Pesticide Risk Assessment Template: How to Stay Compliant with EU MRLs [2026]

iComplai
Template · EU MRLs

A seven-section pesticide risk assessment template built around the 2026 EU MRL changes — what each section has to record, and how to keep it current as the limits move.

Linocut-style illustration of a greengrocer's brass balance on a market counter. A pear sits in one pan; in the other, instead of metal weights, sits a small stack of slim regulation booklets.
What decides whether the fruit can be sold is not its weight, but the limit written in the booklet sitting opposite it.

If you manage food safety compliance, you already know that pesticide residues in food are among the most frequently flagged hazards in the EU. What you may not have is a structured pesticide risk assessment template that reflects the latest Maximum Residue Level (MRL) changes — including the ones that took effect in early 2026.

This guide gives you a practical, section-by-section template you can adapt to your operation, explains what changed under EU Regulation 2026/140, and shows how to keep your documentation current as MRLs continue to shift.

Definition

What is a pesticide risk assessment?

A pesticide risk assessment is the documented judgement a food business makes about which pesticide residues a raw material is likely to carry, whether those residues could exceed the legal maximum residue level, and what verification is therefore proportionate. It is a structured evaluation of the likelihood and severity of harm from those residues, judged for a specific commodity and origin. In the EU the maximum residue level is the legal ceiling for a pesticide in a given commodity, set under Regulation (EC) No 396/2005 and defaulting to 0.01 mg/kg where no specific level exists.[1] That default is the trap: a substance with no MRL entry is not unregulated but held at the limit of determination, so a residue that would pass in the country of origin can make a consignment non-compliant on arrival. A usable assessment therefore starts from commodity and origin rather than from a substance list: the same pesticide is routine in one crop and an exceedance in another.

Three pillars

What are the three pillars of a pesticide risk assessment?

A pesticide risk assessment rests on three pillars: hazard identification, exposure assessment and risk characterisation. Together they answer which active substances could be present, how much of them a consumer would actually ingest, and whether that intake stays inside the toxicological reference values. The pillars cover human health and, at the substance-approval stage, the environment; in the context of food safety they resolve into the single question of whether residue levels in a product fall within legally permitted thresholds.

The three pillars are:

  • Hazard identification — which active substances are present and what are their toxicological profiles.
  • Exposure assessment — how much residue a consumer is likely to ingest based on dietary patterns and residue concentrations.
  • Risk characterisation — whether the estimated exposure exceeds acceptable safety thresholds such as the Acceptable Daily Intake (ADI) or Acute Reference Dose (ARfD).

For food business operators (FBOs) importing or distributing products within the EU, a documented pesticide risk assessment is not optional. It underpins your HACCP plan, supports due diligence in the event of a RASFF notification, and is a baseline expectation during official controls.

The risks

What are the risks of pesticides in food?

Pesticide residues in food carry both acute and chronic health risks. The nature and severity depend on the specific active substance, the concentration present, and the consumer's exposure level.

Acute risks include neurological effects, gastrointestinal distress, and in extreme cases organ damage — particularly from organophosphate and carbamate insecticides that inhibit cholinesterase activity.

Chronic risks from long-term low-level exposure include endocrine disruption, reproductive toxicity, developmental effects in children, and increased cancer risk. EFSA's annual dietary exposure assessments find the overall risk low for most population groups and substances, while still identifying individual substance-commodity combinations that it refers to risk managers for follow-up.[2][3]

Environmental risks extend the picture further. A thorough pesticide environmental risk assessment considers effects on pollinators, aquatic organisms, soil microbiota, and non-target species. While environmental risk is typically handled at the substance-approval stage, FBOs sourcing from regions with different pesticide use practices need to understand the broader regulatory context.

The practical takeaway: your pesticide health risk assessment documentation must account for both the toxicological profile of detected substances and the dietary exposure patterns of your target market.

What changed

What changed in the EU MRL regulations in 2026?

