Cosmetics
EU Cosmetics Compliance: Responsible Person, CPNP and the PIF
EU cosmetic regulations run on their own dedicated legal basis — not GPSR, not CE marking. To sell cosmetics in the EU and stay on the right side of cosmetic product compliance EU-wide, a genuine cosmetic product needs a cosmetics Responsible Person EU rules require by name, a CPNP registration filed before you sell a single unit, and a Product Information File a qualified safety assessor has actually signed off on. This page is the EU cosmetics market access starting point for exactly that — everything you need to sell cosmetics in EU markets legally, in one place.
What Every Cosmetic Product Needs
- A Cosmetics Responsible Person: EU-established, legally accountable per product
- CPNP notification: filed before the product is placed on the market, not after
- A Product Information File: retained 10 years past the last batch
- A Cosmetic Product Safety Report: written by a qualified safety assessor
Quick answer: EU cosmetics compliance runs on Regulation (EC) No 1223/2009, entirely separate from GPSR or CE marking. A genuine cosmetic product needs an EU-established Responsible Person (often the importer by default, though importers frequently decline the role given the liability attached), a CPNP notification filed before the product reaches EU consumers, and a Product Information File built around a Cosmetic Product Safety Report from a qualified safety assessor. None of GPSR's Responsible Person requirements apply on top of this — cosmetics have their own dedicated regime, and GPSR explicitly steps back where a product-specific regime like this one already covers it.
Why "EU Cosmetics Compliance" Confuses So Many Sellers
The Terminology Overlap Is Real, and It's the Actual Source of the Confusion
Search "EU cosmetic responsible person" and you'll find content that quietly conflates it with the general GPSR Responsible Person — sometimes because the author genuinely doesn't know they're different roles, sometimes because a service provider offering GPSR RP services finds it convenient not to draw the distinction too sharply. Both roles are real, both are called "Responsible Person," and both are genuinely required for many sellers — but for different products, under different regulations, with different obligations attached. Getting this wrong in either direction has a real cost: appointing only a GPSR RP for a genuine cosmetic leaves the actual cosmetics-specific obligations (CPNP, the PIF, the CPSR) completely unmet, while assuming a cosmetics RP also covers GPSR-only adjacent products in the same catalogue leaves those products under-covered instead.
This page exists to make that distinction explicit and to walk through what the cosmetics-specific regime actually requires, since it is genuinely a complete, self-contained regulatory system rather than an add-on to the general product-safety rules covered elsewhere on this site.
Disambiguation
Cosmetics Responsible Person vs GPSR Responsible Person
The single most common confusion sellers run into — because the two roles share a name but come from entirely different regulations with different obligations.
Cosmetics Responsible Person
Created by Regulation (EC) No 1223/2009 specifically for cosmetic products. Holds the Product Information File, files the CPNP notification, and answers to national cosmetics authorities — a role that exists only because the product is legally a cosmetic.
GPSR Responsible Person
Created by the General Product Safety Regulation for consumer products broadly. Genuine cosmetics never need this role — GPSR's Responsible Person requirement applies to products without their own dedicated safety regime, and cosmetics already have one.
The practical trap: a brand selling both genuine cosmetics (needing the Cosmetics RP) and adjacent non-cosmetic items — brushes, applicators, gadgets, storage cases — in the same catalogue needs to check each SKU separately, since the adjacent items fall back to GPSR's Responsible Person instead.
CPNP
Getting Notified Before You Sell a Single Unit
CPNP (the Cosmetic Products Notification Portal) is a mandatory pre-market-entry step — not an optional registration you can catch up on later.
Finalise the formulation and category
The exact ingredient list and product category (skincare, haircare, colour cosmetics and others each have their own considerations) need to be locked before notification, since the CPNP submission is built around them.
Commission the Cosmetic Product Safety Report
A qualified safety assessor produces the CPSR — Part A (safety information: toxicological profile, exposure, stability) and Part B (the assessor's actual safety conclusion) — the scientific backbone the whole file rests on.
