Eu Cosmetic Cpsr Pif Services

Scope and evidence must be confirmed before any paid tests or filings.

An EU cosmetic CPSR/PIF service should result in a usable, product-specific compliance dossier—not merely a PDF marked “approved”. Before a cosmetic product is placed on the EU market, its responsible person must ensure a safety assessment and Cosmetic Product Safety Report (CPSR) under Article 10, and keep the Product Information File (PIF) required by Article 11 of Regulation (EC) No 1223/2009.

This guide is for a brand, contract manufacturer or importer buying the combined documentation service. Its decision is practical: what to commission, what technical evidence to supply, how to accept delivery and who maintains the records. A service supplier does not automatically become the legally designated EU responsible person.

What the combined CPSR and PIF service must hand over

Define deliverables in the engagement letter, by product identifier and final formula version. The CPSR is a component of the PIF, not a substitute for the file. These are procurement/acceptance criteria; the legal minimum comes from Articles 10–11 and Annex I, not from a prescribed EU “package” or compulsory certificate.

Deliverable	Verifiable acceptance evidence
CPSR Parts A and B; dated and signed or traceably electronically approved Part B	Part A covers composition, stability, microbiological quality, impurities/packaging, use and exposure, toxicology and adverse effects as relevant. Part B contains the safety conclusion, warnings, reasoning, and qualified assessor’s credentials and approval.
Indexed Article 11 PIF	Product-to-formula identity; the CPSR; manufacturing method and GMP statement; evidence for product claims where justified; and animal-testing data described in Article 11(2)(e), including relevant third-country testing.
Operational handover pack	A document index with version references, outstanding-data register, permitted access arrangement, keeper of records and update triggers. Label review, laboratory work, CPNP submission and EU responsible-person appointment are separate unless expressly in scope.

Who remains responsible when an external provider drafts the file?

A cosmetic can be placed on the EU market only with a responsible person established in the EU; Article 4 identifies who holds that role for EU-made, imported and certain rebranded products, including options for written mandates. The qualified assessor performs the scientific assessment; hiring a writer or laboratory does not shift the responsible person’s legal duties. The PIF must be readily accessible at the responsible person’s label address, in a language easily understood by the relevant national authority, and retained for 10 years after the last batch is placed on the market.

Role	Required handoff or obligation
EU responsible person	Confirms the correct designation, ensures product compliance and PIF maintenance, can provide the file to authorities and handles the required CPNP notification.
Qualified assessor / documentation provider	Assessor meets Article 10(2) qualifications and approves CPSR Part B; provider assembles traceable evidence and transfers the agreed editable/indexed dossier. One contractor may deliver both, but roles must be identified. For acceptance, obtain documentary evidence of the assessor's relevant qualification or formally recognised equivalence.

Choose the right service route—not a generic “PIF certificate”

Match the service to the actual gap. An incomplete product dossier cannot be made compliant simply by renaming a supplier’s safety data sheet or by entering a product into CPNP.

Starting position	Order and completion gate
Formula final; little supporting evidence	Commission evidence-gap review first, obtain missing stability/microbiology or packaging data where justified, then qualified CPSR assessment and full PIF compilation. Do not assume every product needs the same tests.
Signed CPSR already exists; sales artwork or formula changed	Order targeted impact review and update of the CPSR/PIF, and update CPNP data if required. A new PIF or reassessment may be needed where the changed product is materially different.

Evidence checklist: what to send before assessment

Ask the formulator, raw-material suppliers and manufacturer to provide a controlled evidence set. A technical intake review decides whether any test needs commissioning; standards or tests are not universally required in the same form for every cosmetic.

Final quantitative/qualitative formula: percentages, INCI plus substance identities where available, raw-material mixtures and fragrance/allergen information; identify confidential components securely.
Supplier records: material specifications, relevant SDS/technical data, impurities, certificates or analyses where available, restrictions and batch traceability.
Finished-product evidence: physicochemical specifications, stability and packaging compatibility, microbiological quality and preservation effectiveness where relevant, plus test methods and sample/formula matching.
Intended use and exposure: application site, frequency, rinse-off/leave-on, user population (especially under-three or external intimate-hygiene use), warnings and reasonably foreseeable misuse.
Manufacturing and presentation: method/flow and GMP statement, packaging materials, draft final label/INCI, claims and available substantiation, product identity and marketed variants.
Governance: legal identity and address of EU responsible person, proposed PIF location, animal-testing information under Article 11(2)(e), existing CPSR/CPNP records and post-market adverse-effect data if any.

Stop gate: if the precise composition, identity of a fragrance mixture, critical exposure information or substantiation of a necessary safety conclusion is missing, obtain it or resolve the scientific gap before accepting a final positive CPSR. A “pending data” list is not equivalent to a completed safety conclusion.

A confidential fragrance blend does not automatically require disclosure of every trade-secret ingredient to the brand. Under Decision 2013/674/EU, identify the fragrance by name/code and supplier, disclose regulated components and safety-relevant information, and obtain an adequate fragrance-mixture safety assessment from its supplier where applicable. The assessor and responsible person must still have sufficient traceable evidence; confidentiality cannot replace a safety justification.