Commission Regulation (EU) 2026/140 updated EU maximum residue levels for six active substances — acequinocyl, chlormequat, metalaxyl-M, pyraclostrobin, sulfoxaflor and trifloxystrobin.[7] The changes took effect on 12 February 2026. They set or revise MRLs for those six substances on specific commodities following applications assessed by EFSA, including several pairs not previously covered: acequinocyl in strawberries, chlormequat in oats, metalaxyl-M in honey, pyraclostrobin in sweet corn, sulfoxaflor in leafy crops and herbs, and trifloxystrobin in olives, celeries, artichokes, leeks, linseeds, seed spices and herbal infusions. Nothing in the instrument withdraws an approval — it is an MRL-setting act made on the back of applications.

Linocut-style illustration of a tall measuring stick standing beside a single apple. A line is freshly carved low on the stick, with a fainter ghosted line well above it marking where the old level sat.
The fruit did not change; the line did. That is how a compliant specification quietly becomes a non-compliant one.

What is the standing EU MRL framework behind the 2026 changes?

The framework around that amendment has not changed. EU MRLs are governed by Regulation (EC) No 396/2005, which sets the maximum concentrations of pesticide residues permitted in food and feed and is amended several times a year as EFSA completes new peer reviews and Member States submit monitoring data. Under Article 18(1)(b) of that regulation, a substance with no specific MRL entry for a commodity is held at the 0.01 mg/kg default — a standing rule, not something the 2026 amendment introduced, and the one that catches most importers out.[1]

Key changes under Regulation (EU) 2026/140 include:

Regulatory Action Detail
Substances revised 6 active substances with updated MRL values
Effective date 12 February 2026 (published 23 January 2026)
Coordinated control programme New EU-wide monitoring programme for 2026–2028 adopted
Import tolerances One new import tolerance set — trifloxystrobin in linseeds, based on a use in Canada

Separately, the EU adopted a new coordinated multiannual control programme for 2026–2028, expanding the list of pesticide-commodity combinations subject to mandatory monitoring across Member States.

How should compliance teams respond to the 2026 MRL changes?

Three checks close most of the gap an MRL amendment leaves behind:

  1. Audit your supplier certificates against the updated MRL values — certificates issued before 12 February 2026 may reference outdated limits.
  2. Check commodities sourced from third countries where import tolerances have been reassessed.
  3. Update your risk assessment for any substance-commodity pair with no specific MRL entry, which is held at the 0.01 mg/kg default.

Full text of the regulation: EUR-Lex — Commission Regulation (EU) 2026/140

Two regimes

How does EFSA pesticide risk assessment differ from the EPA's?

The two regimes differ most in their defaults and in where a hazard-based test applies. In the EU, MRLs are set under Regulation (EC) No 396/2005, with the EFSA pesticide risk assessment judging consumer exposure against the ADI and ARfD, and any pesticide-commodity pair without a specific entry falling to the 0.01 mg/kg default. The EPA pesticide risk assessment sets tolerances under the Federal Food, Drug, and Cosmetic Act and has no equivalent default: a residue is either covered by an established tolerance or an exemption, or it is not permitted at all. Hazard-based exclusion sits at a different stage in the EU — the approval of the active substance under Regulation (EC) 1107/2009 — rather than in MRL setting, which is exposure-based on both sides. The consequence is practical: a lot fully compliant with EPA tolerances can still exceed an EU MRL for the same substance.

Linocut-style illustration of two inspectors on either side of a single apple on a plinth, each examining it through a differently shaped lens and each holding a clipboard.
The same residue, examined under two regimes, can produce two defensible conclusions. Neither inspector is doing it wrong.

Where do the two regimes actually diverge?

