CPSR Renewal & Updates: When Do You Need a New One?

A common assumption is that a CPSR is a one-off purchase: get it signed, file it away, done forever. In reality, a Cosmetic Product Safety Report reflects your product and the rules as they stood on the day it was signed — and neither of those stays still. This guide explains when a CPSR needs updating, whether it “expires”, and how to keep your compliance current without unnecessary cost.

If you are new to safety reports, our pillar guide to what a CPSR is sets the scene.

Does a CPSR expire?

A CPSR does not carry a fixed expiry date the way a passport does. There is no rule that says “re-do it every two years”. Instead, a CPSR remains valid for as long as it accurately describes your product and the product remains compliant with current rules. The moment either of those stops being true, the assessment needs revisiting. So rather than thinking about expiry, think about whether your CPSR still tells the truth about what you are selling and whether it is still legal.

This is an important shift in mindset. Compliance is not a box you tick once; it is a state you maintain. A CPSR signed three years ago may still be perfectly valid — or it may have been overtaken by a formula tweak or an ingredient ban you did not act on.

When you need a new or updated CPSR

Several common triggers mean your CPSR needs review or updating:

• You change the formula — a new oil, a different active, an adjusted percentage.

• You change the preservative system — this directly affects microbiological safety.

• You change a fragrance — new allergen profile and IFRA considerations.

• An ingredient is restricted or banned — regulatory updates can affect existing products.

• You change supplier for a key raw material, altering its specification or impurities.

• You change the intended use — for example, from a rinse-off to a leave-on application.

• You change packaging in a way that could interact with the product.

Some of these you control; others, like ingredient bans, happen to you. Both matter equally, which is why staying aware of regulatory change is part of the job.

Formula changes: the most common trigger

By far the most frequent reason a CPSR needs updating is a change to the formula. It is tempting to make a small tweak — swap one oil for another, nudge a percentage, change a fragrance supplier — and assume the existing assessment still covers it. It often does not. Even a modest change can alter exposure, allergen content or stability, and the signed CPSR no longer describes the product you are actually selling. If you reformulate, treat it as a trigger to check with your assessor rather than something to deal with later.

This is also a good argument for finalising your formula properly before the first assessment, so you are not paying to re-assess a product you are still tinkering with.

Regulatory changes you don't control

Cosmetic ingredient rules are updated regularly. Substances get restricted, banned, or have their permitted concentrations changed, and allergen labelling requirements evolve. When that happens, products already on the market can be affected — not just new launches. A CPSR that was entirely correct when signed may need revisiting because an ingredient it relied on has since been restricted. Keeping an eye on regulatory updates, or working with an assessor who does, is how you catch these before an authority does.

This is one of the strongest reasons to choose an assessor who stays current. A sign-off that reflected the rules two years ago is not automatically the same as one that reflects today's.

Keeping your PIF and compliance current

Your CPSR sits inside your Product Information File (PIF), which must be kept up to date and available to the authorities for ten years after the last batch. Updating a CPSR is not just about the report itself — it ripples into your PIF, your label and potentially your notification. Treating compliance as an ongoing routine, with a periodic review of your products against current rules, keeps all of this aligned and avoids nasty surprises.

How often should I review my CPSR?

Since a CPSR has no fixed expiry, the right approach is a regular review rather than a countdown. A sensible rhythm for most brands is to review each product's compliance at least once a year, and additionally whenever something changes — a reformulation, a supplier switch, or a regulatory update affecting one of your ingredients. The annual review is a safety net that catches anything you might have missed; the change-triggered review handles the specific events that most often make a CPSR out of date.

This is far less onerous than it sounds. For a stable product with no formula changes, an annual check against current ingredient rules may confirm everything is still fine. The value is in doing it deliberately, so a quietly introduced ingredient restriction does not sit unnoticed against a product you are still selling.

Whose job is it to keep a CPSR current?

Responsibility for keeping documentation current sits with the Responsible Person — the business or individual legally accountable for the product in a given market. If you are your own Responsible Person, that duty is yours: it is on you to ensure your CPSR, PIF and notification still reflect the product and the rules. If you use a third-party Responsible Person, responsibilities should be set out clearly between you, but the legal accountability does not simply disappear.

In practice, many brands lean on their safety assessor or compliance provider to flag relevant regulatory changes, precisely because keeping up with every Annex update is hard to do alone. Whoever does the monitoring, the key is that someone is, and that there is a clear process for acting when something changes.

A practical compliance review routine

A simple routine keeps everything aligned without it becoming a burden:

• Keep a list of your products and the date each CPSR was signed.

• Note the key restricted ingredients each product relies on.

• Check annually whether any of those ingredients have new restrictions.

• Trigger a review immediately on any formula, supplier or use change.

• Keep your PIF, label and notification updated together when a CPSR changes.

Treated as a light annual habit plus a change-triggered check, staying compliant becomes routine rather than a scramble — and far cheaper than discovering an out-of-date assessment during an enforcement visit or marketplace audit.

What a CPSR update actually involves

Updating a CPSR is not always a full re-do from scratch. The scope depends on what changed. A minor, well-documented tweak might require the assessor to re-check a specific element and refresh the conclusion, while a more significant change — a new preservative, a switch from anhydrous to water-containing — can mean revisiting much of the assessment and potentially new testing. The assessor scales the work to the change, so a small update is usually quicker and cheaper than a brand-new product.

Because of this, it pays to tell your assessor exactly what changed rather than presenting a reformulated product as if it were brand new. Precise information lets them target the update efficiently. Vague or incomplete change descriptions, by contrast, force a more cautious and costly reassessment.

When the CPSR is updated, remember the knock-on effects: your PIF, label and notification may all need to reflect the change too. Treating an update as a small project that touches several documents — rather than just the report — keeps everything consistent and compliant.

Frequently asked questions

Does a CPSR expire?

Not on a fixed date. It stays valid as long as it accurately describes your product and the product remains compliant with current rules. A change to either means it needs revisiting.

When do I need a new CPSR?

When you change the formula, preservative, fragrance, supplier, intended use or packaging, or when an ingredient is restricted or banned by a regulatory update.

Can I make a small formula change without updating my CPSR?

Usually not safely. Even small changes can alter exposure, allergens or stability, so the existing report may no longer describe your product. Check with your assessor.

What if an ingredient I use gets banned?

Products already on the market can be affected. You may need to reformulate and update your CPSR. An assessor who tracks regulatory change helps you catch this early.

How long must I keep my CPSR and PIF?

Your PIF, which contains the CPSR, must be kept available to the authorities for ten years after the last batch of the product was placed on the market.

References: Regulation (EC) No 1223/2009 (EUR-Lex); UK Cosmetic Products Enforcement Regulations 2013. General information only, not product-specific advice.