Hotel buffet and suspected unsafe food: Articles 18 and 19 of Regulation (EC) No 178/2002 on traceability, withdrawal, notice and recall.
Mag. Bernhard Brandauer, Austrian attorney-at-law
BRANDAUER Rechtsanwälte
Mag. Bernhard Brandauer assists with the legal assessment of tourism contracts, operating issues, levies and liability matters.
A suspicion that food is unsafe triggers a specific response chain at a hotel or restaurant. Article 18 of Regulation (EC) No 178/2002 requires traceability. Article 19 requires the food business operator, once it knows or has reason to believe that food is unsafe, to assess withdrawal, notice to the authorities and, where guests may have been reached, consumer information and any necessary recall.
This article addresses the public-law response to potentially unsafe food after a buffet, breakfast or another service. It is aimed at hotels, restaurant management and kitchen supervisors. Allergen information before service, general kitchen hygiene, an individual allergic reaction and compensation claims require separate assessment.
Classify the suspicion, the flow of goods and the people already reached. The check highlights the records and steps that should be secured first.
Choose the situation that best describes the event at the business.
Secure the supplier notice, batch marking and stock on hand. Check which food remains under the business operator's immediate control and which businesses or guests may already have received it. Inform the competent authorities where Article 19 is triggered and document the communication.
Separate the suspected food from the remaining stock, secure batch and supplier records, and establish whether the food has already left the operator's immediate control. If the operator knows or has reason to believe that food is unsafe, the procedures under Article 19 must be assessed without delay.
Establish which guests or recipients may have received the food and how they can be reached effectively and accurately. Article 19(1) requires information about the reason for withdrawal where consumers may have received the product. Products already supplied must be recalled where other measures do not ensure a high level of health protection.
Where food may harm human health, notify the competent authorities without delay. State which withdrawal, blocking or information measures have already been taken. The business does not replace medical assessment, but it must disclose the available facts and the flow of the food.
Record the report in its original wording and with the time received. Link supplier, food, batch, menu and service time. Incomplete information does not justify a public claim, but it must not delay traceability or the assessment of whether the authorities must be informed.
Article 19(1) applies when the food business operator knows or has reason to believe that food it imported, produced, processed, manufactured or distributed does not comply with food-safety requirements. Management should therefore record what is known, where the information came from and which food or batch may be affected.
An unclear complaint, unusual taste or supplier message does not answer every legal question. It may still require an immediate stock and distribution check. The kitchen should stop serving the affected food until it is classified. Internal safeguarding is not the same as a public finding of fault.
The distinction from allergen information lies in the timing and legal trigger. Allergen information concerns information available before or at the service of unpackaged food. This article concerns food that may be unsafe and may already be in circulation. The article on oral allergen information covers the earlier organisational duty.
Article 18 requires traceability at all stages of production, processing and distribution. A hotel must therefore be able to identify who supplied a food or a substance intended for food production. It must also be able to identify the businesses to which a product was supplied where it passed to another operator.
The operator must establish systems and procedures through which this information can be made available to the competent authorities on request. In a buffet operation, the responsible person needs quick access to supplier, product, batch or other marking, delivery date, quantity and storage location. For food prepared on site, recipe, preparation time and service time help connect the product to the event.
Traceability is not a search that starts only after an authority request. It should describe the flow of goods during normal operations. The business documents checklist can help structure delivery records, menu planning, production records and the documentation of a particular service.
Where the product may already have reached consumers, Article 19(1) requires effective and accurate information about the reason for the withdrawal. A hotel may need to use service dates, dishes, batches or recipient records to narrow down who may have been affected. A general notice without a usable product and time description may not provide sufficient information.
Products already supplied must be recalled where necessary. Under Article 19(1), this is required where other measures are insufficient to achieve a high level of health protection. Whether a recall is required depends on the product, risk, reach, shelf life and the ability to contact recipients. The decision should be coordinated with the competent authority and recorded.
A breakfast buffet where food was consumed on site may require a different response from packaged food that guests could take away or that was delivered to another business. The records should distinguish these scenarios. A completed service must neither be hidden nor exaggerated without factual support.
If the operator knows or has reason to believe that food placed on the market may be injurious to human health, Article 19(3) requires immediate notice to the competent authorities. The operator must also inform the authorities about measures taken to prevent risks to the final consumer.
For management, this means that possible harm must not wait for the end of an internal cause investigation. The operator can describe the assessment as preliminary and provide further information later. The time of knowledge, current stock, possible recipients and protective measures already taken are important.
Medical assessment belongs to the competent health services. The business should record complaints or reports factually, without diagnosing a person or assigning a cause. The hospitality business topic page provides broader context for trade and operating duties.
Article 19(2) addresses food business operators in retail or distribution where their activity does not affect packaging, labelling, safety or integrity. Within their activities they must initiate withdrawal, pass on relevant information needed for traceability and cooperate with measures taken by producers, processors, manufacturers or authorities.
A hotel can combine several roles. It may buy ingredients, prepare food, distribute packaged products or serve food supplied by another business. Responsibility cannot therefore be assigned from the label hotel or restaurant alone. The relevant questions are the actual activity and who controlled the food at the relevant time.
Article 19(4) requires food business operators to cooperate in measures preventing or reducing risks from food they supply or supplied. Supplier and hotel should use the same product and batch descriptions. Different names in kitchen records, delivery notes and the authority notice can make traceability unnecessarily difficult.
The first review needs a timeline. Record supplier and delivery date, food and batch, storage location, recipe or menu name, production time, service time, quantity and whether leftovers remain. At a buffet, changes to the menu and the service location should also be recorded.
The recipient side is equally important. State whether the food was served only on site, provided as a packed meal, sent to a sister property or taken over by an external business. The record should distinguish established facts from estimates.
Records should be protected from alteration and limited to information that is required. Guest names should appear only where they are genuinely needed for information or traceability. The article on house rules and conflict records concerns a different incident, but its chronological approach can help separate observation, response and communication.
Allergen information before serving unpackaged food is governed by the Austrian Allergen Information Regulation. It requires available information, a visible notice where oral information is offered, trained staff and documentation. Those duties do not automatically answer whether food later suspected to be unsafe must be withdrawn or recalled.
General kitchen hygiene, cleaning, temperature control and internal checks may be relevant to safety. This article is not a technical hygiene manual. It also does not decide an individual guest's compensation claim. Injury, causation, fault and other legal requirements must be assessed separately.
When there is a concrete suspicion, management should first secure the flow of goods, involve the competent authority and keep the communication traceable. The remaining technical or civil-law questions can then be identified on a reliable factual basis.
Key point: Article 18 requires an available system identifying suppliers and businesses supplied. Under Article 19, a substantiated suspicion requires immediate assessment of withdrawal and notice to the authorities. If consumers may have received the food, they must be informed effectively and accurately, and a recall is required where other measures do not provide sufficient health protection. Where health may be harmed, the authorities must be informed immediately about the risk and protective measures.
Classify trade, operating facilities and day-to-day hospitality duties.
Review the separate information duties for unpackaged food.
Structure delivery records, timelines and documents for a review.
Record a separate guest-contact incident in a clear chronology.
Briefly describe the business, location, parties and issue. We will discuss which documents and next review step may be useful.
Address
BRANDAUER Rechtsanwälte GmbH Giselakai 51 5020 Salzburg
Phone
+43 662 6280000