Selling Cosmetics in the EU: CPNP & Regulation (EC) 1223/2009 Guide

EU cosmetics rules are the strictest in the world. The good news: a competent OEM factory does 80% of the heavy lifting. Your job is to know what to ask for — and to appoint the one role you legally must own.

The framework

EU cosmetics are governed by Regulation (EC) No 1223/2009. It applies in all 27 EU member states + Norway, Iceland, Liechtenstein. UK runs a near-identical parallel regime (UK Cosmetics Regulation + SCPN portal) since Brexit.

The four pieces you need

1. Responsible Person (RP)

A legal entity physically located in the EU that takes regulatory responsibility for your product. Without an RP, your product cannot legally be placed on the EU market.

• Who: Your EU distributor, your own EU subsidiary, or a paid RP service ($500–$2,000/year).
• Watch out: Your factory CANNOT be your RP — RP must be EU-based.

2. Product Information File (PIF)

A complete dossier kept at the RP's address, available to authorities on request. Contains:

• Quantitative + qualitative formula
• Safety assessment by a qualified safety assessor (CPSR)
• Method of manufacture (GMP statement)
• Proof of claimed effects
• Animal testing data (must show no animal testing in EU since 2013)

Your factory provides: formula, MSDS, GMP statement, stability + microbiological reports. You commission: the CPSR safety assessment (€300–€800 per formula via a qualified toxicologist).

3. CPNP notification

Online portal (cpnp.ec.europa.eu) where the RP notifies each product before it goes on sale.

• Free of charge.
• Submitted once per formulation per market.
• Triggers poison-center notification automatically in most member states.

4. Labeling — non-negotiable items

Every primary + secondary pack must show:

• Name and address of the RP
• Country of origin (for products manufactured outside the EU)
• Nominal content (weight or volume)
• Best-before date OR PAO (period after opening) symbol with months
• Batch / lot code
• Function of the product (unless obvious)
• Full INCI ingredient list in descending order >1%, alphabetical <1%
• Warnings (e.g. "Avoid contact with eyes")
• All required text in the official language(s) of every country sold in

Common ingredient pitfalls

Ask your factory for an EU-compliant version of any US formula — the same brand often sells different formulations per market.

Brexit / UK specifics

• UK uses SCPN portal (not CPNP).
• Requires a UK Responsible Person + UK address on label.
• Same safety dossier accepted, must be re-notified.

Realistic timeline + budget for one SKU

• RP appointment: 1 week, $500–$2,000/year
• Safety assessment (CPSR): 2–3 weeks, €300–€800
• CPNP notification: 1 day, free
• Label redesign + translation: 1–2 weeks, $200–$500 per language

Total: 4–6 weeks, ~$1,500 for first product. Each additional SKU under the same RP runs much cheaper.

What to ask your OEM factory

• "Is this formula EU-compliant under Reg 1223/2009?"
• "Can you provide a GMP statement under ISO 22716?"
• "Do you have stability + challenge test reports under EU methodology?"
• "Can you supply the formula in IFRA + INCI format?"

A factory that answers all four without hesitation is a factory that has shipped to the EU before. That's the one you want.