The Moment It Unravelled
It started with a notification from a national market surveillance authority — one of the routine checks that have become significantly more frequent since the General Product Safety Regulation came into full effect in December 2024. A body lotion sold under an established personal care brand had been tested. A fragrance allergen was detected at concentrations above the mandatory declaration threshold set by Annex III of the EU Cosmetics Regulation.
The brand had a valid EU Cosmetics Notification Portal (CPNP) registration. They had an appointed Responsible Person. They had a Product Information File. On paper, everything looked compliant. But the INCI ingredient list on the product label no longer matched the formula — because the formula had changed.
"The root cause was not a deliberate compliance failure. It was the complete absence of a systematic process linking the brand, their contract manufacturer, and their Responsible Person."
What the Investigation Found
When TGC reviewed the compliance chain for this brand, four distinct failures emerged — each one a missed opportunity to catch the issue before it reached the shelf.
The Full Cost
The financial impact of the compliance failure accumulated across several categories — some immediate, some extending over months as the brand worked to restore its market position.
| Cost Category | Description | Estimated Cost |
|---|---|---|
| Inventory loss | Products recalled from three EU markets — unsaleable stock destroyed | ~€95,000 |
| Emergency reformulation | Fragrance blend reformulation, stability testing, and safety assessment update | ~€38,000 |
| PIF reconstruction | Full PIF rebuild by a qualified safety assessor, new CPNP re-notification across three markets | ~€22,000 |
| Label redesign & reprinting | Updated INCI list, allergen declaration, new artwork across all SKUs and markets | ~€18,000 |
| Lost retail contract | Major EU retailer terminated distribution agreement citing repeated compliance concerns | ~€67,000 |
| Total estimated impact | ~€240,000 |
The retail contract loss was the most significant element — and the hardest to recover from. Retailers across the EU have become markedly less tolerant of compliance incidents, particularly in the post-GPSR environment where their own liability exposure for non-compliant products has increased.
Why This Keeps Happening
This scenario is not unusual. TGC encounters variants of it regularly — across cosmetics, personal care, and food supplement brands operating in the EU and UK. The pattern is consistent: a passive compliance structure that functions adequately at product launch but has no mechanism for catching changes over time.
Three systemic factors make this particularly common in cosmetics:
The Responsible Person relationship is often passive. Many brands appoint an EU RP to satisfy the registration requirement and then have minimal ongoing contact with them. The RP registers the product, holds the PIF, and considers their obligation met — unless the brand initiates contact. Without a scheduled review cadence, PIFs drift out of date silently.
Contract manufacturers operate on production logic, not compliance logic. Ingredient substitutions, fragrance blend adjustments, and processing aid changes happen routinely in manufacturing for reasons of cost, availability, and yield. These changes are not inherently problematic — but they require a compliance review trigger that most supply contracts do not contain.
The EU annex update cycle has accelerated. Three binding annex updates have applied in the EU since September 2025, with two more in force before mid-2026. A formula that was fully compliant at launch may become non-compliant simply because a restricted substance threshold has changed — with no change required from the brand or manufacturer at all.
The Enforcement Backdrop
The frequency and consequence of cosmetic compliance failures have both increased significantly. EU Safety Gate recorded 4,137 alerts in 2024 — a record high since the system launched in 2003 — with cosmetics the most flagged category for the second consecutive year, accounting for 36% of all notifications. The GPSR, fully in force since December 2024, has expanded the traceability and recall obligations on every economic operator in the supply chain, including brands, importers, and platforms.
In the US, MoCRA enforcement is intensifying in a different but equally significant direction. The FDA now holds mandatory recall authority — a material shift from the prior voluntary recall structure. A safety substantiation gap that previously resulted in a warning letter can now escalate to a forced recall directly, with no intermediate step.
What a Quarterly Compliance Review Would Have Caught
A structured quarterly review — the kind TGC runs as part of its Responsible Person service — would have identified this issue at the first review cycle following the formulation change. The four checks that would have flagged it:
- A formulation change log review against the current INCI declaration and Annex III allergen thresholds — catching the undeclared allergen before any product shipped
- A PIF currency check — confirming that the safety assessor's opinion, the CPSR, and the INCI list all reflected the current formula
- A supply chain change notification review — confirming whether any ingredient substitutions had been made since the prior review
- An annex monitoring update — confirming whether any substances in the formula had been reclassified, restricted, or banned in any of the brand's target markets since the prior review
None of these checks requires complex technical analysis to initiate. They require a structured process, a scheduled cadence, and clear accountability between the brand, the manufacturer, and the Responsible Person.
What to Do Now
If your brand is selling cosmetics in the EU or UK and does not have a scheduled compliance review process in place, the immediate priority is a gap assessment — not a full audit, but a structured check of three things: whether your current INCI declarations match your current formulas; whether your PIFs have been reviewed since any formulation, ingredient, or packaging change; and whether any substances in your formulas are affected by EU or UK annex updates since your last review.
If you are unsure of the answers to any of those three questions, that is itself the answer.
Don't Let a Formulation Change Become a Market Withdrawal
TGC's cosmetics compliance specialists review INCI declarations, PIF currency, and annex updates across EU, UK, and US markets — catching issues before surveillance authorities do.
See Our Cosmetics Services Talk to a Specialist