EU Cosmetics Regulation Requirements: What Companies Must Do to Comply
If you manufacture, import, brand, or distribute cosmetics in the EU/EEA, your products must meet Regulation (EC) No 1223/2009 requirements—covering ingredient restrictions, safety assessment, GMP, documentation, labeling, notification, claims, and post-market surveillance.
Below is a practical, detailed checklist of what compliance looks like—and how our service helps you implement it.
✅ Assign the “Responsible Person” and define supply-chain roles
Every cosmetic product must be linked to a Responsible Person (RP) established in the EU who ensures compliance obligations are met. The RP may be the EU manufacturer, importer, or a designated entity (by written mandate); distributors can become the RP if they place a product under their name/trademark or modify it in a way affecting compliance.
What you must do
- Confirm who is the RP per SKU / per formula / per brand.
- Map obligations for manufacturer / importer / distributor (including verification checks before making products available).
- Put quality + regulatory agreements in place (data exchange, change control, recall roles, safety reporting).
🧪 Ensure formula compliance with substance rules (Annex II–VI) + restrictions management
The Regulation builds compliance around:
- Annex II (prohibited substances),
- Annex III (restricted substances with conditions/warnings),
- Annex IV (allowed colorants),
- Annex V (allowed preservatives),
- Annex VI (allowed UV filters).
What you must do
- Run an ingredient-by-ingredient regulatory screening against the Annexes (including purity specs, concentration limits, product types, and mandatory warnings).
- Verify compliance for CMR substances and other hazard-driven restrictions that may apply via regulatory updates.
- Implement an ingredient change-impact process (supplier changes, impurities, fragrance composition updates, packaging migration risks).
🧾 Perform a formal Safety Assessment and create the CPSR (Annex I)
Before placing a cosmetic on the market, the RP must ensure a safety assessment is performed and a Cosmetic Product Safety Report (CPSR) is prepared.
Key compliance requirements
- The safety assessment must follow Annex I and be carried out by a qualified safety assessor (specific university-level qualifications required).
- Non-clinical safety studies referenced must follow applicable GLP rules or recognized equivalent standards where relevant.
What you must do
- Define intended use, target population (including sensitive groups), exposure, and margins of safety.
- Validate toxicological profiles and exposure assumptions for ingredients, impurities, and relevant contaminants.
- Document compatibility with packaging where it can influence safety (migration, stability, interactions).
🏭 Implement Good Manufacturing Practice (GMP)
Manufacturing must comply with GMP, and compliance is presumed when following relevant harmonised standards published in the EU Official Journal.
What you must do
- Establish GMP procedures for: incoming QC, batch records, hygiene, contamination control, deviations/CAPA, stability, complaints handling, and traceability.
- Maintain objective evidence: audits, training, calibration/maintenance, validated cleaning, and supplier qualification.
📁 Build and maintain the Product Information File (PIF) and keep it 10 years
When a product is placed on the market, the RP must keep a PIF and retain it 10 years after the last batch is placed on the market.
Minimum PIF contents
- Product description (traceable to the product).
- CPSR (Article 10 / Annex I).
- Manufacturing method + statement of GMP compliance.
- Proof for claimed effects where justified.
- Data on any animal testing performed (where applicable in supply chain context).
Operational must-haves
- Keep the PIF readily accessible to authorities at the RP address on the label and in a language easily understood by that Member State’s competent authority.
🖥️ Notify products via CPNP (and support poison centre needs)
Before placing a cosmetic on the market, the RP must submit a defined dataset electronically to the European Commission (done through the Cosmetic Products Notification Portal – CPNP).
CPNP notification typically includes
- Product identity, category, RP details, Member State of first placement, country of origin (imports), contact person.
- Nanomaterial presence and exposure conditions (where applicable).
- CMR ingredients (where applicable) and a frame formulation for medical treatment support.
- Original labeling + packaging photo when placed on the market.
What you must do
- Validate that your CPNP dossier is consistent with label + CPSR + PIF (no mismatches).
- Maintain a process for re-notification when key attributes change (formula, labeling, nanomaterials, etc.).
🧬 Manage nanomaterials correctly (notification + labeling)
If a cosmetic contains nanomaterials, it must be notified six months prior to market placement (in addition to standard Article 13 notification), unless specific exemptions apply.
Labeling
- Ingredients must appear in the ingredient list; nanomaterials must be indicated with “(nano)” where required by the Regulation’s labeling rules.
🏷️ Create compliant labeling (Article 19)
A product may be made available only if required labeling elements are present—covering RP identity/address, nominal content, date of minimum durability or PAO, precautions, batch/traceability, function (unless obvious), and ingredients list.
Ingredient naming
- Ingredients must use the common ingredient names from the EU glossary compiled under Article 33 (or a generally accepted nomenclature if no common name exists).
