Hi Konstantinos,

Your post feels somewhat like an exam question where you are asked how many non-conformances you can find!
The sort answer is the supplier is paying complete disregard to allergen management and should be delisted and a new supplier found. At a push consider keeping the supplier if they switch to the dedicated gluten-free (GF) production line but this would be out of desperation given their attitude to allergen management.
Regarding advice and references, as you are in the UK here are some links provided to information provided by the Food Standards Agency. There are also some links for Codex Alimentarius, BRCGS, FSSC22000 and SQF.
FSA Precautionary allergen labelling includes:
When precautionary allergen labelling should be used
When precautionary allergen labelling should not be used
Allergen cross-contamination
Minimising risk of allergen cross-contamination
Risk analysis for allergen cross-contamination
Conducting a risk assessment for allergen cross-contamination
Managing unintended allergens in food manufacturing
Managing unintended allergens i the supply chain
Allergen management resources for food businesses
FSA Food allergen labelling and information requirements technical guidance includes:
Food allergen labelling and information requirements technical guidance: Summary
Food allergen labelling and information requirements technical guidance: Introduction
Food allergen labelling and information requirements technical guidance: General background on allergens
Food allergen labelling and information requirements technical guidance: Part 1: Guidance for businesses providing prepacked food
Food allergen labelling and information requirements technical guidance: Part 2: Guidance for businesses providing non-prepacked food
Food allergen labelling and information requirements technical guidance: Part 3: Guidance for businesses providing food prepacked for direct sale
Food allergen labelling and information requirements technical guidance: Enforcement of the measures
Food allergen labelling and information requirements technical guidance: Glossary of terms used
Food allergen labelling and information requirements technical guidance: References and Resources
Food allergen labelling and information requirements technical guidance: Relevant Legislation
Food allergen labelling and information requirements technical guidance: Review and contacts
A Precautionary Allergen Labelling statement or information [such as ‘may contain’] should only be provided with prepacked or non-prepacked foods if an unavoidable risk of allergen cross-contamination has been identified following a risk assessment that cannot be sufficiently controlled through controls, such as segregation and cleaning.
Its use is not a substitute for good food hygiene and safety practices, and it could be considered misleading food information if it does not convey a real risk to the consumer. A checklist to understand when and how to apply precautionary allergen labelling to food product is provided in this FSA guidance.
Codex Alimentarius Code of Practice on Food Allergen Management for Food Business Operators CXC 80-2020
4.1.2 Equipment - 4.1.2.1 Manufacturing
Food manufacturing facilities commonly handle multiple allergens, frequently on the same equipment. Ideally these facilities would be designed to use processing lines dedicated to food with specific allergen profiles and where feasible, manufacturers should consider the use of dedicated lines, however, this is not feasible in all cases.
Production sequencing (i.e. separation by time) should be considered as an option, especially for small businesses. An analysis of the process, including the equipment design, should be conducted to determine the likelihood of allergen cross-contact and whether dedicated processing lines, equipment redesign, or other control measures are needed to prevent or minimise allergen cross-contact.
BRCGS - 5.3 Management of allergens
Fundamental
The site shall have a system for the management of allergenic materials which minimises the risk of allergen contamination (cross-contact) of products and meets legal requirements for labelling in the country of sale.
Clause 5.3.4:
Procedures shall be established to ensure the effective management of allergenic materials to prevent cross-contamination (cross-contact) of products not containing the allergen.
FSSC 22000 Additional Requirements Version 6 - 2.5.6 Management of Allergens (All Food Chain Categories)
Requirements for a documented allergen management plan that includes:
a) A list of all the allergens handled on site
b) Risk assessment covering all potential sources of allergen cross-contamination
c) Identification and implementation of control measures
d) Validation and verification of these control measures
e) Precautionary or warning labels only used where the outcome of the risk assessment identifies allergen cross-contamination as a risk to the consumer, even though all the necessary control measures have been implemented.
SQF Food Safety Code - 2.8.1 Allergen Management (Mandatory)
2.8.1.1 The responsibility and methods used to control allergens and to prevent sources of allergens from contaminating product shall be documented and implemented.
2.8.1.4 Where allergenic material may be intentionally or unintentionally present cleaning and sanitation of product contact surfaces between line changeovers shall be effective, appropriate to the risk and legal requirements, and sufficient to remove all potential target allergens from product contact surfaces, including aerosols as appropriate, to prevent cross-contact.
Separate handling and production equipment shall be provided, where satisfactory line hygiene and clean-up or segregation are not possible.
Kind regards,
Tony