Factor EFSA (EU) EPA (US)
Legal framework Regulation (EC) 396/2005 Federal Food, Drug, and Cosmetic Act (FFDCA)
Precautionary approach Hazard-based cut-off criteria at the substance-approval stage under Regulation (EC) 1107/2009; MRL setting itself is exposure-based Risk-based; acceptable if exposure stays below thresholds
MRL/Tolerance setting MRLs set via EFSA peer review + member state input Tolerances set via EPA risk assessment + registration review
Default limit 0.01 mg/kg where no specific MRL is set No equivalent default; tolerance must be established or exempted
Cumulative assessment EFSA advancing cumulative risk assessment for substance groups EPA required by the FFDCA to assess both aggregate exposure and the cumulative effects of substances sharing a common mechanism of toxicity
Endocrine disruptors Specific exclusion criteria under Regulation (EC) 1107/2009 Evaluated through Endocrine Disruptor Screening Program

Your pesticide risk assessment template should therefore carry the EU MRL and the US tolerance as separate fields for every substance-commodity pair if you operate across both jurisdictions.

The template

What should a pesticide risk assessment template include?

A pesticide risk assessment template has seven sections: product and supplier identification, hazard identification, an MRL compliance check, exposure assessment, risk characterisation, mitigation measures, and a monitoring and review schedule. The first two establish what is being assessed and which active substances the commodity and its origin plausibly carry. The MRL compliance check is the core of the document: for every substance-commodity pair it records the current EU MRL, the level detected and a compliant yes-or-no. Exposure assessment and risk characterisation then turn a detected level into a consumer-intake judgement against the ADI and ARfD, so a result below the MRL is shown to be acceptable rather than merely legal. The last two sections make the assessment operational — what happens when a pair fails, and when the document is reviewed again. Each section maps to a regulatory expectation under EU food safety law, and the structure below can be adapted to any organisation.

Section 1 — What identifies the product and supplier?

  • Product name, category, and CN code
  • Country of origin and supplier details, cross-referenced to your supplier verification record
  • Applicable EU MRL regulation reference (e.g., Regulation (EC) 396/2005, as amended by Regulation 2026/140)

Section 2 — Which hazards should you identify?

  • List of active substances potentially present (based on country of origin pesticide use practices and historical test data)
  • Toxicological classification of each substance (ADI, ARfD, AOEL)
  • Substances flagged for non-renewal or MRL reduction in 2026

Section 3 — What does the MRL compliance check record?

Substance Commodity Current EU MRL (mg/kg) Detected Level (mg/kg) Compliant (Y/N)
e.g., Chlorpyrifos Oranges 0.01 (default)
e.g., Acetamiprid Strawberries 0.5

Section 4 — How do you assess dietary exposure?

  • Target consumer population (general population, infants, vegetarians)
  • Dietary intake model used (EFSA PRIMo or equivalent)
  • Estimated short-term and long-term exposure as percentage of ARfD and ADI

Section 5 — How is risk characterised?

  • For each substance-commodity pair: does estimated exposure exceed ADI or ARfD?
  • Cumulative risk considerations (where EFSA guidance applies), carried through to your wider supply-chain risk assessment
  • Risk classification: acceptable / requires mitigation / unacceptable

Section 6 — Which mitigation measures should the template list?

  • Supplier corrective actions (GAP adherence, pre-harvest intervals)
  • Increased testing frequency for high-risk origins
  • Lot rejection or diversion criteria
  • Communication protocol with competent authorities

Section 7 — How often should the assessment be reviewed?

  • Testing frequency per commodity-origin combination
  • Trigger events for reassessment (RASFF notification, MRL amendment, supplier change)
  • Annual review date and responsible person

Keep it as a living document, and export your completed version as a pesticide risk assessment PDF when auditors or inspectors ask for it — the MRL changes in 2026 alone have already required updates for multiple substance-commodity pairs.

From iComplai

A template is a snapshot. Residue limits are not.

MRLs move, origins get added to enhanced controls, and a compliant raw material becomes a rejected consignment without anything changing on your side. iComplai tracks the regulatory movement per commodity and writes the finding up for you.

See automated report writing
The data

What do RASFF pesticide alerts show in 2026?

