Grüner Baum GmbH · Vorstädter Str. 32, 55276 Oppenheim – Germany
Contact

EU Cosmetics Regulation and GPSR: 2026 Checklist

Cosmetic products are governed first by Regulation (EC) No 1223/2009, consolidated on 18 May 2026. The General Product Safety Regulation (GPSR) does not replace that sector law. It only fills gaps: risks or duties not covered with the same objective, including the rules for online sales.

This split matters in practice. The Commission recorded 4,671 Safety Gate alerts in 2025; cosmetics were the largest category at 36%. Almost eight in ten cosmetics alerts concerned the banned fragrance BMCHA. A CPNP notification alone therefore cannot prove that your formula, label or online offer is compliant.

Does GPSR apply to cosmetic products in the EU?

GPSR applies to cosmetics as a complementary safety net, not as a second cosmetics code. The European Commission's 2025 GPSR business guidelines state that sector-specific EU rules control the risks and objectives they already cover. The GPSR's general safety requirement only applies to risks the cosmetics rules leave open. Its rules on online offers, accident reporting and electronic information still apply where relevant.

For an ordinary cosmetic, the Cosmetics Regulation remains the main route for ingredients, the safety assessment, the Product Information File (PIF), the cosmetics Responsible Person, CPNP notification, manufacturing practice, labelling and claims. Do not create a second, generic GPSR technical file for duties that regulation already covers.

Which law governs each cosmetics compliance task?

Compliance taskPrimary rulePractical evidence
Cosmetic classification, formula and human-health safetyCosmetics RegulationIntended purpose, formula, ingredient restrictions and exposure data
EU cosmetics Responsible PersonCosmetics RegulationIdentified EU person, accepted mandate where required and compliance controls
Safety assessment and product fileCosmetics RegulationSigned CPSR and complete PIF
Manufacturing, label and claimsCosmetics RegulationGMP statement, final artwork and claim substantiation
Pre-market notificationCosmetics RegulationCPNP submission record; not an approval certificate
Serious undesirable effectsCosmetics RegulationNotify the competent authority without delay and preserve the case evidence
Online offer, uncovered risks and general follow-upGPSR, only where the Cosmetics Regulation does not cover itDated listing capture, role mapping, warnings and incident process

Map each task to the exact product and the right law. The phrase “GPSR covers every product” is too broad because it hides the sector-law limits described in the Commission guidelines.

What is the difference between the cosmetics RP, GPSR role and CPSR assessor?

RoleWhat the role doesWhat the role does not automatically do
Cosmetics Responsible PersonEnsures the cosmetic product meets the relevant duties of the Cosmetics RegulationThe role does not by itself prove that the person is qualified to sign the CPSR
EU economic operator under the GPSR (named in the online offer)Supplies the identity and contact details your online offer needs and performs the duties of its own legal roleThe appointment does not automatically make that entity the cosmetics Responsible Person
Qualified safety assessorPerforms the cosmetic safety assessment and signs the CPSRThe assessor does not automatically become the cosmetics RP or the GPSR economic operator

The safety assessor must hold a diploma or other formal qualification awarded after a university course in pharmacy, toxicology, medicine or a similar subject, or an equivalent course recognised by a Member State. “Knowledge and experience” alone does not meet this test.

One company may take more than one role only if it meets each legal definition separately, accepts each mandate and has the required competence. The contract and the public product information should name the roles precisely.

What must a non-EU cosmetics brand prepare before EU sale?

StepEvidence to have before placing on the EU marketWhich rule
1Product classification and intended-purpose decisionCosmetics Regulation
2Final formula, specifications and ingredient restriction reviewCosmetics Regulation, including its ingredient annexes
3EU cosmetics Responsible Person and accepted mandate where neededCosmetics Regulation
4CPSR signed by a qualified safety assessorCosmetics Regulation (safety report rules)
5Complete PIF accessible at the Responsible Person's addressCosmetics Regulation; keep it for 10 years after the last batch was placed on the market
6GMP evidence, final label and supported claimsCosmetics Regulation
7CPNP notification before placing the product on the marketCosmetics Regulation
8Final online-offer review and incident routeGPSR online-offer and follow-up duties

The PIF has five core elements: a clear product description, the CPSR, the manufacturing method and GMP statement, proof of the claimed effect where justified, and data on animal testing by the manufacturer, its agents or suppliers. The PIF is much wider than a label pack or an ingredient list.

What must an EU cosmetics product page show?

Your online cosmetic offer should let a consumer identify the product and the relevant operators before buying. Where the GPSR's online-offer rule applies, your listing must show the manufacturer's name or trade name and postal and electronic address; where required, the EU responsible economic operator's name and contact details; a product image or other identifier; and the warnings or safety information EU law requires.

The cosmetics label itself still follows the Cosmetics Regulation. The final artwork should cover the required cosmetics RP address, nominal content, durability or period-after-opening indication, precautions, batch reference, function where not obvious and ingredients. If label information, ingredients or claims appear online, they must match the approved artwork and PIF. For example, the ingredient list on your product page must match the one on the box. The GPSR online-sales information guide gives a field-by-field listing review.

Is CPNP registration an approval or a certificate?

CPNP is a notification, not an approval. The Commission describes CPNP as a free online notification system. Once you have notified in CPNP, you need no further national cosmetics notification within the EU, but authorities can still inspect the CPSR, PIF, formula, label and market evidence.

