Private Label Cosmetics Europe: EU Compliance Guide (2026)

Private label cosmetics for Europe is not the same project as private label cosmetics for anywhere else. The formula work is comparable. The compliance work is not. Europe operates a pre-market system built on named legal accountability, a safety assessment signed by a qualified professional, and a technical dossier that has to exist and be accessible before the first unit is sold. Nobody registers your product for you. Somebody has to be legally responsible for it inside the EU, and that somebody has obligations enforceable by market surveillance authorities.

This guide covers what the EU framework actually requires of a private label brand, which parts your manufacturer can carry and which parts it structurally cannot, what the UK now requires separately after Brexit, and what the whole thing costs and takes. It is written for brands choosing a manufacturing partner with European distribution in mind, and for brands who have discovered mid-project that their supplier's compliance support stops further upstream than they assumed.

The Framework: Regulation (EC) No 1223/2009

Cosmetics in the EU are governed by Regulation (EC) No 1223/2009, which replaced the earlier Cosmetics Directive and applies directly across all member states. Being a regulation rather than a directive matters practically: there is no national transposition layer, so the substantive requirements are the same in Germany, Poland, and Portugal. What varies between member states is enforcement intensity and language requirements on labelling, not the underlying rules.

Four obligations define the system, and every private label project for Europe has to solve all four:

• A Responsible Person established in the EU, named on the packaging, legally accountable for the product's compliance.
• A Product Information File (PIF), the technical dossier, kept accessible at the Responsible Person's address.
• A Cosmetic Product Safety Report (CPSR), inside the PIF, prepared by a qualified safety assessor.
• CPNP notification through the EU's central portal before the product is placed on the market.

Manufacturing to Good Manufacturing Practice underpins all of it, with ISO 22716 recognised as the harmonised standard demonstrating GMP compliance. This is where your factory choice becomes a compliance decision rather than a sourcing decision: a supplier without ISO 22716 certification puts your Responsible Person in the position of signing off on a manufacturing base they cannot substantiate.

The Responsible Person: The Part Brands Consistently Misunderstand

The Responsible Person is a legal entity established within the EU that carries accountability for the product's regulatory compliance. Their name and address appear on the packaging. They hold the PIF. They handle communication with national authorities, manage any market surveillance request, and are on the hook for corrective action and, where necessary, withdrawal.

Two consequences follow, and both catch brands out.

A non-EU brand cannot be its own Responsible Person. If you are a US, UK, Australian, or Asian brand selling into the EU, you need an entity inside the EU to take the role, whether that is your own EU subsidiary, your importer, your distributor, or a specialist RP service provider.

Your Chinese manufacturer cannot be your Responsible Person either. This is structural, not a service limitation. The role requires EU establishment, so no manufacturer outside the EU can fill it regardless of how comprehensive their regulatory support is. A factory can build the technical file, run the testing, and hand your RP a complete dossier. It cannot be the RP.

There is a related trap on the distribution side. Where a distributor places a product on the market under its own name or brand, or modifies an already-marketed product in a way that affects compliance, that distributor can itself become the Responsible Person, inheriting the full obligation set. Private label brands should read that carefully, because "under its own name or brand" describes exactly what private label is. If you appoint a distributor for a European market and they relabel, you need clarity in writing about who holds the RP role, because the default legal answer may not be the commercial one you assumed.

The Product Information File and the Safety Report

The PIF is the dossier that proves the product is safe and lawfully made. It is kept at the Responsible Person's address in the EU, available to the competent authority of that member state, and it must remain available for a defined retention period after the last batch was placed on the market. It is not a filing you submit; it is a file you must be able to produce on request.

Its contents cover the product description, the Cosmetic Product Safety Report, a description of the manufacturing method along with a statement of GMP compliance, evidence of claimed effects where the nature of the claim warrants it, and data on animal testing.

Inside the PIF, the CPSR has two parts and the distinction is worth understanding because it determines who does what:

• Part A, safety information. The compiled data set: quantitative and qualitative formula composition, physical and chemical characteristics and stability, microbiological quality, impurities and packaging material information, normal and reasonably foreseeable use, exposure to the product and to its substances, the toxicological profile of the substances, undesirable effects data, and any other relevant information. This is largely a data assembly task, and it is the part a competent manufacturer can prepare.
• Part B, safety assessment. The conclusion, the reasoning behind it, any warnings and instructions for use, and the assessor's credentials and signature. This part must be produced by a person holding an appropriate qualification, typically in pharmacy, medicine, toxicology, or a comparable discipline recognised in a member state.

The practical division of labour: your factory generates and assembles Part A, your safety assessor writes and signs Part B. A supplier claiming to "provide the CPSR" is really providing the inputs, and you should confirm which side of that line their service actually sits on before assuming the assessment is covered.

