Cosmetic safety assessments are not a final paperwork step. They help brands confirm that a product is safe for consumers before it reaches the market.
In the United States, cosmetic companies must maintain adequate safety substantiation under MoCRA and meet related registration, listing, reporting, and recordkeeping duties. In the European Union, brands need a Cosmetic Product Safety Report, or CPSR, before placing a product on the market.
Both systems focus on consumer safety. The difference is how each market expects safety to be documented.
What is a Cosmetic Safety Assessment?
A cosmetic safety assessment reviews whether a product is safe under normal and reasonably foreseeable use.
It may consider:
- Full formula
- Ingredient safety data
- Exposure route and frequency
- Target users
- Microbiological quality
- Stability information
- Packaging compatibility
- Warnings and directions
- Manufacturing controls
For brands, the goal is practical. Identify safety risks early, support label claims, and keep documentation ready for regulators, retailers, and customers.
US Cosmetic Safety Requirements
The US does not require an EU-style CPSR before marketing. However, safety documentation is still required.
Under MoCRA, the responsible person must ensure and maintain records supporting adequate safety substantiation for each cosmetic product. This means having tests, studies, research, analyses, or other evidence that qualified experts would consider sufficient to support a reasonable certainty of safety.
US brands should also prepare for:
- Facility registration, unless exempt
- Cosmetic product listing
- Serious adverse event reporting
- Recordkeeping
- Label review
- Ingredient and allergen controls
- GMP-ready procedures
- Complaint handling
The US system is less prescriptive than the EU CPSR model, but it still expects real evidence. A formula should not rely on marketing language, supplier promises, or “natural” positioning alone.
If a cosmetic product makes drug-like claims, such as treating acne, healing eczema, or preventing sunburn, it may move outside ordinary cosmetic rules.
EU CPSR Requirements
The EU takes a more structured approach under Regulation (EC) No 1223/2009.
Before a cosmetic product is placed on the EU market, the Responsible Person must ensure the product has undergone a safety assessment and that a CPSR is prepared according to Annex I.
The CPSR has two main parts:
| CPSR Section | What It Covers |
| Part A: Cosmetic Product Safety Information | Formula, ingredient data, physical and chemical characteristics, microbiological quality, impurities, packaging, exposure, toxicological profile, undesirable effects, and supporting information |
| Part B: Cosmetic Product Safety Assessment | Safety conclusion, warnings, reasoning, assessor credentials, and final approval by a qualified safety assessor |
The CPSR is part of the Product Information File, known as the PIF. The PIF must be kept readily accessible to the competent authority at the Responsible Person’s address listed on the product label.
US vs. EU Requirements
| Requirement Area | United States | European Union |
| Main safety file | Safety substantiation records | CPSR inside the PIF |
| Format | Flexible, evidence-based | Structured under Annex I |
| Before the market? | Safety must be substantiated, but no CPSR format is required | CPSR required before market placement |
| Responsible party | Responsible person named on the label | EU Responsible Person |
| Notification | FDA product listing under MoCRA | CPNP notification before market placement |
| Safety assessor | Qualified expert support expected | Qualified safety assessor required |
| GMP | FDA must establish cosmetic GMP regulations under MoCRA, while brands should maintain GMP-ready controls and records | GMP compliance is required, with ISO 22716 commonly used |
| Risk if missing | FDA enforcement, retailer issues, recalls, complaints, litigation | Authority action, incomplete PIF, CPNP gaps, EU market removal |
The main takeaway is simple. The EU expects a defined safety report before sale. The US expects strong scientific support and records, but uses a less rigid document format.
Why ISO 22716 Matters
Product safety is stronger when manufacturing controls are organized.
ISO 22716 is the international cosmetics GMP guideline. It helps companies manage production, control, storage, shipment, hygiene, records, deviations, complaints, and traceability.
For EU cosmetics, ISO 22716 is commonly used to demonstrate GMP conformity. For US brands, it supports MoCRA readiness and retailer confidence while FDA rulemaking continues.
CGA explains this standard in its guide on what ISO 22716 is and whether it is mandatory for cosmetics manufacturers.
What Brands Should Prepare
Before preparing the US safety substantiation or an EU CPSR, brands should collect the technical documents that support product safety.
Key documents include:
- Full qualitative and quantitative formula
- Ingredient specifications
- Supplier documentation
- Certificates of analysis
- Safety data sheets
- Stability data
- Microbiology data
- Preservative efficacy testing, where relevant
- Packaging specifications
- Label and claims copy
- Batch records
- Complaint and adverse event records
A safety assessor cannot approve a product based on a beautiful label. The formula, exposure, test data, and manufacturing records must support the safety conclusion.
When Products Change
Safety files should also be updated when a product changes. A new fragrance, preservative, supplier, manufacturing site, packaging component, or target user group can affect the safety conclusion.
For EU products, changes may require CPSR review, PIF updates, and CPNP updates. For US products, brands should keep safety substantiation records current and make sure product listings, labels, and adverse event systems reflect the marketed product.
This is why safety assessment should be treated as a lifecycle process, not a one-time launch task for each market.
Common Mistakes to Avoid
Many cosmetic brands underestimate documentation until a retailer, distributor, or regulator asks for it.
Common mistakes include:
- Assuming “clean” or “natural” means safe
- Launching in the EU without a CPSR
- Treating a US file as a complete EU PIF
- Missing fragrance allergen checks
- Ignoring restricted substances
- Making drug-like claims
- Forgetting packaging compatibility
- Keeping weak supplier records
- Treating GMP as separate from safety
If your facility manufactures cosmetics or personal care products, CGA’s ISO 22716 GMP Assessment can help identify documentation and manufacturing gaps before they affect market access.
How CGA Helps Cosmetic Brands
CGA supports cosmetic and personal care companies with third-party audits, GMP assessments, and certification readiness.
For companies preparing for retailer requirements, export opportunities, or stronger internal quality systems, CGA can review manufacturing controls, hygiene practices, batch records, complaint systems, traceability, and corrective action processes.
CGA’s GMP Certification program supports cosmetics, personal care, supplements, food, pharmaceuticals, and related manufacturers that need independent verification of manufacturing practices.
Summary
In the US, MoCRA requires adequate safety substantiation and related compliance records. In the EU, a CPSR is required before market placement and must be supported by the PIF, Responsible Person, CPNP notification, and qualified safety assessment.
For brands selling in both markets, the best approach is to build one strong technical file, then adapt it to each jurisdiction. Strong formulas, supplier documents, GMP controls, testing, and label review make both systems easier to manage.
If your company is preparing for a cosmetic GMP assessment or international market expansion, you can obtain a quote from CGA to begin reviewing your facility and documentation needs.
Frequently Asked Questions (FAQs)
No. The US does not require an EU-style CPSR. However, MoCRA requires responsible persons to maintain records supporting adequate safety substantiation for cosmetic products.
Yes. Before a cosmetic product is placed on the EU market, the Responsible Person must ensure that a safety assessment is completed and a CPSR is prepared.
One technical file can support both markets, but it must be adapted. The EU requires CPSR, PIF, Responsible Person, and CPNP steps.
The safety assessment must be completed by a qualified safety assessor with appropriate formal qualifications in pharmacy, toxicology, medicine, or a similar discipline.
No. ISO 22716 supports GMP and manufacturing controls, but it does not replace product safety substantiation, CPSR preparation, label review, or regulatory responsibility.
Can’t find what you’re looking for?
