Why EU Compliance Matters for Lash Brands

The European Union represents 27 countries, approximately 450 million consumers, and a cosmetics market valued at over EUR 80 billion annually. For a lash brand, gaining access to the EU single market means your products can be sold from Lisbon to Helsinki under one unified regulatory framework: Regulation (EC) No 1223/2009, the EU Cosmetics Regulation.

Unlike the United States, where cosmetics regulation is relatively light-touch and largely reactive (the FDA intervenes after problems are found), the EU operates a precautionary, pre-market framework. Before a single pair of lashes can be sold anywhere in the EU, the product must be registered in the Cosmetic Products Notification Portal (CPNP), backed by a complete Product Information File (PIF), and supported by a Cosmetic Product Safety Report (CPSR) signed by a qualified safety assessor. There is no "grandfathering" and no de minimis exception for small brands. If you sell cosmetics in the EU, you comply with 1223/2009 โ€” full stop.

Non-compliance carries serious consequences. National competent authorities in EU member states can order product withdrawals, issue public warnings, impose fines (which vary by member state but can reach EUR 50,000 or more per product in countries like Germany and France), and in severe cases, initiate criminal proceedings against the Responsible Person. For a small or mid-sized lash brand, a product withdrawal from a major EU retailer can be financially devastating โ€” not because of the fine, but because of the lost shelf placement that took 12 months to secure.

This guide walks you through every step of EU compliance for false eyelashes, written specifically for brand owners and importers who are not regulatory experts. By the end, you will understand exactly what documentation you need, who needs to provide it, how long it takes, and what it costs.

The Responsible Person: Your EU Legal Representative

Every cosmetic product placed on the EU market must have a designated Responsible Person (RP) โ€” a legal entity established within the European Union that assumes responsibility for ensuring the product complies with EC 1223/2009. If your lash brand is based outside the EU (e.g., in the US, UK, UAE, Australia, or China), you cannot act as your own Responsible Person. You must designate one.

Who Can Serve as the Responsible Person?

RP Obligations and Liability

The RP's obligations under Article 5 of EC 1223/2009 are extensive and legally binding. The RP must: (a) ensure the product is safe for human health when used under normal or reasonably foreseeable conditions; (b) maintain the Product Information File for each product and make it available to competent authorities within 72 hours of request; (c) ensure the CPSR is up to date, reviewed annually, and updated whenever the formula, packaging, or scientific knowledge changes; (d) notify the product through the CPNP before placing it on the market; (e) ensure labeling complies with Article 19 requirements; (f) keep records of any undesirable effects (adverse reactions) reported by consumers and report serious undesirable effects to the competent authority of the member state where the effect occurred; and (g) cooperate with competent authorities on any corrective actions.

Critical Selection Criteria for an RP: When choosing a third-party RP, verify that they have specific experience with cosmetic products โ€” not just general product compliance. An RP that primarily handles electronics or toys will not have the regulatory infrastructure to manage CPSR updates, INCI ingredient verification, or CPNP notification correctly. Ask for references from other cosmetic brands they represent, confirm they maintain professional indemnity insurance covering product liability, and check whether they have a qualified safety assessor on staff or a vetted network of assessors they work with. The cheapest RP service is rarely the best โ€” a poorly managed PIF or a missed CPSR update can cost far more than the fee difference.

Product Information File (PIF): The 8 Required Sections

The Product Information File is the core regulatory dossier for each cosmetic product you sell in the EU. Think of it as the product's compliance passport โ€” without a complete and current PIF, your product has no legal standing in the EU market. Article 11 of EC 1223/2009 specifies exactly what the PIF must contain. Here is each section, with lash-specific guidance.

