Knowledge · Regulatory Affairs

EU Cosmetics Regulation 1223/2009: what R&D teams need to consider during product development

Regulation (EC) No 1223/2009 is the central legal framework for cosmetic products in the European Union. For product development teams it is not merely a launch-stage topic: formulation, safety assessment, the product information file, labelling, manufacturing and CPNP notification all depend on data created during development.

By VYVA Editorial TeamEditorial policyUpdated: September 4, 2026

In short: what does the EU Cosmetics Regulation cover?

The Regulation covers areas including product safety, the responsible person, safety assessment and CPSR, the Product Information File (PIF), good manufacturing practice, substance restrictions, labelling and notification through the CPNP. The current consolidated text on EUR-Lex is the legal reference.

Key takeaways

  • Bring regulatory into formulation development early
  • Keep substance and formula data version-controlled
  • Prepare CPSR, PIF and CPNP data systematically
  • Make changes to formula, material or supplier traceable
  • Distinguish legal sources from databases and software assessments

See it with your own data

In 30 minutes we walk you through the workflow using your formulas and raw materials. No obligation, reply within one business day.

Why regulatory work starts before launch

Many regulatory requirements depend directly on data created in the lab: qualitative and quantitative composition, raw-material identity, physicochemical characteristics, stability, microbiological quality, manufacturing method and safety information. Collecting these only before market launch creates rework. A digital process should therefore place regulatory checkpoints into briefing, raw-material selection, formulation and testing.

The most important data objects for R&D

Operationally, formula versions, INCI and CAS references, raw-material specifications, supplier documents, test results, stability data, manufacturing instructions, claims evidence and approvals are especially relevant. Their value comes from relationships: a test result must belong to the correct formula version and a raw-material change should reveal affected products.

Regulation, annexes and databases

The consolidated Regulation and its annexes are the legal reference. Tools such as CosIng can support research but do not themselves have legal value. Digital systems should therefore expose source, update status and decision logic. Software can structure regulatory work and provide signals, but it does not replace qualified safety or legal assessment.

How an R&D platform can help

A platform can keep the underlying data consistent, show responsibilities, record changes and bring regulatory information into development earlier. The main value is not a generic compliance badge but a traceable data chain from raw material through formula and testing to approval.

Regulatory requirement and related development data

Safety assessment / CPSRComposition, exposure, raw-material and test dataR&D + Safety Assessor
PIFProduct description, CPSR, manufacturing/GMP, claims evidenceResponsible Person
CPNPProduct, responsible-person and formulation informationResponsible Person / Regulatory
LabellingINCI, warnings, responsible person, product dataRegulatory + Packaging
Change managementVersions, material changes, approvals, affected productsR&D + Regulatory + QA

Frequently asked questions

Disclaimer: This article is for general information only. It is not legal advice and not a regulatory or safety assessment of any individual case. We prepare the content carefully but give no warranty as to its accuracy, completeness or currency; legislation and standards may change after the date stated. Only the officially published text is binding. Make decisions about your products with qualified support, such as your safety assessor or legal adviser. We are liable for damage arising from the use of this information only in cases of intent and gross negligence; liability for injury to life, body or health and under mandatory statutory provisions remains unaffected.

Questions about your specific use case?

Schedule a personal demo or contact our team directly.