Introduction to EU Cosmetic Regulation 1223/2009
The EU Cosmetic Regulation (EC) No 1223/2009 is the primary legislation governing the safety and marketing of cosmetic products throughout the European Union and European Economic Area. According to the official regulation text, this framework replaced the earlier Cosmetics Directive (76/768/EEC) and has been directly applicable in all EU Member States since July 11, 2013.
Regulation vs. Directive
The regulation establishes comprehensive requirements for:
- Product safety assessment before market placement
- Responsible Person designation for every product
- Product notification through the CPNP portal
- Ingredient restrictions and prohibited substances
- Labeling requirements for consumer information
- Good Manufacturing Practices for production facilities
Scope: What Qualifies as a Cosmetic?
According to Article 2 of Regulation 1223/2009, a cosmetic product is defined as:
> "Any substance or mixture intended to be placed in contact with the external parts of the human body (epidermis, hair system, nails, lips and external genital organs) or with the teeth and the mucous membranes of the oral cavity with a view exclusively or mainly to cleaning them, perfuming them, changing their appearance, protecting them, keeping them in good condition or correcting body odours."
| Category | Examples | Key Requirements |
|---|---|---|
| Skin Care | Moisturizers, serums, sunscreens | Full CPSR, SPF claims testing |
| Hair Care | Shampoos, conditioners, dyes | Hair dye restrictions (Annex III) |
| Color Cosmetics | Lipsticks, foundations, mascaras | Colorant compliance (Annex IV) |
| Fragrances | Perfumes, eau de toilette | Allergen labeling requirements |
| Oral Care | Toothpaste, mouthwash | Fluoride limits (Annex III) |
| Nail Products | Polishes, removers, treatments | Solvent restrictions |
Source: EU Regulation 1223/2009, Article 2
Products NOT Covered
Borderline Products
The Six Pillars of EU Cosmetic Compliance
1. Responsible Person (Article 4)
Per Article 4 of Regulation 1223/2009, every cosmetic product placed on the EU market must have a designated Responsible Person (RP) who is:
- Established within the European Union
- Legally responsible for product compliance
- Named on the product label
- Maintains the Product Information File
| Scenario | Responsible Person | Notes |
|---|---|---|
| EU Manufacturer | The manufacturer | Default RP for EU-made products |
| Imported Product | The importer | Must be EU-established |
| Private Label | Company whose name is on product | Takes full responsibility |
| Distributor | Can be appointed by RP | Written mandate required |
Source: EU Regulation 1223/2009, Article 4
2. Product Safety Assessment (Article 10)
Before any cosmetic product can be placed on the EU market, Article 10 requires a comprehensive Cosmetic Product Safety Report (CPSR). This document must be prepared following the structure defined in Annex I:
CPSR Required Elements
- Part A: Cosmetic product safety information (technical data)
- Part B: Cosmetic product safety assessment (expert evaluation)
- Quantitative and qualitative formula composition
- Physical/chemical characteristics and stability data
- Microbiological quality specifications
- Toxicological profiles of all ingredients
- Undesirable effects data
- Safety assessor credentials and signature
3. Product Information File (Article 11)
The Responsible Person must maintain a Product Information File (PIF) for each product. According to Article 11, the PIF must contain:
- The Cosmetic Product Safety Report (CPSR)
- Product description enabling clear identification
- Description of manufacturing method with GMP compliance statement
- Proof of claimed effects (where claims are made)
- Animal testing data (where performed by third parties, pre-ban)
PIF Retention Period
4. CPNP Notification (Article 13)
Before placing a cosmetic product on the EU market, CPNP notification is mandatory. The notification must include:
CPNP Notification Process
Register in CPNP
Create an account in the Cosmetic Products Notification Portal maintained by the European Commission.
Submit Product Information
Enter product category, name, Responsible Person details, and original labeling.
Provide Frame Formulation or Exact Composition
Submit either a frame formulation or the exact quantitative formula (confidential).
Upload Label Image
Provide images showing the full product label in the language(s) of sale.
Notify Per Country
Specify each EU Member State where the product will be marketed.
5. Ingredient Compliance (Articles 14-17, Annexes II-VI)
The regulation establishes strict controls on cosmetic ingredients through its Annexes:
| Annex | Content | Current Entries (2026) |
|---|---|---|
| Annex II | Prohibited substances | 1,700+ substances |
| Annex III | Restricted substances | 300+ with conditions |
| Annex IV | Permitted colorants | 153 colorants |
| Annex V | Permitted preservatives | 59 preservatives |
| Annex VI | Permitted UV filters | 29 UV filters |
* Annexes are regularly updated through Omnibus regulations
* Check CosIng database for current status of any ingredient
Source: EU Regulation 1223/2009, Annexes II-VI
Per Article 15, substances classified as CMR (Carcinogenic, Mutagenic, or toxic to Reproduction) categories 1A, 1B, or 2 are generally prohibited in cosmetics.