CPNP Notification

Before a cosmetic product is placed on the EU market, the Responsible Person notifies it through the Cosmetic Products Notification Portal. The submission covers product identification, the Responsible Person's details, the country of origin for imports, the member state where the product will be made available, contact details for a physical person to reach in case of need, the presence of substances in nanomaterial form, the presence of CMR substances of category 1A or 1B, the frame formulation, and, where applicable, the original labelling and packaging photograph.

Two things about CPNP that brands routinely get wrong. It is free to use, so the cost figures you see quoted for "EU registration" are the cost of the safety assessment, the RP service, and the file preparation, not a government fee. And only the Responsible Person can notify, which means notification cannot happen until the RP arrangement is in place. Brands that leave the RP appointment until product is already in transit create a delay that is entirely avoidable.

The purpose of the notification is largely to give poison centres and market surveillance authorities access to formulation information, which is why the frame formulation is required rather than your full proprietary recipe.

Labelling: Where Compliance Meets the Print Run

EU labelling requirements are the most operationally disruptive part of the framework, because getting them wrong means reprinting cartons rather than adjusting a document. Mandatory elements include the name and address of the Responsible Person, the nominal content, the date of minimum durability or the period-after-opening, precautions for use, the batch number, the product function where it is not obvious from presentation, the country of origin for imported products, and the ingredient list in INCI nomenclature in descending order.

Three requirements deserve extra attention on a private label project:

• Durability marking. Products with a minimum durability of more than 30 months carry the period-after-opening symbol, the open jar with a number of months, rather than a best-before date. Products with 30 months or less carry a date of minimum durability. Choosing the wrong one is a common private label error.
• Language. Certain elements, in particular precautions and the product function, must appear in the language of the member state where the product is made available. Multi-market European distribution therefore means either multilingual packaging designed in from the start, or separate print runs. Planning for this before artwork is finalised is far cheaper than retrofitting it.
• INCI accuracy. The ingredient list has to reflect the actual formula in correct nomenclature and correct descending order. This is generated from the manufacturer's formulation data, which is why artwork should be built from the factory's INCI output rather than transcribed by a design agency.

Restricted Substances and Formula Changes

The regulation controls composition through annexes: prohibited substances, restricted substances with conditions of use, and positive lists for colourants, preservatives, and UV filters. Substances classified as carcinogenic, mutagenic, or toxic for reproduction are prohibited from use in cosmetics, subject to narrowly defined exceptions, and the prohibited list is updated as classifications change.

The operational point for brands is that the annexes are amended regularly. Regulation (EU) 2024/996 is a recent example of an amendment that changed the status of specific substances and required affected products to be reformulated to stay on the market. This is not a one-off compliance event; it is an ongoing maintenance obligation. A formula that was compliant when notified may need reformulation later, and your manufacturer's ability to respond to an annex change on a reasonable timeline is a real selection criterion, not a hypothetical one.

Animal testing sits in the same category of hard constraints. The EU testing ban on finished cosmetic products took effect in September 2004, the ingredient testing ban in March 2009, and the full marketing ban, prohibiting the sale of cosmetics whose ingredients or final formulation were animal-tested, took full effect in March 2013. For a private label brand, this means the testing status of your raw materials is a market-access question for Europe, and your supplier needs to be able to document it. Brands building on that basis often pursue vegan and cruelty-free positioning at the same time; our guide to vegan private label cosmetics covers what that documentation looks like in practice.

The United Kingdom Is Now a Separate Project

Post-Brexit, Great Britain operates its own regime. The requirements mirror the EU framework closely in substance, and they are administratively separate. That means a UK Responsible Person established in the UK, notification through the UK's Submit Cosmetic Product Notifications service rather than CPNP, and a UK-held product information file.

Treat the UK as an additional market entry rather than an extension of your EU launch. The formula and much of the technical data carry over; the legal entity, the notification, and the file location do not. Brands that assume EU compliance covers the UK discover the gap at the point a UK retailer asks for the RP address.

Manufacturing in Europe vs Manufacturing in Asia for the European Market

Brands planning a European launch face a genuine fork: produce inside the EU, or produce in Asia and import. Both routes are legitimate and each is clearly better for certain situations. We manufacture in China, so take our view for what it is, but the tradeoffs below are the ones that actually decide the question, and pretending they run only one way would not help you.

Where European manufacturers have the real advantage

Minimum order quantity. This is the biggest structural difference and it is not close. European private label suppliers routinely quote minimums in the 100 to 500 unit range. Asian factories, ours included, work from 1,000 units for entry-level private label and 3,000 units for custom development. If you are launching one SKU to test a market, a European supplier lets you do it with a fraction of the inventory risk.

Proximity to the compliance layer. An EU-based manufacturer is already inside the jurisdiction. They frequently offer Responsible Person services or have established relationships with RP providers and safety assessors, which turns three separate vendor relationships into one. That has real value when you are launching a first product and do not yet know what you do not know.

