EU Cosmetics Registration: What the CPNP System Requires from Non-EU Brands

EU cosmetics registration through the CPNP system is mandatory for every cosmetic product sold in the European Union — and it is the requirement that catches most non-EU brands off guard. The Cosmetic Products Notification Portal (CPNP) is the EU's central database for cosmetic products. Every product must be notified through CPNP before it can be legally placed on the EU market. But CPNP notification is just one piece of a larger compliance framework that includes appointing an EU Responsible Person, compiling a Product Information File, and completing a Cosmetic Product Safety Report.

What the CPNP system is and why it exists

The CPNP is an electronic notification system established under EU Regulation 1223/2009, the primary law governing cosmetics in the European Union. It serves two purposes: it gives market surveillance authorities a complete registry of every cosmetic product available in the EU, and it gives poison control centers immediate access to product composition data in case of medical emergencies. Every cosmetic product — from a luxury serum to a bar of soap — must be notified through CPNP before the first unit is sold.

The notification must include the product category, the product name as it appears on the label, the country of origin, the member state where the product will first be placed on the market, the contact details of the Responsible Person, the frame formulation or exact composition (depending on the product category), and the original product label. If any of this information changes — a reformulation, a new distributor, a label update — the CPNP notification must be updated before the revised product reaches the shelf.

The EU Responsible Person requirement

Non-EU brands cannot notify products through CPNP directly. The notification must be submitted by an EU Responsible Person — a legal entity established within the European Economic Area (EEA) that takes legal responsibility for the product's compliance with EU Regulation 1223/2009. The Responsible Person is not an optional intermediary. Without one, the CPNP system will not accept the notification, and the product cannot legally enter the EU market.

The Responsible Person's obligations go well beyond filing the notification. They must hold the Product Information File for each product, make it available to market surveillance authorities upon request, report serious undesirable effects to the competent authority of the member state where the effect occurred, and take corrective action — including product withdrawal — if a product is found to be non-compliant. Choosing a Responsible Person is not a branding decision. It is a legal appointment that creates binding obligations under EU law.

For non-EU brands, the Responsible Person is typically either the EU-based importer (if they agree to take on the role) or a contracted Responsible Person service provider. The key point is that someone within the EEA must be legally accountable for the product. A distributor in Dubai, a manufacturer in South Korea, or a brand owner in the United States cannot serve as the Responsible Person — the entity must have a physical establishment in the EU or EEA.

Product Information File and safety assessment

Every cosmetic product placed on the EU market must have a Product Information File (PIF) compiled and maintained by the Responsible Person. The PIF includes the product description, the Cosmetic Product Safety Report (CPSR), a description of the manufacturing method, evidence of the claimed effects, and data on animal testing if applicable. The PIF must be kept for 10 years after the last batch of the product is placed on the market.

The Cosmetic Product Safety Report is the most technically demanding component of the PIF. Part A of the CPSR covers the quantitative and qualitative composition of the product, physical and chemical specifications, microbiological quality, impurities, packaging information, normal and reasonably foreseeable use, exposure calculations, toxicological profiles of each ingredient, and undesirable effects. Part B is the safety assessment conclusion, which must be signed by a qualified safety assessor — a person holding a university diploma in pharmacy, toxicology, medicine, or a related discipline as defined in Article 10 of the regulation.

Non-EU brands often underestimate the depth of the safety assessment. A product that has been safely sold in the US, Japan, or Australia for years still requires a full CPSR for the EU market. Previous market history does not substitute for the formal assessment. The safety assessor must independently evaluate the product based on the data provided, and the conclusion must be specific to the formulation and intended use as presented on the EU label.

How EU cosmetics registration differs from MoCRA in the United States

Brands entering both the US and EU markets often assume the compliance requirements are similar. They are not. Under the US MoCRA framework, cosmetic facility registration and product listing are filed with the FDA, and there is no mandatory pre-market safety assessment by a qualified assessor. The EU system requires a full safety assessment before the product reaches the market. MoCRA does not require a Responsible Person — the FDA communicates directly with the facility or its US Agent. The EU system makes the Responsible Person the central legal point of contact.

Labeling requirements also differ. The EU mandates ingredient listing using INCI nomenclature, specific symbols for period-after-opening (PAO), batch coding, and function-based product descriptions. US labeling under the FD&C Act and the Fair Packaging and Labeling Act has its own requirements around ingredient declaration, net quantity, and distributor identification. A label that satisfies FDA requirements will almost never satisfy EU requirements without modification, and vice versa.

Common CPNP notification mistakes non-EU brands make

The most frequent CPNP filing error is submitting a notification without a valid Responsible Person appointment in place. The notification will either be rejected or, if it goes through with incorrect RP data, it creates a compliance exposure that market surveillance authorities can flag during routine checks. Another common mistake is filing the notification with a frame formulation when the product category requires exact composition data — or vice versa. Getting this wrong means the notification does not meet the regulation's requirements, even though the system accepted it.

Label uploads are another problem area. The CPNP requires the original label as it will appear on the product in the EU market, not a draft or a label from another market. Uploading a US-market label with FDA-compliant formatting will not satisfy the CPNP requirement. The label must show the EU Responsible Person's name and address, INCI ingredient listing, PAO symbol, and all mandatory EU label elements before it is uploaded to the system.

How FDABridge handles EU cosmetics registration and CPNP notification

FDABridge manages the full EU cosmetics registration process for non-EU brands — from Responsible Person appointment through CPNP notification and Product Information File preparation. We coordinate the safety assessment, compile the PIF documentation, submit the CPNP notification, and keep the filing current as your product line changes. Visit fdabridge.com/eu-cosmetics to see our EU cosmetics services or fdabridge.com/contact to discuss your product portfolio.