Chocolate Factory Regulations: EU, US and Turkey
On this page
A chocolate factory has to register with the food authority in every market covered here, usually before or shortly after it starts producing. In the EU you notify the competent authority so each establishment is registered, and approval applies only in some cases. In the US you register with the FDA before production, unless the business counts as a retail food establishment. In Turkey, chocolate production needs registration rather than approval, once you hold a local operating license. Food safety, labeling and machinery rules come on top.
Registration is one step in how to start a chocolate factory, and the other planning questions, from capacity to costs, are there and in the rest of the business section. None of what follows is legal advice. Rules change and national practice varies, so check with your local authority, and ideally a food-law consultant, before you commit.
EU: registration, and approval only in some cases
Every food business operator in the EU has to notify the competent authority of each establishment it runs, so it can be registered, and keep the authority informed of significant changes and closures. That duty is in Article 6(2) of Regulation (EC) No 852/2004. How you notify is up to that authority, so the process differs between countries.
Approval, which requires at least one on-site visit, applies only when national law, Regulation (EC) No 853/2004 or a Commission decision calls for it (Article 6(3)).
Regulation (EC) No 853/2004 sets the specific hygiene rules for food of animal origin. Unless stated otherwise, it doesn’t apply to food that contains both plant products and processed animal products, such as milk chocolate made with milk powder, although the processed animal ingredients must still come from sources that comply with it (Article 1(2), consolidated text of February 15, 2023). So a chocolate plant is a registration case unless a member state’s own law requires approval, which is why you ask the local authority before you plan the timeline.
US: FDA registration and FSMA preventive controls
Under 21 U.S.C. 350d, a facility that manufactures, processes, packs or holds food for consumption in the US must register with the FDA before it starts, whether or not its food crosses state lines. Foreign facilities register too and must name a US agent.
The FDA’s own guide, How to Start a Food Business, covers the practical side. You need a DUNS number from Dun & Bradstreet first, registration is free, and it has to be renewed between October 1 and December 31 of every even-numbered year (21 CFR 1.231).
Who counts as retail
Retail food establishments are exempt from registration, and the rule defines one by its sales. An establishment counts as retail if the value of food it sells directly to consumers is greater than the value it sells to all other buyers, and businesses don’t count as consumers (21 CFR 1.226 and 1.227). A chocolatier who makes on site and sells most of it over their own counter may be exempt; a plant selling wholesale or making private label is not. According to the FDA, a private residence is not a facility.
Federal registration doesn’t replace state and local licenses or permits, which vary by product and facility type.
FSMA: modified requirements for small plants
The preventive controls rules under the Food Safety Modernization Act (FSMA) sit in 21 CFR Part 117. Small plants may qualify for modified requirements rather than a blanket exemption. A “qualified facility” is either a very small business or a facility that meets a two-part test on sales to qualified end-users. For a qualified facility, the subparts on hazard analysis and risk-based preventive controls and on the supply-chain program don’t apply. The current good manufacturing practice rules in Subpart B are not on that list, so a qualified facility still follows them (117.5(a)).
A very small business averages less than $1,000,000 a year, adjusted for inflation, over the previous three years in sales of human food plus the market value of human food it makes or holds without selling, counting subsidiaries and affiliates (117.3). The FDA’s current inflation-adjusted figure, based on the 2023 to 2025 average, is $1,372,952, according to its FSMA inflation adjusted cut offs page, dated May 13, 2026. The FDA says it intends to update these values each April. Qualifying isn’t automatic: the facility has to attest to its status with the FDA and determine and document it every year by July 1 (117.201).
For a chocolate plant, the main hazard to control is Salmonella, and for bean-to-bar the roast is where that usually happens. The detail is in the food safety section of the bean-to-bar process.
Turkey: food business registration
In Turkey, chocolate production is listed among the activities that need registration rather than approval, in the annex to the regulation on registering and approving food businesses (Gıda İşletmelerinin Kayıt ve Onay İşlemlerine Dair Yönetmelik, Official Gazette, December 17, 2011). The text sets the order. First you get the workplace opening and operating license from the relevant local body. Then you apply to the ministry’s provincial directorate within thirty days, and you have to complete registration within three months of applying. The directorate reviews the file within fifteen working days.
The registration certificate is tied to the trade name, the person or company, the address and the activity, and it becomes invalid if any of those change. The application documents in the original annex include a capacity report or expert report, so your capacity sums end up on paper for the authority as well.
If an activity needs approval instead, the business first gets conditional approval before it starts operating, and the conditional period can’t exceed six months in total. Ask your provincial directorate which list your products fall on, especially for milk chocolate, before you rely on any of this.
Composition rules for cocoa and chocolate products sit in a separate communiqué of the Turkish Food Codex (No. 2017/29).
Food safety and HACCP
Every market above expects a food safety system built on HACCP principles, scaled to the size of the business. In the EU it’s a legal requirement under Article 5 of Regulation 852/2004. The seven principles, the flexibility Codex allows small businesses, and the roasting data for Salmonella are set out in the bean-to-bar process. For an investor, this means food safety is designed into the layout and the process from the start rather than added once the line is running.
Labeling and composition rules by market
Labels follow the market you sell into, not the one you produce in. In the EU, Article 9 of Regulation (EU) No 1169/2011 lists the mandatory particulars, from the name and ingredients to allergens, net quantity, date marking, the operator’s name and address and a nutrition declaration. Food, including handcrafted food, supplied directly by the manufacturer of small quantities to the final consumer or to local retailers that supply the final consumer is exempt from the nutrition declaration (Annex V). The regulation doesn’t put a number on “small quantities.”
In the US, labeling sits in 21 CFR Part 101. Small retailers selling directly to consumers can be exempt from nutrition labeling under 101.9(j), as long as the label makes no nutrition claims. Which products may be called chocolate at all is set by Directive 2000/36/EC in the EU and 21 CFR Part 163 in the US, compared in real vs compound chocolate.
Machinery safety and conformity
In the EU, machinery has to carry CE marking, the mark by which the manufacturer declares the machine conforms to the EU rules that require it. Those rules are changing. Regulation (EU) 2023/1230 replaces the Machinery Directive 2006/42/EC and applies from January 20, 2027; the originally published text said January 14, 2027, until a corrigendum changed it. Machines placed on the market in conformity with the old directive before that date can still be made available. Under the new regulation, manufacturers must keep the technical documentation and the EU declaration of conformity for at least 10 years.
For a buyer, that leads to one request: ask every vendor for the EU declaration of conformity, and ask which act it was issued under. If a line is ordered in 2026 and delivered in 2027, the answer matters.
Parts that touch chocolate fall under the EU rules on food contact materials. Under Article 3 of Regulation (EC) No 1935/2004, they must not transfer their constituents to food in quantities that could endanger health, change the food’s composition unacceptably, or spoil its taste or smell.
That last point has a practical side for chocolate. The industry’s cocoa quality guide (CBQR) asks that fridges and cooling rooms be checked for off-odors before use.
Sources and open questions
The Turkish registration regulation was read as first published on December 17, 2011. It has been amended several times since, and its current wording couldn’t be confirmed, including the annex that lists the businesses needing approval.
Regulation (EU) No 1169/2011 was read as first published. The FDA registration definitions are also in 21 CFR 1.225 and 1.230, and the corrigendum to the Machinery Regulation is in OJ L 169, July 4, 2023.
Not reviewed for this article: US state and local licenses and permits, machinery rules in the US and Turkey, and the rules in Middle Eastern markets, including GCC standards. None of them should be assumed from the above.