European Union · Cosmetics Regulation (EC) No 1223/2009 · Reviewed August 25, 2026.
The short answer
Responsible Person vs CPSR is not a choice between two interchangeable services. The Responsible Person is the EU-established legal actor accountable for a cosmetic product. The Cosmetic Product Safety Report (CPSR) is the product-specific safety report that the Responsible Person must ensure is completed before the product is placed on the EU market. See Articles 4, 5 and 10 of the current consolidated Regulation.
A qualified safety assessor performs the safety assessment and signs Part B of the CPSR. The Responsible Person remains responsible for the wider compliance chain: product safety, good manufacturing practice, the CPSR and Product Information File (PIF), notification through the Cosmetic Products Notification Portal (CPNP), labelling, claims, post-market action, and cooperation with authorities.
JurisdictionEuropean UnionEU-wide scope
LEGAL ROLE
Responsible Person
An EU-established person or business designated for the product under Article 4. The name and address of the Responsible Person appear on the label.
SAFETY REPORT
CPSR
The report required by Article 10 and Annex I. Part A contains safety information; Part B records the qualified assessor’s safety conclusion and reasoning.
PRODUCT FILE
PIF
The broader Article 11 file. It includes the CPSR and other product, manufacturing, claims and testing information.
NOTIFICATION
CPNP
The European Commission’s free online notification system. A notification is not an approval, licence or safety certificate.
Responsible Person, CPSR, PIF and CPNP compared
| Item | What it is | Who handles it | What it does not replace |
|---|---|---|---|
| Responsible Person | The EU-established legal role attached to each cosmetic product | A qualifying manufacturer, importer or distributor, or another EU-established person appointed in writing | A CPSR, PIF, notification, compliant label or evidence supporting claims |
| CPSR | The safety report required before market placement | The Responsible Person ensures it exists; a qualified safety assessor performs the assessment and signs Part B | The complete PIF, CPNP notification or Responsible Person appointment |
| PIF | The wider product information file required by Article 11 | The Responsible Person keeps it readily accessible at the address shown on the label | CPNP notification or corrective action when the product is non-compliant |
| CPNP | The Commission’s electronic cosmetics notification portal | The Responsible Person submits Article 13 information; distributors have a narrower notification duty in specified translation cases | Safety assessment, CPSR, PIF, label review or legal compliance |
Who becomes the EU Responsible Person?
Article 4 of Regulation (EC) No 1223/2009 assigns the role according to who manufactures, imports, brands or materially changes the product. The arrangement must be established product by product; a postal address bought in isolation does not complete the compliance work. Read Article 4 in the consolidated Regulation.
- EU manufacturer. For a product manufactured in the EU and not later exported and re-imported, the EU-established manufacturer is the Responsible Person by default. The manufacturer can appoint another EU-established person by written mandate, and that person must accept in writing. Article 4(3).
- Manufacturer outside the EU for an EU-made product. If the manufacturer is outside the EU but the product is manufactured in the EU and not re-imported, the manufacturer must designate an EU-established person in writing. Article 4(4).
- Imported product. Each importer is the Responsible Person for the cosmetic product it places on the market unless it appoints another EU-established person by written mandate and that person accepts in writing.
- Distributor using its own name or changing the product. A distributor becomes the Responsible Person when placing the product under its own name or trademark, or when modifying a product in a way that may affect compliance. Translating label information alone is not treated as such a modification by Article 4(6).
Private label does not remove the role question. The contract, label, import route and actual market-placement chain determine who occupies the legal role. Confirm the named legal entity and the products covered before relying on a service agreement.
Responsibilities of the Responsible Person
Article 5 makes the Responsible Person the compliance point for the obligations listed across the Regulation. The role is broader than storing a PIF or submitting a portal form. It includes ensuring product safety, good manufacturing practice, safety assessment, the PIF, sampling and analysis where applicable, restrictions on substances, notification, labelling, claims, serious-undesirable-effect reporting and information for authorities.
If the Responsible Person has reason to believe that a product is not compliant, Article 5 requires appropriate corrective measures to bring it into conformity, withdraw it or recall it. Where a product presents a risk to human health, the relevant national authorities must be informed. A contract can allocate operational tasks, but it does not turn an incomplete product file into a compliant one. Read Article 5.
Who prepares and signs the CPSR?
Article 10 requires the Responsible Person to ensure that a cosmetic product undergoes a safety assessment and that a CPSR is set up before market placement. Annex I divides the report into Part A, the cosmetic product safety information, and Part B, the cosmetic product safety assessment.
The assessment in Part B must be performed by a person with the formal qualifications specified in Article 10(2): a diploma or other evidence of formal qualification awarded after university-level theoretical and practical study in pharmacy, toxicology, medicine or a similar discipline, or a course recognised as equivalent by a Member State. See Article 10 and Annex I.
Do not treat a template as a signed safety assessment. A data-entry platform, PIF compiler or generic report template can help organise evidence, but Part B still needs the qualified assessor’s conclusion, reasoning and credentials. The Responsible Person must ensure that the information remains relevant and that the CPSR is updated when additional relevant information becomes available. See Article 10(1)(c).
How the CPSR fits inside the PIF
The CPSR is one component of the PIF, not a substitute for the complete file. Article 11 requires the PIF to contain:
- a description that clearly attributes the file to the cosmetic product;
- the CPSR required by Article 10;
- a description of the manufacturing method and a statement on compliance with good manufacturing practice;
- proof of the effect claimed for the product where justified by the nature or effect of that product; and
- data on animal testing performed by the manufacturer, its agents or suppliers in relation to development or safety assessment, including testing used to meet third-country requirements.