Ordinary cosmetics also do not use CE marking or a CE-based EU Declaration of Conformity. The EU Declaration of Conformity guide explains the difference. A powered beauty device, applicator or accessory may need a separate classification and a different legal route.

Do natural or organic cosmetics follow a different EU route?

“Natural” or “organic” does not exempt a product from the Cosmetics Regulation and does not create a separate EU cosmetics approval. The formula, safety assessment, label and claims still need evidence. Claims must not suggest a property the product does not have.

Classification follows intended purpose and presentation. A cream applied to the human body for a cosmetic purpose can be a cosmetic; a beauty tool, electrical device or accessory is not automatically a cosmetic and may fall fully under the GPSR or other product legislation.

Frequently asked questions about the Cosmetics Regulation and GPSR

Does GPSR apply to cosmetic products in the EU?

Yes, but it does not replace the Cosmetics Regulation. The Cosmetics Regulation controls the cosmetic-specific duties on safety, formula, assessment, product file, notification and labelling. The GPSR only fills the gaps: uncovered risks and general duties such as the information your online offer must show.

Is a cosmetics Responsible Person the same as a GPSR Responsible Person?

No. The cosmetics Responsible Person and the EU economic operator under the GPSR are separate legal roles. One company can take both, but only if it meets and accepts the conditions of each role separately.

Is CPNP notification an EU approval or certificate?

No. CPNP is the free EU notification portal. You must notify before placing a cosmetic on the market, but the notification is not a product approval or certificate and does not replace the CPSR and PIF.

Do ordinary cosmetic products need CE marking or an EU Declaration of Conformity?

No. Ordinary cosmetics follow the Cosmetics Regulation and do not use CE marking or the CE-based EU Declaration of Conformity. A beauty device or another separately classified product may follow different legislation.

Can Grüner Baum provide cosmetics RP, PIF, CPSR and CPNP services?

Yes. Grüner Baum provides cosmetics RP, PIF, CPSR and CPNP support with its specialist cosmetics partner, plus a review of your online offer. A qualified safety assessor signs the CPSR, and the contract names the entity that accepts the cosmetics RP role. Cosmetics are scoped and quoted individually, so request an assessment for your product.

Official sources

TopicLegal basisOfficial text
Definition of a cosmetic product, classification and safetyCosmetics Regulation Article 2 and Article 3Regulation (EC) No 1223/2009, consolidated text of 18 May 2026
Cosmetics Responsible PersonCosmetics Regulation Article 4 and Article 5Regulation (EC) No 1223/2009
Good manufacturing practice (GMP)Cosmetics Regulation Article 8Regulation (EC) No 1223/2009
Safety assessment (CPSR) and assessor qualificationCosmetics Regulation Article 10 and Annex IRegulation (EC) No 1223/2009
Five PIF elements, access at the Responsible Person's address, 10-year retentionCosmetics Regulation Article 11Regulation (EC) No 1223/2009
CPNP notification before placing on the marketCosmetics Regulation Article 13Regulation (EC) No 1223/2009; European Commission Cosmetic Product Notification Portal
Ingredient restrictionsCosmetics Regulation Articles 14 to 17 and annexesRegulation (EC) No 1223/2009
Cosmetics label and claimsCosmetics Regulation Article 19 and Article 20Regulation (EC) No 1223/2009
Reporting serious undesirable effectsCosmetics Regulation Article 23Regulation (EC) No 1223/2009
GPSR as a complementary safety net; general safety requirement only for uncovered risksGPSR Article 2(1); Commission Notice C/2025/6233GPSR text (EUR-Lex); European Commission GPSR business guidelines, C/2025/6233
Online-offer information, accident reporting and electronic informationGPSR Article 19, Article 20 and Article 21 (Chapter III, Section 2)GPSR text (EUR-Lex)
Cosmetics overviewEuropean CommissionEuropean Commission cosmetics overview
2025 Safety Gate figures (4,671 alerts, 36% cosmetics, BMCHA)European Commission 2025 Safety Gate reportEuropean Commission 2025 Safety Gate report

This guide was checked on 1 September 2026 and is general information, not legal advice.

30-Minute GPSR Assessment

Whether your brand is entering the EU market or already selling, eugpsr.de supports you with GPSR gap assessment, documentation preparation, labelling and warning reviews, traceability structure and Responsible Person services.

Compare our GPSR services →

H

Hatice Muazzez Bodur — Grüner Baum GmbH

Founder & CEO · GPSR Responsible Person

Hatice Muazzez Bodur is the founder and CEO of Grüner Baum GmbH, a Germany-based company. Under the GPSR (Regulation (EU) 2023/988), she delivers EU Responsible Person services where a written mandate is the appropriate Article 16 route for the product and supply chain. She is an ISO 9001 auditor; our team also has auditing experience aligned with ISO 27001 and 42001 principles. Our work is carried out within these three principles. Advisory services in Turkish, German, and English. Grüner Baum GmbH (HRB 52165, Amtsgericht Mainz), located at Vorstädter Str. 32, 55276 Oppenheim, Germany, provides EU Responsible Person documentation and a direct communication channel with market surveillance authorities for the agreed product and mandate scope.

More from this author →

Continue with practical guidance for the same product-safety and compliance workflow.

EN

GPSR penalties in EU Member States (2026)

GPSR penalties are set by each EU Member State, not by one EU fine table. See the real sanction types and the evidence that reduces risk.

mia ·  · 15 min