Lead time and freight. No ocean transit, no customs entry, no import duty calculation. Sea freight from China to Europe runs 25 to 35 days before you add port handling, which sits on top of production time and has to be planned around rather than compressed.

"Made in EU" on the carton. Country of origin is a mandatory label element for imported products, and in some European retail channels and premium price positions the origin statement affects how the product is received. Whether that matters depends entirely on your positioning.

Where Asian manufacturing has the real advantage

Unit cost at volume. The gap is meaningful and it widens as quantities rise. Below a few thousand units the freight and compliance overhead can erase the difference; above that, the unit economics are what fund your marketing budget.

Category breadth under one roof. We produce skincare, body care, hair care, and aromatherapy in the same facility. Building a multi-category range with one European supplier per category means multiple MOQs, multiple sample cycles, and multiple quality baselines. One partner across categories is an operational simplification, not just a cost one.

Formulation and packaging development capacity. Larger Asian facilities carry more in-house R&D headcount and deeper packaging supplier networks, which matters when your brief is genuinely custom rather than a catalogue selection.

Multi-market documentation in one place. Most brands do not sell only in Europe. A factory that routinely prepares dossiers for EU, ASEAN, GCC, and US markets assembles one technical data set that serves all of them. If you are producing in Europe and later expanding into Southeast Asia, you rebuild that work.

Neither route changes the compliance obligations

This is the part that gets misrepresented in both directions, so it is worth stating plainly. Producing inside the EU does not remove the requirement for a Responsible Person, a Product Information File, a signed safety assessment, or CPNP notification. Those obligations attach to placing the product on the market, not to where it was made. An EU factory may make it more convenient to arrange them, and it does not make them go away.

Equally, producing in Asia does not make EU compliance harder in substance. The technical data set is the same, the safety assessor works from the same inputs, and the notification process is identical. What changes is that you will appoint your Responsible Person separately rather than getting it bundled, and your factory will hand your assessor a dossier rather than sign the assessment itself.

The honest decision rule

Choose a European manufacturer when your first order is small, you want compliance bundled, you are testing one or two SKUs, or "Made in EU" is part of your positioning. Choose an Asian manufacturer when your volumes justify the unit-cost difference, your range spans multiple categories, your formula needs real development work, or Europe is one of several markets rather than the only one.

The failure mode to avoid is choosing on unit price alone at low volume. A 1,000-unit order where freight, duty, and per-product regulatory cost are spread across 1,000 units frequently lands at a worse landed cost than a 500-unit European run. Run the landed-cost arithmetic on your actual first order quantity, not on the price-per-unit at 10,000. Run the numbers on the freight, duty, and per-product regulatory cost set out in the next section before committing to either route.

What It Costs and Who Pays for What

Using the same figures we publish across our cost guidance, the regulatory line items for Europe run roughly as follows.

European Union, per product: CPSR $2,500 to $5,000; CPNP notification free but conditional on having an EU Responsible Person; EU Responsible Person service $1,000 to $3,000 annually; PIF either included with the CPSR or $500 to $1,500 separately. Total first-year cost lands around $4,000 to $9,500 per product.

United Kingdom, per product: SCPN notification requiring a UK Responsible Person; UK RP service $800 to $2,500 annually; a separate CPSR at $1,500 to $4,000 where the EU CPSR is not accepted. Total around $2,300 to $6,500 per product.

Two things follow from those numbers. First, per-product regulatory cost makes SKU count a strategic decision for Europe in a way it is not for ASEAN markets, where ASEAN notification runs $300 to $1,500 per product per country. Launching three SKUs into the EU can carry more regulatory cost than launching ten into Southeast Asia. Launch narrow, prove the range, then extend.

Second, a manufacturer with in-house regulatory capability changes the arithmetic. Where the factory prepares the technical documentation, the stability and microbiological data, and the formulation breakdown as part of the project, the external consultant work shrinks to the safety assessment and the RP service. Our full MOQ and cost breakdown sets out the rest of the cost structure alongside these figures.

What a European Private Label Project Looks Like From Our Side

We manufacture in Guangzhou under ISO 22716 and GMPC with SGS testing support, across skincare, body care, hair care, and aromatherapy. For projects with European distribution, the work splits cleanly into what we can carry and what has to sit with an EU entity.

What we provide: formulation and development, ISO 22716 manufacturing evidence for the production site, stability and compatibility testing, microbiological and challenge testing, Certificates of Analysis per batch, full quantitative formula breakdown and INCI listing in correct order for artwork, raw material specifications and supplier documentation, and the assembled technical data set that a safety assessor needs to write Part B.

What we cannot provide: the Responsible Person role, because that requires EU establishment; the signed Part B safety assessment, because that requires a qualified assessor recognised in a member state; and the CPNP submission, because only the RP can notify.