The Responsible Person must keep the PIF readily accessible in electronic or other format at the address shown on the label. The retention period is ten years after the last batch of the product was placed on the market. See Article 11.
CPNP happens after the evidence chain is ready
Article 13 requires the Responsible Person to submit specified product information electronically to the European Commission before placing a cosmetic product on the market. The Commission describes CPNP as a free-of-charge online notification system and makes submitted information available to competent authorities and poison centres for market surveillance, analysis, evaluation and medical treatment.
A consultant can charge for collecting, checking and submitting the data, but there is no Commission portal fee. A CPNP reference does not prove that the formula is safe, the CPSR is complete, the label is compliant or the product has been approved. The Responsible Person must still maintain the underlying file and update the notification where the Regulation requires changes. Read the Commission’s CPNP guidance.
Minimum sequence before an EU launch
- Confirm the product and market. Verify that the product is a cosmetic under the EU definition and that the launch territory is the EU rather than Great Britain.
- Map the responsible-person route. Identify the EU manufacturer, importer or appointed EU entity and record the written mandate where required.
- Assemble product evidence. Collect the exact formula, raw-material data, manufacturing and GMP information, packaging details, microbiological and stability evidence, claims support and final label artwork.
- Complete the safety assessment. Give the product-specific evidence to a qualified assessor and resolve gaps before Part B is signed.
- Complete and control the PIF. Include the CPSR and the other Article 11 elements, establish the accessible address and define update responsibility.
- Check the label and claims. Confirm the Responsible Person name and address, required particulars, language requirements and support for claimed effects.
- Submit the CPNP notification. Notify before market placement and retain the submission record with the controlled product file.
- Run post-market controls. Monitor new safety information, complaints and serious undesirable effects; update, correct, withdraw or recall when required.
Common buying mistakes
Buying an address only
An address does not create a CPSR, complete a PIF, check artwork or make a formula safe. Ask what legal and operational duties the agreement covers.
Calling the CPSR an approval
The CPSR is the safety report required by the Regulation. It is not a marketing authorisation or government approval.
Confusing assessor and RP
The same organisation may offer both services, but the qualified assessor’s Part B function and the Responsible Person’s legal role remain distinct.
Bundling EU and Great Britain
EU CPNP and EU Responsible Person work does not automatically include Great Britain’s separate UK Responsible Person and SCPN route.
When outside support is useful
External help can be useful when no EU entity in the supply chain can take the Responsible Person role, when the product evidence needs a qualified safety assessor, when the PIF has material gaps, or when testing, artwork and notification work needs coordination. Before buying a complete package, inventory the evidence already held and ask for a written gap review.
Compare the service scope, not the label
XrdaGrid’s EU cosmetics compliance services comparison separates Responsible Person coverage, CPSR and PIF work, CPNP notification, testing, label review and ongoing support. For marketplace-specific evidence requests, see the TikTok Shop EU cosmetics compliance guide.
Great Britain is a separate route. Products placed on the Great Britain market follow the UK cosmetics regime, use a UK-established Responsible Person and are notified through SCPN. Do not reuse an EU CPNP record as if it completed the GB process. Northern Ireland is not covered by that GB shorthand.
Frequently asked questions
Is the Responsible Person the same as the safety assessor?
No. The Responsible Person is the EU-established legal actor for the product. A qualified safety assessor performs the Article 10 safety assessment and signs Part B of the CPSR. One service provider may supply both functions, but the functions remain distinct.
Can a non-EU manufacturer be the EU Responsible Person?
The Responsible Person must be established within the EU. A manufacturer outside the EU can appoint an EU-established person by written mandate, and that person must accept the role in writing. For imported cosmetics, the importer is the Responsible Person by default unless another qualifying EU entity is appointed. See Article 4.
Does a CPSR include the whole PIF?
No. The CPSR is included within the PIF. The wider PIF also contains the product description, manufacturing and GMP information, justified proof of claimed effects, and the animal-testing data identified by Article 11.
Is a CPNP notification proof of EU approval?
No. CPNP is a notification system, not an approval process. The notification does not replace the Responsible Person, safety assessment, CPSR, PIF, compliant label or post-market duties.
How long is the PIF kept?
The Responsible Person must keep the PIF for ten years after the date on which the last batch of the cosmetic product was placed on the market. See Article 11(1).
Does the Responsible Person’s address have to appear on the label?
Yes. Article 19 requires the name or registered name and address of the Responsible Person on the container and packaging. Where several addresses are shown, the address where the PIF is readily accessible must be highlighted. See Article 19(1)(a).
Does an EU Responsible Person also cover Great Britain?
Not automatically. Great Britain uses a separate UK Responsible Person and SCPN notification route. A provider may contract for both territories, but each role and submission should be stated separately.
Related XrdaGrid resources
Sources and review date
Last fact-checked: August 25, 2026.
- EUR-Lex — current consolidated Regulation (EC) No 1223/2009 on cosmetic products
- European Commission — Regulation text, including Articles 4, 5, 10, 11, 13 and 19 and Annex I
- European Commission — Cosmetic Products Notification Portal
- European Commission — cosmetic-product safety and CPSR guidance
- UK government — Great Britain cosmetics rules and Responsible Person duties
- UK government — Submit Cosmetic Product Notification service
XrdaGrid provides general informational content about cosmetics regulation and service scopes. This page is not legal advice, does not assess a formula or product, and does not certify regulatory or marketplace compliance.
