Regulation (EC) No 1223/2009 is the core EU framework for finished cosmetic products made available on the European Union market. It is directly applicable across EU Member States and is designed to support the internal market while protecting human health. For a brand or contract manufacturer, the practical question is not simply whether a formula is “EU compliant”; it is whether the complete product, documentation, label, responsible-person arrangement, and notification process meet the Regulation’s requirements before market placement.
This guide explains the operating structure of the Regulation for cosmetic brands. It is an educational overview, not a substitute for a product-specific safety assessment or legal advice.
What counts as a cosmetic product?
Article 2 defines a cosmetic product as a substance or mixture intended to be placed in contact with external parts of the human body, teeth, or oral mucous membranes, exclusively or mainly to clean, perfume, change appearance, protect, keep in good condition, or correct body odours. Product classification comes first. If the intended purpose, presentation, or claims point to a medicinal, biocidal, or other regulated function, a different framework may apply.
Classification should be assessed using the finished product and its full commercial context, including product name, label, directions, claims, images, website copy, marketplace listing, and advertising. Do not treat the formula alone as the classification decision.
| Regulatory element | What the Regulation requires | Operational owner |
|---|---|---|
| Responsible Person | A responsible person established within the Union must ensure compliance for each cosmetic product placed on the EU market. | EU legal entity appointed in the supply-chain agreement. |
| Product Information File | A PIF must be kept readily accessible at the responsible person’s address, with the required product information and safety documentation. | Responsible person, supported by brand and manufacturer. |
| CPNP notification | Required information is submitted through the Cosmetic Products Notification Portal before the product is placed on the EU market. | Responsible person, or the relevant distributor in specified circumstances. |
| Market controls | Label, claims, composition, and post-market obligations must remain aligned with the Regulation. | Brand, responsible person, manufacturer, and distributor. |
The Responsible Person is the compliance anchor
Article 4 places central responsibility on a natural or legal person established within the EU. In practical terms, this Responsible Person (RP) is the party that ensures the relevant obligations are met when the cosmetic product is placed on the market. The RP arrangement should be explicit in commercial documentation, particularly where formulation, manufacturing, brand ownership, import, and distribution are handled by different companies.
The RP should have effective access to the Product Information File, the cosmetic product safety report, current formula and specification data, relevant manufacturing records, and final approved labeling. A nominal appointment without document access creates avoidable compliance risk.
Build the Product Information File before market placement
Article 11 requires a Product Information File (PIF) for each cosmetic product. The file is kept for ten years after the date on which the last batch of the cosmetic product was placed on the market and must be readily accessible at the RP’s address. The PIF includes the product description, the cosmetic product safety report, manufacturing-method information and a statement of compliance with good manufacturing practice, proof of the claimed effect where justified by the nature or effect of the claim, and data on animal testing where relevant.
The cosmetic product safety report (CPSR) is not a marketing checklist. It is the safety assessment required under Article 10 and Annex I. The information supplied to the safety assessor should be controlled, current, and consistent with the finished formula, packaging, impurities profile, exposure conditions, and intended use.
| Pre-market control | Practical requirement | Evidence to retain |
|---|---|---|
| Safety assessment | Complete the CPSR with the information required by Annex I before placing the product on the market. | Signed CPSR, assessor qualifications, formula and toxicological input record. |
| Good manufacturing practice | Use manufacturing controls consistent with Article 8; compliance with harmonised standard EN ISO 22716 creates a presumption of GMP compliance. | GMP procedures, batch documentation, supplier controls, deviation records. |
| Ingredient and restriction review | Check the finished formula against the applicable Annex restrictions and conditions of use. | Formula review, raw-material specifications, restriction assessment, change control. |
| Notification and label release | Complete CPNP notification before market placement and release only approved labeling. | CPNP confirmation data, approved artwork, language and claim review record. |
Safety, GMP, and composition controls
Article 3 establishes the general safety principle: cosmetic products made available on the market must be safe for human health when used under normal or reasonably foreseeable conditions of use. Article 8 requires manufacture in compliance with good manufacturing practice. The European Commission identifies EN ISO 22716:2007 as the harmonised GMP standard associated with the cosmetics framework.
Formula review must also consider the Regulation’s Annexes. These include prohibited substances, restricted substances, colorants, preservatives, and UV filters. A raw-material list is not a finished-product compliance conclusion: concentration, product category, route of exposure, impurities, warnings, and conditions of use must all be evaluated for the product as marketed.
Notify in CPNP before placing the product on the market
Article 13 requires the RP—and, in specified circumstances, certain distributors—to submit prescribed product information through the Cosmetic Products Notification Portal (CPNP) before placing a cosmetic product on the EU market. CPNP is an EU-level notification system; notification does not replace the underlying safety, PIF, labelling, or claims obligations.
For products containing nanomaterials, the Commission describes a separate CPNP module under Article 16 in addition to the Article 13 notification. Evaluate this early, because nanomaterial status may affect data needs and lead times.
Labelling and claims are controlled compliance outputs
Article 19 sets out labelling particulars for cosmetic products, while Article 20 provides that claims may not imply that a product has characteristics or functions it does not have. The label must be reviewed together with the outer packaging, online listing, social assets, retailer copy, translations, and instructions for use. National language requirements may apply in the Member State where the product is made available.
A strong release process locks the final label and claim set to the reviewed formula and PIF version. Any change to formula, fragrance, concentration, packaging, directions, target consumer, or claim should trigger documented reassessment before re-release.
Practical implementation sequence
- Confirm that the intended use and presentation fit the cosmetic-product definition.
- Appoint and document an EU-established Responsible Person.
- Freeze the formula and collect the technical data needed for the safety assessment.
- Complete the CPSR and PIF, including the required GMP and claim-support records.
- Review composition against the current Annex conditions and verify final label requirements.
- Notify the product in CPNP before market placement.
- Release only the approved label, listing, translations, and advertising materials.
- Maintain post-market vigilance, change control, and RP access to the current PIF.
Key takeaways
Regulation (EC) No 1223/2009 is a lifecycle framework. The Responsible Person, safety assessment, PIF, GMP, CPNP notification, composition review, and claims control are connected responsibilities—not isolated documents. Brands that manage them as one controlled product record are better positioned to launch safely and respond to market-surveillance questions.
For broader EU market-entry context, visit MOOYAM’s cosmetics compliance resources.
Official sources
- EUR-Lex: Regulation (EC) No 1223/2009 on cosmetic products
- European Commission: Cosmetics legislation
- European Commission: Cosmetic Product Notification Portal
- European Commission: Harmonised standards for cosmetic products
- European Commission: CMR substances in cosmetics
Compliance disclaimer: This article provides general educational information, not legal advice. The EU requirements applicable to a specific cosmetic product depend on its formula, intended use, claims, labelling, supply chain, and the current consolidated legislation. Obtain qualified EU regulatory advice before placing a product on the market.