PIF SectionRequired ContentLash-Specific Guidance
1. Product DescriptionProduct name, category, intended use, physical form, and any variant identifications (colors, styles, sizes)Include the lash style name (e.g., "Aurevia Mink 3D Volume D-251"), full product name as it appears on the label, and the cosmetic function (e.g., "false eyelashes for aesthetic enhancement of the eye area"). If you offer multiple lengths, curls, or colors, each distinct variant needs its own sub-description or separate PIF.
2. CPSRThe complete Cosmetic Product Safety Report (Parts A and B), signed and dated by a qualified safety assessorThis is the most critical section. For lashes, the CPSR must address: dermal and ocular irritation potential from lash band adhesive residues, microbiological safety of stored fibers, heavy metal content in dyed or coated lashes, and mechanical safety (sharp band edges, shedding risk). See full CPSR breakdown in the next section.
3. Manufacturing Method & GMP StatementDescription of the manufacturing process and a statement confirming compliance with GMP (ISO 22716 or equivalent)For hand-made lashes, describe the manual knotting/tying process, fiber cutting, band attachment, sterilization method, and quality control checks. For machine-made lashes, describe the automated process. Include your factory's ISO 22716 certificate number and certifying body.
4. Proof of EffectEvidence supporting any claimed effect of the productFor standard false eyelashes (no therapeutic claims), this section is usually limited to confirming the product's aesthetic function. However, if you claim "hypoallergenic," "24-hour hold," "waterproof," or "suitable for sensitive eyes," you must provide substantiating evidence โ€” typically patch test results, wear-test data, or laboratory test reports.
5. Animal Testing DataInformation on any animal testing performed, including data related to compliance with the animal testing banThe EU bans animal testing for finished cosmetic products and, since 2013, for cosmetic ingredients. Your PIF must confirm that neither the finished product nor its ingredients were tested on animals for the purpose of cosmetics regulation compliance. Most lash fibers (PBT, silk, mink, human hair) are well-established materials with existing safety data, so this is typically straightforward.
6. Quantitative CompositionFull qualitative and quantitative formula breakdown, including INCI names, CAS numbers, and percentage ranges for each ingredientFor lashes, the "formula" is typically: synthetic fiber (e.g., polybutylene terephthalate, 95-98%), adhesive coating on the band (e.g., acrylate copolymer, 1-3%), and any dye or coating (e.g., carbon black CI 77266, 0.1-1%). Each ingredient must be listed with its INCI name, CAS number, and weight percentage range.
7. Undesirable Effects DataRecords of any undesirable effects (adverse reactions) reported by consumers, and any serious undesirable effects communicated to authoritiesFor a new product entering the EU market, this section may initially state "no undesirable effects reported to date." However, the RP must maintain an ongoing log โ€” updated continuously โ€” of any consumer complaints related to eye irritation, allergic reactions, or mechanical injuries from the product.
8. Labeling CopyA copy of the product label as it appears on the packaging, showing compliance with Article 19 labeling requirementsInclude a high-resolution image or PDF of the actual product label, showing: product name, net content, PAO symbol (if applicable), batch code, Responsible Person name and address, full INCI ingredient list, warnings/precautions (e.g., "keep away from children"), and country of origin. The label must be in the language(s) of the member state(s) where the product is sold.

The PIF must be kept for 10 years after the last batch of the product was placed on the EU market. It must be stored at the RP's address within the EU and made available to competent authorities within 72 hours of request โ€” meaning the RP must have it readily accessible, not buried in an archive or stored only at the non-EU factory.

Cosmetic Product Safety Report (CPSR): Part A + Part B

The CPSR is the scientific heart of EU cosmetics compliance. It must be prepared by a qualified safety assessor with a diploma in pharmacy, toxicology, dermatology, medicine, or a comparable discipline โ€” a "qualified safety assessor" is a legally defined role under EU law, not a marketing title. The assessor must be competent to evaluate the safety of cosmetic products based on their qualifications and experience.

Part A: Cosmetic Product Safety Information

Part A is the data section. It compiles all available safety information about the product and its ingredients:

Part B: Cosmetic Product Safety Assessment

Part B is the evaluative section โ€” it is the assessor's professional judgment based on the data in Part A:

How Much Does a CPSR Cost and How Long Does It Take? A typical CPSR for a false eyelash product (assuming standard PBT fiber, no unusual coatings or treatments, and a simple formulation) costs between EUR 400 and EUR 800 per SKU when prepared by a qualified EU-based safety assessor. Complex formulations โ€” lashes with magnetic liners, pre-glued self-adhesive strips, or bio-active coatings โ€” can cost EUR 1,200 to EUR 2,000 per SKU. Turnaround time is typically 2-4 weeks if all Part A data is provided in complete form. Delays almost always result from incomplete data from the factory โ€” if you cannot provide the full quantitative formula with CAS numbers, the assessor cannot proceed. Ask your lash factory for their "CPSR support package" before engaging an assessor.

