Cosmetics Compliance: Software for Regulation (EC) 1223/2009, CPNP, and PIF

Cosmetics Regulation (EC) 1223/2009: Complete Regulatory Framework

Regulation (EC) 1223/2009 is the legislative pillar governing all cosmetic products placed on the European market. It came into force on January 1, 2010, and has been fully applicable since July 11, 2013, replacing the previous Directive 76/768/EEC and harmonizing the rules in all EU Member States. The Regulation applies to any substance or mixture intended to be applied to the external surfaces of the human body (epidermis, hair system, hair, nails, lips, external genital organs) or on the teeth and mucous membranes of the mouth, with the sole or main purpose of cleaning, perfuming, changing their appearance, protecting them, keeping them in good condition, or correcting body odors.

The key principles of the Regulation include:

• Consumer safety — Every cosmetic product must be safe for human health when used under normal conditions of use or under reasonably foreseeable conditions of use.
• Responsible Person — Obligation to designate a natural or legal person established in the EU responsible for product compliance
• Safety assessment — Each product requires a CPSR (Cosmetic Product Safety Report) prepared by a qualified assessor
• Mandatory CPNP notification — Each product must be notified to the CPNP before being placed on the market
• Animal testing ban — The Regulation prohibits animal testing for cosmetic products and their ingredients
• Traceability — Obligation to identify the supply chain for 3 years
• Cosmetovigilance — System for reporting serious adverse effects

CPNP: The Cosmetic Products Notification Portal

The CPNP (Cosmetic Products Notification Portal) is the European IT system managed by the European Commission where the Responsible Person must notify each cosmetic product before it is placed on the EU market. CPNP notification is a legal obligation under Article 13 of Regulation 1223/2009, and failure to comply is a punishable offense.

The CPNP notification must contain:

• Product category according to the CPNP classification system
• Product name and unique identification
• Country of origin and country of first placing on the EU market
• Frame formulation composition — Qualitative and quantitative composition according to CPNP categories
• Name and concentration of CMR, nano, and restricted substances (Annex III)
• Nanomaterials — INCI identification, CAS, particle size, foreseeable conditions of use
• Original label and photo of packaging
• Information for poison control centers — Complete qualitative and quantitative composition in confidential format

How kemXpro automates CPNP notification

kemXpro integrates a module dedicated to CPNP notification management that radically simplifies the process. The system:

• Automatically generates formulation frames from detailed formulation compositions
• Compiles the data required by the CPNP in a structured format, ready for upload
• Manages update notifications when the composition or label changes
• Tracks the notification status for each product and each national market
• Automatically identifies CMR substances, nanomaterials, and restricted substances present in formulations
• Generates the information report for poison control centers

PIF: The Product Information File

The PIF (Product Information File) is the technical-regulatory dossier that the Responsible Person is required to maintain and make available to the competent authorities for each cosmetic product (Article 11 of Reg. 1223/2009). The PIF must be kept for 10 years after the last batch of the product has been placed on the market.

The PIF must contain:

• Description of the cosmetic product — Complete qualitative and quantitative formulation, with INCI, CAS, and EC identification of substances
• CPSR (Cosmetic Product Safety Report) — The safety report in two parts:
  • Part A: safety information (composition, physicochemical specifications, stability, microbiological quality, impurities, traces, information on packaging material, normal and reasonably foreseeable use, exposure, toxicological profile of substances, undesirable effects)
  • Part B: safety assessment signed by a qualified Safety Assessor
• Description of the manufacturing method and GMP compliance (EN ISO 22716:2007)
• Evidence of claimed effects (claims) — Data supporting cosmetic claims in accordance with Regulation (EU) 655/2013
• Data on animal testing — Declaration of compliance with the ban on animal testing

Digital PIF management with kemXpro

kemXpro allows you to create, maintain, and update PIFs in digital format, centralizing all documentation in a single system:

• Structured PIF template compliant with Article 11 and European Commission guidelines
• Direct link to formulations — The composition of the PIF is always synchronized with the current formulation in the kemXpro database
• Revision tracking — Complete history of every change to the PIF with audit trail
• Attachments and documentation — Structured storage of CPSR, stability tests, challenge tests, analytical reports
• Controlled access — Granular permissions for Safety Assessors, Responsible Persons, and other roles

The Responsible Person: Obligations and Responsibilities

The Responsible Person (RP) is the natural or legal person established in the EU who assumes full responsibility for the compliance of each cosmetic product with Regulation 1223/2009. Articles 4 and 5 define who holds the role of RP:

• For products manufactured in the EU — The manufacturer is the Responsible Person, unless they designate an agent by written mandate
• For imported products — The importer is the Responsible Person for any product they place on the EU market
• For distributors — The distributor becomes the RP if they place the product on the market under their own name/brand or modify a product already placed on the market

The obligations of the Responsible Person include:

• Ensuring that the product complies with the requirements of the Regulation (Art. 5.2)
• Ensuring that the safety assessment (CPSR) is carried out by a qualified professional
• Keeping the PIF up to date and available to the competent authorities
• Submitting the CPNP notification before placing the product on the market
• Managing cosmetovigilance — reporting serious undesirable effects (SUE) to the competent authorities
• Cooperate with market surveillance authorities
• Ensure traceability in the distribution chain

How kemXpro supports the Responsible Person

kemXpro centralizes all the activities of the Responsible Person in a single platform, with a dedicated dashboard, automatic notifications on regulatory deadlines, and complete tracking of responsibilities for each product in the portfolio.