The Rapid Alert System for Food and Feed (RASFF) remains the primary early warning mechanism for food safety issues in the EU. Across the ten years to the end of 2025, RASFF issued 42,435 notifications, and pesticide residues account for 7,395 of them — 17.4 per cent, second only to pathogenic micro-organisms. Counted a different way, though, pesticides come first: those 7,395 notifications carry 27,997 separate substance findings, because one pesticide notification names 3.8 residues on average against 2.0 for a pathogen notification.[4]

Pesticides: second by notification, first by findingRASFF 2016–2025 — one notification can name several substancesnotificationsindividual substance findingsPathogenic micro-organisms9,46818,958Pesticide residues7,39527,997Mycotoxins5,61919,911Allergens3,03110,446Composition2,6847,496Food additives and flavourings2,2297,11942,435 RASFF notifications in the period. A notification may carry more than one hazard category, so shares do not sum to 100%.Pesticide notifications average 3.8 substance findings each; pathogen notifications 2.0.
RASFF 2016–2025: pathogens produce the most notifications, pesticides the most individual substance findings. Source: iComplai platform.

The gap between a notification and a finding is not a technicality, and it is the first thing to get right when you benchmark your own hazard profile. A notification is one regulatory event; a finding is one substance inside it. Pesticides generate fewer events than pathogens but far more individual results, which is exactly why a pesticide alert rarely resolves into a single number on a certificate of analysis — and why a testing scope written for one residue tends to miss what the same consignment is actually carrying.

How many RASFF pesticide notifications were issued in 2026?

RASFF issued 63 pesticide-residue notifications in January 2026, 77 in February and 93 in March, against monthly totals of 361, 356 and 479 — a pesticide share of roughly 17 to 22 per cent, or about one pesticide notification every twelve hours. Two further readings of the year to date matter for a testing plan:

  • Top countries of origin for pesticide notifications in 2026 to date cluster tightly — India, Egypt, Türkiye and China each sit between 66 and 69 notifications, effectively a four-way tie in which no single origin dominates and the order changes month to month.
  • Chlorpyrifos stands at 157 notifications to 23 August 2026, tracking at roughly the 2025 level of 248 for the full year.

Which pesticides trigger the most RASFF notifications?

Chlorpyrifos leads by a wide margin, with 1,707 notifications between 2021 and 2025, followed by ethylene oxide at 742, chlorpyrifos-methyl at 444 and acetamiprid at 434. Ten substances account for most of the volume:

The substances behind most pesticide notificationsRASFF pesticide-residue notifications, 2021–2025Chlorpyrifos1,707Ethylene oxide742Chlorpyrifos-methyl444Acetamiprid434Thiamethoxam254Tricyclazole221Carbendazim218Imidacloprid198Cyhalothrin178Lambda-cyhalothrin177Both chlorpyrifos actives are shown in terracotta. They are not additive: every chlorpyrifos-methyl notification also nameschlorpyrifos, so the two labels together still cover 1,707 notifications.Cyhalothrin and lambda-cyhalothrin overlap the same way: read together, the two labels still cover 178.
The ten substances behind the most RASFF pesticide-residue notifications, 2021–2025. Source: iComplai platform.

Cyhalothrin and lambda-cyhalothrin are recorded under separate RASFF labels (178 and 177), but they are almost entirely the same notifications: reading them together still gives 178, so the ranking does not change. The same holds for the two chlorpyrifos labels — every chlorpyrifos-methyl notification also names chlorpyrifos, so 1,707 and 444 do not add to 2,151. Ethylene oxide is the case where combining does change the picture: its metabolite 2-chloroethanol is recorded separately at 151 notifications, 60 of which name only the metabolite, so the two read together give 802 rather than 742. Check for that overlap before you turn any ranking of this kind into a testing shortlist.

Does banning a pesticide reduce RASFF findings?

A ban raises your chance of a RASFF finding rather than lowering it. Chlorpyrifos is the clearest worked example, and it does not behave the way the word “ban” suggests. The EU declined to renew the approval in January 2020, with Member States required to withdraw product authorisations by 16 February 2020, and from 13 November 2020 residue limits were cut to 0.01 mg/kg.[5][6] Notifications did not fall.