CPNP Portal Registration: Step-by-Step

The Cosmetic Products Notification Portal (CPNP) is the EU's centralized online system for cosmetic product notification. Every cosmetic product sold in the EU must be notified here before it reaches consumers. Here is the step-by-step process.

Prerequisites Before You Begin

Before you can file a CPNP notification, you need: (1) A completed Product Information File (PIF) โ€” you do not upload the PIF to the CPNP, but you must have it because the notification requires data extracted from the PIF. (2) A designated Responsible Person established in the EU. (3) An EU Login account (formerly ECAS) โ€” the RP creates this at the European Commission's authentication portal. (4) The RP must register their organization on the CPNP and receive a CPNP organization ID.

Step 1: Log into the CPNP Portal

The RP logs into https://webgate.ec.europa.eu/cpnp/ using their EU Login credentials. First-time users must accept the terms and conditions before accessing the dashboard.

Step 2: Create a New Notification

Click "Create a new notification" from the CPNP dashboard. The system presents a multi-page web form. You can save drafts and return later โ€” you do not need to complete everything in one session.

Step 3: Enter Product Identification Data

On the first page, enter: the product name (exactly as it appears on the label), the product category (select "Skin products โ€” Other skin products" or the nearest applicable category from the dropdown), the physical form (select "solid" for strip lashes), and the product's unique CPNP reference number (if you are updating an existing notification โ€” leave blank for new products).

Step 4: Enter the Responsible Person Details

The RP's details auto-populate from the organization profile. Verify that the RP name, address, and contact information are correct. This is the information that will appear on the product label, so it must match exactly.

Step 5: Enter the Product Composition (Frame Formula)

This is the most technically detailed section. You must enter every ingredient in the product's formulation using INCI nomenclature. For each ingredient, specify: the INCI name, the CAS number (or EC number), the concentration range (selected from predefined percentage bands: less than 0.1%, 0.1-1%, 1-5%, 5-10%, 10-20%, 20-50%, or greater than 50%), and the function of the ingredient (e.g., "bulking agent," "adhesive," "colorant"). For lashes, a typical frame formula entry might be:

Step 6: Enter Category-Specific Information

For cosmetic products, you must specify: whether the product is a "rinse-off" or "leave-on" product (lashes are leave-on), whether it is intended for professional use or consumer use, the pH range if applicable, and whether the product contains nanomaterials. For standard PBT or silk lashes, nanomaterials are typically not present โ€” but if your lashes contain nano-coated fibers or nano-pigments, you must declare them and provide additional safety data.

Step 7: Upload the Label Image and Submit

Upload a clear image or PDF of the product label as it appears on the packaging. The label must be legible and show all Article 19 mandatory information. After reviewing all entered data, click "Submit." The CPNP generates a unique notification number (e.g., CPNP-1234567890123456789) โ€” save this number. It is your proof of notification and will appear on any correspondence from EU authorities.

Post-Submission: Update Obligations

A CPNP notification is not a one-time filing. You must update the notification whenever: the product formulation changes (any ingredient added, removed, or concentration shifted to a different band), the product label or packaging changes, the Responsible Person changes, or the product is withdrawn from the EU market. There is no annual renewal requirement for the CPNP itself โ€” the notification remains valid as long as the information is current โ€” but the CPSR must be reviewed and updated at least annually by the safety assessor.

Labeling Requirements Under EC 1223/2009

Article 19 of the EU Cosmetics Regulation specifies exactly what must appear on the label of every cosmetic product sold in the EU โ€” both on the immediate packaging (the lash tray or box) and the outer packaging (the retail box). For false eyelashes, which typically have small immediate packaging, some information may appear only on the outer packaging if it is genuinely impractical to fit everything on the lash tray itself. However, the batch code and the product name must always appear on the immediate packaging to enable traceability.

