Regulation (EC) No 1223/2009 is the single most important piece of legislation governing cosmetic products in the European Union. It entered into force on 11 July 2013, replacing Cosmetics Directive 76/768/EEC and consolidating decades of fragmented amendments into one directly applicable regulation. Every cosmetic product placed on the EU market — whether manufactured domestically or imported — falls within its scope. For R&D teams, this regulation defines the boundaries within which every formula is developed, tested, and brought to market.
The Responsible Person and Market Placement
At the centre of Regulation 1223/2009 is the Responsible Person — a legal entity established within the EU that assumes full accountability for a product's compliance. For EU-based manufacturers, this is typically the manufacturer itself; for imported products, the importer. The Responsible Person must ensure the product meets all safety, labelling, and documentation requirements before it reaches consumers.
Before market placement, the Responsible Person must notify the product through the Cosmetic Products Notification Portal (CPNP), managed by the European Commission. The notification includes product category, formulation frame, original label, and Responsible Person identification. It must be completed before the product is made available and updated whenever compliance-relevant changes occur.
The Cosmetic Product Safety Report
The regulation mandates a Cosmetic Product Safety Report (CPSR) for every product. Part A contains safety information compiled by the manufacturer: quantitative and qualitative composition, physical and chemical characteristics, microbiological quality, impurities, packaging data, exposure calculations, and toxicological profiles. Part B is the safety assessment, performed by a qualified safety assessor holding a university-level diploma in pharmacy, toxicology, medicine, or an equivalent discipline.
Within this assessment, the Margin of Safety (MOS) calculation is critical. MOS quantifies whether systemic exposure to each substance remains below the threshold of concern, using the No Observed Adverse Effect Level (NOAEL) and expected exposure based on product type, application area, and use frequency. Performing MOS calculations manually across every ingredient in every formula version is error-prone — a process where software automation delivers clear value.
Annexes: The Substance Framework for Formulators
The regulation's annexes are where daily formulation decisions intersect with legal compliance:
- Annex II — over 1,600 prohibited substances. Any formula containing one cannot be placed on the market.
- Annex III — restricted substances, usable only under specific conditions (maximum concentrations, product types, mandatory warnings).
- Annex IV — permitted colorants, with conditions of use and maximum concentrations.
- Annex V — permitted preservatives, with conditions.
- Annex VI — permitted UV filters, with conditions and maximum concentrations.
Validating a formula against all five annexes is a fundamental compliance task. When annexes are updated — following new Scientific Committee on Consumer Safety (SCCS) opinions or Commission delegated acts — every active formula potentially needs re-evaluation.
GMP and the Product Information File
The regulation requires manufacture in accordance with Good Manufacturing Practice (GMP). The harmonised standard is ISO 22716, covering production, control, storage, and shipment. The Responsible Person must also maintain a Product Information File (PIF) for each product, kept at the address indicated in the CPNP notification and available to competent authorities on request. The PIF includes the product description, the CPSR, manufacturing method, GMP conformity statement, and evidence of claimed effects where applicable.
Why Ongoing Compliance Demands Software
Regulation 1223/2009 is not static. Annexes are amended regularly as the SCCS publishes new opinions and the Commission responds with delegated acts. For any company managing more than a handful of active formulas, tracking these changes manually is impractical.
Purpose-built formulation software addresses this directly. Labify® Beauté validates formulas automatically against the current state of Annexes II through VI, flags non-compliant ingredients at the point of formulation, generates INCI lists from the composition, calculates MOS values across consumer age ranges, and produces dossier documentation consistent with CPNP and PIF requirements. Because the regulatory database is continuously maintained, formula validation reflects the most recent amendments without requiring the formulator to track each update independently.
Conclusion
EU Cosmetics Regulation 1223/2009 defines the compliance framework within which every cosmetic formulation must exist. Its requirements — the Responsible Person, the CPSR, CPNP notification, five substance annexes, GMP, and the PIF — are integral to the formulation process itself. R&D teams that embed regulatory compliance into their workflows, rather than treating it as a downstream gate, bring products to market faster and with fewer interruptions. Software that understands the regulatory structure at the level of individual substances, concentration limits, and safety calculations is no longer a convenience — it is a competitive requirement.