Annexes to the Cosmetics Regulation: Prohibited, Restricted, and Permitted Substances

One of the most critical aspects of cosmetic compliance concerns compliance with the Annexes to Regulation 1223/2009, which define the positive and negative lists of substances that can be used in cosmetics:

• Annex II — Prohibited substances: Over 1,700 substances whose use in cosmetic products is prohibited. The list is updated periodically by the European Commission.
• Annex III — Restricted substances: Substances whose use is permitted only under certain conditions (maximum concentration, type of product, mandatory warnings on the label). Includes many fragrance allergens, hair dyes, and preservatives.
• Annex IV — Permitted colorants: Positive list of colorants authorized in cosmetic products, with indication of the field of application (all products, rinse-off products only, products that do not come into contact with mucous membranes only, etc.).
• Annex V — Permitted preservatives: Positive list of preservatives that can be used in cosmetics, with the relevant maximum permitted concentrations and conditions of use.
• Annex VI — Permitted UV filters: Positive list of ultraviolet filters authorized in sunscreen and cosmetic products with sun protection, with their maximum concentrations.

Automatic Monitoring of Annexes with kemXpro

kemXpro integrates the complete lists of Annexes II-VI of the Cosmetics Regulation into its database, updated with every regulatory change. The system:

• Automatic screening of formulations — Real-time verification that each ingredient complies with the limits of Annexes III-VI and is not present in Annex II
• Alerts on regulatory updates — Immediate notification when a substance is added, removed, or modified in the Annexes
• Concentration verification — Automatic check that the concentrations of regulated ingredients comply with the maximum limits
• Compliance reports — Generation of detailed reports on the compliance of formulations with the Annexes
• Regulatory change history — Chronological tracking of all updates to the Annexes with reference to delegated regulations

Cosmetovigilance: Management of Undesirable Effects

Cosmetovigilance is the post-market surveillance system provided for in Article 23 of Regulation 1223/2009. The Responsible Person is obliged to:

• Collect and document reports of undesirable effects (EU) and serious undesirable effects (SUE)
• Notify SEEs without delay to the competent authority of the Member State where the effect occurred
• Communicate SEEs to the competent authorities of other Member States where the product is marketed
• Update the PIF with the information collected from cosmetovigilance
• Take any corrective measures (withdrawal, recall, modification of the formulation or label)

kemXpro includes a cosmetovigilance module that allows you to record, track, and manage reports of undesirable effects, generate reports for the competent authorities, and maintain the history for the PIF.

Cosmetic Labeling: Requirements of Article 19

The labeling of cosmetic products is regulated by Article 19 of Regulation 1223/2009. Mandatory information includes:

• Name and address of the Responsible Person
• Nominal content by weight or volume at the time of packaging
• Minimum durability date (PAO/BBD) — Period after opening (PAO) for products with a shelf life of more than 30 months, or expiry date (BBD) for shorter shelf lives
• Precautions for use — Mandatory warnings provided for in Annexes III-VI
• Batch number for traceability
• Function of the product (if not evident from the presentation)
• List of ingredients in descending order of weight with INCI (International Nomenclature of Cosmetic Ingredients) nomenclature
• Country of origin for imported products

kemXpro supports the generation of compliant cosmetic labels, including automatically sorted INCI ingredient lists, mandatory warnings based on composition, and PAO/BBD calculation.

Cosmetic claims: Regulation (EU) 655/2013

Cosmetic claims — statements relating to the characteristics or functions of the product — are regulated by Regulation (EU) 655/2013 and the technical document on common criteria. Claims must be:

• Compliant with legislation — Do not attribute therapeutic properties to the product (which would qualify it as a medicine)
• Truthful — Based on verifiable evidence
• Supported by evidence — Adequate scientific documentation (clinical studies, in vitro tests, instrumental evaluations)
• Honest — Do not mislead the average consumer
• Fair — Do not denigrate legally permitted ingredients (e.g., "paraben-free" with negative connotations)
• Informed — Understandable to the average consumer

kemXpro allows you to document and archive evidence supporting claims within the PIF, facilitating the demonstration of compliance during inspections by regulatory authorities.

Cosmetic GMP: EN ISO 22716:2007

Article 8 of Regulation 1223/2009 requires that cosmetic products be manufactured in accordance with Good Manufacturing Practices (GMP), with reference to the EN ISO 22716:2007 standard. kemXpro supports GMP documentation through batch tracking, management of manufacturing specifications in the PIF, and archiving of certificates of analysis.

Nanomaterials in Cosmetics: Article 16

Nanomaterials used in cosmetic products are subject to specific requirements under Article 16 of Regulation 1223/2009. The Responsible Person must:

• Notify the European Commission of the use of nanomaterials 6 months before placing them on the market (via the CPNP)
• Provide information on: identification (IUPAC, CAS, INCI), particle size, physicochemical properties, estimated quantity placed on the market, toxicological profile, safety data
• Include the mention [nano] in the list of ingredients on the label

kemXpro automatically identifies nanomaterials in formulations and manages the specific CPNP notification and labeling requirements for these ingredients.