REACH Compliance for Eyelash Adhesives: What Lash Manufacturers Must Know

Why REACH Matters for Lash Adhesive Brands

REACH — Registration, Evaluation, Authorisation and Restriction of Chemicals — is the European Union's flagship chemical regulation, enacted as Regulation (EC) No 1907/2006. It is the most comprehensive chemical management framework in the world, and it applies to every substance — whether on its own, in a mixture, or in an article — that is manufactured in or imported into the EU in quantities of one tonne or more per year. If you sell eyelash adhesive in the European Union, REACH applies to you. There is no cosmetic exemption that waives REACH obligations. In fact, REACH and the EU Cosmetics Regulation (EC 1223/2009) operate in parallel: the Cosmetics Regulation governs the finished product's safety for the consumer, while REACH governs the chemical substances that make up the product from the perspective of environmental and human health across the entire supply chain.

The practical significance for a lash brand is substantial. A lash adhesive typically contains 3-8 chemical substances: cyanoacrylate monomers (ethyl, butyl, or octyl), stabilizers, thickening agents, colorants, and sometimes rubber modifiers. Each of these substances falls within REACH's scope. If any one of them appears on the SVHC Candidate List (Substances of Very High Concern), your product carries immediate communication and notification obligations. If any substance is listed in Annex XVII (Restrictions), your formulation must not exceed the specified concentration limits. And if your annual import volume of a given substance crosses the 1-tonne threshold, you — or your EU-based importer — must register that substance with the European Chemicals Agency (ECHA).

Enforcement is real and intensifying. ECHA's Enforcement Forum coordinates market surveillance projects across all 27 EU member states. In the most recent REF-11 project targeting imported articles, 18% of inspected products were found non-compliant with REACH restrictions or SVHC communication duties. Fines vary by member state but routinely reach EUR 25,000 to EUR 100,000 for serious violations. In Germany, the maximum fine under the Chemikaliengesetz is EUR 50,000 per violation per product. For a lash brand with 20 adhesive SKUs on EU shelves, a systematic non-compliance finding can be catastrophic.

REACH vs CLP vs Cosmetics Regulation: Understanding the Regulatory Triad

One of the most common sources of confusion for lash brands entering the EU market is understanding how REACH, CLP, and the Cosmetics Regulation relate to each other. They are not interchangeable, and compliance with one does not guarantee compliance with the others. Here is how they fit together.

The relationship can be summarized as: REACH controls what goes into the product, CLP controls how hazards are communicated on the label, and the Cosmetics Regulation controls whether the finished product is safe on the consumer. A lash adhesive can be fully compliant with the Cosmetics Regulation (CPSR signed, CPNP notified) yet violate REACH if it contains a restricted substance above the Annex XVII limit or fails to communicate an SVHC to the recipient. All three regulations must be satisfied simultaneously.

The SVHC Candidate List: Substances of Very High Concern in Lash Adhesives

The SVHC Candidate List, maintained by ECHA and updated twice a year (in January and July), is the single most important REACH document for lash adhesive importers to monitor. A substance listed on the Candidate List is one that has been identified as having serious effects on human health or the environment — carcinogenic, mutagenic, reprotoxic (CMR), persistent, bioaccumulative and toxic (PBT), very persistent and very bioaccumulative (vPvB), or of equivalent concern (e.g., endocrine disruptors). As of January 2026, the Candidate List contains 241 entries.

For lash adhesives, several SVHC categories are directly relevant:

Phthalates as Plasticizers

Certain phthalate esters — DEHP (bis(2-ethylhexyl) phthalate), DBP (dibutyl phthalate), BBP (benzyl butyl phthalate), and DIBP (diisobutyl phthalate) — have been on the SVHC Candidate List for over a decade due to their reprotoxic properties. While phthalates are not intentional ingredients in lash adhesives, they can appear as residual contaminants from plastic packaging, rubber-modified cyanoacrylate grades, or recycled raw material streams. Responsible brands do not merely trust their supplier's word — they test.

