CPSR Requirements for Leave-On vs Rinse-Off Cosmetics: Face Masks, Oil — Phoenix Compliance Services Skip to content
CPSR Requirements for Leave-On vs Rinse-Off Cosmetics: Face Masks, Oils & Balms Explained

CPSR Requirements for Leave-On vs Rinse-Off Cosmetics: Face Masks, Oils & Balms Explained

TABLE OF CONTENTS:

CPSR for Face Masks, Balms, and Oils: Special Safety Considerations

If you've ever tried to sell face oil, a clay mask, or a nourishing lip balm in the UK or EU market, you've probably hit a wall called the CPSR. And honestly? The confusion is valid.

Most guides out there treat the Cosmetic Product Safety Report like a one-size-fits-all checkbox. It's not.

Not even close, especially when you're dealing with leave-on vs rinse-off cosmetics, anhydrous formulas, or anything that sits on skin for longer than a rinse.

This guide focuses on what really matters for these categories, so you can approach your CPSR with clarity, avoid common mistakes, and build formulations that pass assessment the first time.

What Is a CPSR and Why Does It Exist?

A Cosmetic Product Safety Report (CPSR) is a mandatory document under EU Cosmetics Regulation (EC) No 1223/2009 for any product sold in the EU or UK. It confirms that your product has been independently assessed and is safe for consumer use.

The CPSR has two parts: Part A includes technical data like formula composition, stability, and microbiological quality, while Part B is the safety assessor’s final judgment on whether the product is safe under normal use. Both are stored in the Product Information File (PIF) and are essential for compliance

 

Who Can Write a Cosmetic Product Safety Report?

This trips people up constantly. Your CPSR assessment must be prepared, or at a minimum signed off, by a qualified safety assessor. Under EU Cosmetics Regulation (EC) No 1223/2009, this person needs to hold a degree in pharmacy, toxicology, medicine, or a related field, plus relevant experience.

So no, you can't write your own. Even if you've been formulating for years. Even if you've read every Scientific Committee on Consumer Safety (SCCS) opinion ever published. The Scientific Committee on Consumer Safety (SCCS) sets the technical standards, but they don't write individual CPSR reports; independent qualified assessors do.

Quick Comparison: CPSR Requirements

Before we go deeper, here's a fast reference table covering the core differences between leave-on and rinse-off cosmetics CPSR requirements, and how they apply to the product types this guide focuses on.

CPSR Requirements Comparison Table

Requirement

Leave-On Products (Face Oils, Balms, Overnight Masks)

Rinse-Off Products (Clay Masks, Cleansing Balms)

Cosmetic product classification EU

Leave-on, extended skin contact

Rinse-off, brief skin contact

Exposure calculation

Higher systemic exposure; stricter MoS thresholds

Lower systemic exposure; less restrictive thresholds

Fragrance allergen declaration threshold

0.001%

0.01%

Preservative Efficacy Testing (PET)

Required if any water phase is present

Required if any water phase is present

Microbiological challenge testing

Mandatory for water-containing formulas

Mandatory for water-containing formulas

Stability testing

Full shelf-life stability, including packaging compatibility

Full shelf-life stability

Oxidation/rancidity assessment

Critical, especially for oils and balms

Less critical, shorter skin contact

pH testing

Required for acid-based or active-rich leave-on products

Required for acid masks and exfoliants

Comedogenicity assessment

Required for facial leave-on claims

Not typically required

Essential oil concentration limits

Stricter, leave-on limits per IFRA/SCCS

More permissive rinse-off limits per IFRA/SCCS

Allergen labelling

0.001% threshold triggers mandatory declaration

0.01% threshold triggers mandatory declaration

Qualified assessor required

Yes, mandatory under EU Cosmetics Regulation (EC) No 1223/2009

Yes, mandatory under EU Cosmetics Regulation (EC) No 1223/2009

PIF (Product Information File)

Required

Required

MoS (Margin of Safety) threshold

Must exceed 100

Must exceed 100

Botanical contaminant review

Recommended pesticides, heavy metals

Recommended pesticides, heavy metals

Sensitive skin claims

Higher bar, additional allergen and irritant documentation

Higher bar, additional allergen and irritant documentation

This table gives you the headline picture. But the why behind each row matters just as much as the requirement itself, so let's walk through the areas that trip up brands most often.

