Food safety for Australian bakeries: allergen labelling (gluten, nuts, egg), cream and custard fillings, cooling large bakes safely, packaged-on-site labels…
A bakery's biggest food-safety risks are not the bread — they are the cream and custard fillings, the allergens baked into almost everything (gluten, egg, nuts, milk), and slow cooling of large, dense bakes. Cream- and custard-filled products are potentially hazardous and must generally be kept at 5°C or below. Get allergen declarations, temperature control and cooling right, and confirm your specific licensing and Food Safety Supervisor obligations with your local council and state food regulator. Key takeaways: Cream, custard, cheesecake and fresh-cream products are potentially hazardous foods — they should generally be kept at 5°C or below (or 60°C or above) and given a defined use-by date, unlike plain bread and most dry biscuits.. Almost every bakery product declares multiple allergens; under Plain English Allergen Labelling (mandatory since 25 February 2024) you must name the specific cereal containing gluten (e.g. wheat), tree nuts by name, egg and milk clearly, and control cross-contact from shared flour, benches and equipment.. Large, dense bakes (family pies, quiches, mud cakes, fruit loaves) cool slowly through the danger zone — a widely used approach is two-stage cooling: 60°C to 21°C within 2 hours, then 21°C to 5°C within a further 4 hours.. Food you make and package on site to sell from the same premises is generally exempt from a full label, but you must still be able to declare allergens; food packaged for wholesale or other retailers usually needs a complete label.. Most bakeries handling unpackaged potentially hazardous food will generally need to notify or be licensed, appoint a Food Safety Supervisor and meet Standard 3.2.2A food safety management tools — confirm the details with your council and state food regulator.. Why bakeries are a special case for food safety On the surface a bakery looks low-risk: baking at high temperatures destroys the pathogens people worry about most. The problem is what happens after the oven. A crusty sourdough is relatively safe, but the moment you add fresh cream, crème pâtissière (custard), cheesecake filling, ganache made with cream, or a savoury quiche or meat pie filling, you are handling potentially hazardous food that supports bacterial growth and needs strict temperature control. Bakeries also run enormous allergen loads — wheat flour is everywhere, and egg, milk, nuts, soy and sesame appear across the range — so cross-contact is a constant, distinctive risk. Add the reality that large, dense products cool slowly, and that most of what a bakery sells is unpackaged or packaged on site, and you have a sector with its own specific obligations rather than generic kitchen rules. Baking is a reliable kill step, but post-bake handling (filling, decorating, slicing) reintroduces risk. Cream, custard, cheesecake and cooked savoury fillings are potentially hazardous foods needing 5°C or below. Flour dust and shared equipment make allergen cross-contact a defining hazard. Large bakes cool slowly, and most products are sold unpackaged or packaged on site. Allergen labelling: gluten, nuts, egg and cross-contact Allergen management is arguably the single most important food-safety duty in a bakery because your products contain so many declared allergens and your customers actively ask about them. Under Standard 1.2.3 of the Food Standards Code and the Plain English Allergen Labelling (PEAL) requirements — mandatory since 25 February 2024 — allergens must be declared clearly and in specified plain-English terms. For bakeries this means naming the specific cereal containing gluten — usually 'wheat' rather than a vague 'gluten' — and declaring tree nuts by their specific name (for example almond, hazelnut, walnut), plus egg, milk, soy, sesame and any others present. Where a product carries a label, PEAL requires each allergen to appear in bold in the ingredient list and in a separate summary statement beginning with the word 'Contains'. Just as important is cross-contact: shared flour bins, mixers, benches, piping bags, cooling racks and slicers can transfer traces of nuts or gluten to a product that does not list them. Precautionary allergen labelling (for example 'may contain traces of tree nuts') should reflect a genuine, assessed risk — the VITAL program from the Allergen Bureau is the industry tool for making that call — and is never a substitute for good separation and cleaning. Name the specific cereal containing gluten (e.g. wheat) and each tree nut by name, not generic terms. Declare egg, milk, soy, sesame and other allergens present clearly and consistently. On labelled food, show allergens in bold in the ingredient list and in a 'Contains' summary statement. Control cross-contact from shared flour, mixers, benches, piping bags, racks and slicers. Use precautionary statements ('may contain…') only after a genuine risk assessment, not as a default. Keep an up-to-date allergen matrix so staff can answer customer questions accurately. Cream and custard fillings: potentially hazardous foods Fresh cream, crème pâtissière and custard, cheesecake, mousse, trifle, and cream-cheese frostings are potentially hazardous foods (PHF). They are moist, nutrient-rich and low in acid, so bacteria such as Staphylococcus aureus, Salmonella and Listeria can grow if they are left in the temperature danger zone (broadly between 5°C and 60°C). This is the risk that most clearly separates a bakery's finished-goods handling from a bread-only operation. Cream and custard products should be kept at 5°C or below in cold storage and refrigerated display, and any that are held hot (for example hot pies or savoury custards on display) should stay at 60°C or above. Prepare custards and creams in small batches, chill them quickly, and do not leave bowls of cream or custard sitting out on the bench during a busy morning. Because these products are perishable, they should carry a use-by date rather than a best-before date, and stock should be rotated so the oldest is so
How to run a food-safe bakery, step by step
List everything containing cream, custard, cheesecake, mousse, cream cheese, cooked meat or savoury egg fillings. These are your potentially hazardous foods and need temperature control, use-by dating and the tightest handling — separate them mentally from your bread and dry biscuits.
