In thirty seconds
The plain version
- Regulation (EC) No 1223/2009 governs every cosmetic product placed on the EU market — and the UK GB market runs an equivalent regime under its own Responsible Person.
- Every product needs a Responsible Person established in the EU who carries legal accountability for it. Without one, the product cannot legally be sold — full stop.
- The Responsible Person must hold a Product Information File (PIF) with a safety assessment, and notify the product via the CPNP before it goes to market.
- Enforcement is mostly corrective, not punitive — national authorities order withdrawal, recall, or a sales ban first. Fines exist but vary by member state and are secondary to getting the product off the shelf.
What it actually requires
Four things have to exist before a product can launch.
- A Responsible Person established in the EU — the manufacturer, an EU-established importer, or a designated agent who accepts the role in writing.
- A Product Information File (PIF) — including a signed safety assessment by a qualified assessor, kept for 10 years after the last batch is placed on the market and produced to authorities on request, in a language they can understand.
- A CPNP notification — submitted by the Responsible Person via the Cosmetic Products Notification Portal before the product is placed on the market, covering category, ingredients, and the RP's contact details.
- Compliant labelling — RP name and address, ingredient list (INCI), nominal content, durability, and any required warnings, in a language consumers in that market can read.
If the product also touches the UK GB market post-Brexit, a separate UK-established Responsible Person and SCPN notification are required — the EU filing does not carry over.
Who enforces it
National competent authorities
Each EU member state designates its own authority (for example France's ANSM, Germany's BfArM) to police the market. They cooperate and share information, but enforcement action is taken at national level, against the product as it sits in that country.
What it costs to get wrong
Enforcement here runs through withdrawal, not a fixed fine ceiling.
Unlike a flat-rate penalty regime, EU cosmetics enforcement is built around corrective power first: an authority can demand the product be brought into conformity, withdrawn, or recalled within a deadline — and the Responsible Person has the right to respond before action is taken, except where there's a serious risk to health. Monetary fines exist at member-state level and can run from low thousands into the millions of euros depending on the breach, but the more common and more commercially damaging consequence is simpler and faster than any fine: the product comes off the shelf, the marketplace listing gets pulled, and the brand loses the selling window it spent months building.
What actually happens when it's missed
No Responsible Person on file — the product is non-compliant from day one; authorities and marketplaces can both act on it independently, and a marketplace will typically suspend the listing faster than any regulator can move.EU RP requirement, Art. 4–5; marketplace cosmetics-compliance policies
PIF not available on request — triggers the same corrective powers as a substantive safety failure, even if the product itself is fine; the authority cannot verify what it cannot see.Art. 11; Art. 10 PIF retention period
Mislabelled or untranslated label — fines for labelling breaches specifically have run from the low thousands to into the millions of euros in the EU depending on severity; in the UK the typical range cited is materially lower, in the hundreds to low thousands of pounds.CIRS Group labelling compliance guidance, 2026
Where Ayin fits
Map → Clear
This is one of the cleanest gates in the Codex to map quickly — Ayin can tell you within a short conversation whether you already have standing, what's missing, and what it costs to close the gap. Appointing the Responsible Person and assembling the PIF is Clear-stage work; once it's built, it's yours, entirely.
Ambition Begins