The CPSR and Product Liability Insurance: What Insurers Look For and Why a Thin Report Can Void Your Cover

Every cosmetic brand should carry product liability insurance, and almost every one does. Far fewer understand what the policy actually requires of them, or how directly it depends on the Cosmetic Product Safety Report. Under the Consumer Protection Act 1987 in the UK and equivalent product liability law across the EU, the producer of a product is strictly liable for damage caused by a defect in it: the injured person does not have to prove the producer was negligent, only that the product was defective and caused the harm. Insurance exists to carry that liability. But insurers write policies on the assumption that the insured is operating lawfully, and for cosmetics that means holding a CPSR under Regulation (EC) No 1223/2009 and the UK regulation enforced through the Cosmetic Products Enforcement Regulations 2013.

This guide explains how the CPSR and product liability insurance interact: what strict liability means for a maker, what insurers ask for and why, how policy conditions can turn a missing or inadequate report into a declined claim, what a claim actually looks like, and how a strong compliance file protects both your cover and your business.

Strict liability: why the stakes are what they are

Product liability law does not ask whether you meant well or worked carefully. If a cosmetic causes personal injury or property damage because it was defective, meaning it did not provide the safety a person is entitled to expect, the producer is liable for the damage. Producer includes the manufacturer, the person who puts their name on the product, and the importer into the UK or EU. The injured person need only show the defect and the causal link. Defences exist, including that the defect could not have been discovered given the state of scientific and technical knowledge, but a producer who never had the product assessed can hardly argue the defect was undiscoverable. Damages for a serious allergic reaction, a chemical burn or an eye injury can run to sums that end a small business. Insurance is how that risk is carried.

What the policy assumes

Product liability policies for cosmetics are written on the premise that the insured is a lawful business selling lawful products. Most contain some combination of a general condition that the insured will comply with all applicable laws and regulations, a specific warranty or condition that cosmetic products are safety assessed and compliant with the Cosmetics Regulation, a requirement to maintain records enabling batch traceability and recall, and a duty to take reasonable precautions to prevent injury. Some policies name the CPSR and PIF explicitly; others rely on the general compliance condition. Either way, a product sold without a CPSR is a product sold in breach of the regulation, and an insurer faced with a claim on such a product has grounds to argue the policy conditions were not met. Whether they take that position depends on the insurer, the wording and the circumstances, but the risk that a claim is declined, or cover avoided altogether for non disclosure of a material fact, is real and is the whole reason to hold the report.

What insurers ask for

How a claim actually unfolds

A customer reports a severe reaction to a body oil and seeks compensation. You notify the insurer. The insurer's first request is the CPSR for that product, the batch record for the batch the customer used, and the label. The insurer's assessors read Part B: was the product assessed as safe for the use the customer made of it, were the required warnings and allergen declarations on the label, did the batch match the assessed formula from the assessed suppliers, and did the assessment consider the sensitiser that appears to have caused the reaction? If the answers are yes, the insurer has a defensible position, may argue the reaction was an idiosyncratic response to a properly declared allergen, and will handle the claim within the policy. If the report is missing, does not cover the variant sold, was silent on the fragrance constituents, or the batch used a fragrance from a different supplier than the one assessed, the insurer's position, and yours, is very different.

The batch record matters as much as the report. A perfect CPSR for a product made from a different supplier's fragrance than the one assessed does not cover the batch that caused the harm. Traceability from the customer's jar to the raw material lots is what connects the report to the incident.

How a thin report undermines cover

Insurers and their experts read Part B closely, and a report that satisfies the letter of the law can still fail to satisfy them. A report with no margin of safety calculations, a fragrance treated as a single line with no constituent assessment, a generic toxicology section and a conclusion with no conditions gives the insurer nothing to defend with and gives the claimant's expert an easy target: the product was assessed, but not competently. Depending on the policy wording, this can be characterised as a failure to take reasonable precautions or as a product that was not properly safety assessed at all. Our guide to choosing a safety assessor sets out what a defensible report contains, and our CPSR example shows what to check in the one you hold.

Recall cover and the CPSR

Standard product liability cover pays for third party injury and damage; it does not usually pay the cost of recalling a product from the market, which can exceed the liability itself for a small brand: contacting customers, retrieving stock, destroying it, replacing it and the lost sales. Recall cover is available as an extension and is worth considering for any brand with retail distribution. Insurers offering it will want the same documents, because the ability to conduct a targeted recall depends on batch traceability, and the decision whether a recall is necessary depends on the safety assessor's view of the defect. A brand whose PIF can identify exactly which batches contain a problem lot of fragrance recalls those batches; a brand without records recalls everything.

Marketplaces, retailers and the insurance certificate

Amazon, larger retailers and many wholesale buyers require sellers to hold product liability insurance at a stated level and to provide the certificate, and they also require the CPSR. The two requirements are connected: the insurer's willingness to cover you depends on the compliance documents, and the platform's willingness to list you depends on both. A brand assembling its compliance file for one audience is assembling it for all of them, which is one more reason to build it properly once. Keep the insurance certificate in the PIF's cover section alongside the register of products it covers, so that the platform, the buyer and the insurer are all looking at the same list.

Disclosure: telling the insurer the truth

Insurance depends on the insured disclosing material facts. Selling products without CPSRs, selling into markets the policy does not cover, importing products under your name, or making products with ingredients your assessor has not approved are all material. A brand that answers yes to the question are your products safety assessed when some are not risks having the whole policy avoided, not just the claim on the unassessed product. Keep your product list, your CPSR register and your insurance schedule aligned, and declare new products and markets as they launch.

How compliance lowers your risk and your premium

• Fewer incidents. A competent assessment catches the sensitiser, the phototoxic oil and the inadequate preservative before a customer does.
• Defensible claims. A complete file lets the insurer defend rather than settle.
• Better terms. Underwriters price documented, traceable businesses more favourably than undocumented ones.
• Faster recalls. Batch records and distribution records limit the scope and cost of a recall.
• Marketplace and retailer access. The same documents insurers want are the ones platforms and buyers require.

Building an insurance ready compliance file

The file an insurer wants is the file the regulation already requires: a complete CPSR for every product and variant, a Product Information File with manufacturing method, GMP statement and batch records for every batch sold, label artwork matched to Part B, claims evidence, a cosmetovigilance procedure with a complaints log, and a change log showing the report has been maintained. Keep a register listing every product, its CPSR reference and date, its variants, its markets and its last review, and give a copy to your broker. When a claim arrives, everything the insurer asks for is already in one place.

What insurance does not do

Insurance carries liability; it does not create compliance. A policy will not make an unassessed product legal, will not satisfy Trading Standards or a marketplace, and will not prevent the reputational damage of a reaction that a competent assessment would have foreseen. Nor does it cover regulatory fines or, in most wordings, the cost of a voluntary recall unless recall cover is added. Treat the CPSR as the primary protection and the policy as the backstop, not the other way round.

If you are unsure whether your existing reports would satisfy an insurer, a review before renewal is cheaper than discovering the answer at a claim.

Official sources and legislation

• Consumer Protection Act 1987
• Regulation (EC) No 1223/2009 on cosmetic products
• Cosmetic Products Enforcement Regulations 2013
• Office for Product Safety and Standards
• OPSS guidance on cosmetic products regulations

Disclaimer: This article is general information, not legal advice. Regulations change and product decisions depend on your exact formulation, claims and market. Have your product assessed by a qualified professional before sale.