Cookie label requirements

The cookie label requirements that catch people out arrive later, and one of them is unusually expensive to discover late: the reference amount for cookies is 30 g, which means a normal 60 to 90 g bakery cookie is legally required to carry a two-column Nutrition Facts panel. That's most large cookies sold in the United States.

The five elements every cookie label needs, panel or no panel

These come from the labeling requirements in 21 CFR Part 101 generally, not from 101.9, so no nutrition exemption touches them.

1. Statement of identity. The common or usual name of the food, on the principal display panel. "Chocolate chip cookies." Not "Grandma's Little Bites of Joy" on its own — a fanciful name is allowed, but the common name has to be there too.
2. Net quantity of contents. In both US customary and metric, in the bottom 30% of the front panel, under 21 CFR 101.105. Cookies are a solid, so declare by weight: "NET WT 12 OZ (340 g)."
3. Ingredient list. Descending order by weight, common names, sub-ingredients of compound ingredients broken out.
4. Allergen declaration. Nine major allergens. See below.
5. Name and place of business of the manufacturer, packer, or distributor.

Cottage food states then add their own required disclaimer, and the wording is statutory. Get it letter-perfect from your state's page.

When a cookie actually needs a Nutrition Facts panel

Five triggers. They're the same five that apply to every cottage food product, and the first one fires most often.

1. You make a nutrient content claim — "high protein," "low sugar," "keto," "sugar free."
2. You make a health claim.
3. You outgrow your state's cottage food cap and move to a commercial kitchen.
4. You sell wholesale or into retail. Cottage exemptions are almost universally direct-to-consumer only, and the retail-bakery exemption at 101.9(j)(3) ends the moment the customer buys the cookie somewhere other than where you baked it.
5. You sell on Amazon or another marketplace that requires a panel.

One narrow carve-out is worth knowing: 21 CFR 101.9(j)(9) exempts bulk food shipped to another manufacturer for further processing or repackaging before retail sale. Frozen cookie dough sold to a cafe that bakes it can qualify. A boxed dozen with your sticker on it does not.

On trigger one, the detail nobody expects: under 21 CFR 101.9(j)(18), the exemption is void if the claim appears "on the label, or in labeling or advertising." Calling your cookie a protein cookie in an Instagram caption requires the panel on the bag.

Where cookies stand under state cottage food law

Cookies are the safest cottage food category in the country. Every state on our list allows them. The limits that matter are the sales caps and the cream-filling exclusions.

The recurring exclusion is refrigeration, not the cookie itself. Cream-filled sandwich cookies, cream cheese frosting, custard fillings, and anything that has to stay cold falls out of most cottage lists. Ohio runs a separate registered home bakery track under ORC 911.02 that covers those. Verify your category and cap with the state agency before planning around it; several caps are indexed.

The dual-column problem, which is really a cookie problem

Here's the fact that costs bakeries a print run.

Your serving size is not your decision. It comes from the Reference Amounts Customarily Consumed table at 21 CFR 101.12, Table 2. The entry for Cookies is a reference amount of 30 g, with a label statement of "__ piece(s) (__ g)."

Then 21 CFR 101.9(b)(2)(i) sets the rules for products sold in discrete units, and subparagraph (D) is the one that bites: if a unit weighs at least 200% and up to and including 300% of the reference amount, the serving size stays anchored to the reference amount and the panel must carry a second column for the whole unit.

At a 30 g reference amount, that band is 60 g to 90 g. Weigh a bakery cookie. Most of them land in it.

Read that top to bottom. The requirement switches on at 60 g and off again at 91 g. A bigger cookie can remove a requirement a smaller cookie created. That's why it's a window, not a floor, and it's the single most misunderstood thing about dual-column labels.

Two other cookie shapes hit the same band. A two-cookie sleeve sold as one item — 2 × 34 g = 68 g — is 227% and needs two columns. A box of a dozen 30 g cookies does not, because the rule at 101.9(b)(12)(i) is written for products "packaged and sold individually." That box declares one cookie as the serving and 12 servings per container.

Why muffins almost never trigger it, and cookies always do

This comparison is the most useful thing on this page, and nobody publishes it.

Muffins sit in a different Table 2 row — "Bagels, toaster pastries, muffins (excluding English muffins)" — with a reference amount of 110 g. Same 200% to 300% rule, completely different outcome.

A jumbo bakery muffin at 180 g is 164% of its reference amount. It's a single-serving package with one column. You would need a 220 g muffin — nearly half a pound — before the second column applies. Meanwhile a 70 g cookie, which looks modest next to that muffin, is squarely inside the band.

The reason is that FDA set the reference amounts from consumption survey data, and people eat one muffin and several cookies. The regulation isn't measuring size. It's measuring how far your unit sits from what a survey said an eating occasion looks like.