The Margin of Safety (MoS): The Number That Matters Most

Every ingredient in your formula needs to pass what's called a Margin of Safety calculation. The rule is straightforward: MoS must be greater than 100.

What does that mean in practice? It means the safe exposure level of an ingredient, based on toxicology data, needs to be at least 100 times higher than the actual amount someone would absorb when using your product normally.

If your MoS drops below 100? Your assessor can't sign off. You'd need to reformulate. Reduce concentrations, remove an ingredient, or swap it for something with a cleaner toxicological profile.

This calculation is where a lot of small batch makers get surprised. An ingredient might seem totally safe in isolation. But when you run the exposure numbers, especially for a leave-on cosmetic safety requirement like a facial oil worn all day or a balm applied repeatedly, the math can look very different to what you expected.

The CPSR safety assessment is where those numbers get checked properly. It's not guesswork but it's a documented calculation. 

Leave-On vs Rinse-Off Cosmetics: Why This Classification Changes Everything

This is one of the most misunderstood distinctions in cosmetic product safety assessment, and it has massive implications for what your report needs to cover.

Rinse-off cosmetic regulations in the EU treat these products as lower-exposure by nature. Products the consumer applies and then washes off, such as clay masks, cleansers, and shampoos, have brief skin contact. The amount of any ingredient that actually absorbs is significantly lower.

Leave-on cosmetic safety requirements are stricter because the product stays on the skin. Face oils, balms, serums, and overnight masks all have extended contact time. That translates to higher systemic absorption, which means your MoS calculations have to account for it.

Here's a concrete example. Fragrance allergens must be declared on the label if they exceed:

  • 0.001% in leave-on cosmetics
  • 0.01% in rinse-off cosmetics

That's a tenfold difference, driven entirely by how long the product stays in contact with skin. The leave-on vs rinse-off exposure calculation CPSR process uses different retention factors for each category, and those retention factors feed directly into your MoS numbers.

Getting this classification wrong isn't just a paperwork problem. It's a safety problem and it's exactly the kind of thing that causes CPSR cosmetics documents to be rejected or flagged for revision.

Special Safety Considerations for Face Oils and Balms

Face oils and balms fall into a specific category with their own set of risks. They're typically anhydrous, meaning no water. And that changes the risk profile in ways that are worth understanding before you approach your CPSR for oils and balms.

No Water No Microbial Risk:  But Other Risks Step In

Good news first. Without water, bacteria and mould can't grow. So you don't need Preservative Efficacy Testing for a true anhydrous formula. That's one fewer hurdle.

But "anhydrous" doesn't mean "without risk." The risks are just different, and in some ways, more specific to the CPSR for oils and balms safety requirements than a standard water-based product.

Oxidation and Rancidity in the Safety Assessment

Oils go rancid. This is not just a quality or sensory issue; it's a genuine safety concern. Oxidised lipid compounds can irritate skin, trigger inflammation, and in some cases cause contact sensitisation over repeated use.

Your cosmetic safety assessment for an oil or balm product needs to address shelf life explicitly. This usually means:

  • Including an antioxidant system, Tocopherol (Vitamin E) is the most common, and Rosemary Extract is another
  • Stability testing that confirms the product stays within safe parameters over its claimed shelf life under real-world storage conditions
  • Appropriate packaging that limits oxygen exposure

If there's no antioxidant strategy in your formula and no supporting stability data, your assessor will flag it. It's one of the first things they look for in a cosmetic product safety report for oil-based products.

Essential Oil Concentrations in Leave-On Products

Many face oils include essential oils for fragrance, claimed therapeutic benefits, or both. The Scientific Committee on Consumer Safety (SCCS) and the International Fragrance Association (IFRA) publish maximum use levels for specific fragrance components, and these are stricter for leave-on cosmetics than for rinse-off equivalents.