6. Labeling Requirements (Article 19)
Article 19 mandates specific information on cosmetic product labels:
Mandatory Label Information
- Name/registered name and address of Responsible Person
- Nominal content at time of packaging (weight or volume)
- Date of minimum durability or PAO symbol
- Particular precautions for use
- Batch number or product identification
- Product function (unless obvious from presentation)
- Full ingredient list (INCI names)
Good Manufacturing Practice (GMP)
ISO 22716:2007 provides guidelines for GMP in cosmetics production. While the EU does not mandate ISO certification, Article 8 requires that cosmetic products be manufactured in accordance with GMP principles.
GMP Best Practices
Enforcement and Penalties
EU Member States are responsible for enforcement of the Cosmetic Regulation. According to European Commission guidance, competent authorities can:
- Request access to the Product Information File
- Conduct market surveillance and inspections
- Order product withdrawals or recalls
- Impose fines and penalties (varying by Member State)
- Pursue criminal prosecution for serious violations
Recent Updates: Omnibus Regulations
The EU regularly updates the Annexes through Omnibus regulations. Recent significant updates include:
| Regulation | Key Changes | Effective Date |
|---|---|---|
| Omnibus IV (EU 2021/1902) | Lilial ban, Zinc Pyrithione, 23 CMR substances | March 1, 2022 |
| Omnibus VI (EU 2023/1490) | 30 CMR substances prohibited | December 1, 2023 |
| Reg. (EU) 2023/1545 | Fragrance allergen labeling (26→80+ allergens) | July 31, 2026/2028 |
| Reg. (EU) 2024/996 | 4-MBC ban, Vitamin A/Arbutin restrictions | Feb-Nov 2025 |
| Omnibus VII (EU 2025/877) | 22 CMR substances prohibited | September 1, 2025 |
Source: EU Official Journal
Stay Updated
SCCS Role in Safety Evaluation
The Scientific Committee on Consumer Safety (SCCS) provides independent scientific advice to the European Commission on cosmetic ingredient safety. SCCS opinions often precede Annex updates and provide valuable insight into upcoming regulatory changes.
Comparison with Other Markets
| Requirement | EU (1223/2009) | US (MoCRA) | UK (Post-Brexit) |
|---|---|---|---|
| Responsible Person | Required (EU-based) | Required (US-based) | Required (UK-based) |
| Safety Assessment | CPSR mandatory | Safety substantiation | CPSR mandatory |
| Product Notification | CPNP required | FDA listing required | SCPN required |
| Prohibited Ingredients | 1,700+ (Annex II) | 11 federal categories | UK Annexes (diverging) |
| GMP Requirement | Required (ISO 22716) | Being implemented | Required (ISO 22716) |
| EU Updates | Automatic | Not applicable | UK evaluates independently via OPSS |
Source: EU Regulation 1223/2009; UK Retained Regulation 1223/2009; US FD&C Act and MoCRA
UK Post-Brexit Divergence
Key Takeaways
Need Help with EU Compliance?
Connect with regulatory experts who can guide you through the complete EU cosmetic compliance process.
Get Expert HelpFrequently Asked Questions
EU Regulation 1223/2009 is the primary legislation governing cosmetic products in the European Union. It establishes requirements for product safety, responsible persons, product notification, ingredient restrictions, and labeling. The regulation has been directly applicable in all EU Member States since July 11, 2013.
Yes. Article 4 of Regulation 1223/2009 requires every cosmetic product on the EU market to have a designated Responsible Person (RP) established within the EU. The RP is legally responsible for product compliance and must be named on the label.
The CPNP (Cosmetic Products Notification Portal) is the EU's electronic notification system. Yes, notification is mandatory under Article 13 before placing any cosmetic product on the EU market. The notification includes product details, formulation, and Responsible Person information.
EU regulation is significantly more prescriptive. The EU requires a formal CPSR with specific format, bans 1,700+ ingredients, and mandates GMP compliance. US MoCRA requires safety substantiation (no specific format), has only 11 federally prohibited categories/substances, and is still implementing GMP requirements.
Non-compliance can result in product withdrawal from the market, recalls, fines (varying by Member State), and potentially criminal prosecution for serious violations. Competent authorities can also share information across the EU through RAPEX alerts.
Unlike US MoCRA, the EU Cosmetic Regulation does not provide exemptions based on company size. All requirements — CPSR, Responsible Person, CPNP notification, ingredient compliance — apply equally regardless of business size.
The Annexes are updated regularly through Omnibus regulations, typically several times per year. Major updates in 2023-2025 (Omnibus VI and VII) have restricted numerous ingredients. Always check the CosIng database for current ingredient status.
Post-Brexit, the UK has its own cosmetic regulation (UK Cosmetics Regulation) requiring UK-based Responsible Persons and SCPN notification. However, the technical requirements largely mirror EU requirements, so your CPSR and formulation data can generally be used for both markets.