California Restaurants Now Have to List Allergens. That Is Not the Same as Safe.

Since the first of July, a large chain restaurant in California has had to tell you, in writing, which of the nine major allergens are in each thing on its menu. It is the first law of its kind in the United States. It passed 32–0 in the Senate and 66–1 in the Assembly, which almost nothing does.

And every single article written about it was written for the restaurant.

I went looking, because I wanted to know what it actually changed for the person eating. What I found was compliance-software marketing, a dozen law-firm client alerts explaining the exposure to operators, and one opinion column complaining about the cost that was published eight months before the law took effect. Nothing for the diner. So here is the diner’s version, and the short form is this: the menu now tells you more than it used to, it is genuinely worth having, and it still cannot tell you whether that kitchen is safe for you.

Those are two different questions. The law only answers one of them.

What the law actually does

SB 68 — the ADDE Act — took effect 1 July 2026. If a restaurant is part of a chain with twenty or more locations trading under the same name and serving substantially the same menu, it now has to disclose, for each menu item, any of the nine major allergens it knows or reasonably should know are in there as ingredients. Milk, eggs, fish, crustacean shellfish, tree nuts, peanuts, wheat, soybeans, sesame.

Franchises count. The threshold is about the name over the door and the menu inside, not who owns the building, so an independently owned franchise of a big chain is covered.

The restaurant can do this on the printed menu, with the disclosure sitting under or beside each item — or it can put it behind a QR code and a digital menu, in which case it also has to offer something for people who cannot or will not use a phone: a separate allergen menu, a chart, a grid, a booklet. It is a choice of route, not a requirement to do all of them. Menu boards count as menus. Daily specials and anything running fewer than sixty days a year do not, which is a real gap and worth knowing about, because the specials board is exactly where a kitchen improvises.

Enforcement is your county health department, and the penalty sits in the general Retail Food Code misdemeanour band — twenty-five to a thousand dollars, or up to six months. Notice what an inspector is actually checking: the statute says they can use “visual verification of allergen disclosure,” meaning they confirm the statements are displayed. Not that they are correct.

The part nobody put in the headline

I read the enacted text looking for a particular set of words. Cross-contact. Shared equipment. Shared fryer. May contain. Trace.

None of them are in it. Not one.

The duty is limited, in the statute’s own words, to allergens “contained as ingredients in each menu item.” That is a sentence about a recipe. It is not a sentence about a kitchen. The organization that sponsored the bill says so plainly in its own guidance for families — restaurants will not be labelling for potential cross-contact — and they are right to say it out loud, because the gap between those two things is where people actually get hurt.

So a compliant menu tells you what went into the bowl. It tells you nothing about the fryer that bowl’s contents came out of, the grill they were cooked on, the board they were cut on, the tongs, or the flour that has been hanging in the air of that kitchen since the morning prep. Gluten does not cook off. Hot oil does not destroy it — a shared fryer transfers it perfectly well. Beyond Celiac puts the airborne figure at twelve to twenty-four hours depending on ventilation, which is a long time to be the last order of the night and still be eating yesterday’s bread.

There is also no verification requirement anywhere in the law. No supplier audit, no ingredient re-check when a recipe changes, no records. The standard is what the restaurant knows or reasonably should know. A “no wheat” marking is a statement of belief by the person who wrote the menu, and it is worth exactly as much as that person’s attention on the day the supplier switched.

Wheat is not gluten, and this is the one that will get somebody

Here is the sharpest edge in the whole thing, and I have not seen it explained anywhere.

The nine major allergens include wheat. They do not include gluten. Barley and rye are not major food allergens under this law and never have been.

Which means a dish made with barley malt — in the stock, in the sauce, in the marinade, in the beer someone deglazed with — is fully compliant with an allergen disclosure that says nothing about gluten at all. The menu is not lying to you. The menu is answering a different question than the one you asked. If you have celiac disease, the disclosure you are reading was not designed for you, and reading it as though it were is the specific mistake this law makes newly easy to make.

Highly refined oils are carved out too. Peanut oil does not trigger a peanut disclosure.

What is actually law where

California is the only state in the country where a restaurant has to tell you which allergens are in a specific dish. That is worth being precise about, because there is a lot of confident writing that gets it wrong.

New York signed an allergen law in November 2025 and it takes effect this November — but it is a law about prepackaged food. The sandwich in the deli case, the tray from the bakery counter, the thing with a lid on it in the cooler. It does not touch the menu you order from at a table. The New York bill that would do what California did is S10116, and as of today it is sitting in a Senate committee where it was introduced in April. It is not law. It may not become law.

Massachusetts, Rhode Island, Michigan, Virginia, Maryland and Illinois all have allergen laws on the books, and every one of them is a training-and-poster law: staff education, a manager who has done a course, a notice in the back of house, a line on the menu asking you to tell your server. Useful. Not disclosure.

Bills that would copy California are moving in Michigan, New Jersey and Maryland. None has passed. New Jersey’s is the interesting one, because it drops the twenty-location threshold entirely and would catch every food business in the state, and New York’s would close the specials gap that California left open.