As a general guideline, keeping total essential oil concentration below 2% in a leave-on facial product is the broadly accepted safe starting point. But that number doesn't apply uniformly. Individual components, linalool, limonene, geraniol, jasmine absolute, and ylang-ylang oil, all carry their own per-ingredient limits based on sensitisation research.

Your safety assessor checks each volatile component individually. Not the blend as a whole. This is one area where the leave-on vs rinse-off exposure calculation CPSR process gets genuinely technical, and where having a formulator who understands IFRA standards before going to assessment saves time and money.

Comedogenicity for Facial Leave-On Claims

If you're marketing a face oil for facial use, not just as a general body product, comedogenicity needs addressing in your CPSR assessment. Some oils are well-documented pore-cloggers. Others are considered low-risk for acne-prone skin.

This doesn't have to mean expensive clinical testing. In most cases, a thorough literature review based on published comedogenicity ratings suffices. But it has to be there, documented and referenced.

Packaging Compatibility: Often the Last Thing Brands Think About

Oils interact with certain plastics in ways that water-based products don't. Some packaging materials leach plasticisers or other compounds into oil-based formulas over time. Others allow oxidation through permeable seals.

Your stability testing for a cosmetic product safety report covering oils or balms must be conducted in the actual packaging you intend to sell the product in. Stability data from a glass container doesn't automatically apply to a plastic pump bottle. This is an area where the CPSR for oils and balms safety requirements catches brands off guard, particularly those who finalise formulas before they've locked in their packaging.

Special Safety Considerations for Face Masks

Face masks sit in an interesting space. High concentrations of actives. Apply to freshly cleansed, primed skin. Extended contact time in some cases. All of this adds up to a product category with above-average scrutiny in the cosmetic safety report process.

Rinse-Off vs Leave-On Masks: Not the Same Assessment

This sounds obvious when you say it out loud. But a clay mask rinsed off after 10 minutes and a hydrating overnight mask worn for eight hours are fundamentally different products from a CPSR perspective.

The difference between leave-on and rinse-off cosmetics CPSR isn't just a label on the form. It changes every exposure calculation, shifts the allergen declaration thresholds, and reframes the risk profile of your actives. The rinse-off cosmetic regulations EU framework treats contact time as a primary variable in exposure, and correctly so.

Clay masks, exfoliating masks, peel-offs: rinse-off. Overnight sleeping masks, leave-on patches, hydrating balm masks: leave-on. Make absolutely sure this is clarified in your product brief before your CPSR assessment begins.

pH Testing for Acid-Based Masks

Acid-based masks, AHAs, BHAs, and fruit enzyme formulas are some of the more complex products to get through a cosmetic product safety assessment. The skin's natural pH sits around 4.5 to 5.5. Drop significantly below that and you're compromising the acid mantle. Go too alkaline, and you risk a different kind of barrier disruption.

Your CPSR report for an acid mask needs actual pH testing data on the finished formula, not a theoretical estimate based on individual ingredient pH values. And your assessor will look at how that pH holds up across the claimed shelf life during stability testing. A formula that starts at pH 3.8 and drifts to pH 2.9 by month six is a different product than what was tested initially.

Preservative Efficacy Testing for Water-Containing Masks

If your mask formula contains any water-phase ingredient, aloe vera juice, hydrosols, floral waters, cucumber extract, botanical infusions, you need a Preservative Efficacy Test. This is non-negotiable under EU Cosmetics Regulation (EC) No 1223/2009.

The cosmetic product safety assessment framework requires evidence that your preservative system actually works in your specific formula. Not that it should work in theory. Evidence. From a microbiological challenge test conducted by an accredited laboratory, using a standardised microbial panel.

Aloe vera is the ingredient that catches the most brands out here. It's in everything. It's genuinely beneficial. But it introduces water activity that preservatives have to actively manage, and some preservative systems that work well at acidic pH completely underperform in a near-neutral aloe-heavy formula.

