A bread tray that touches packaged food in a commercial distribution chain is a food-contact article under both FDA and EU regulatory frameworks. That classification triggers a set of requirements that begin at material composition and extend through manufacturing controls, supplier qualification, ongoing compliance documentation, and in-use audit obligations. The requirements are not identical across jurisdictions: FDA regulates under 21 CFR, the EU under Regulation 1935/2004 and its implementing measures, and the practical differences in testing methods, migration limits, and documentation expectations are significant enough to affect sourcing decisions. Beyond government regulation, large bakery operations and their retail customers layer additional requirements: third-party certifications like BRC Packaging, SQF, or specific retailer compliance programs that mandate supplier audits, lot traceability, and corrective action protocols. Getting a tray approved is the beginning. Keeping it approved across its service life, especially when the tray circulates through a shared pool that contacts multiple product categories, requires ongoing discipline.
FDA and EU Food-Contact Material Regulations That Apply to Tray Sourcing
The regulatory framework for food-contact bread trays starts with a classification question: does the tray make direct contact with food, or does it contact only the food’s packaging. In most bread distribution operations, the tray contacts the outer surface of a sealed poly bag, not the bread itself. This distinction matters because direct food-contact and indirect food-contact articles face different regulatory requirements in some jurisdictions, though both are regulated.
Under US FDA regulations, food-contact materials are governed primarily by Title 21 of the Code of Federal Regulations (21 CFR), Parts 170 through 199. HDPE used in food-contact articles falls under 21 CFR 177.1520, which lists olefin polymers as suitable for food-contact use subject to specific conditions. The regulation defines acceptable polymer types, permitted additives (antioxidants, UV stabilizers, colorants, processing aids), and maximum extractable limits under specified test conditions. For a bread tray, the relevant test conditions correspond to the intended use: ambient temperature, aqueous and fatty food contact (or in the case of bread trays contacting only packaging, the conditions simulating that secondary contact). The manufacturer must demonstrate that the finished article, including all additives and colorants, meets the extractable limits under these conditions.
The FDA framework also addresses food-contact notification (FCN) for substances not already listed in the regulations. If a tray manufacturer uses an additive, colorant, or processing aid not covered by existing 21 CFR listings, a food-contact notification must be filed with FDA and receive a no-objection response before the article can be legally marketed. This applies particularly to novel UV stabilizer packages, antimicrobial additives, and some recycled-content formulations.
In the European Union, the framework regulation is Regulation (EC) No. 1935/2004, which establishes general safety requirements for all food-contact materials: they must not transfer constituents to food in quantities that could endanger human health, cause unacceptable changes in food composition, or deteriorate the organoleptic properties of food. For plastics specifically, Regulation (EU) No. 10/2011 (the Plastics Implementing Measure, or PIM) sets specific migration limits (SMLs) for individual substances and an overall migration limit (OML) of 10 mg/dm² for total migration.
The EU PIM maintains a positive list of authorized monomers, additives, and polymer production aids. Only substances on this list may be intentionally used in food-contact plastics. Each substance has a specific migration limit based on its toxicological profile. HDPE itself is authorized, but every additive in the formulation, every colorant pigment, every UV stabilizer, must also be on the positive list and within its SML. The testing must be performed under conditions that simulate the worst-case intended use of the article.
A critical practical difference: the FDA system is largely self-certified. The manufacturer determines compliance based on its own testing and records, and FDA enforces through post-market inspection and enforcement action. The EU system requires a Declaration of Compliance (DoC) from the manufacturer that accompanies the article through the supply chain, and enforcement authorities in member states can request supporting documentation at any point. For a bakery sourcing trays, this means EU-bound trays require more extensive documentation from the supplier, and the documentation must be maintained and updated throughout the article’s commercial life.
The indirect-contact question is worth specific attention for bread trays. When the tray contacts a sealed poly bag rather than the bread itself, the migration pathway is tray surface to bag exterior to bag interior to bread. The EU PIM accounts for this through the functional barrier concept, but the concept is designed for multilayer packaging, not for tray-to-bag contact scenarios. In practice, most regulatory guidance treats the bread tray as a food-contact article regardless of whether it touches the food directly, because the bag is not an engineered functional barrier designed to prevent migration from the tray. The safe approach, and the one most retailers and auditors expect, is to treat the bread tray as a direct food-contact article and specify accordingly.