Submit through CPNP
The Responsible Person files the notification — product category, formulation, labelling, and RP contact details — with a separate nanomaterial notification required alongside the standard one where relevant.
Assemble and retain the Product Information File
The PIF wraps the CPSR together with formulation records and manufacturing evidence, held by the Responsible Person and retained for 10 years past the last batch placed on the market.
PIF vs CPSR
Two Different Documents, Often Confused
| Product Information File (PIF) | Cosmetic Product Safety Report (CPSR) | |
|---|---|---|
| What it is | The complete file — formulation, manufacturing/GMP evidence, labelling, claims substantiation | The scientific safety assessment specifically — one component that sits inside the PIF |
| Who produces it | Compiled by or for the Responsible Person | Written by a qualified safety assessor specifically |
| Retention | 10 years past the last batch placed on the market | Held as part of the PIF, same retention period |
Real Scenario
A Pattern Worth Checking Your Own Launch Against
The indie skincare brand blocked at CPNP
A genuinely common pattern for smaller cosmetics brands entering the EU: the formulation and packaging are finished, the launch date is set, and the brand discovers at CPNP submission time that no qualified safety assessor has actually signed off on a real CPSR — the "safety testing" completed earlier was cosmetic-adjacent lab work, not the specific regulatory safety assessment CPNP requires. The notification can't go through without it, and safety assessment is not something that can be compressed into days once discovered late, unlike some documentation gaps on other regimes.
Going Deeper
The Four Areas Inside EU Cosmetics Compliance
This page covers all four at the level most sellers need — each one also now has its own deeper dedicated guide, linked below.
Market access & classification
Confirming your product legally qualifies as a cosmetic under Regulation (EC) No 1223/2009 in the first place, including the borderline medical-device and biocide cases.
Responsible Person
Who can hold the role, real cost by scenario, and why importers commonly decline it by default.
CPNP notification
The exact data fields submitted, the pre-submission checklist, and why the real cost sits upstream of the filing itself.
PIF & CPSR
What each document actually contains field by field, and the Part A/Part B breakdown of the CPSR.
Cost & Complexity
Indie Brand vs Established Manufacturer
Indie or first-time brand
Third-party Responsible Person and safety-assessor services exist specifically for smaller brands that don't need or want an in-house regulatory function — cost scales per product/SKU rather than as a flat company-wide fee, since each formulation needs its own CPSR.
Established manufacturer, larger catalogue
At real scale, an in-house or dedicated Responsible Person arrangement across many SKUs can become more cost-effective than per-product third-party fees — the crossover point depends on catalogue size and formulation-change frequency, not a fixed rule.
Third-party Responsible Person services in the market commonly price per product per year rather than as one flat company fee — treat any quoted number as illustrative of the pattern, not a number you should expect to match exactly, and confirm current pricing directly with a provider.
FAQ
Common Questions About EU Cosmetics Compliance
How is EU cosmetics compliance different from GPSR compliance?
They are entirely separate regulations. GPSR is the general consumer-product safety baseline; cosmetics have their own dedicated regime under Regulation (EC) No 1223/2009, with its own Responsible Person concept, its own pre-market notification system (CPNP), and its own required documentation (the PIF and CPSR). A genuine cosmetic product does not also need a GPSR Responsible Person.
Who can be the cosmetics Responsible Person?
An EU-established manufacturer, importer or distributor can hold the role, or it can be delegated to a qualified third-party service. By default the importer often becomes the Responsible Person, but importers frequently decline given the direct liability attached, which is the actual driver of demand for dedicated third-party Responsible Person services.
What is CPNP notification, in plain terms?
CPNP (Cosmetic Products Notification Portal) is the EU's mandatory pre-market notification system for cosmetics — the Responsible Person submits product category, formulation, labelling and contact details before the product can legally be sold, plus a separate nanomaterial notification where relevant.
What is a Cosmetic Product Safety Report and who writes it?
