ambiguity and provides a legal benchmark you can later reference in a dispute.
How to Verify a Supplier: Certificates, Audits and Sample Orders
Verification is a three‑tier process. The first tier is documentary proof.
- Quality‑system certificates. ISO 9001:2015 demonstrates a generic quality management system; ISO 22000:2018 or BRCGS Food Safety Standard (latest version) show food‑specific controls. Ask for the current certificate, the scope, and the auditor’s accreditation body (e.g. UKAS‑accredited).
- Material‑specific compliance. For food‑contact items request the EU Declaration of Compliance (DoC) or US FDA Food Contact Substance (FCS) clearance. The DoC should list the exact regulation numbers and the testing laboratory.
- Regulatory audits. If the supplier is located in a third‑country, confirm that the national authority (e.g. China’s AQSIQ for food‑contact plastics) has conducted a conformity assessment that is recognised under the EU‑China Mutual Recognition Arrangement.
The second tier is an on‑site audit or a remote “virtual audit”. Use a recognised audit provider (e.g. SGS, Intertek) and focus on the following checkpoints:
- Control of incoming raw material certificates – traceability from grain or resin to finished product.
- Production environment – segregation of allergen‑containing lines, cleaning validation, and temperature control.
- Finished‑product testing – migration testing, microbiological limits, and mechanical integrity (e.g. burst strength for flexible pouches).
The third tier is a sample order that mimics the first commercial lot. Conduct your own laboratory testing on the received sample, verifying the same migration and microbiological parameters you will demand of the full production run. If the sample fails, you have documented evidence to reject the supplier before committing larger volumes.
Overseas Sourcing Pitfalls and How Incoterms Shape Liability
Buying from low‑cost regions can be attractive, but it introduces hidden liability exposures. Common pitfalls include:
- Mis‑interpreted specifications. A supplier may quote “food‑grade” based on a local standard that is less stringent than EU Regulation 1935/2004. Always request the exact test method (e.g. EN ISO 17025‑accredited laboratory) and compare the limits.
- Customs classification errors. Incorrect HS codes can trigger unexpected duties and delay, which may force you to use a “rush” shipment that bypasses normal quality checks.
- Inadequate insurance. Product‑liability insurance often excludes “manufacturing defects” that occurred before the goods entered the buyer’s risk zone. Choose incoterms that place the risk at a point where you have control over inspection.
Incoterms are the contractual tool that determines when risk transfers. For high‑risk food‑contact items, DPU (Delivered At Place Unloaded) or DDP (Delivered Duty Paid) give you the chance to inspect the cargo before the seller’s liability ends. By contrast, EXW (Ex Works) places all risk on you as soon as the goods leave the supplier’s warehouse – a risky choice unless you have a trusted third‑party inspection in the country of origin.
Lead times also affect liability. Short lead times often mean less time for pre‑shipment testing. Build a buffer of at least two weeks for each production batch, allowing you to receive the sample, test it, and request corrective action before the main shipment leaves the factory. If a supplier cannot accommodate this buffer, consider a dual‑source strategy: a primary low‑cost supplier for volume and a secondary “qualified‑as‑backup” supplier that meets all liability criteria.
Three Practical Habits to Keep Product‑Liability Under Control
Even after you have chosen a compliant supplier, ongoing vigilance is essential. Adopt these three habits as part of your procurement routine:
- Quarterly document refresh. Ask the supplier to provide an updated DoC and test report at least every three months. Changes in raw‑material batches or production equipment can affect migration levels, so a static certificate is insufficient.
- Random “in‑process” testing. Arrange for a third‑party lab to test 1‑2 % of the items that are pulled from the line during regular production. This catches drift in quality before a full batch is shipped.
- Traceability drill‑down. Maintain a digital traceability matrix linking each SKU to the supplier’s batch number, the raw‑material certificate, and the specific test report. In the event of a recall, you can isolate the exact affected lot and demonstrate due diligence to regulators.
Implementing these habits turns compliance from a one‑off paperwork exercise into a continuous risk‑management process that aligns with the principles of the EU Product Liability Directive and the UK Consumer Protection Act.
FAQ
What specific regulation governs migration limits for food‑contact plastics? In the EU the limits are set out in Regulation 10/2011, which implements the broader Framework Regulation 1935/2004. In the United States the equivalent limits are found in 21 CFR Parts 174‑179.
Can I rely on a supplier’s self‑declared “food‑grade” label? No. A self‑declared label must be backed by an official Declaration of Compliance that references the exact regulation and a third‑party test report. Without that documentation the claim has no legal weight.
Which incoterm gives me the most control over product‑liability risk? DPU (Delivered At Place Unloaded) or DDP (Delivered Duty Paid) are preferred because they keep the risk with the supplier until the goods have arrived at your premises, allowing you to conduct a final inspection before taking ownership.
How often should I audit an overseas supplier? At a minimum, conduct a full on‑site audit every 24 months. Between full audits, arrange remote audits or “document‑only” reviews quarterly to capture any changes in processes or certifications.
What insurance coverage should I look for when importing food‑contact items? Seek product‑liability insurance that includes coverage for “manufacturing defects” occurring before risk transfer, and ensure the policy references compliance with the relevant EU or US food‑contact regulations.
This article is provided for general information and education. It does not replace professional advice.