The reason none of this existed until this year, by the way, is that federal allergen labelling has never applied to restaurant food. It applies to packages. The FDA is unusually direct about it: the rules do not reach food “placed in a wrapper or container following a customer’s order at the point of purchase.” A shrink-wrapped sandwich in a cooler is federally labelled. The identical sandwich made for you at the counter is not, and never has been.

About that one-in-three number

You may have seen it. A 2019 study in the American Journal of Gastroenterology analyzed 5,624 tests submitted by 804 people using a portable gluten sensor, and found that 32% of restaurant foods labelled gluten-free tested positive for gluten. Pizza and pasta were the worst, both above half.

It is a real study, peer reviewed, and it is the best number anyone has. It also cannot carry the weight people put on it, and the authors say so themselves.

The device flags gluten below twenty parts per million, which is the legal threshold for calling something gluten-free — so a positive result does not mean the food broke the standard, and the lead author has said directly that a “gluten found” reading does not necessarily mean unsafe for celiac disease. The sampling is a pea-sized piece of one part of one plate. And the data is crowd-sourced, which means the people testing were the people who already suspected a problem. That is not a random sample of American dinners.

What it supports is this: gluten turns up in gluten-free-labelled restaurant food far more often than a diner would assume from the label. What it does not support is one in three meals being dangerous. Both of those matter, and the second one gets quoted far more than the first.

It is also seven years old and predates every law in this piece. Nobody has run it again.

What to ask, since the menu will not tell you

These are not mine. They come from the organizations that do this work, and I am reproducing them because they are better than anything I would invent.

The Celiac Disease Foundation’s list is the most useful thing I found, largely because of one question nobody thinks to ask: do you know what gluten is — if yes, what is it? The answer tells you more in four seconds than the rest of the conversation. Then: is there a dedicated fryer, or do you change the oil. Do you clean the grill before gluten-free food. Are there separate boards and utensils. Is the oil for the fries also used for breaded things.

FARE’s version, for calling ahead: are you willing to try to serve me, how often do you train staff, is there a separate prep area, are there separate boards and utensils, can I look at ingredient labels, and — the one that quietly decides everything — will you be there when I am. Their standing advice for the table is blunter than most: avoid grilled and fried food unless you can confirm your allergen is not cooked on the same grill or in the same fryer.

Every one of those is a question about the kitchen. Not one of them is answered by the disclosure the law now requires. That is not an argument against the law. It is an argument for reading it as what it is.

The thing nobody has done

Two months after the first allergen-disclosure law in the country took effect, I cannot find any evidence that anybody has gone and looked.

No survey. No spot check. No health-department data. No mystery shopping, no complaint counts, no journalism. The state health department’s page on SB 68 has no enforcement section at all. What exists instead is a compliance-software industry that grew up around the deadline and a set of advocacy quotes from two days before it, all phrased as hope — our hope is that from July 1, people will notice a difference.

Maybe they did. Nobody checked.

I am not in California, so I am not the right person to walk twenty menus and count. But it is the most answerable open question in the whole subject, it would take one person one afternoon in one city, and as far as I can establish it would be the first time anyone had measured it.

What I would actually do with this

Use the disclosure for what it is good at. It is a fast filter. It will tell you, before you sit down, that four of the six things you were considering contain dairy, and that is genuinely new and genuinely useful and it took a law to get it.

Then ask the kitchen questions anyway, because the menu was never going to answer them, and now it looks like it might.

That is the failure mode I would watch for in the next year — not restaurants ignoring the law, but diners reading a compliant menu as a safety statement and asking one fewer question than they used to. A disclosure that makes people feel informed is more dangerous than no disclosure at all, if it is answering the wrong question.

When we build restaurant files at Deep Dish, a place that has never published its cross-contact practice gets a blank field and a question for you to ask at the door, rather than a reassuring sentence we made up. That is the same principle as this whole piece. A blank on a menu means nobody said. It has never meant it is not in there.

If you are the one cooking rather than the one ordering, the same distinction runs through hosting: a dietary category is a planning filter, and cross-contact is a surface-and-handling problem in one specific kitchen on one specific night.

I am not a lawyer and not a clinician, and nothing here is medical or legal advice — if a reaction is a medical risk for you, the people to trust are your allergist and the person actually cooking. Sources: California SB 68 as chaptered (Health & Safety Code §114093.5) and the California Department of Public Health’s SB 68 page; 21 CFR 101.11 for the chain-coverage definition; New York S5381-B (Ch. 494 of 2025) and S10116; the FDA’s food allergies guidance for the federal baseline and the nine allergens; FARE and Beyond Celiac on cross-contact; the Celiac Disease Foundation and FARE for the questions; and Lerner et al., “Detection of Gluten in Gluten-Free Labeled Restaurant Food,” American Journal of Gastroenterology, 2019, for the 32% figure and its limitations. Read on 3 September 2026. If something here has changed since, tell me and I will correct it.

Part of Restaurant Records.