Chlorpyrifos after the ban — notifications rose, they did not stopRASFF notifications per year, chlorpyrifos and chlorpyrifos-methyl combined12101411121226133114521564165617611839199520400213762236023323242482515726Jan 2020 — EU approval not renewedMRLs cut to 0.01 mg/kg from 13 Nov 202010 years before: 37 a year on average5 years after: 341 a year — 9.3× more2026 is outlined because the year is still running (to 23 Aug).
RASFF chlorpyrifos notifications per year, both actives combined. The ten years before the ban averaged 37 a year; the five years after averaged 341. Source: iComplai platform.

In the ten years before the ban, RASFF averaged 37 chlorpyrifos notifications a year. In the five years after it averaged 341 — more than nine times as many. Volumes have eased each year since the 2021 peak of 400, and 2026 is tracking at roughly the 2025 level, but that is still about seven times the pre-ban baseline. The residue did not appear from nowhere; the threshold moved. Once a substance loses approval, the tolerance that made a low residue lawful is withdrawn and the default limit applies instead, so material that would previously have cleared now registers as an exceedance. For a risk assessment the practical consequence is counter-intuitive but important: a withdrawal of approval raises your probability of a finding rather than lowering it, and it does so on the date the limit changes, not gradually. A substance you stopped worrying about in 2020 because it was prohibited is precisely the one most likely to appear in a rejection today.

How should RASFF data feed your pesticide risk assessment?

RASFF data belongs in Section 2 (hazard identification) and Section 7 (monitoring and review) of your pesticide risk assessment. If your supplier's country of origin appears repeatedly in RASFF pesticide notifications, that is a documented basis for increasing testing frequency or requiring additional certificates of analysis.

Source: iComplai platform, RASFF notification analysis, data as at 23 August 2026 | underlying record: European Commission — RASFF Window

Monitoring

How can you monitor pesticide regulatory changes automatically?

Automatic monitoring means subscribing to three feeds rather than checking them by hand: MRL amendments as they appear in the Official Journal, RASFF notifications filtered to your own commodities and origins, and EFSA opinions and peer reviews that signal a revision before it becomes law. The reason to automate is pace, not complexity. MRL amendments are published several times a year, RASFF notifications arrive daily, and an EFSA opinion can change the outlook for a substance with little lead time. A feed filtered to your own material list turns that from a research task into an exception report: nothing to read on a quiet week, and a named substance-commodity pair on the week it matters.

Linocut-style illustration of a conveyor of crates passing beneath a large wall-mounted alarm bell that nobody is watching, while a small compact device on the wall beside it shows a lit indicator.
A bell only works if someone is in the room. Monitoring has to survive the day nobody checks.

Manual monitoring — checking EUR-Lex, the RASFF portal, and EFSA's website on a rolling basis — is time-consuming and error-prone. Most compliance teams discover changes late, often after a shipment has already been dispatched.

What should an automated pesticide monitoring feed track?

iComplai solves this by monitoring RASFF pesticide alerts and EU MRL changes in real-time. The platform's pesticide residue risk prediction and regulatory monitoring module[8] track:

  • RASFF notifications filtered by hazard category, country of origin, and product type — so you see pesticide alerts relevant to your supply chain, not noise.
  • MRL amendments as they are published in the Official Journal, with substance-level change tracking and commodity mapping.
  • EFSA opinions and peer reviews that signal upcoming MRL revisions before they become law.
  • Third-country regulatory changes affecting export compliance for products entering the EU market.
iComplai platform screenshot of the notification evidence table, showing columns for commodity, supplier, origin, hazard category and hazard. Several rows are classified as pesticide residues, including thiamethoxam on white pepper from Cambodia and azoxystrobin, dimethomorph and omethoate on durian from Thailand. The supplier column is deliberately obscured.
The same feed inside the platform: each notification resolved to commodity, origin, hazard category and substance, so a pesticide filter returns your materials rather than everything. Supplier names are obscured here.