The oversized cookie gap, honestly

101.9(b)(2)(i) runs (A) through (E), and none of them addresses a discrete unit weighing more than 300% of the reference amount. Neither does FDA's December 2019 serving size guidance, which works the 200–300% case and the single-serving case and then stops.

So a 113 g "bakery style" cookie is in undefined territory. The defensible approach is the one FDA uses for cake and pie: treat it as a multi-serving unit, declare a serving that approximates the 30 g reference amount as a fraction of the cookie, and show servings per container above one. Write down your reasoning and keep it in the label file. If the product line matters enough, FDA's own recommendation for ambiguous serving sizes is to contact the agency. Anyone who tells you the answer is obvious hasn't read the subparagraphs.

Allergens: cookies are the densest category there is

FALCPA covers nine major allergens: milk, eggs, fish, crustacean shellfish, tree nuts, peanuts, wheat, soybeans, and sesame, added January 1, 2023 by the FASTER Act. A single chocolate chip cookie routinely carries four of them. There is no cottage food exemption and no small business exemption from allergen labeling.

Two declaration methods are permitted, per FDA's food allergen labeling Q&A: parenthetically in the ingredient list, or in a "Contains" statement immediately after or adjacent to it. Pick one and be consistent.

Five things specific to cookies:

Name the tree nut species. "Tree nuts" is not a declaration. "Almond," "pecan," "walnut," "pistachio" is. FDA's Q&A is explicit that the specific type must be declared.

Coconut came off the list. In its January 2025 final guidance, FDA removed coconut from the tree nuts it treats as major food allergens. Coconut macaroons and coconut cookies no longer require a tree nut declaration on that basis. Voluntary disclosure is still available and many bakers keep it.

Sub-ingredients count. Soy lecithin in your chocolate chips puts soy in your cookie. Whey in your white chocolate puts milk in a cookie made with vegan butter. Malted barley flour is wheat's frequent traveling companion and is often in bread flour.

Highly refined oils are exempt. FDA's Q&A states that highly refined oils derived from major food allergens are exempt from the section 403(w) declaration. Highly refined soybean oil in your cookie does not, on its own, require a soy declaration. Cold-pressed, expeller-pressed and extruded oils are not covered by that exemption, and lecithin is not an oil.

Sesame is a live issue in baking. FDA notes on its sesame page that "[s]ome food manufacturers have recently changed their recipes since the FASTER Act went into effect. There are now food products with small amounts of sesame that did not have it before." If you buy dough, flour blends or toppings from a supplier, re-read the spec sheet rather than assuming last year's answer holds.

"May contain" statements are voluntary. They are not a substitute for good manufacturing practice, and they replace neither declaration method. More detail in our guide to the Contains statement.

The claims bakers want, and usually can't make

Nutrient content claims are defined terms. 21 CFR 101.13(b) bars any claim that isn't made in accordance with Subpart D. The 30 g reference amount makes several of them arithmetically brutal for a cookie.

Every one of these voids your small business exemption, and voids it if it appears only in advertising. That's the trade: the claim you want on the bag is what buys you the panel you were avoiding. Full breakdown in what counts as a nutrient content claim.

Statements that are not nutrient content claims — "made with organic flour," "no artificial colors," "baked in small batches" — carry their own truthfulness obligations but don't trip 101.13(b).

The small business exemption, and what voids it

If you do become a manufacturer, 21 CFR 101.9(j)(18) may still exempt you from the panel: fewer than an average of 100 full-time equivalent employees and fewer than 100,000 units of that product sold in the US in a 12-month period. A notice must be filed with FDA annually, and FDA states plainly that it does not notify firms when a notice is due.

A micro carve-out sits underneath: if you are not an importer and have fewer than 10 full-time equivalent employees, you need not file for a product with annual sales under 10,000 units.

The exemption is void the moment a nutrient content claim, health claim, or other nutrition information appears on the label, in labeling, or in advertising. Details and the filing mechanics: the FDA small business exemption.

What the panel costs

The per-revision line is the one that hurts a cookie program. Recipe Cost Calculator's published figure for external lab analysis is $50–$300 per recipe, per revision, and a bakery reformulates more than almost any other food business — seasonal flavors, a new chocolate supplier, a sugar cut a buyer asked for. Full comparison: what a nutrition label actually costs.

If your cookies have crossed one of the five triggers, Nutrillius takes the recipe and the unit weight, pulls the 30 g reference amount, checks whether you're inside the 60–90 g band, and generates both columns with independent rounding when you are. $39 one time with 90 days of edits, or $69/mo if you have a dozen cookie SKUs that change with the season. Build a label.