Cosmetics Safety Substantiation Guide: How to Compile a Compliant Product Information File (PIF)

The EU Cosmetics Regulation (EC) No 1223/2009 governs all cosmetic products marketed within the European Union. It requires that every cosmetic product must have a Product Information File (PIF) that documents its safety, composition, manufacturing, and claims substantiation. The Responsible Person (RP), who must be established in the EU, is legally accountable for compiling and maintaining the PIF and ensuring compliance with all regulatory requirements. Failure to comply can result in penalties of up to €5 million or 5% of annual turnover, depending on the Member State enforcement policies.

This guide is essential for compliance officers, regulatory managers, and manufacturers who need to understand the exact steps, documentation, and timelines to compile a compliant PIF and avoid costly enforcement actions.

The Product Information File (PIF) is a comprehensive technical dossier that must be kept by the Responsible Person (RP) for each cosmetic product placed on the EU market. According to Article 11 of Regulation (EC) No 1223/2009, the PIF must be readily accessible at the address of the RP and retained for 10 years after the last batch of the product has been placed on the market.

The PIF must include the following five mandatory elements:

1. Description of the cosmetic product including its function and intended use.
2. Cosmetic Product Safety Report (CPSR) consisting of Part A (safety information) and Part B (safety assessment by a qualified safety assessor).
3. Description of the manufacturing method and a declaration of compliance with Good Manufacturing Practices (GMP) as per ISO 22716.
4. Proof of claimed effects substantiating any marketing claims made on the product.
5. Data on animal testing related to the product and its ingredients, including a declaration if any animal testing was conducted.

The obligation to compile and maintain a PIF applies to every Responsible Person (RP) established within the EU who places cosmetic products on the market. This includes manufacturers, importers, and authorised representatives. The RP must ensure that the PIF is complete, accurate, and updated whenever changes occur in the product formulation, manufacturing process, or claims.

Products covered include all cosmetic items as defined in Article 2 of Regulation (EC) No 1223/2009, such as skincare, haircare, fragrances, makeup, and personal hygiene products. The regulation explicitly excludes medicinal products, biocidal products, and products with therapeutic claims.

1. Appoint a Responsible Person (RP): The RP must be established in the EU and legally responsible for compliance. This entity will hold the PIF and respond to authorities.
2. Compile the Ingredient List: List all ingredients using International Nomenclature of Cosmetic Ingredients (INCI) names. Verify each ingredient against the annexes of Regulation (EC) No 1223/2009:
   • Annex II: Prohibited substances
   • Annex III: Restricted substances and conditions of use
   • Annex IV: Permitted colorants
   • Annex V: Permitted preservatives
   • Annex VI: Permitted UV filters
3. Commission a Cosmetic Product Safety Report (CPSR): This report must be prepared by a qualified safety assessor (toxicologist with relevant qualifications) and include:
   • Part A: Safety information on ingredients, toxicological profiles, exposure assessment
   • Part B: Safety assessment and conclusion on product safety
4. Notify the Product on the Cosmetic Products Notification Portal (CPNP): Prior to placing the product on the EU market, the RP must submit product information electronically to the CPNP. Notification must be completed at least one day before market placement.
5. Ensure Labelling Compliance: Labels must include:
   • Product name and function
   • Nominal content by weight or volume
   • Best before date if shelf life is less than 30 months
   • Precautions for use
   • Batch number or lot code
   • Country of origin if imported
   • Name and address of the RP
   • Full ingredient list using INCI names
6. Substantiate Claims: Any marketing claims such as “hypoallergenic” or “dermatologically tested” must be supported by robust scientific evidence documented in the PIF.
7. Maintain and Update the PIF: The RP must keep the PIF accessible for 10 years after the last batch is placed on the market and update it whenever product changes occur.

• Incomplete PIF documentation: Missing safety reports or manufacturing declarations can trigger enforcement actions.
• Non-EU Responsible Person: Only an RP established in the EU can legally hold the PIF and be accountable.
• Ingredient non-compliance: Use of prohibited substances or exceeding restricted limits leads to product bans.
• Late or missing CPNP notification: Products placed on the market without notification risk immediate withdrawal.
• Unsubstantiated claims: Marketing claims without scientific evidence can result in fines and reputational damage.
• Improper labelling: Omitting mandatory information such as batch number or RP address is a common violation.