In the United States, the Food Safety Modernization Act (FSMA) adds a transport-specific layer through its Sanitary Transportation of Human and Animal Food Rule. This rule requires shippers, carriers, and receivers to take steps to prevent practices during transportation that create food safety risks, including contamination from equipment that contacts food or food packaging. Returnable bread trays fall squarely within scope: they are equipment used during transportation that contacts food packaging. The rule requires that vehicles and transportation equipment, including reusable containers, be maintained in a sanitary condition adequate to prevent the food from becoming adulterated. For bread tray operations, this means the wash protocol, the inspection criteria, and the documentation that demonstrates adequate sanitation must satisfy FSMA requirements, not just food-contact material composition requirements. An FSMA audit may evaluate the tray’s wash cycle validation records, the sanitizer efficacy documentation, the tray inspection and retirement protocols, and the corrective action procedures when a contaminated tray is identified. The bakery’s compliance program must integrate FSMA transportation requirements with the material compliance requirements under 21 CFR, because an auditor may evaluate both simultaneously.
Third-Party Certifications Bakeries Require When Qualifying a New Supplier
Government regulation sets the legal floor. Third-party certification programs raise the bar by requiring documented management systems, process controls, and audit accountability that go beyond the regulatory minimum.
BRC Global Standard for Packaging and Packaging Materials is the most widely required third-party certification for bread tray suppliers serving the UK and European markets. BRC Packaging requires the supplier to maintain a documented food safety and quality management system, conduct hazard analysis of the manufacturing process, control raw material sourcing and traceability, maintain hygiene standards in the production environment, and submit to annual third-party audits. The certification is graded (AA, A, B, C, D), and many bakeries specify a minimum grade (typically A or higher) as a supplier qualification requirement.
SQF (Safe Quality Food) certification is more prevalent in North American supply chains. SQF for packaging suppliers covers similar ground: food safety plans, process controls, traceability, and supplier management. The certification levels (1, 2, 3) correspond to increasing rigor, with Level 2 (food safety plan) being the typical minimum for bread tray suppliers and Level 3 (food safety and quality management) required by some large bakery operations.
ISO 22000 provides a food safety management system framework that is recognized internationally. While less commonly specified as a standalone requirement for tray suppliers than BRC or SQF, ISO 22000 certification demonstrates that the supplier operates a structured food safety management system and can facilitate qualification with bakeries that operate across multiple international markets.
Retailer-specific compliance programs add requirements beyond the generic third-party certifications. Major grocery retailers maintain their own supplier compliance standards that may include specific migration testing requirements, material declaration forms, allergen management protocols for shared tray pools, and corrective action response time commitments. These programs are not standardized across retailers, and a tray supplier serving multiple retail channels may need to satisfy several overlapping but non-identical compliance programs simultaneously.
The qualification process for a new tray supplier typically includes: verification of current third-party certification status, review of food-contact compliance documentation (FDA letters, EU Declaration of Compliance, migration test reports), a supplier audit (either conducted by the bakery’s quality team or accepted from a recognized third-party audit body), submission of material safety data sheets for all chemicals in the tray formulation, and a sample evaluation that includes dimensional inspection, stacking and nesting performance, and wash compatibility testing.
How Regulatory Standards Differ Across North American and European Markets
The structural difference between FDA and EU regulation is not just the specific limits and test methods. It is the philosophy of compliance assurance and the documentation burden on the supply chain.
The FDA operates on a principle of manufacturer self-determination. The manufacturer evaluates its product against the applicable regulations, maintains records of that evaluation, and markets the product without pre-market approval (except for food-contact notifications for novel substances). The FDA can inspect manufacturing facilities, request documentation, and take enforcement action if a product is found to be non-compliant, but there is no pre-market gate that every product must pass through.
The EU operates on a principle of documented compliance that travels with the product. The Declaration of Compliance is a legal document that the manufacturer issues for each product, stating that the product meets all applicable EU requirements. The DoC must be available to enforcement authorities at any point in the supply chain, and the supporting documentation (migration test results, formulation records, positive list verification) must be maintained and accessible. The manufacturer, the importer, and the distributor each have obligations to ensure compliance and to make documentation available on request.
