European Cosmetics Compliance: How to Evaluate a Regulatory Partner for CPSR and Responsible Person Services

The brief is usually the same: we are launching in Europe, we need a CPSR for each product, we need a Responsible Person because we are not established there, we probably need the PIF and the notifications done, and we would like one partner to handle it rather than five. It is the right instinct, and it is where a great deal of money is wasted on the wrong partner. Regulation (EC) No 1223/2009 requires a Responsible Person established in the EU, a safety report signed by a person with a specified qualification, a Product Information File, and notification through CPNP; the UK regulation enforced through the Cosmetic Products Enforcement Regulations 2013 requires the same for Great Britain with a UK Responsible Person and SCPN. A partner who can do all of that lawfully, well, and for years, is rarer than the search results suggest.

This guide is the evaluation Phoenix would want to be judged by, written so you can apply it to us or to anyone. It covers what a regulatory partner actually has to be able to do under the law, how to check Responsible Person establishment, how to assess the quality of a CPSR before you buy one, what qualifications matter and how to verify them, scope from single report to whole chain, the after sales work that separates partners, pricing models and what they signal, turnaround honesty, the questions to ask and the red flags to leave on, a worked comparison of three offers, and a short scorecard you can use in an afternoon. Choosing well takes a week. Choosing badly costs a year.

What does a European regulatory partner legally have to be able to do?

Four things, and they are not interchangeable. First, act as your Responsible Person, which means being a legal or natural person established in the EU, or in Northern Ireland for the EU regime, or in the UK for Great Britain, who accepts the role by written mandate, holds your Product Information File at the address on your label, makes the notifications, and answers to the authorities. Second, produce your Cosmetic Product Safety Report, which means employing or engaging a person with a university qualification in pharmacy, toxicology, medicine or a similar discipline who signs Part B in their own name. Third, build and maintain the PIF, which is the Responsible Person's file but is often assembled by the partner. Fourth, notify through CPNP and SCPN as the Responsible Person. A partner can do one, some or all of these, and the first question is which of them you are actually buying.

How do I check that a Responsible Person is genuinely established in my market?

Ask for the legal entity that will be named on your label and look it up. For the EU that means a company registered in an EU member state with a physical address there, and that address must be the one on your pack; a UK company with an EU postbox is not established in the EU. For Great Britain it means a UK registered company with a UK address. Confirm the entity will hold your PIF at that address and can produce it to an inspector, because the Responsible Person is who the authority contacts and who carries the legal exposure. Phoenix's EU Responsible Person is our Estonian company at its Tallinn address, and our UK Responsible Person is our London company; both appear on client labels and both hold the files. Any partner should be able to answer the same question in one sentence.

How do I assess the quality of a CPSR before I buy one?

Ask for a redacted sample of Part B for a product like yours and read it for five things. A named signatory with a stated qualification and a date. A conclusion that names the product and its variants and states conditions. A margin of safety table with sources. A sensitisation assessment that names the limiting fragrance constituent and gives an allergen declaration. Specific label warnings in exact wording. A partner who cannot show a sample, or whose sample is a page of generic text ending in a company stamp, is selling paper. Our guides to what a finished CPSR looks like and Part B element by element give you the standard to hold the sample to.

What qualifications matter most in a compliance assessor?

Legally, one: the person who signs Part B must hold a diploma or equivalent evidence of formal qualifications from a university course in pharmacy, toxicology, medicine or a similar discipline. That is the floor and it is non negotiable; a partner whose reports are signed by a company, or by a person with a formulation diploma or years of experience but no qualifying degree, is producing reports that fail at Part B. Above the floor, what matters is toxicological competence in practice: sourced profiles, real calculations, constituent level fragrance work, and specialism in your product type where it is demanding, such as fragrance, baby, sun care or hair dye. Professional indemnity insurance and published credentials are the signals that the assessor stands behind the work. This is the practical backbone of consumer safety under the cosmetics regulation, and it's why Regulation (EC) No 1223/2009 puts the qualification requirement front and centre rather than leaving it to a brand's discretion. Our guide to choosing a safety assessor goes through this in depth, and our verifications page is where we publish ours.

Do I need one partner for the whole chain?

You do not need one, but most brands are better served by one. The CPSR, the PIF, the notification, the label and the Responsible Person all depend on the same submission and on each other: the frame formulation in the notification comes from Part A, the label warnings come from Part B, the PIF holds all of it, and the Responsible Person is answerable for the lot. A partner who does the whole chain from one submission avoids the gaps that appear when the assessor, the notifier and the Responsible Person are three companies who have never spoken. A brand with an in house regulatory person may want only the CPSR and the Responsible Person; a brand launching for the first time almost always wants everything. Ask the partner which they offer and whether the pieces are built from one submission.

What happens after the report is delivered?

This is where partners differ most and where the evaluation should spend most time. A product changes: suppliers, fragrances, packaging, claims, markets. The law changes: annex amendments, allergen rules, divergence between the UK and EU. Authorities and marketplaces ask questions. A partner worth having issues addenda quickly and at a known price, watches the annexes and tells you when something affects your ingredients, updates the PIF and the notification when you change something, and answers Trading Standards, a marketplace or an insurer on your behalf when asked. Ask specifically: what does an addendum cost and how long does it take; do you monitor regulatory change for my products; who answers if OPSS writes to my Responsible Person; how do you handle an allergen list change across my range. A partner who has not thought about these has not been doing this long, since national competent authorities can and do follow up on cosmetic products already on the market.

