CPNP Notification for Cosmetics: EU Compliance Guide 2026

If you want to sell cosmetics in the European Union, your product must be notified in the CPNP portal before it goes on sale. Notification is not a formality you do after launch — border authorities and national inspectors check it, and an unnotified product can be pulled from the market. This guide explains how the process works, who does what, and what your Chinese manufacturer must supply so nothing stalls at the last step.

What is CPNP?

CPNP (Cosmetic Products Notification Portal) is the EU-wide database created under Regulation (EC) No 1223/2009, the EU Cosmetics Regulation. Article 13 of the Regulation requires every cosmetic product placed on the EU market to be notified electronically through CPNP. One notification covers all member states — you do not file separately in France, Germany and Spain.

The portal also feeds information to poison centres and medical services, so they know exactly what is in a product if a consumer has an accident. That is why the formulation details matter even though they are not public.

Who Files the Notification? The Responsible Person

The CPNP notification is filed by the Responsible Person (RP) — a legal or natural person established inside the EU. This is the single most important structural point for non-EU brands: a Chinese manufacturer cannot file CPNP itself, and an importer can become the RP by default if nobody else is appointed. Your options:

• Your own EU entity — if you have a subsidiary or office in the EU, it can act as RP.
• Importer as RP — the company that first places the product on the EU market; workable but means sharing control of your compliance.
• Appointed RP service — a consultant or authorised representative you contract for a fee; the most common route for brands shipping D2C or working with freight forwarders.

The RP carries real legal weight: they hold the Product Information File, answer authority requests, and are the enforcement contact. Choose them deliberately, not by default.

What You Need Before You Can Notify

The CPNP form asks for information that must already exist. Preparing it in the right order saves weeks:

1. Final formula — percentages and functions of every ingredient, down to the preservative system and fragrance allergens where thresholds apply.
2. CPSR (Cosmetic Product Safety Report) — a safety assessment in two parts: Part A is the data (formula, ingredients, packaging, exposure), Part B is the assessor's reasoned conclusion and signature. It must be drawn up by a qualified safety assessor.
3. PIF (Product Information File) — the dossier holding the CPSR, GMP evidence, claims support and animal-testing statements. It stays with the RP and must be readable at any EU address for 10 years after the last batch.
4. Label artwork — the notification includes label images, so the label must comply first: RP name and EU address, nominal content, durability date or PAO, precautions, batch code, function where required.

What Goes Into the CPNP Form

A practical nuance: CPNP asks for the frame formulation (ingredients grouped by function, such as "surfactants 15%"), not your exact recipe. The full formula stays in the PIF. This is why factories can support EU launches without disclosing their recipe book.

Timing, Updates and Poison Centres

• Deadline: notification happens before the product is placed on the EU market — there is no grace period.
• Updates: changes to the product (formula, label, RP) are updated in CPNP without undue delay; serious safety information is communicated immediately.
• Poison centres: cosmetic products do not need a separate poison-centre notification under the CLP Annex VIII format — the CPNP entry serves that purpose. This surprises brands that also sell chemicals or detergents, where separate PCN filings are required.

The UK Is Separate: SCPN

Since Brexit, Great Britain (England, Scotland, Wales) has its own portal — Submit Cosmetic Product Notifications (SCPN) run by the Office for Product Safety and Standards (OPSS). Northern Ireland continues to follow EU rules and CPNP. The UK Responsible Person and the CPSR structure mirror the EU, so the same dossier generally feeds both filings — but both portals must be handled. If your factory documents are built for EU compliance from the start, the UK step is mostly administrative.

What Your Manufacturer Must Provide

Your RP and safety assessor cannot work from a marketing PDF. From a manufacturer-side perspective, the checklist we give every EU-bound client:

• Complete formula breakdown with percentages and functions
• Raw material specifications, SDS and CoA for key ingredients
• GMPC / ISO 22716 certificates as GMP evidence for the PIF
• Stability, compatibility and (where relevant) challenge-test support, or samples for your lab to run them
• Preservative efficacy data and fragrance allergen declarations
• Confirmation that the formula clears EU Annex II (prohibited) and Annex III (restricted) screening

We prepare EU-bound projects with this list from day one, so when your safety assessor asks for the frame formulation or an ingredient spec, the answer is already in your inbox instead of two weeks away.

Common Mistakes That Delay EU Launches

1. Appointing the RP after artwork is printed — the RP name and EU address must appear on the label, so the appointment comes first.
2. Starting the CPSR late — the safety assessment is the long pole; formula changes after sampling restart parts of it.
3. Using the importer as RP by accident — then discovering your compliance records live inside a trading company's systems.
4. Label claims the PIF cannot support — every claim needs evidence in the file, and inspectors ask.
5. Forgetting the UK is a separate filing — EU notification does not cover Great Britain.

Frequently Asked Questions

Does a small brand or a test batch still need CPNP notification? Yes. There is no minimum quantity or revenue exemption for EU notification — one SKU, one sale, one notification. (The US MoCRA small-business exemption sometimes misleads people into assuming the EU has one; it does not.)

Can we notify one product and sell it across all EU countries? Yes — that is the point of the single portal. National language labelling requirements and distributor expectations still apply per country.

Who keeps the PIF if we change RP later? The PIF must transfer with the role — the incoming RP takes over the file, and the product information must remain accessible at an EU address for 10 years after the last batch.

Related Guides

Planning an EU launch? Read our Europe & UK market overview or request a quote — we'll tell you exactly which documents your product needs before you commit.