The migration testing requirements differ in specifics. The EU specifies particular food simulants (ethanol solutions, acetic acid solutions, vegetable oil) at particular time-temperature conditions for each intended use category. The FDA specifies extraction conditions that may differ from the EU simulants. A tray that passes EU migration testing may need separate testing under FDA conditions, and vice versa, because the test methods are not mutually recognized.
The additive authorization systems differ fundamentally. The EU positive list is an explicit inventory: if a substance is not on the list, it cannot be used. The FDA system combines explicit listings (21 CFR Parts 170-199), food-contact notifications for novel substances, and a “threshold of regulation” exemption for substances present at very low levels. A substance that is authorized under the FDA system may not be on the EU positive list, requiring the manufacturer to maintain separate formulations or to ensure that every substance in the formulation is authorized under both systems.
Ongoing Compliance Documentation and Audit Requirements for Trays in Active Use
Initial compliance qualification gets the tray into the system. Ongoing compliance keeps it there. The documentation and audit requirements for trays in active use are more demanding than many bakeries realize when they first enter the reusable tray business.
The Declaration of Compliance (EU) or compliance file (FDA) is a living document that must be updated whenever the tray formulation changes. A reformulation that substitutes one UV stabilizer for another, adds a recycled content fraction, or changes the colorant system triggers a re-evaluation of the compliance documentation. If the new formulation introduces a substance not covered by the existing documentation, new migration testing may be required before the reformulated tray can enter the food-contact supply chain.
Lot traceability requires the ability to trace each tray back to its production lot, which connects to the resin lot, the additive lots, and the production conditions. In the event of a compliance question or a recall, the bakery must be able to identify which trays are affected and where they are in the distribution network. For reusable trays circulating in a large pool, this traceability is challenging because trays from different production lots are mixed in the field. The practical solution is to maintain traceability at the production lot level and, if a compliance issue arises, recall or quarantine all trays from the affected lot.
Periodic re-testing is required by some third-party certification programs and by some retailer compliance programs. The re-testing interval varies: annually for some programs, every two to three years for others, and on a triggered basis (after formulation changes or supplier audit findings) for most. The re-testing typically includes migration testing under the specified conditions and mechanical property verification to confirm that the tray continues to meet the original specification.
Audit frequency depends on the certification program and the supplier’s risk rating. BRC-certified suppliers are audited annually. SQF-certified suppliers are audited annually or semi-annually depending on certification level and previous audit findings. Retailer-specific programs may require additional audits, either announced or unannounced, on their own schedule. Each audit generates findings that require corrective actions, and the corrective action closure timeline is typically 28 to 90 days depending on the severity of the finding.
How Regulatory Changes Propagate Into Existing Supply Agreements and Procurement Specs
Regulatory frameworks are not static. New substances are added to or removed from positive lists. Migration limits are revised as new toxicological data becomes available. Testing methods are updated to reflect current scientific understanding. Each regulatory change potentially affects existing tray formulations and existing supply agreements.
When a substance on the EU positive list receives a revised specific migration limit, every tray formulation containing that substance must be re-evaluated. If the new limit is more restrictive than the previous one, and the tray’s migration of that substance exceeds the new limit under the specified test conditions, the tray formulation must be changed or the tray must be withdrawn from the market. The timeline for compliance with new limits varies by regulation but is typically 12 to 24 months from publication, during which the supplier must reformulate, re-test, and update all documentation.
Supply agreements should include a regulatory change clause that defines the responsibilities of the tray supplier and the bakery when regulatory changes affect the tray specification. The clause should specify: who is responsible for monitoring regulatory changes (typically the supplier, but the bakery should have its own monitoring process), how quickly the supplier must notify the bakery of a change that affects the tray, who bears the cost of reformulation and re-testing, and what happens to trays already in the field that do not meet the new requirements (gradual phase-out, immediate withdrawal, or continued use under a grandfathering provision if one exists).
The procurement specification should be written to reference the applicable regulations by number rather than by specific limits, so that when limits change, the specification automatically incorporates the change without requiring a formal amendment. A specification that says “compliant with 21 CFR 177.1520 as amended” adapts to regulatory changes; a specification that says “overall migration not to exceed 10 mg/dm²” does not adapt if the limit changes.