Language
- The language for key label elements is determined by national rules in the Member State where the product is sold.
🌸 Update fragrance allergen labeling and transition planning
EU rules for fragrance allergen labeling have been updated via Commission Regulation (EU) 2023/1545 amending Annex III. Transition dates apply: certain non-compliant products may be placed on the market until 31 July 2026 and made available until 31 July 2028 (depending on the specific restriction notes).
What you must do
- Map fragrance compositions to Annex III entries and confirm threshold-based labeling rules.
- Coordinate with fragrance houses to obtain allergen disclosures and maintain version control.
📣 Control marketing claims (Article 20 + Regulation 655/2013)
Claims must not imply characteristics or functions the product does not have.
Additionally, Regulation (EU) No 655/2013 sets common criteria for justifying cosmetic claims.
Core claim criteria (practical interpretation)
- Legal compliance, truthfulness, evidential support, honesty, fairness, and informed decision-making.
What you must do
- Maintain a claim substantiation pack (study reports, methods, endpoints, statistics rationale, consumer tests where relevant).
- Run a formal review for high-risk claim types (e.g., “hypoallergenic”, “dermatologically tested”, “free-from”, “clinically proven”).
🧯 Operate post-market surveillance and vigilance
You must be prepared for market surveillance checks and be able to demonstrate compliance via PIF and, where needed, product testing.
Serious undesirable effects (SUE)
- The RP and distributors must notify competent authorities without delay when serious undesirable effects occur, and provide product identification and corrective measures.
Public access to certain information
- The RP must make certain composition and undesirable-effects information easily accessible to the public (within the Regulation’s limits).
Our Cosmetics Regulation Compliance Service (What We Deliver)
🧩 Compliance scope
- Regulatory gap assessment (formula, labeling, claims, supply chain).
- Annex II–VI screening + restricted substance strategy.
- CPSR readiness: safety assessment inputs, toxicology data pack, exposure assumptions alignment.
- GMP system mapping: SOP set, supplier controls, batch record expectations, deviation/CAPA structure.
- PIF build & validation: complete structure, evidence indexing, retention + accessibility requirements.
- CPNP dossier preparation: data validation + label/pack alignment.
- Labeling compliance: mandatory items, language strategy, ingredient naming governance.
- Claims governance: substantiation and claim-risk review against common criteria.
- Post-market readiness: complaint handling, SUE workflows, recall & corrective action playbooks.
⏱️ Typical implementation (example)
- Week 1–2: product portfolio intake, role mapping, data request list, initial risks.
- Week 3–6: formula screening + label/claims remediation + PIF structure build.
- Week 7–10: CPSR readiness completion + CPNP dataset compilation.
- Go-live: final compliance pack + SOPs + training + ongoing monitoring cadence.
How Material Compliance Management Software Supports Cosmetics Compliance
A dedicated compliance platform can reduce risk and speed up approvals by centralizing requirements and evidence:
- Single source of truth for ingredients, concentrations, product types, suppliers, and documents.
- Automated checks against restricted/prohibited lists and usage conditions (including warnings).
- PIF/CPSR evidence control: versioning, approvals, audit trail, and retention logic (10-year rule).
- Label & claims workflows: structured reviews, substantiation storage, and sign-off aligned to EU claim criteria.
- CPNP-ready data packaging: consistent dossiers tied to the exact label/artwork version.
- Change control: detect what must be reassessed when a supplier, fragrance, impurity, or label element changes.
Common Compliance Pitfalls (and how we prevent them)
- Missing/weak claim substantiation (especially for “clinical”, “free-from”, “hypoallergenic”).
- Label/PIF/CPNP mismatches (different ingredient lists, different product names, outdated artwork).
- Incomplete PIF structure or missing proof-of-effect where justified.
- No structured process for nanomaterials notification or fragrance allergen transition updates.
Why ComplyMarket
ComplyMarket is built to make Cosmetics Regulation compliance operational—not just “documented.” Its Material Compliance Management and Reporting Platform helps teams standardize how they collect supplier data, validate formulations, control documentation, and prove compliance quickly during audits or market surveillance.
How ComplyMarket stands out for cosmetics
- Centralized substance & formulation governance with configurable rules to mirror Annex conditions and internal policies.
- End-to-end documentation control for PIF/CPSR evidence, approvals, and change history—so your compliance pack is always audit-ready.
- Smart workflows for labeling and claims review, keeping substantiation connected to the exact product/version released.
- Scalable collaboration across R&D, regulatory, quality, procurement, and suppliers—reducing rework and launch delays.
- Reporting & traceability designed for faster decision-making when regulations or supplier inputs change.
If you want a single system to manage cosmetics compliance across product lines and markets, ComplyMarket is a powerful, future-ready choice.