Private Label & White Label Cosmetics: Who's Responsible?

Private label and white label let you launch a cosmetic brand without formulating from scratch but they do not let you skip compliance. A common and costly myth is that because someone else made the product, someone else is responsible for it. This guide explains who actually carries compliance for private and white label cosmetics, and what you still need to do.

This builds on the core requirements in our pillar guide to what you need to sell cosmetics legally.

What private and white label mean

With white label, a manufacturer makes a generic product that multiple brands can sell under their own name. With private label, a product is made (sometimes with some customisation) for a specific brand to sell as its own. In both cases, you put your brand on a product made by someone else. It is a popular, legitimate route to market, especially for founders who want to focus on brand and sales rather than formulation.

The crucial point is what putting your name on the product does in compliance terms. By placing a product on the market under your own brand, you generally take on the responsibilities that come with it you are not merely reselling someone else's finished, badged product.

Who is the Responsible Person?

This is the heart of the matter. When you sell a product under your own name or brand, you typically become the Responsible Person for it or must designate one in your market. The fact that a manufacturer made it does not make them your RP. So a UK brand selling private-label skincare under its own name generally needs to be, or appoint, a UK Responsible Person, with all the duties that entails.

This catches out many new brands who assume the manufacturer's compliance carries across. It often does not, at least not automatically, and certainly not the RP role for your branded product. Our guide to the Responsible Person explains what the role involves and why it cannot simply be assumed away.

What compliance you still need

Because you are placing a cosmetic on the market, your branded product still needs the full set: a valid CPSR, a PIF, a Responsible Person, notification, and compliant labelling in your brand's name. Some of this may build on documentation the manufacturer provides, but it must add up to a complete, valid compliance position for the product as you sell it.

In particular, the labelling and notification are yours: the label carries your RP details and brand, and the notification is made for your product. You cannot rely on the manufacturer's own notification of a generic base to cover your branded version on the market.

Documents to get from your supplier

A good private/white label supplier should give you the documentation you need to meet your obligations. At minimum you want the full ingredient formulation (or confirmation that a compliant CPSR and PIF exist and can be provided), ingredient and allergen data, and any existing safety assessment and testing. Without the underlying data, you cannot confirm the product is compliant or respond to an authority or marketplace request.

Be wary of suppliers who will not share this information. “It's all taken care of” is not documentation, and if you cannot obtain the data to support your branded product's compliance, that is a serious problem to resolve before you launch not after. The same caution applies to importing finished products from abroad to rebrand.

Customisation changes things

If you customise a white label base adding a fragrance, changing the colour, adjusting the formula you have changed the product, and the existing safety assessment may no longer cover it. A modified product generally needs its own CPSR reflecting the actual formulation you sell, not the assessment of the unmodified base. Even seemingly small additions, like a scent or a colourant, can affect safety, allergen labelling and compliance.

So the more you customise, the closer your situation gets to launching an original product, with the full assessment that implies. Knowing where simple rebranding ends and meaningful reformulation begins is important, because it determines how much fresh compliance work you need.

Importing finished products to rebrand

A close cousin of white label is buying finished cosmetics from abroad to rebrand and sell as your own. It can look like an easy shortcut, but it concentrates several risks. By importing and placing the product on the market under your brand, you generally become the Responsible Person and the importer, taking on full accountability for a product you did not formulate and whose real composition you may not fully know. If the overseas manufacturer's documentation is thin, you inherit that gap.

The particular danger is that products made for other markets may not meet UK or EU rules. They might contain ingredients banned or restricted here, lack a compliant safety assessment, or carry labelling that does not satisfy local requirements. “It's sold widely overseas” is not evidence of UK or EU compliance, and importing on that assumption can leave you selling a non-compliant product under your own name.

If you go this route, insist on seeing the genuine full formulation and supporting data, and have the product assessed against the rules of the market where you will sell effectively treating it as a new product to be made compliant, not a finished one to badge. Where a supplier will not provide what you need, that is a reason to walk away, not to proceed and hope.

Private label compliance checklist

• Recognise that selling under your brand brings responsibility.

• Be or appoint a Responsible Person in your market.

• Ensure a valid CPSR, PIF, notification and labelling for your product.

• Get full ingredient and safety data from your supplier.

• Treat any customisation as potentially needing its own CPSR.

• Avoid suppliers who won't share documentation.

Frequently asked questions

Who is responsible for private label cosmetics?

Generally you are, because you place the product on the market under your own brand. That usually makes you (or an RP you appoint) the Responsible Person the manufacturer making it does not automatically take that role.

Do I still need a CPSR for white label products?

Yes. Your branded product needs a valid CPSR, PIF, notification and labelling. Some may build on the manufacturer's documentation, but it must amount to a complete compliance position for the product as you sell it.

What documents should my supplier provide?

The full ingredient formulation (or a compliant CPSR and PIF that can be provided), ingredient and allergen data, and any existing safety assessment and testing. Be cautious of suppliers who won't share this.

Does customising a white label base change my obligations?

Yes. Adding fragrance, colour or other changes alters the product, so the original assessment may not cover it and you may need your own CPSR for the actual formulation you sell.

Can I rely on the manufacturer's notification?

No. The notification for your branded product on the market is yours to make, in your market and under your RP, not the manufacturer's notification of a generic base.

Is importing finished products to rebrand any different?

It carries similar responsibility plus extra risk. You generally become the Responsible Person and importer, and products made for other markets may not meet UK or EU rules — so insist on the real formulation and data and have it assessed for your market.

What if my supplier won't share the formulation?

Treat that as a serious warning sign. Without the underlying ingredient and safety data you cannot confirm compliance or answer an authority or marketplace request, so it is usually a reason to choose a different supplier.

References: Regulation (EC) No 1223/2009, Articles 4 and 5 (EUR-Lex); UK Cosmetics Regulation as retained; OPSS guidance. General information only, not legal advice.