Being direct about that boundary is more useful than claiming full EU compliance service, which some suppliers do and then cannot deliver. What matters when you are evaluating manufacturers is whether the documentation they hand over is complete enough that your assessor and RP do not have to go back to the factory with follow-up questions three times.

On timelines: our standard custom sample cycle is 2 to 3 weeks per round, production runs 35 to 45 days, and MOQ is flexible from 1,000 units per SKU for entry-level private label work and from 3,000 units for custom development. Around that, budget realistically for the safety assessment and notification sequence, which runs in parallel with production rather than after it if you organise it properly. Categories that transfer well to European launches tend to be the ones where formulation is straightforward and the compliance file is clean, hydrating serums, botanical body washes, and simple moisturiser ranges. Complex actives, high-SPF sunscreens, and anything close to a borderline claim add both assessment cost and assessment time.

Sequence That Avoids Rework

• Confirm the RP arrangement before development finishes, not after production. Notification cannot proceed without it, and the RP's name has to be on the artwork.
• Verify ISO 22716 certification at the factory, with the certificate in hand and the scope checked against your product category.
• Freeze the formula before the safety assessment starts. Any composition change after the CPSR is written means revisiting the assessment.
• Build artwork from the factory's INCI output and decide the durability marking and language strategy before print.
• Run the assessment and notification in parallel with production, so goods do not sit in a warehouse waiting for a portal submission.
• Treat the UK as a separate track from the outset if it is in your plan.

If you are still deciding between manufacturing models before tackling any of this, our private label cosmetics guide covers how the models differ on cost, control, and speed, which is worth settling first because it determines who holds the formula and therefore who can respond when an annex changes.

Frequently Asked Questions

Can my Chinese manufacturer be my EU Responsible Person?

No. The Responsible Person must be a legal entity established within the EU, so no manufacturer outside the EU can hold the role regardless of how strong its regulatory support is. Your manufacturer can prepare the technical documentation your RP needs; the role itself has to sit with an EU entity, whether your own subsidiary, an importer, a distributor, or a specialist RP service.

How much does it cost to launch a private label cosmetic in the EU?

Budget roughly $4,000 to $9,500 per product for the first year, covering CPSR at $2,500 to $5,000, EU Responsible Person service at $1,000 to $3,000 annually, and PIF preparation either bundled with the CPSR or $500 to $1,500 separately. CPNP notification itself is free. Costs shrink where the manufacturer prepares the technical data set in-house.

Is CPNP notification a registration or an approval?

Neither. It is a notification. There is no pre-market approval for cosmetics in the EU and no authority signs off on your product. Responsibility for safety and compliance rests with the Responsible Person, and authorities intervene through market surveillance after the product is on the market.

Does EU compliance cover the United Kingdom?

No. Great Britain operates a separate regime requiring a UK-established Responsible Person, notification through the UK's Submit Cosmetic Product Notifications service, and a UK-held product information file. The technical data largely carries over; the legal entity, notification, and file location do not.

Who writes the Cosmetic Product Safety Report?

It is split. Part A, the safety information data set, can be assembled by the manufacturer. Part B, the safety assessment and its conclusions, must be prepared and signed by a person holding an appropriate qualification, typically in pharmacy, medicine, toxicology, or a comparable discipline recognised in a member state.

Do I need ISO 22716 certification from my factory?

In practical terms, yes. GMP compliance is required and ISO 22716 is the harmonised standard used to demonstrate it. Without it, your Responsible Person is asked to accept accountability for a manufacturing base they cannot substantiate, and market surveillance requests become difficult to answer.

What happens if an EU annex changes after my product is on the market?

You may need to reformulate. The annexes controlling prohibited and restricted substances are amended regularly, and amendments can require reformulation of products already on the market within a transition period. This is an ongoing obligation, which is why your manufacturer's responsiveness to formula changes matters at selection time.

Can I use the same labels across all EU member states?

Only if they are designed for it. Certain mandatory elements, including precautions for use and the product function, must appear in the language of the member state where the product is made available. Multi-market distribution means either multilingual artwork planned from the start or separate print runs.

The Short Version

Europe rewards preparation and punishes improvisation. There is no approval to wait for, which sounds permissive until you understand that the accountability has simply been relocated onto a named Responsible Person inside the EU and onto a technical file that has to withstand inspection at any time. The controllable variables are these: pick a manufacturer whose ISO 22716 certification and documentation output are real, appoint your Responsible Person before artwork rather than after production, freeze the formula before the safety assessment, and treat the UK as its own project. Do those four things and European market entry is a schedule to manage rather than a problem to solve. If you are planning a European launch and want a manufacturing partner that hands your assessor a complete file the first time, request a quote with your target markets and SKU list.