How EU Authorities Detect Non-Compliant Cosmetics: CPSR, Labelling, and Documentation Checks

Most brands think compliance checks are simple, until EU authorities proves otherwise. In reality, EU cosmetic authorities conduct routine compliance checks every day across online marketplaces, retail stores, warehouses, customs checkpoints, and the Cosmetic Product Notification Portal (CPNP). 

EU authorities do not only review paperwork. They verify whether your:

• Cosmetic Product Safety Report (CPSR) is valid
• The  Product Information File (PIF)  is complete
• Labelling complies with Article 19
• Ingredient list matches the actual formulation
• Stability and microbiological testing support product claims
• Packaging and safety warnings align with regulatory requirements 

This guide shows how compliance checks actually work, and where brands fail most.

Why EU Cosmetic Regulation Enforcement Matters?

Many cosmetic brands, particularly those entering the EU market from outside, assume that compliance is primarily a paperwork exercise. The EU operates one of the most structured, multi-layered enforcement systems in the world for consumer product safety, and cosmetics fall squarely within its crosshairs.

Regulation (EC) No 1223/2009 is the cornerstone legislation governing all cosmetic products sold within the EU and EEA. It defines obligations for the Responsible Person (RP), sets out requirements for the Product Information File (PIF), mandates safety assessments, and governs labelling compliance in exacting detail. National authorities in each member state are empowered to act on this regulation independently, which means enforcement can happen anywhere at any time.

Understanding this system is the first step toward building a product that does not just reach the shelf.

EU Compliance Checks and Enforcement System 

Step 1: Market Surveillance Inspection

How EU Authorities Start Compliance Checks 

EU market surveillance is continuous, systematic, and intelligence-driven. National health ministries, customs agencies, and consumer protection bodies all play active roles in monitoring the cosmetics market. Their starting point is almost always the Cosmetic Product Notification Portal (CPNP), the mandatory pre-market notification system that every Responsible Person must use before placing a product on the EU market.

Authorities conduct random audits through the CPNP, cross-referencing product registrations with market presence and querying Responsible Persons for documentation at short notice. If your product is on the market but not properly notified, or if the RP details are incomplete or outdated, that alone can trigger a formal investigation.

Beyond the portal, routine inspections are conducted at retail locations, distribution warehouses, and border checkpoints. Customs officials are trained to identify suspicious or non-compliant cosmetic shipments entering EU territory, particularly those with missing or foreign-language-only labelling.

Responsible Person Role in Compliance Checks 

Every cosmetic product sold in the EU must have a designated Responsible Person based within the EU or EEA. The RP is the legal entity that authorities contact first during any compliance check, and they are expected to produce documentation immediately upon request. If your RP cannot respond promptly and completely, it signals non-compliance regardless of the product’s actual safety status.

Safety Gate and EU Enforcement Alerts 

One of the most powerful tools in EU cosmetic regulation enforcement is the Safety Gate, previously known as RAPEX. When a non-compliant or unsafe cosmetic product is detected in one member state, it is immediately notified through Safety Gate to all EU member states. This triggers simultaneous inspections across borders, meaning a product flagged in Germany could be pulled from shelves in France, Poland, and Spain within days.

Safety Gate notifications are publicly accessible, which also means that the reputational damage from a flagged product extends far beyond any single market.

Step 2: CPSR and Product Information File Inspections 

Product Information File (PIF) Documentation Requirements 

The Product Information File is the documentary backbone of every compliant cosmetic product. When authorities audit a product, whether through a routine check or a targeted investigation, the PIF is the first document they demand. It must be comprehensive, current, and immediately accessible.

A complete PIF includes the following elements:

• Product description and formula: Including the qualitative and quantitative composition, with the function of each ingredient clearly stated.
• Cosmetic Product Safety Report (CPSR): The most critical document within the PIF, comprising Part A and Part B.
• Manufacturing documentation: Proof of compliance with ISO 22716:2007 Good Manufacturing Practices (GMP).
• Efficacy claims substantiation: Evidence supporting any claim made on the product label or in marketing materials.
• Microbiological data: Preservation challenge test results (PET) demonstrating microbial safety.
• Stability testing data: Results confirming the product’s integrity throughout its shelf life.

CPSR Inspection and Safety Checks Process 

The Cosmetic Product Safety Report is the document that receives the most intense scrutiny during any EU cosmetics compliance check. It is divided into two distinct parts, and auditors evaluate each with specific criteria.