The CPSR is the scientific safety assessment behind every cosmetic product — Part A covers the underlying safety information (toxicological profile, exposure scenario, stability), Part B is the qualified safety assessor's actual conclusion. It must be written by a suitably qualified safety assessor, not self-certified by the brand.
How long do I need to keep the Product Information File?
Ten years from when the last batch of that product is placed on the EU market — the same retention horizon applies to the CPSR held inside it, since the PIF and CPSR are retained together as one file.
Does a product with only mild "cosmetic-adjacent" claims count as a cosmetic under EU law?
Only if it meets the legal definition of a cosmetic product under Regulation (EC) No 1223/2009 — intended for application to external parts of the body or teeth/mucous membranes for cleansing, perfuming, changing appearance, protecting or keeping in good condition. Products making cosmetic-adjacent claims without meeting that definition may fall under GPSR or another regime instead — confirm the legal classification before assuming this page's requirements apply.
Can I sell cosmetics in the EU without an EU-based company?
Yes — appointing a Responsible Person does not require you to incorporate an EU entity yourself. A third-party Responsible Person service, or an EU-based importer or distributor willing to take on the role, both satisfy the requirement without you setting up your own EU company.
What happens if I sell a cosmetic in the EU without CPNP notification?
The product is being placed on the market without satisfying a mandatory pre-market requirement, which exposes it to enforcement action by national cosmetics authorities and creates real liability for whoever should have held the Responsible Person role — this is not a paperwork step that can be safely skipped or backfilled after the fact.
Do I need a new CPSR every time I tweak a formulation?
A material change to the formulation — a new ingredient, a changed concentration that affects the safety profile, or a new intended use — generally requires the safety assessor to revisit the CPSR, since the original safety conclusion was written for the specific formulation assessed. A cosmetic-adjacent packaging or fragrance-note change with no safety-relevant ingredient impact is a different situation, but the safety assessor, not the brand, should make that call.
How much does a cosmetics Responsible Person EU service cost?
A cosmetic Responsible Person service typically prices per product or per formulation rather than as one flat company fee, since each product needs its own CPSR and PIF — the cosmetics Responsible Person EU cost scales with catalogue size and formulation-change frequency rather than a single number that applies to every brand.
What does CPNP notification cost, and is it separate from the Responsible Person fee?
CPNP notification itself is a free portal submission — the real cost sits in what has to be ready before you can submit: the CPSR from a qualified safety assessor and the underlying formulation and safety data. A cosmetics CPNP EU filing without that groundwork already done is where cost and delay actually come from, not the notification step itself.
What exactly goes into a cosmetic PIF for the EU?
A cosmetic PIF EU regulators expect contains the full formulation, manufacturing and GMP evidence, labelling, claims substantiation, and the CPSR itself as its scientific core — see the PIF vs CPSR comparison above for how the two documents relate. A product information file cosmetics EU regulators can request is retained by the Responsible Person for 10 years past the last batch sold.
Who actually produces the CPSR? EU cosmetics rules are specific about this.
A CPSR EU cosmetics regulators will accept has to be written by a suitably qualified safety assessor, not self-certified by the brand or a general lab — this is the single most commonly underestimated step in getting a genuinely new cosmetic product ready for CPNP notification.
Related Guides
Where to Go Next
GPSR & Responsible Person
The general regime cosmetics are explicitly carved out from — see the disambiguation above.
Economic Operators
How the manufacturer/importer/distributor roles interact with a product-specific Responsible Person.
EU Product Requirements
See where cosmetics sits among every other EU requirement cluster.
Where the Facts Come From
Sources for This Page
Regulation (EC) No 1223/2009 (Tier 1, EUR-Lex) is the sole legal basis for everything on this page — the Responsible Person concept, CPNP, the PIF and the CPSR are all defined directly in this regulation, not assembled from secondary guidance.
Is your product actually a cosmetic under EU law?
Run the free Product Compliance Check to confirm your product's classification and which requirements genuinely apply before you commission a CPSR.
Check Your Product →