What ISO 22716 Actually Requires From a Cosmetics Factory

What ISO 22716 actually is (and isn't)

ISO 22716 is the international standard for Good Manufacturing Practice (GMP) in cosmetics — it doesn't certify a product's formula or safety, it certifies that a factory's systems for raw material handling, production, quality control, storage, and shipping are controlled well enough to consistently produce what the specification says. It complements, rather than replaces, national regulatory requirements like FDA facility registration, NPRA GMP listing in Malaysia, or the EU's Cosmetic Products Regulation. A factory can hold ISO 9001 without ISO 22716, but ISO 9001 alone doesn't address cosmetics-specific risks like microbial contamination and cross-contact between formulas — which is why serious buyers ask for both.

Personnel: the standard most factories underestimate

A large share of an ISO 22716 audit is about people, not equipment. Auditors expect documented job descriptions, defined hygiene requirements for anyone entering production areas — gowning, handwashing, no jewelry near open product — and a training record for every operator tied to the specific tasks they perform. Visitors and contractors fall under the same rules. Factories that treat this as paperwork rather than daily practice are usually the ones that fail on this section first.

Premises and equipment: the physical requirements

The standard sets requirements for layout — a logical flow from raw materials to finished goods that minimises cross-contamination risk — surfaces that can be effectively cleaned, defined storage zones for approved versus quarantined versus rejected materials, and a documented cleaning and maintenance schedule for every piece of production equipment. Not a general 'we clean regularly' policy, but specific frequencies, methods, and sign-off records per machine.

Raw materials and traceability

Every raw material needs an approved supplier, a specification, and an incoming inspection or test before it's released to production, plus a batch or lot number that stays attached to the material through to the finished product. This is what makes a recall possible: if one raw material shipment turns out to be non-conforming, the factory can trace exactly which finished batches used it, without pulling every batch made that year.

Production and in-process quality control

ISO 22716 requires a documented batch manufacturing record for every production run — exact quantities, mixing times, temperatures, and equipment used, signed off at each stage — plus in-process checks such as pH, viscosity, and fill weight at defined intervals rather than only at the end. If a batch deviates from spec mid-run, the standard requires a documented deviation and disposition decision, not a quiet adjustment.

Documentation: the part that decides audits

Almost every requirement above ultimately shows up as a document: SOPs, batch records, training logs, calibration certificates, cleaning logs, complaint files. Auditors spend more time reading records than watching the production line, because records are what prove a process happened correctly on a day nobody was watching. A factory that produces excellent product but can't produce the paperwork to demonstrate it will still fail an ISO 22716 audit.

Why this matters to a private label buyer

For a brand sourcing OEM/ODM production, ISO 22716 certification is the baseline signal that a factory can be trusted with your formula, your batch consistency, and your regulatory paperwork when a customs authority or retailer asks for it. It's worth asking a prospective manufacturer directly which parts of the standard they're certified against and whether you can see a redacted batch record — not just whether a certificate exists. Our Rawang facility operates under ISO 9001, GMP, and FDA registration with full batch traceability across formulation, filling, and packaging — see our manufacturing capabilities for how this translates into a private label program.