Create a grid of every product against the declared allergens it contains (naming the cereal containing gluten and each tree nut). Keep it current, train staff to use it, and make allergen information available to customers for unpackaged and on-site-packaged food.
Keep cream and custard products at 5°C or below in storage and display, and hold hot savoury items at 60°C or above. Make custards and creams in small batches, chill rapidly, and never leave them standing on the bench during service.
Cool cooked food from 60°C to 21°C within two hours and then to 5°C within a further four hours. Portion large pies, quiches and dense cakes into shallower containers, use a blast chiller if available, and verify with a calibrated probe.
For food made and packaged on site and sold directly, ensure allergens are declarable even if a full label is exempt. For anything supplied to other businesses, markets or online delivery, apply a full label with ingredients, allergen statement, date marking, lot ID and supplier details.
Clean then sanitise shared mixers, beaters, benches, piping bags and slicers, especially between nut and nut-free work. Store flour and dry goods sealed and off the floor, and keep a pest program running given the flour and sugar in the environment.
Check with your local council and state food regulator whether you need to notify or be licensed, appoint a Food Safety Supervisor and keep records under Standard 3.2.2A. Set up temperature, cooling and cleaning logs so you can substantiate your controls.
Frequently asked questions
Do cream cakes and custard slices need to be kept refrigerated?
Yes. Fresh cream, custard, cheesecake and similar fillings are potentially hazardous foods, so cream- and custard-filled products should generally be kept at 5°C or below in storage and refrigerated display. Bacteria grow readily in these moist, low-acid products if they sit in the danger zone. Give them a use-by date, rotate stock, and never leave them standing on the bench during service.
How should I declare gluten and nuts on bakery products?
Under Plain English Allergen Labelling you generally name the specific cereal containing gluten — usually 'wheat' — rather than a vague 'gluten', and you declare tree nuts by their specific name, such as almond or hazelnut. On labelled food, allergens must appear in bold in the ingredient list and in a separate 'Contains' summary statement. For unpackaged or on-site-packaged food, allergen information must still be available to the customer.
How do I cool a large batch of pies or a big cake safely?
A widely used approach is the two-stage cooling method in the FSANZ guidance to Standard 3.2.2: cool from 60°C to 21°C within two hours, then from 21°C to 5°C within a further four hours. Portion large or dense items into shallower containers, use a blast chiller if you have one, avoid covering food tightly while it is steaming, and check the centre with a calibrated probe rather than by touch.
Does bread I bag at the counter need a full label?
Generally no. Food you make and package on the premises and sell directly to the customer from the same premises is usually exempt from carrying a full label. However, you must still be able to declare allergen information, and for unpackaged displayed food that information must be available at the point of sale. Food packaged for other businesses, markets or online delivery generally does need a full label.
Does my bakery need a Food Safety Supervisor?
Most bakeries that prepare and sell unpackaged potentially hazardous food — such as cream cakes, custard slices, quiches and hot pies — will generally need to appoint a trained Food Safety Supervisor and meet food handler training and substantiation requirements under Standard 3.2.2A. A bread-only, shelf-stable operation may face lighter requirements. Because rules vary by jurisdiction, confirm your specific obligations with your local council and state or territory food regulator.
How do I stop allergen cross-contact in a busy bakery?
Cross-contact happens through shared flour, mixers, beaters, benches, piping bags, cooling racks and slicers. Control it by cleaning then sanitising shared equipment between allergen-containing and allergen-free work, scheduling nut-containing production separately where practical, storing ingredients to prevent spills, and keeping an accurate allergen matrix. Precautionary 'may contain' labelling should reflect a genuine assessed risk, not replace good separation and cleaning.