Required Label ElementRequirement DetailLash-Specific Application
Responsible Person Name & AddressFull name or registered company name, and full address (street, city, postal code, country) of the RP established in the EUMust be the EU address โ€” do not list your factory's Chinese address here. Abbreviated addresses are acceptable only if the full address can be identified from the abbreviation. Example: "RP: CosComply GmbH, Friedrichstr. 123, 10117 Berlin, Germany"
Nominal ContentNet quantity of product at the time of packaging, indicated by weight or volume. For pre-packaged items sold by number of items, the number of items is acceptableFor lashes, list the number of pairs. Examples: "10 Pairs," "5 Pairs," or "1 Pair." If the box contains multiple styles, list the total pairs and break down by style only if space permits.
Date of Minimum Durability / PAOProducts with a shelf life exceeding 30 months must carry the Period-After-Opening (PAO) symbol โ€” an open jar icon with the number of months (e.g., "12M"). Products with shelf life under 30 months must carry a "best before" date using the hourglass symbol.Most false eyelashes have a shelf life exceeding 30 months when stored in dry, cool conditions. Use the PAO symbol โ€” typically "24M" or "36M" โ€” determined by stability testing. The PAO symbol should appear on the outer packaging and, if space permits, on the lash tray.
Batch CodeA unique code allowing identification of the manufacturing batch for traceability. Must appear on both the immediate and outer packaging.Use a clear alphanumeric batch code (e.g., "AV2506D251-01" indicating Aurevia, June 2025, style D-251, batch 01). The batch code is critical for recalls โ€” if a contamination issue is traced to a specific production run, the batch code is the only way to identify affected products on retail shelves.
Function of the ProductA description of what the product does, unless clear from its presentationFor lashes, "False Eyelashes" or "Eyelash Extensions" is usually sufficient. If the function is not obvious from the name and presentation (e.g., an ambiguously named style), add clarifying text.
Ingredient List (INCI)Full list of ingredients in descending order of weight, using International Nomenclature of Cosmetic Ingredients (INCI) names. Ingredients below 1% may be listed in any order after those above 1%. Colorants may be listed last using CI numbers.Precede the ingredient list with "Ingredients:" as the header. Example: "Ingredients: Polybutylene Terephthalate, Acrylates Copolymer, CI 77266." The ingredient list must appear on the outer packaging in a legible font size (typically minimum 1.2mm x-height for the lowercase "x").
Precautions & WarningsAny specific warnings required by the CPSR or applicable to the product categoryCommon lash warnings: "For external use only," "Keep out of reach of children," "Discontinue use if irritation occurs," and adhesive-specific warnings: "Avoid direct contact with eyes โ€” do not apply adhesive directly to eyelids."
Country of OriginRequired if the product is imported into the EU from outside the EUFor lashes manufactured in China, label "Made in China" or "Manufactured in PRC." This must appear on the outer packaging. Note: country of origin labeling is not explicitly required by Article 19 of 1223/2009 for all cosmetics, but it is required by EU customs regulations and some member state consumer protection laws.

Language Requirements

The EU Cosmetics Regulation requires that certain label information be provided in the official language(s) of the member state where the product is sold. Specifically: the function of the product, precautions and warnings, and instructions for use must be in the local language. The ingredient list (using INCI nomenclature, which is internationally standardized in English/Latin) and the nominal content declaration do not need translation. In practice, this means: if you sell in France, your warnings must be in French. If you sell in Germany, in German. If you sell in Poland, Czechia, and Hungary simultaneously, you may need a multi-language label with translations of the warning text for each market. Many brands use a multi-language label booklet or fold-out label to accommodate this without redesigning packaging for every member state.

EU vs US vs GCC: Regulatory Comparison Table

Understanding how the EU regulatory framework compares to other major markets helps you plan your compliance strategy efficiently. Here is a side-by-side comparison of the three major lash markets โ€” EU, US, and GCC (Gulf Cooperation Council, primarily Saudi Arabia and UAE).