Part A: Cosmetic Product Safety Information covers all quantitative and qualitative data about the formulation, including:

• Physicochemical and chemical properties of all ingredients and the finished product
• Microbiological quality of raw materials and the finished formulation
• Impurities, traces, and packaging material information
• Normal and reasonably foreseeable conditions of use
• Exposure data and toxicological profiles for each ingredient
• Confirmation that no prohibited or restricted substances appear (cross-referenced with Annex II and Annex III of Regulation (EC) No 1223/2009)

Part B: Cosmetic Product Safety Assessment is the signed professional conclusion drawn from Part A. This section must be authored and signed by a qualified safety assessor who holds a degree in pharmacy, toxicology, medicine, or an equivalent discipline. Authorities specifically verify the assessor’s credentials, and a signature from an unqualified individual renders the CPSR invalid regardless of the quality of the underlying data.

Step 3: Physical Labelling Checks Under Article 19

Common Labeling Compliance Failure Points 

Labelling is typically the first area an inspector evaluates during a cosmetic documentation check, and it is the easiest violation to detect without laboratory equipment. A single missing mandatory element or an incorrect ingredient listing can result in immediate product withdrawal from the market.

Under Article 19 of Regulation (EC) No 1223/2009, all cosmetic products must carry the following mandatory information:

• Name and address of the Responsible Person within the EU/EEA
• Country of origin (required for products manufactured outside the EU)
• Nominal content by weight or volume at time of packaging
• Date of minimum durability (“best before” date) for products with a shelf life under 30 months, or the Period After Opening (PAO) symbol for longer-lasting products
• Precautions for use, particularly those listed in Annexes III through VI of the Regulation
• Batch number for traceability
• Function of the product, unless clear from the presentation
• Full ingredient list in descending order of weight, using INCI nomenclature

INCI Labeling Compliance and Ingredient Rules 

EU authorities closely inspect INCI ingredient declarations.

Common problems include:

• Trade names instead of INCI names
• Incorrect ingredient order
• Missing allergens
• Old INCI terminology
• Unlisted colourants
• Fragrance ingredients hidden under “Parfum”

Ingredient lists must reflect the actual formula sold on the market. Even small discrepancies can trigger enforcement action. 

EU Labeling Compliance Language Requirements 

A critical and frequently overlooked aspect of labelling compliance is the language requirement. Mandatory label information must appear in the official language(s) of the member state where the product is sold. A product legally marketed in Germany cannot carry French-only labelling, even if the formulation, CPSR, and PIF are entirely compliant. Each target market requires localized label review.

Fragrance Allergen Labelling Deadline (2026) 

One of the most significant near-term compliance challenges for the cosmetics industry involves the expansion of fragrance allergen declarations. Under Regulation (EU) 2023/1545, the list of fragrance allergens requiring mandatory label declaration has been expanded to 80 substances. Brands must have updated labels in place by July 2026, with a sell-through period for existing stock concluding by July 2028. Products still carrying old-format allergen declarations after July 2028 will be treated as non-compliant and subject to market withdrawal.

Step 4: Laboratory Safety Testing and Chemical Analysis

When EU Authorities Trigger Lab Testing 

If an inspector identifies visual indicators of potential non-compliance, unusual odour, discolouration, atypical texture, or a safety concern raised by a consumer, the product will be sent for laboratory analysis. Laboratory testing is also triggered by Safety Gate alerts, competitor complaints, and intelligence from border inspections.

Chemical and Microbiological Safety Checks 

Laboratory testing focuses on several key areas:

1. Prohibited and Restricted Substance Analysis Authorities test for the presence of substances listed under Annex II (prohibited) and verify that Annex III substances do not exceed their permitted concentrations. Common targets include heavy metals, CMR (carcinogenic, mutagenic, or reprotoxic) substances, certain preservatives above permitted thresholds, and UV filters used in excess of their maximum authorised levels.

2. Microbiological Contamination Testing Products are tested for total aerobic microbial count, specified organisms (including Pseudomonas aeruginosa, Staphylococcus aureus, Candida albicans, and others), and overall microbiological safety. Products with compromised microbial quality represent an immediate consumer safety risk and are subject to urgent recall procedures.

3. Stability and Compatibility Testing Stability testing verifies that the product does not physically or chemically degrade over its stated shelf life under normal storage conditions. Compatibility testing checks that the formulation does not interact adversely with its primary packaging material, a particular concern for products in plastic containers that may be susceptible to leaching.

