The regulations are concise but contain a number of operational traps for practitioners who do not carefully map the interaction between the regulations, the Act, and external standards. The following non‑exhaustive points are directly grounded in the text and merit attention.
Dynamic incorporation can change obligations without amending the regs: Regulation 3 defines key terms by reference to the Code, Standard 1.6.1, Schedule 27 and the Compendium “as in force from time to time”. Practically, that means a change to Standard 1.6.1, Table 1 of the Compendium, or Schedule 27 will alter what counts as an “unacceptable” or “unsatisfactory or potentially hazardous” level, and thereby change notification duties automatically. Entities that assume the regulations’ obligations are static risk non‑compliance if they do not monitor FSANZ or the Code for updates.
“Responsible person” is not defined in the regulations: The duty to report is repeatedly placed on the “responsible person” (regs 5(3), 6(2), 7(2)). Because the regulations do not define that term, practitioners must consult the Act to determine who must report. Misidentifying the responsible person (for example, confusing the manufacturer with the distributor or retailer) could leave an entity exposed to enforcement for non‑reporting even if another party reports.
Preliminary or presumptive detections are exempt unless the Chief decides otherwise: Regulations 5(4) and 8(3) exempt preliminary or presumptive detections from reporting obligations except where the Chief Public Health Officer requires otherwise. A laboratory or business that treats a rapid screening positive as non‑reportable could be on the wrong side of a Chief’s direction requiring earlier reporting. It is a practical “gotcha” that the Chief can require reporting of presumptive results in specified cases; businesses should have processes to receive and act on any such directions.
Testing methods must conform to Standard 1.6.1: Where thresholds are level‑based, the regulations require testing to be carried out in accordance with Standard 1.6.1 (reg 6(3) and reg 8(4)). Using an alternative accredited method without explicit equivalence may render the test legally ineffective for triggering the reporting duty. This is a technical trap where labs must ensure their methods align with the required standard and that records demonstrate conformity.
Toxins produced by listed pathogens are themselves notifiable contaminants: Regulation 5(2) declares toxins produced by contaminants listed in reg 5(1) to be notifiable. Stakeholders may overlook this because attention often focuses on organisms rather than their toxins; detection of a toxin (for example, botulinum neurotoxin, though specific toxins are not enumerated here) will trigger the reporting duty under reg 5(3).
Third‑party reporting can be triggered by tests of others: Regulation 8(2) prescribes that where a test detects or isolates a notifiable contaminant in food, any person who is aware or suspects a responsible person has not reported must report to the Chief Public Health Officer. This means that suppliers, contract laboratories, local environmental health officers, or customers who receive test results may become obliged to report if they think the responsible person has not done so. Businesses should be aware that non‑reporting by one actor in the supply chain can draw reporting by another.
Ready‑to‑eat classification matters: Regulation 7(2) applies the Compendium thresholds to ready‑to‑eat food only. The legal characterisation of a product as ready‑to‑eat is by reference to Standard 3.2.2 of the Code (reg 3). Misclassifying a product may lead to an incorrect assessment of whether a test result meets the reporting threshold.
No procedural detail in the regulations: The regulations do not set timeframes, forms, or electronic channels for reporting; they refer to the Act for procedural detail. Expect to consult the Act and agency guidance for the mechanics of notification. Assuming a particular form or timeframe absent reference to the Act is a practical error.
Potential versioning disputes: Because tests must be carried out in accordance with Standard 1.6.1 and thresholds are taken from documents that can be updated, disputes can arise about which version of a standard applied at the time of testing. Businesses should record the version of the standard used and the date of testing.
FSANZ is the designated prescribed body: Regulation 9 names FSANZ as the prescribed body for s 109(5)(a) of the Act. Parties seeking to understand the technical basis for thresholds or seeking input from a prescribed body should direct enquiries to FSANZ, not to a different Commonwealth or state agency.
In practice, the main operational gotchas are: (1) failure to monitor the external standards that change obligations; (2) assumptions about who is the “responsible person”; (3) treating preliminary positives as outside reporting risk when the Chief may require earlier notification; and (4) failure to ensure laboratory tests conform to the specified Code standard such that results are legally effective for triggering notification obligations.