Formaldehyde and Formaldehyde Releasers

Formaldehyde (CAS 50-00-0) was added to the SVHC Candidate List due to its carcinogenic properties (Category 1B). In lash adhesives, formaldehyde can be present as: (1) a residual impurity from the cyanoacrylate manufacturing process, (2) a degradation byproduct when cyanoacrylate adhesives cure in the presence of moisture, or (3) an intentional preservative in water-based lash adhesives. Formaldehyde-releasing preservatives — such as quaternium-15, DMDM hydantoin, imidazolidinyl urea, and diazolidinyl urea — are also under increasing regulatory scrutiny, with several already listed or under evaluation for SVHC listing.

Boric Acid and Borates

Boric acid and certain sodium borates (borax) are on the SVHC Candidate List as reprotoxic substances. In lash adhesives, borates may appear as pH buffers, crosslinking agents, or antimicrobial additives. While less common in cyanoacrylate-based formulations, water-based and latex-based lash adhesives may include borate compounds.

Annex XVII Restrictions: What Is Banned or Limited

REACH Annex XVII — the "Restrictions List" — is a separate instrument from the Candidate List. While the Candidate List triggers communication and notification duties, Annex XVII imposes absolute legal limits on the presence and concentration of certain substances in products sold to EU consumers. If a substance is restricted under Annex XVII, it cannot be manufactured, placed on the market, or used above the specified limit — regardless of tonnage, regardless of whether the manufacturer is EU-based or not.

For lash adhesives, the following Annex XVII entries are particularly significant:

• Entry 72 — Formaldehyde (CAS 50-00-0): Restricted in finished cosmetic products since 2021. The maximum allowable concentration is 0.001% (10 mg/kg) in leave-on cosmetic products, which includes lash adhesive applied to the eyelid. This is an extremely low threshold — essentially a detection limit — and it means that any lash adhesive with measurable formaldehyde content is non-compliant. Water-based adhesives using formaldehyde-releasing preservatives are particularly at risk.
• Entry 51 and 52 — Phthalates (DEHP, DBP, BBP, DIBP): Restricted to a maximum combined concentration of 0.1% by weight of the plasticized material in articles. While lash adhesive is a mixture rather than a plasticized article, if the adhesive is packaged in plastic tubes or bottles that use phthalate-plasticized PVC, the packaging itself may be non-compliant.
• Entry 30 — Substances classified as CMR Category 1A or 1B: These substances may not be used in cosmetic products placed on the EU market. This entry creates a direct link between CLP classification and REACH restriction: if a substance in your adhesive is classified as a Category 1A or 1B carcinogen, mutagen, or reproductive toxicant, it is effectively banned from cosmetic use.
• Entry 72 — CMR Substances in Textile Articles: While targeting textiles, lash bands made from cotton or other natural fibers could fall within scope if they are treated with restricted chemicals during processing.

Cyanoacrylate in Lash Adhesives: Safety Profile Under REACH

Ethyl cyanoacrylate (ECA, CAS 7085-85-0) is the primary adhesive monomer in approximately 85-90% of professional and consumer lash adhesives on the global market. Under REACH, cyanoacrylates are well-characterized substances with extensive toxicological data. The key safety considerations for cyanoacrylate-based lash adhesives under REACH are:

Registration Status: Ethyl cyanoacrylate and its homologues (methyl, butyl, octyl, methoxyethyl) are produced globally at high volumes — well into the 1,000+ tonnes per year bracket. They have been fully registered under REACH since the initial 2010 registration deadline for substances manufactured or imported at ≥1,000 t/year. The registration dossiers for cyanoacrylates include: acute toxicity data (oral LD50 typically >5,000 mg/kg — low acute toxicity), skin and eye irritation data (classified as Skin Irritant Category 2 and Eye Irritant Category 2 under CLP), skin sensitization data (some cyanoacrylates are classified as Skin Sensitizer Category 1 — meaning they can cause allergic contact dermatitis with repeated exposure), and repeated-dose toxicity, genetic toxicity, and reproductive toxicity studies.