Consequences of Failed Compliance Checks 

EU Enforcement Actions for Non-Compliance 

When a cosmetic product fails any aspect of an EU compliance check, authorities hold a wide range of enforcement powers. The response is proportionate to the nature and severity of the violation, but even minor technical non-compliance can result in significant commercial disruption.

• Formal warning and corrective action notice: For minor documentation or labelling deficiencies, authorities may issue a warning requiring remediation within a defined period.
• Mandatory product withdrawal: Products failing safety or labelling requirements are removed from sale pending correction or re-assessment.
• Market ban: Products with serious safety failures, particularly those testing positive for prohibited substances, may be permanently banned from the EU market.
• Recall: Products already in consumer hands may be subject to mandatory public recall, coordinated across all member states via Safety Gate.
• Financial penalties: Member states apply their own penalty structures under national implementing legislation. Fines vary significantly by jurisdiction but can reach hundreds of thousands of euros for serious or repeat violations.
• Criminal liability: In cases involving deliberate falsification of safety documentation or knowing placement of dangerous products on the market, individual directors and officers can face criminal prosecution.

Reputational Risks from EU Enforcement 

Beyond the direct regulatory consequences, a Safety Gate notification is a public event. Competitors, buyers, distributors, and consumers can all access the Safety Gate database. A single recall can erode years of brand equity, particularly in the premium and professional skincare segments where safety credentials are core to brand positioning.

Building a Strong Product Compliance Audit Strategy 

Minimum Cosmetic Compliance Requirements Checklist 

Every cosmetic brand operating in the EU market must maintain the following as absolute baseline requirements:

• A qualified, EU-based Responsible Person contracted and actively engaged with your product portfolio
• A complete, current PIF for every product, updated whenever the formulation, packaging, or manufacturing process changes
• A CPSR signed by a credentialed safety assessor, with Part A data fully documented
• CPNP notification completed before any product reaches the EU market
• Labelling reviewed and approved for every target market’s language requirements
• An internal allergen declaration audit was completed, and 2026-compliant labels are either in production or in place

Staying Updated with EU Cosmetic Regulations 

EU cosmetic regulation is not static. The 2026 INCI Glossary update, the fragrance allergen expansion under Regulation (EU) 2023/1545, and ongoing reviews of Annexes II through VI mean that compliance is a continuous process, not a one-time certification. Brands that rely on a single historical safety assessment without periodic review are accumulating regulatory risk with every month that passes.

Investing in a robust compliance management system, whether in-house or through a specialist regulatory affairs partner, is not a cost centre. It is the insurance policy that keeps your products on the EU market.

Summary of Key Compliance Checkpoints 

Final Thoughts on Cosmetic Documentation and Audit Readiness

EU cosmetic regulation enforcement is precise, coordinated, and increasingly sophisticated. Authorities are not looking for reasons to pull products from the market, but they will act swiftly and decisively when they find non-compliance. The brands that navigate this environment successfully are those that treat compliance as a living business process, not a historical checkbox.

Your CPSR, your PIF, your labelling, and your Responsible Person are not formalities. They are the four pillars of your right to operate in one of the world’s most valuable consumer markets. Protect them, keep them current, and audit them regularly against the latest regulatory requirements.

The cost of getting this wrong, in fines, recalls, bans, and reputational damage, consistently exceeds the cost of getting it right by orders of magnitude.

FAQS 

1. What are EU cosmetic compliance checks?

EU cosmetic compliance checks are inspections carried out by EU cosmetic authorities to verify product safety, labeling compliance, and documentation. These checks ensure products meet EU cosmetics regulations before and after entering the market.

2. What happens during a CPSR inspection?

During a CPSR inspection, authorities review the Cosmetic Product Safety Report for ingredient safety, toxicology data, and assessor credentials. Any missing or incorrect data can lead to enforcement action.

3. What is included in a Product Information File (PIF)?

A Product Information File includes formula details, CPSR, safety data, manufacturing records, and supporting evidence for claims. It is a key part of cosmetic documentation required for every EU product.

4. What are Physical Labeling Checks under Article 19?

Physical Labeling Checks verify that product labels meet EU requirements, including INCI ingredients, Responsible Person details, and safety warnings. Even small labeling errors can cause product removal.

5. What triggers EU cosmetic regulation enforcement?

EU enforcement can be triggered by failed compliance checks, missing documentation, incorrect labeling, or unsafe ingredients. Market surveillance, complaints, or Safety Gate alerts can also initiate inspections.