High-Concentration Actives and Skin Irritation

Kaolin and bentonite at high concentrations can significantly dehydrate skin. Fruit acids at higher percentages can cause visible erythema. Enzyme masks can trigger sensitisation in certain individuals, particularly those with existing skin conditions.

All of this needs to be addressed in your cosmetic safety report. The toxicological profiling of actives in a mask formula isn't just a pass/fail question on individual ingredients. It's about concentration, pH, contact time, frequency of use, and the realistic consumer population using the product.

The CPSR requirements EU cosmetics framework ask assessors to consider "normal and foreseeable misuse" too. That includes consumers leaving a rinse-off mask on longer than instructed. It includes people with compromised skin barriers using a high-acid exfoliant. Your assessor accounts for these scenarios, and your formula needs to hold up under them.

High-Risk Formulation Considerations for All Three Product Types

Sensitive and Atopic Skin Claims

Marketing your face oil, balm, or mask specifically for sensitive or atopic skin raises the bar. That claim creates a direct regulatory implication; you're effectively promising that the product is appropriate for a more reactive consumer population.

Your CPSR assessment in this case typically requires more thorough allergen documentation, deliberate avoidance of common contact sensitisers, and potentially consumer panel data or dermatological testing to substantiate the claim. The Scientific Committee on Consumer Safety (SCCS) has published specific opinions on fragrance sensitisers that are particularly relevant here.

Botanical Ingredients and Contaminant Risk

Here's the gap that "natural is safer" thinking creates. Botanical ingredients, plant extracts, cold-pressed oils, and herbal distillates introduce variability that synthetic ingredients don't. The same plant species can have meaningfully different chemical compositions depending on origin, harvest timing, and processing method.

This means pesticide residues, heavy metal contamination, and mycotoxins are genuine risks in natural formulas, and your cosmetic product safety report needs to address them. Certificate of Analysis documents from your suppliers are the starting point, not the finish line. A thorough CPSR cosmetics assessment looks at the toxicology of the major constituents of each botanical, not just the broad-brush "it's plant-derived" assumption.

Labelling and Mandatory Warnings

Your CPSR report is directly connected to your labelling compliance. If your cosmetic safety assessment identifies specific warnings, "avoid contact with eyes," "do not use on broken or irritated skin," "patch test recommended," "keep out of reach of children", those warnings have to appear on the product label.

This is especially true for high-concentration masks, acidic exfoliating formulas, and leave-on products with essential oils above certain thresholds. Under EU Cosmetics Regulation (EC) No 1223/2009, any warning identified during the CPSR assessment process is legally required to be communicated to the consumer. It's not optional, and it's not a suggestion.

FAQs

What is a Cosmetic Product Safety Report (CPSR)?

A Cosmetic Product Safety Report (CPSR) is a mandatory EU/UK document. Part A covers formula, stability, microbiology, and toxicology data. Part B provides the assessor’s safety conclusion. Both are stored in the Product Information File (PIF).

Why is the safety and regulatory control of cosmetic products important?

Cosmetics are used daily on sensitive areas like the face and eyes. Without proper safety assessment, issues like harmful ingredients, poor preservation, incorrect pH, or contamination can cause harm. CPSR ensures products are safe before reaching consumers.

What is the 1% rule in skincare?

The 1% rule means ingredients above 1% must be listed in descending order on labels. Below 1%, order doesn’t matter. It’s a labelling rule, not a safety limit, but it still affects CPSR exposure calculations.

What is the safety assessment report for cosmetics?

The cosmetic safety assessment (Part B of the CPSR) is where a qualified assessor reviews technical data and confirms safety. It considers use, misuse, vulnerable groups, and risks, with stricter evaluation required for leave-on cosmetics.

Previous article What Is a CPSR? The Complete UK & EU Cosmetic Product Safety Report Guide (2026)
Next article EU Eye Cosmetic Safety: Annex V Preservative Limits for Mascara, Eyeliner & CPSR

Leave a comment

* Required fields