EU Product Information File (PIF) for Cosmetics Guide

1. What a PIF is — and what it is not

The Product Information File (PIF) is the mandatory technical file behind every EU cosmetic placed on the market. It is not a certification, a test report or a marketing document. It is a structured dossier that answers three questions a market surveillance authority could ask at any time after sale: is the product safe? was it made to a quality standard? and what does the product claim, who uses it, and how should it be handled?

Three documents make up the PIF:

1. Cosmetic Product Safety Report (CPSR) — a safety assessor (toxicologist) signs a written safety conclusion for the formula on its intended use.
2. Technical File — the formula composition, manufacturing information, GMP evidence, batch records, microbiological data, physical-chemical stability data and any other supporting data.
3. Product Information Sheet — a shorter summary: description, intended use, target audience, warnings, labelling, shelf-life and storage conditions.

2. Who owns what — the buyer, the RP and the OEM

The PIF is the buyer's responsibility through the EU-based Responsible Person. In practice the work splits this way:

The RP is a legal appointment. In the EU it is normally the importer or the entity the importer appoints. In the UK, since January 2021, products placed on the UK market by a non-UK manufacturer must have a UK Responsible Person on file. The buyer can be the RP themselves if they have an EU or UK business address, but most private label brands hire one.

3. The CPSR — the part buyers under-budget

The Cosmetic Product Safety Report is the single most common budget miss on a first EU launch. It is not a lab test. It is a professional safety assessment by a qualified toxicologist, written in the format defined by Regulation (EC) No 1223/2009 Annex I. It typically covers:

• Qualitative and quantitative formula composition.
• Ingredient safety data and skin sensitisation, eye irritation, mucosal irritation and dermal irritation assessments.
• Physical-chemical properties, microbiological quality, shelf-life and stability.
• Labelling, instructions for use and adverse-effect information.
• A final signed safety conclusion by the assessor, stating that use of the product as intended does not harm human health.

Standard CPSR timelines run 3–6 weeks. Anything that adds time: custom formula, SPF claims, fragrance systems requiring allergen declarations, colourants outside common-use lists, and unusual claim support (e.g. clinical, dermatological or "medicinal" claims — which are drug claims in the EU and require separate registration).

4. From PIF to CPNP — the filing window

Once the CPSR is signed, the RP files the CPNP notification with the EU's Cosmetic Products Notification Portal. Timing matters:

• Notify before the product is placed on the EU market — there is no retroactive notification.
• Update the CPNP record whenever the formula, labelling or intended use changes.
• Keep the PIF in a form market surveillance authorities can request in English within a reasonable time.

For a first-run launch, plan the CPNP filing 2–4 weeks before the goods land at your EU distributor. Filing on the day of market launch is legal but leaves no buffer for the notification to be reviewed or for corrections to be made.

5. UK is a separate track

After the UK left the EU, cosmetic products sold in Great Britain have their own rules:

• UK Responsible Person appointment if the manufacturer is outside the UK.
• UK cosmetic products regulations (UK CPR), which mirror but are not identical to EU regulation.
• UK notification on the UK CPNP (formerly SCPN) system for products intended for consumers.
• UK CPSR — same format as EU, but a separate filing.

Do not assume an EU PIF covers the UK. If you sell in both markets, budget for two filings and two Responsible Person arrangements — even when the formula is the same.

6. What the buyer sends the RP — and what the OEM sends

Buyer-side checklist before the RP opens the file:

• Full product concept: name, category, target user, positioning, marketing claims.
• Final labelling design — EU regulation requires ingredient list in INCI format, batch number, shelf-life, responsible person address, country of origin.
• Country list of destination markets (EU only, EU+UK, plus any other markets).
• Quantity, packaging count and shelf-life target.
• Any claims you want to defend in copy — "vegan", "cruelty-free", "dermatologically tested", "non-comedogenic" and similar need RP sign-off before use.

OEM-side deliverables to the RP:

• Complete formula composition in INCI format with concentrations.
• Ingredient safety data sheets from each raw material supplier.
• Manufacturing information: GMP certificate, batch records, in-process controls.
• Lab test reports: pH, viscosity, microbial limits, heavy metals, migration tests if packaging is plastic, stability data.
• MSDS and product specification sheet.

The gap between what a private label brand owns and what an OEM factory owns is the most common source of PIF delays. Both sides need to know their boundary before the CPSR drafting starts.

7. Where the buyer-side mistakes live

• Claim creep. Launching with "moisturising" and adding "dermatologically tested" or "clinically proven" in year one requires a new CPSR update. Buy the RP relationship for the claims you actually plan to make.
• Formula drift. Changing a fragrance, colourant or emollient mid-life without a safety re-assessment is the most common post-launch compliance issue.
• Missing allergen data. Fragrance allergens above threshold concentration must be listed on labelling. Ask the raw material supplier for this data — it is not the OEM's default package.
• Selling the PIF is not optional. Do not treat the PIF as a marketing document for buyers or distributors. It is a regulatory file that only your RP and market surveillance authorities see. What the retailer sees is a summary sheet and a compliance certificate.

8. What ARIS supports on the PIF track

• Formula composition in INCI format for each shade or variant.
• GMP and ISO 22716 documentation, along with batch records and in-process QC data.
• MSDS, product specification sheet, pH and microbiology lab reports.
• Packaging material compliance (e.g. migration and food-contact where relevant).
• Stability and shelf-life testing evidence for the formula and packaging combination.

WhatsApp ARIS with the formula direction and target market. We reply with the compliance-package support we can provide, so your RP can start the CPSR on schedule.