Five-stage workflow and objective delivery checks

Specify milestones and ownership in the service order. The work usually spans documentation and scientific assessment, rather than only typing data into a template.

Intake and scope freeze: identify each formulation/variant, market presentation, responsible person and requested output; record assumptions and exclusions.
Evidence-gap register: classify each missing item as safety-critical, regulatory, claims-related or administrative; assign a supplier/brand owner and decision deadline.
Safety assessment: reconcile raw-material and finished-product data, assess exposure and risks; obtain qualified assessor’s reasoned, approved CPSR Part B.
PIF assembly: cross-reference Article 11 records, reconcile labels/claims/GMP evidence, mark each source document and formula revision.
Acceptance and custody: deliver the complete indexed set, traceable supporting evidence, the Part B assessment with dated signature or verifiable electronic approval, any unresolved exceptions, and a documented arrangement for competent-authority access and updates.

Reject as incomplete if the assessor’s approval/credentials are absent, the CPSR covers a different formula, a referenced source file cannot be produced, the responsible person cannot access the PIF, or “CPNP registered” is used as a substitute for scientific assessment. A third-party service fee is commercial; CPNP itself is free.

Change-control matrix after the PIF is delivered

Treat the PIF as controlled living documentation. Article 10 requires the CPSR to remain up to date when relevant new information arises; Article 11 requires updates as necessary. The following triggers require a documented impact decision, not an automatic assumption that a completely new report is always needed.

Trigger	Review/action to record
Concentration, ingredient, fragrance or supplier specification changes	Reconcile actual formulation, toxicology, restricted substances, allergens and exposure; determine CPSR/PIF revision scope before marketing the change.
Container, process, manufacturing site or shelf-life evidence changes	Review stability, contamination/compatibility, GMP support and any need for additional evidence; update the document index.
New claim, intended user, warning, adverse-effect signal or material regulatory amendment	Review safety assumptions, claim substantiation and artwork; refresh CPSR/PIF and relevant CPNP/label information when applicable.

What this service does not automatically include

A CPSR/PIF is not EU authority approval, CE marking or a CPNP filing. The European Commission describes CPNP as a free notification system, not a safety certificate. Article 8 requires GMP, but EN ISO 22716 is a harmonised standard supporting presumption of conformity—not a universal requirement to buy an external GMP certificate. Check separate scopes for label adaptation, laboratory tests, responsible-person appointment and notification.

Article 16(2) generally excludes nanomaterials used as colourants, UV filters or preservatives regulated under Article 14, unless expressly specified. Where Article 16(3) applies, the additional notification is normally due six months before placing the product on the market. Verify the material’s identity and regulatory function before relying on an exception or setting a launch date.

If a formulation contains nanomaterials, separately establish whether the additional Article 16 notification applies. Where it applies, it is in addition to the Article 13 CPNP notification; the CPSR/PIF purchase does not automatically include either filing.

Send a brief that makes the provider’s quote and handover testable

State the product category and use, number of exact formulations and variants, EU importer/brand structure, designated or proposed responsible person, final formula availability, manufacturer and supplier evidence, stability/microbiology/packaging reports, claims and label drafts, existing CPSR/PIF/CPNP status, languages of authority access, intended launch and who will host/update the PIF. Request a written inclusion/exclusion list for assessor sign-off, tests, reformulations, CPNP work, updates and transfer of source files. Do not represent an estimated completion date as a regulatory deadline.

Questions before commissioning CPSR/PIF services

Is a supplier’s SDS or an existing non-EU safety report sufficient instead of a CPSR?

No, not by itself. Such documents can supply evidence, but the EU product-specific CPSR must cover Annex I Parts A and B and its Part B assessment must be approved by a qualified assessor. Check the exact marketed formula and use.

Can one PIF cover several shades, fragrances or package sizes?

Not automatically. First map the differences against the assessed formula, exposure, microbiology, packaging and claims. Some variations can be documented together with adequate assessment; others need separate or revised records. Require the assessor to state the covered variants explicitly.

Must the full PIF be uploaded to CPNP or submitted for EU approval?

No. The responsible person must keep the PIF readily accessible to the competent authority, while Article 13 requires specific data notified through CPNP before placement on the market. Notification is not regulatory approval or proof that the PIF is compliant.

Is ISO 22716 certification mandatory to complete a PIF?

Article 8 makes good manufacturing practice mandatory, and the referenced harmonised EN ISO 22716 offers a route to a presumption of conformity. Article 11 requires a manufacturing-method description and GMP compliance statement; it does not generally require purchasing a third-party certification as a stand-alone legal condition.

Can the service provider keep the PIF when the EU responsible person changes?

Custody can be contracted, but legal accessibility and the correct Article 4 responsible-person designation must be maintained. Before changing roles or addresses, agree transfer of the indexed file, authority-access method, label/CPNP data review and who retains updates and adverse-effect information.