Instead of rebuilding your pesticide risk assessment from scratch each time a regulation changes, iComplai flags exactly which sections of your documentation need updating — and gives you the regulatory reference to do it.

iComplai platform screenshot of a monthly notification-volume chart from August 2023 to October 2026. The chart is untitled in this crop; a blue line shows recorded monthly counts rising from about 1,900 to about 3,900, and an orange line with a shaded confidence band projects the months ahead.
Monthly notification volume across all monitored authorities, with the platform’s forward projection and its confidence band. Volume of this order is why a periodic manual check falls behind between checks.

If your compliance workflow still depends on periodic manual checks, the 2026 MRL changes are a good reason to automate.

FAQ

Frequently asked questions

What should a pesticide risk assessment template include?

A pesticide risk assessment template needs seven sections: product and supplier identification, hazard identification, an MRL compliance check, exposure assessment, risk characterisation, mitigation measures, and a monitoring and review schedule. The MRL compliance check is the core of the document, recording the current EU MRL, the level detected and a compliant yes-or-no for every substance-commodity pair.

Is a pesticide risk assessment mandatory in the EU?

The document is how a business evidences that residue hazards were considered and controlled: the MRL compliance check, the exposure view and the monitoring schedule set out above. Customers and certification auditors ask to see that evidence, which is why the template exists in this form.

What is the default EU MRL if none is set?

Where no specific MRL has been set for a pesticide-commodity pair, the EU applies a default of 0.01 mg/kg under Article 18(1)(b) of Regulation (EC) No 396/2005. It is a legislated generic default rather than the lowest level a laboratory can measure, and it applies whether or not the substance is approved in the country of origin.

How often should a pesticide risk assessment be reviewed?

Review it at least annually, and immediately on a trigger event: a RASFF notification naming your commodity or origin, an MRL amendment published in the Official Journal, a change of supplier or growing region, or an unexpected residue result. The MRL changes that took effect on 12 February 2026 are an example of a trigger that invalidates supplier certificates issued before them.

Does an EPA-compliant product pass EU MRLs?

Not necessarily. The EPA sets tolerances under the Federal Food, Drug, and Cosmetic Act and has no equivalent of the EU's 0.01 mg/kg default, so a residue lawfully present in a US lot can exceed the EU MRL for the same substance and commodity. Assess both frameworks separately for any lot moving between the two markets.

What changed in the EU MRL rules in 2026?

Commission Regulation (EU) 2026/140 took effect on 12 February 2026 and set or revised EU MRLs for six active substances: acequinocyl, chlormequat, metalaxyl-M, pyraclostrobin, sulfoxaflor and trifloxystrobin. It followed applications assessed by EFSA and included one new import tolerance, for trifloxystrobin in linseeds based on a use in Canada.

Where iComplai fits

See the signals before they become findings

iComplai monitors authority notifications, recalls and adulteration signals for your own materials and suppliers, daily.

Talk to iComplai
References

Where these claims come from

  1. European Commission — EU legislation on MRLs: food.ec.europa.eu
  2. EFSA — Pesticide residues in food, latest data: efsa.europa.eu
  3. EFSA 2024 EU-coordinated pesticide monitoring report: efsa.onlinelibrary.wiley.com
  4. European Commission — RASFF Window (notification search): webgate.ec.europa.eu
  5. Commission Implementing Regulation (EU) 2020/18 — non-renewal of approval of chlorpyrifos: eur-lex.europa.eu
  6. Commission Regulation (EU) 2020/1085 — MRLs for chlorpyrifos and chlorpyrifos-methyl lowered to the limit of determination: eur-lex.europa.eu
  7. Commission Regulation (EU) 2026/140 — MRLs for acequinocyl, chlormequat, metalaxyl-M, pyraclostrobin, sulfoxaflor and trifloxystrobin: eur-lex.europa.eu
  8. iComplai — Regulatory monitoring: icomplai.com
Ömer Korkmaz