Liability and Recall Implications When a Tray in Active Distribution Fails a Compliance Test
A compliance failure on a tray in active distribution triggers a cascade of risk management decisions that extend far beyond the tray itself.
If a migration test on an in-service tray reveals that a substance exceeds its specific migration limit, the immediate question is whether the exceedance represents a health risk. The answer depends on the magnitude of the exceedance, the toxicological profile of the substance, the actual exposure scenario (how much product contacts the tray, for how long, at what temperature), and the margin of safety built into the migration limit. Migration limits are set with conservative safety factors, and a modest exceedance of a limit does not necessarily indicate a health risk. But the regulatory framework does not distinguish between “over the limit” and “dangerous”: over the limit is non-compliant, and non-compliance requires action.
The action options range from voluntary withdrawal (the bakery or supplier removes the affected trays from service and replaces them), to notification of the regulatory authority (required in some jurisdictions when a non-compliant food-contact article is identified in the market), to product recall (if the non-compliance is assessed as creating a health risk to consumers who purchased product that was in contact with the tray). The recall option is the most disruptive and expensive, and the decision to recall is typically made in consultation with regulatory counsel based on the specific facts.
The liability chain for a compliance failure runs from the resin supplier (who supplied the raw material) through the tray manufacturer (who formulated and molded the tray) to the bakery (who placed the tray in food-contact service) to the retailer (who received product that was transported in the non-compliant tray). Each party’s liability depends on their role, their knowledge, and their due diligence. A bakery that specified compliance, verified certification, and maintained documentation has a stronger defense than one that purchased on price without compliance verification.
The insurance implications are significant. Product liability insurance for food-contact articles typically covers the cost of recalls, product replacement, and third-party claims arising from non-compliant packaging. The premium and coverage terms depend on the bakery’s compliance program: a well-documented program with regular testing, supplier qualification, and traceability reduces risk and premium cost; a weak program increases both.
How Allergen Cross-Contact Risk From Shared Tray Pools Creates Additional Compliance Requirements
Shared tray pools, where trays circulate among multiple bakeries or carry multiple product categories within a single bakery, introduce allergen cross-contact risk that adds a layer of compliance requirements beyond the material composition and migration standards.
A bread tray that carries a product containing wheat, soy, milk, eggs, or tree nuts (common allergens in bakery products) and then, after washing, carries a product marketed as free from one of those allergens, creates a cross-contact risk if the wash process does not remove allergenic residues from the tray surface. The risk is not theoretical: studies have demonstrated that baked-on protein residues can survive standard commercial wash cycles if the wash parameters (temperature, detergent concentration, mechanical action) are insufficient for protein removal.
The regulatory framework for allergen management in food-contact articles is less developed than the framework for chemical migration, but the practical requirements are driven by food safety regulations that prohibit undeclared allergens in food products. If a consumer with a milk allergy reacts to a bread product that was transported in a tray previously used for milk-containing products, the bakery faces liability regardless of whether the tray’s chemical migration is within limits.
The compliance response includes: allergen-dedicated tray pools (separate trays for allergen-containing and allergen-free products, identified by color or marking), validated wash procedures that demonstrate allergen removal to below the detection threshold, and swab testing protocols that verify allergen clearance on trays returning from wash.
The cost of allergen management in shared tray pools is significant: maintaining separate pools increases pool size, dedicated wash cycles reduce throughput, and testing adds labor and consumable cost. The alternative, accepting the cross-contact risk and managing it through product labeling (“may contain” statements), is commercially costly because “may contain” labels reduce the product’s market to consumers without the relevant allergy, excluding those with allergies who are an increasingly valuable consumer segment.
Compliance is not a certificate on the wall. It is an ongoing obligation that follows the tray from mold to retirement. The cost of compliance is visible and budgetable. The cost of non-compliance, a failed audit, a recall, a liability claim, is unpredictable and disproportionate. The most common compliance failure in bread tray programs is not a material defect at procurement; it is a documentation gap or an allergen cross-contact event that surfaces years later in a pool that has grown beyond its original scope.