RequirementEU (EC 1223/2009)USA (MoCRA + FD&C Act)GCC (GSO 1943 / SASO)
Pre-market approvalNo โ€” but CPNP notification required before saleNo โ€” FDA registration + product listing under MoCRA (mandatory since 2024)Product registration with national authority (e.g., SFDA in Saudi Arabia) โ€” effectively a pre-market clearance process
Responsible party in-regionResponsible Person must be established in the EU โ€” legal entity requiredUS Agent required for foreign facilities โ€” less liability than EU RPLocal agent or distributor required; in Saudi Arabia, the local entity is the legal importer of record
Safety assessmentCPSR signed by qualified safety assessor โ€” mandatory, detailed scientific reviewSafety substantiation required โ€” no prescribed format, but manufacturer must have evidence product is safe. No requirement for independent third-party assessor.GSO 1943 requires safety assessment report โ€” similar rigor to EU CPSR, often accepted if EU CPSR is available
GMP requirementISO 22716 (cosmetics GMP) โ€” mandatory compliance referenced in regulationGMP regulations for cosmetics (21 CFR Part 211) โ€” mandatory under MoCRA, aligned with ISO 22716ISO 22716 strongly recommended; SASO Halal certification adds separate GMP requirements
Animal testingBanned for finished cosmetics and cosmetic ingredientsNot banned, but strongly discouraged; FDA does not require animal testing for cosmeticsNot banned, but Halal certification requirements indirectly limit certain testing practices
Ingredient labelingINCI nomenclature, descending order, on outer packagingINCI nomenclature, descending order, on outer packaging โ€” substantially same formatINCI nomenclature accepted; Arabic translation may be required alongside English in some GCC states
NanomaterialsMust be declared on label with "(nano)" after ingredient name; specific CPNP notification fieldsNo specific nanomaterial labeling requirement as of 2026; FDA guidance exists but is not regulationNo specific nanomaterial regulation for cosmetics
Undesirable effects reportingRP must report serious undesirable effects to national authority; maintain records for 10 yearsSerious adverse events must be reported to FDA within 15 business days under MoCRANo uniform requirement across GCC; Saudi Arabia requires reporting to SFDA
Label languageFunction, warnings, and instructions in official language(s) of member state of saleEnglish is standard and sufficient for US marketArabic required for warnings and instructions; English accepted alongside Arabic

The key strategic takeaway: if you have achieved full EU compliance (CPNP notified, CPSR signed, PIF complete, ISO 22716 GMP, and Article 19 labeling), you are approximately 80-90% of the way to being compliant in most other regulated markets. The EU framework is the most comprehensive, and many non-EU regulators accept EU-compliant documentation as supporting evidence. Invest in EU compliance first โ€” it creates a regulatory foundation that accelerates market entry elsewhere.

Common CPNP Rejection Reasons & How to Avoid Them

CPNP notifications are rarely rejected by the system itself (which performs only basic validation checks) โ€” but they are frequently flagged and challenged by national competent authorities during market surveillance. When an authority flags your product, the RP receives a formal request for information, effectively putting the notification at risk until the issue is resolved. Here are the most common triggers, based on EU market surveillance reports and feedback from regulatory consultants.

