FCA authorised · FRN 724952 0117 325 0027Quote & buy →
Charities and community
What foodbanks and community pantries must do under food, employment, motor and data protection law, and the insurance that usually sits alongside it.
Part of: Charity insurance guide
In short
A foodbank that provides food to the public regularly is usually a food business and must register with its local authority at least 28 days before starting, even if the food is free. It must follow food hygiene law, including never supplying food past its use-by date. Employers' liability is compulsory only once someone is employed, and volunteers' cars used on deliveries must be insured for that use. Referral data often includes health details, so data protection is a significant risk alongside public and products liability.
Foodbanks, community pantries, community fridges and social supermarkets in England and Wales handle food, people's personal circumstances and, often, vehicles. The legal position combines food law, data protection and the usual charity duties.
| Area | Compulsory or recommended? | What it means for a foodbank or pantry |
|---|---|---|
| Food business registration | Compulsory if you provide food regularly | Anyone who supplies food regularly to the public, free or not, must register with the local authority at least 28 days before starting. Registration is free and cannot be refused (FSA). Occasional provision may not need registering, so ask the council's food safety team. |
| Food hygiene | Compulsory for registered food businesses | Food safety procedures based on HACCP principles, trained operators, supervised food handlers (including volunteers), fridges at 8°C or below, accurate allergen information and traceability records (FSA food bank guidance). |
| Use-by dates | Compulsory | It is an offence to supply food after its use-by date. Food past its best before date can be supplied, because that date is about quality, not safety. |
| Employers' liability | Compulsory if anyone is employed | A paid coordinator or driver on a contract of service means at least £5 million of cover, a displayed certificate and fines of up to £2,500 per day uninsured (HSE40). A purely volunteer-run project is not normally caught. |
| Motor | Compulsory for vehicles you operate | Vans need Road Traffic Act cover, and volunteers using their own cars for collections or deliveries need that use covered (CC49). |
| Data protection | Compulsory | Referral data often includes health details, which are special category data (ICO). Notifiable breaches must be reported within 72 hours (ICO). |
| Trustee duties | Legal duty (if a charity) | Trustees must manage resources responsibly and make sure the charity has sufficient insurance (CC3). |
| Public liability, stock, premises | Recommended | No statutory minimum for public liability, but a lease or a host organisation will often require it. |
Usually, yes. The Food Standards Agency's guidance for food banks and charities, which applies in England, Wales and Northern Ireland, says you may need to register as a food business if you provide food to the community, even for free, 28 days before you start. If you only provide food occasionally you may not need to, and the local authority decides. The FSA's registration guidance says that anyone supplying food regularly to the public, free or not, must register, and that registration is free.
Once registered, you can expect inspections and, where applicable, a food hygiene rating. The FSA guidance sets out what a registered foodbank must do:
These are also the records an insurer will want to see if someone says they became ill from food you supplied.
Donated food arrives from supermarkets, food industry surplus schemes, collection points and individuals. The FSA guidance points out that loose food you repack after donation becomes prepacked food and may need a date label. It recommends signing up for allergy alerts and product recalls, so you can pull affected stock and trace who received it (FSA).
Allergens are a particular risk because clients may not be able to choose what goes in a parcel. The FSA suggests talking to people about allergens and offers free online allergy training for staff and volunteers. Recording dietary needs at referral, labelling clearly and keeping repacked items separate all reduce both the health risk and the liability risk.
Most foodbanks are run largely by volunteers. HSE says health and safety law will not normally apply to an organisation with no employees, but that voluntary organisations and volunteers still owe each other a common law duty of care (HSE). Once you employ someone, volunteers must be included in your risk assessments.
The common injury risks are manual handling of crates and stock, slips in storage areas, and road incidents during collections and deliveries. Most charity liability policies can cover volunteers under both employers' and public liability, but check any age limits and the activities covered. CC49 specifically advises checking how a policy defines a volunteer.
The Charity Commission's CC49 says use of staff or volunteer vehicles for charity business must be covered, and the charity may pay any extra premium. Volunteers should check with their own insurer that their policy covers collections and deliveries. A van owned or leased by the foodbank needs its own motor policy, and goods in transit cover can protect the stock it carries.
On food safety, the FSA expects chilled and frozen food to be delivered so it stays safe, using cool bags, boxes or refrigerated vans, with raw and ready-to-eat foods kept apart (FSA). If you run several vehicles, see fleet insurance.
Many foodbanks operate from church halls, community centres or donated warehouse space under a licence or lease. That agreement decides who insures the building, and often requires the foodbank to carry public liability and insure its own contents and stock. Freezers, chillers and racking are worth insuring for breakdown and loss of chilled stock as well as fire and theft.
Product liability covers claims that food or other goods you supplied caused illness, injury or damage. Even when the food was donated, the foodbank supplied it, so good use-by checks, allergen information and traceability records matter. Our food and drink insurance guide covers product liability and recall in more depth.
Referral vouchers and client records often include health conditions, family details and financial circumstances. Health data is special category data under UK GDPR, which needs both a lawful basis and a separate condition for processing (ICO). Not-for-profit organisations may be exempt from the ICO data protection fee, but must still comply with data protection law (ICO). Notifiable breaches must be reported to the ICO without undue delay and within 72 hours of becoming aware (ICO).
A lost laptop, a misdirected email or a compromised shared spreadsheet can all lead to a breach. See cyber insurance explained.
Trustees can buy trustee indemnity insurance from charity funds where the cost is reasonable and it is in the charity's best interests (CC49). Our charity insurance guide has more detail.
If it provides food to the public regularly, yes. The FSA says to register at least 28 days before you start. Registration is free and cannot be refused. Very occasional food provision may not need registering, and the local authority decides.
Yes. The FSA says best before dates are about quality, not safety. It is an offence to supply food after its use-by date, so that food must be thrown away.
Not necessarily. The FSA says the person running the operation must have suitable food safety and hygiene training, and food handlers, including volunteers, need appropriate supervision and training, which can come from on-the-job learning, self-study or previous experience.
Not normally, because the legal duty applies to people employed under a contract of service. Once you pay a coordinator or driver, it usually becomes compulsory. Most policies cover volunteers anyway.
Not automatically. The Charity Commission says use of volunteers' vehicles for charity business must be covered. Volunteers should confirm with their own insurer that collections and deliveries are included.
Not-for-profit organisations may be exempt, depending on how they use personal data. Exempt or not, the foodbank must still comply with data protection law, including extra care with health information.
Tell us about your organisation online and a broker will come back to you with options. Or call 0117 325 0027.
Start a commercial enquiry Request a callbackApex Insurance Brokers Limited is authorised and regulated by the Financial Conduct Authority. Registered in England and Wales, company number 07014570. This page is general information, not legal advice or advice on your individual circumstances, and it does not guarantee that cover will be available or on what terms. Check the official sources linked for the current position.