Embedding Liability into Contracts: Indemnities, Warranties and Force‑Majeure
Even the most thorough technical specification is useless if the contract does not allocate risk in a way that protects the buyer. Begin every purchase agreement with a clear warranty clause stating that the supplier guarantees full compliance with all applicable food‑contact regulations (EU Regulation 1935/2004, FDA 21 CFR 174‑179, etc.) for the entire lifecycle of the product, from raw material to finished good. The warranty should be expressed in measurable terms – for example, “total migration shall not exceed 10 mg/dm² as measured by EN ISO 17556‑2” – so that any breach can be objectively proven and the supplier can be held liable.
Follow the warranty with an indemnity provision that obliges the supplier to reimburse the buyer for all direct costs arising from a defect, including product recalls, third‑party legal fees, and damage to brand reputation. Limit the buyer’s exposure by stipulating that the indemnity covers only incidents that occur within a defined “safe‑use” period (typically the shelf‑life of the product plus a reasonable buffer). This time‑frame prevents endless liability for legacy products while still giving the buyer recourse for foreseeable failures.
Force‑majeure clauses are often overlooked in food‑packaging contracts, yet they can become a liability loophole. Draft the clause to exclude only truly unforeseeable events (e.g., natural disasters, war, or sudden regulatory bans) and require the supplier to provide immediate written notice and evidence of the event. Include a “mitigation” requirement that obliges the supplier to take all reasonable steps to minimise impact, such as sourcing an alternate certified material or expediting third‑party testing. By tightening force‑majeure language, you avoid a situation where a supplier walks away from a defect that is actually within their control.
Finally, incorporate a “right to audit” clause that grants the buyer unrestricted access to the supplier’s quality records, test data, and production line during the warranty period. Pair this with a “notice‑and‑cure” provision that gives the supplier a reasonable but limited window (e.g., 30 days) to remedy any non‑conformity before the buyer may terminate the contract and claim damages. Such contractual scaffolding turns abstract legal risk into concrete, enforceable obligations.
Building Robust Traceability and Recall Readiness
Traceability is the practical backbone of product‑liability management. From the moment a resin pellet is received to the instant a printed label leaves the factory, every batch, lot number, and material certificate must be recorded in a system that can generate a full “bill of materials” on demand. Invest in an ERP or specialised food‑safety software that links supplier certificates to internal inventory codes, and ensure that the data model includes fields for migration test results, expiry dates, and the exact regulatory version that was applied at the time of production.
When a new supplier is onboarded, create a “traceability matrix” that maps each critical attribute (e.g., polymer type, colourant, adhesive) to its source document (DoC, test report, audit finding). This matrix should be reviewed and signed off by both the procurement and quality‑assurance teams before the first shipment is accepted. By having a living document that ties each physical component to a verified source, you can instantly identify the affected scope if a downstream issue is reported.
Recall readiness goes beyond data collection; it requires rehearsed procedures. Develop a recall playbook that outlines the exact steps for isolating affected stock, notifying customers, and communicating with regulators. The playbook must specify who is responsible for each action, the communication templates to be used, and the timeline for each milestone (e.g., “initial customer notification within 24 hours of defect confirmation”). Conduct tabletop exercises at least twice a year, inviting legal, PR, logistics and quality teams, to test the effectiveness of the plan and uncover gaps.
Digital tools can dramatically accelerate recall execution. Implement QR‑code or RFID tagging on each pallet so that, at the moment a defect is detected, you can scan the tag and instantly retrieve the full traceability chain – supplier, batch, production date, and shipment details. This technology reduces the “search” phase of a recall from days to minutes, limiting product exposure and demonstrating to regulators that you have a proactive, technology‑enabled safety culture.
Monitoring Regulatory Change and Ongoing Compliance
Food‑contact regulations are a moving target; new scientific findings, political pressures, and trade agreements can shift permissible migration limits or ban entire material families overnight. Establish a dedicated regulatory‑watch function, either in‑house or through a specialist consultancy, that monitors official bulletins from the European Commission, the US FDA, and relevant national authorities. The watch should produce a monthly “regulatory impact memo” that flags any amendment, upcoming harmonisation deadline, or draft guidance that could affect your existing supplier base.
When a regulatory change is identified, run a gap analysis against your current product portfolio. The analysis must answer three questions: (1) Which SKUs are directly impacted? (2) What remediation actions are required (e.g., new migration testing, material substitution, label redesign)? and (3) What is the realistic timeline to achieve compliance given current supplier lead times? Document the findings in a “compliance remediation plan” and assign clear owners with measurable milestones.
Continuous compliance also means re‑testing at defined intervals, not just a one‑off certification. Set up a schedule that aligns with the supplier’s production cycles – for instance, every six months for high‑volume PET bottles, and annually for specialty ceramics. Use accredited third‑party laboratories that follow EN ISO 17025 standards, and retain the raw data in a secure, searchable repository. This systematic re‑testing creates a documented audit trail that can be presented to regulators during inspections, dramatically reducing the risk of enforcement actions.
Finally, integrate regulatory change management into your supplier‑performance scorecard. Allocate a KPI for “regulatory compliance drift” that penalises suppliers who fail to adapt within the agreed remediation window. By tying compliance directly to commercial incentives, you encourage suppliers to stay ahead of the curve, turning a potential liability into a competitive advantage for both parties.