Rejection TriggerWhy It HappensHow to Prevent It
Incomplete frame formulaThe CPNP frame formula omits a known ingredient (e.g., the adhesive on the lash band is not listed separately from the fiber). Authorities cross-reference with known product formulations and flag discrepancies.Request a complete quantitative composition from your factory including every substance applied to the product โ€” fiber, band coating, adhesive layer, dye, and any finishing treatment. Do not accept a one-line "PBT fiber" formula for a product that has a coated band and dyed fibers.
Missing or unqualified CPSRThe CPSR is signed by someone who does not meet the legal definition of a qualified safety assessor (e.g., the factory's QC manager with a general chemistry degree but no toxicology specialization).Verify the safety assessor's credentials before engaging them. The assessor must hold a diploma in pharmacy, toxicology, dermatology, medicine, or a discipline recognized as equivalent by the member state. Ask for their CV and professional registration number.
Inconsistent ingredient namingINCI names used in the CPNP notification do not match those on the product label. Even minor variations (e.g., "Carbon Black" vs "CI 77266") trigger scrutiny.Copy-paste the INCI names directly from the European Commission's Cosing database (Cosing) โ€” do not use trade names, supplier-specific names, or abbreviated forms. Use exactly the Cosing-listed INCI name and corresponding CAS number.
RP not contactableAuthorities attempt to contact the RP at the address listed on the label and receive no response. This is treated as non-compliance even if the PIF and CPSR are otherwise perfect.Ensure your RP maintains a physical office (not just a virtual mailbox) where mail is received and opened daily. Test the RP's responsiveness by sending a test inquiry to their listed address before launching the product.
Label language non-complianceProducts sold in a member state without local-language warnings. For example, lashes sold in a French pharmacy with English-only warnings.Map your distribution countries and prepare label translations for each member state's official language(s). 24 official EU languages exist, but in practice you only need translations for the countries where you actively sell. Maintain a translation matrix: which label elements must be in which languages for each market.
PAO symbol missing or incorrectThe period-after-opening symbol is not on the label, or the number of months is inconsistent with stability test data supporting a longer claimed PAO.Include the PAO symbol on the outer packaging as part of your label design. Conduct stability testing to justify your chosen PAO period (e.g., 24M). Do not arbitrarily assign "12M" or "36M" โ€” the PAO must be based on test data showing the product remains stable and microbiologically safe for that period after opening.
Nanomaterials not declaredProduct contains nanomaterials (per the EU definition: insoluble or bio-persistent material with one or more external dimensions in the 1-100 nm range) but is not declared as containing nanomaterials.Ask your factory specifically: "Do any of the raw materials used in this product โ€” fibers, dyes, coatings, or adhesives โ€” contain nanomaterials as defined by EU Regulation 1223/2009?" If the answer is yes or uncertain, have a laboratory test for nanoparticle content.
Pro Tip โ€” Pre-Flight Your CPNP Filing: Before submitting your CPNP notification, have an independent EU regulatory consultant (not the same person who prepared your CPSR) review the complete filing package. A second set of eyes catches inconsistencies between the PIF, CPSR, label, and CPNP form entries that the original preparer may have overlooked. This pre-flight review typically costs EUR 200-400 per product and can save you from a market surveillance action that costs 10-50 times that amount in legal fees, relabeling, and damaged retailer relationships. Budget it as a standard line item in your EU market entry costs.

Work with an EU-Ready Lash Factory

EU compliance for false eyelashes is a multi-step process that requires careful coordination between your factory, your Responsible Person, your safety assessor, and your label designer. The most common cause of delay โ€” by a wide margin โ€” is incomplete or inaccurate technical data from the manufacturing facility. A factory that has never prepared a CPSR support package will need weeks to compile ingredient CAS numbers, microbiological test reports, heavy metal analyses, and stability test data. A factory that has done it before can provide the complete package within 2-3 business days.

At Aurevia Lashes, we have supported dozens of brand clients through the EU compliance process. Our factory in Qingdao maintains a comprehensive technical documentation package for every lash style we produce, including: full quantitative composition with INCI names and CAS numbers, third-party microbiological test reports (total aerobic count, pathogen absence), heavy metal analysis reports (lead, mercury, arsenic, cadmium, antimony), stability and compatibility test data, GMP compliance certification (ISO 22716), and dye/colorant safety data sheets. We provide this package at no additional cost to qualified buyers โ€” it is simply part of how we work.

We can also connect you with our network of EU-based Responsible Person service providers and qualified safety assessors who are experienced with lash and cosmetics products โ€” reducing the time from contract to CPNP notification from 8-12 weeks to as little as 3-4 weeks when all parties are aligned.

Request a quotation and mention EU compliance โ€” we will include our complete technical documentation package and EU RP/safety assessor network recommendations. You can also request product samples to evaluate quality before committing to a full production order.