EU Cosmetics Regulation 1223/2009: What Overseas Brands Must Know Before Importing

Regulation (EC) No 1223/2009 is the framework that governs every cosmetic product sold in the European Union, and it applies regardless of where the product is manufactured. A brand producing in Malaysia, the US, or anywhere outside the EU still has to meet the same requirements as a brand manufacturing domestically in France or Germany — the obligations just fall on different parties in the supply chain.

You need a "Responsible Person" inside the EU

The single most important requirement for non-EU brands is designating a Responsible Person — a legal or natural person established within the EU who takes on regulatory accountability for the product. The Responsible Person ensures the product complies with the regulation, keeps the Product Information File accessible to authorities, and is the point of contact if a safety issue arises. A product cannot legally be placed on the EU market without one, and this role can't be filled by anyone outside the EU, including the manufacturer itself if it's based elsewhere.

The Product Information File (PIF)

Every cosmetic product sold in the EU needs a PIF — a compiled dossier including the product description, the Cosmetic Product Safety Report (CPSR, prepared by a qualified safety assessor), the manufacturing method summary confirming GMP compliance, evidence of claimed effects, and data on any animal testing (none is permitted for finished cosmetic products sold in the EU, and this is audited). The PIF must be kept available to regulatory authorities for ten years after the last batch is placed on the market.

CPNP notification, before the product ships

Before a product can be sold, it must be notified through the Cosmetic Products Notification Portal (CPNP) — a centralised EU database. This notification includes product category, presence of nanomaterials or CMR substances, and packaging photos, and must happen before the first unit reaches an EU market, not after.

Ingredient restrictions are stricter than most non-EU markets

The EU maintains one of the most restrictive positive/negative ingredient lists globally — certain preservatives, UV filters, and colorants permitted in the US or Southeast Asia are restricted or banned outright in the EU, and allowed concentration limits frequently differ even for shared ingredients. A formulation approved for the US or Malaysian market cannot be assumed compliant for the EU without a dedicated ingredient review against Annexes II–VI of the regulation.

What this means practically for a sourcing brief

• Confirm early whether your manufacturer can supply — or help you appoint — an EU Responsible Person; this is not optional and can't be added after production.
• Ask whether the formulation has already been screened against current EU restricted-substance lists, or whether that review still needs to happen.
• Request a manufacturing method summary confirming ISO 22716 / GMP compliance — this feeds directly into the CPSR your safety assessor will need.
• Build CPNP notification lead time into your launch schedule; it's a procedural step, but it has to happen before, not during, your first EU shipment.

None of this is a reason to avoid EU-bound manufacturing — it's a reason to sequence the compliance work correctly. Brands that treat EU regulatory prep as a final-stage checkbox routinely lose months at launch; brands that fold it into the initial formulation brief rarely notice the requirement at all.