How should pricing and turnaround work?

Assessment is professional time, so honest pricing scales with complexity: anhydrous products with documented fragrance at the low end, water based products with actives and essential oils higher, ranges priced per variant, dual market reports more than single. A flat price for every product regardless of what is in it signals that the toxicological work is not being done, particularly where cosmetic substances and ingredients vary widely from one product to the next. Turnaround should be stated as a range that depends on your documents, with a clear list of what is needed, rather than a promise of hours; complete fragrance documents make a report fast and missing ones make it slow, and a partner who tells you that before you pay is a partner who will tell you the truth later. The same logic applies to the full range of cosmetic ingredients a brand may use, not just fragrance, so the documentation burden should scale with the formulation. Our cost guide sets out the components and Phoenix's product pages show real prices.

What questions should I ask, and what answers should I expect?

• Who will sign my CPSR and what is their qualification? A name and a qualifying degree, with evidence on request.
• Which legal entity will be my Responsible Person and where is it registered? A company name, number and address in the EU or UK that will appear on my label.
• Can I see a sample Part B for a product like mine? Yes, redacted.
• Does the report cover both the UK and the EU? Yes if I need both, stated in the report.
• What do you need from me and how long will it take once you have it? A specific list and a realistic range.
• What does an addendum cost when I change a supplier or add a scent? A figure and a timescale.
• Do you monitor regulatory changes for my ingredients? Yes, and here is how you will hear.
• Who answers if a regulator or marketplace contacts my Responsible Person? A named person, promptly.
• Do you carry professional indemnity insurance? Yes.
• Can I speak to a client? Yes, or here are verifiable references.

What are the red flags?

• A Responsible Person address that is a postbox, a virtual office or in the wrong market.
• Reports signed by a company or an unnamed team.
• No sample Part B, or a sample with no calculations and no conditions.
• A flat price for every product.
• Guaranteed pass.
• Turnaround in hours for a complex product.
• No answer on addenda, monitoring or who handles a regulator.
• A CPSR certificate or badge on offer.
• Pressure to sign a long Responsible Person contract before seeing any work.

A worked comparison: three offers for a ten product skincare range

Offer one is cheap: a flat fee per product for a CPSR, an EU Responsible Person at a very low annual rate, no PIF, no notification, no sample shown. On enquiry the Responsible Person address is a serviced office in a member state with no staff, and the reports are signed by the company. Offer two is a large consultancy: excellent credentials, high prices, a six week turnaround, and a Responsible Person entity in Germany; addenda are quoted per hour and the brand is one of hundreds of clients. Offer three is a mid sized specialist: named assessors with published qualifications, a sample Part B with a margin of safety table and allergen declarations, an EU Responsible Person company with a real office and staff, the whole chain from one submission, prices per product by complexity, addenda at a fixed fee, regulatory monitoring included, and two clients who answer the phone. The brand chooses three. It costs more than one and less than two, and eighteen months later, when the allergen list changes and a marketplace asks for documents, it is the only one of the three that would have been worth having.

A scorecard you can use in an afternoon

A note on WDA(H) and other pharmaceutical services

Searches for Responsible Person services sometimes return providers of pharmaceutical wholesale dealer licences, WDA(H), and pharmaceutical responsible persons. Those are medicines roles under a different regime and are not what a cosmetics brand needs. A cosmetics Responsible Person under the Cosmetics Regulation is a distinct function, and a provider who conflates the two is a signal to keep looking. Conversely, a brand whose product is a medicine rather than a cosmetic needs a pharmaceutical partner, and no cosmetics Responsible Person can help; our guide to borderline classification decides which you have.

Myths we hear

• Any EU address works for the Responsible Person. It must be a genuinely established entity that holds the file and answers the authority.
• The cheapest CPSR is legally the same as the best. Only if a qualified person signed it; and it will not be the same at an inspection or a claim.
• I can change partners easily later. You can, but your label carries the Responsible Person's address, so changing means reprinting.
• A big name is a safe choice. Big names are often slow and expensive for small brands; verify the same six things.
• I only need the CPSR. Unless you have someone in house to do the PIF, notification and label, you need the chain.

What to do this week

• Write down which of the four services you actually need.
• Send the ten questions above to three partners.
• Look up each partner's Responsible Person entity on the relevant register.
• Score the answers on the scorecard.
• Choose, and get the mandate and the first submission moving.

The right partner is the one who answers every question above specifically and is glad to be checked. A consultation is the easiest way to find out whether that is us.

Official sources and legislation

• Regulation (EC) No 1223/2009 on cosmetic products, Articles 4 and 10
• Cosmetic Products Enforcement Regulations 2013
• European Commission cosmetics pages
• OPSS guidance on cosmetic products regulations
• Office for Product Safety and Standards

Disclaimer: This article is general information, not legal advice. Regulations change and product decisions depend on your exact formulation, claims and market. Have your product assessed by a qualified professional before sale.