Exposure Considerations for Lash Application: The primary exposure route for lash adhesive is dermal — the adhesive contacts the skin along the eyelid margin during application. The CS for lash adhesives is extremely small (typically 0.05-0.1 grams per application, once daily at most), which means the systemic exposure dose (SED) is typically orders of magnitude below any toxicological threshold of concern. However, two exposure scenarios merit particular attention: (1) inhalation exposure for professional lash artists who apply adhesive 5-10 times per day in a salon setting — cyanoacrylate vapors can cause respiratory irritation; and (2) ocular exposure from misapplication — if liquid adhesive enters the eye, it polymerizes instantly on contact with moisture, potentially causing mechanical corneal abrasion.

Annex XVII Status: Cyanoacrylates are not currently listed in Annex XVII. They are not on the SVHC Candidate List. They remain freely usable in cosmetic products within the EU, provided the finished product passes the CPSR process and the label carries appropriate warnings. That said, the regulatory landscape is dynamic: ECHA has periodically evaluated cyanoacrylate sensitization data through its Community Rolling Action Plan (CoRAP), and the classification as Skin Sensitizer Category 1 is under review in some member states. Brands should monitor regulatory developments and maintain formulation flexibility.

Registration Obligations: When Do Tonnage Thresholds Apply?

One of the most misunderstood aspects of REACH is registration. Many small and mid-sized lash brands assume they are exempt because their volumes are low — and in most cases, they are correct. But understanding exactly when registration is triggered is essential for business planning, especially for brands scaling from boutique volumes to multi-tonne annual imports.

REACH registration obligations apply to the EU manufacturer or EU importer of a substance when the quantity of that substance reaches or exceeds one tonne per year — calculated per legal entity, per substance. The thresholds are:

The key takeaway for lash brands: For the vast majority of lash adhesive importers — those selling anywhere from a few hundred to 100,000 tubes per year in the EU — the 1-tonne-per-substance threshold is not reached. Registration obligations under Title II of REACH do not apply. However, this does not mean REACH does not apply. Even below the registration threshold, the importer must comply with: (a) Annex XVII restrictions, (b) SVHC communication duties under Article 33, (c) any authorization requirements for Annex XIV substances, and (d) downstream user obligations if an upstream supplier's registration identifies specific risk management measures.

Downstream User Obligations Under REACH

Even when you are below the registration threshold, if you are an EU-based entity that uses a registered chemical substance in your product (in this case, the cyanoacrylate monomer in lash adhesive), you are classified as a Downstream User (DU) under REACH and have specific legal obligations:

• Receipt and Implementation of Safety Data Sheets (SDS): If the cyanoacrylate monomer you purchase from your chemical supplier is classified as hazardous (which it is — Skin Irritant 2, Eye Irritant 2, Skin Sensitizer 1), the supplier must provide you with an extended Safety Data Sheet (eSDS) that includes exposure scenarios. As a downstream user, you must implement the risk management measures described in those exposure scenarios. For cyanoacrylate, this typically includes: ensuring adequate ventilation during filling operations, providing personal protective equipment (nitrile gloves, safety glasses) to workers handling bulk adhesive, and training staff on first-aid measures for skin and eye contact.
• Communication Up the Supply Chain: If you believe the exposure scenarios provided by your supplier do not cover your actual use (e.g., the supplier's SDS only covers industrial assembly use, not cosmetic application to human skin), you must communicate this to your supplier. Your supplier must then either update the exposure scenario or inform you that your use is not supported — in which case you must either stop that use or prepare your own Chemical Safety Report (DU CSR) documenting why your use is safe.
• Record Keeping: You must maintain records of the SDS received from your suppliers, the risk management measures implemented, and any communication with suppliers about supported uses, for at least 10 years after the last supply of the substance.
• SVHC Notification to ECHA: If you produce an article (the finished lash adhesive tube) that contains an SVHC above 0.1% w/w, you must notify ECHA via the SCIP database regardless of tonnage.

Authorization (Annex XIV): When an SVHC Requires Permission to Use

The Candidate List (SVHC identification) and Annex XIV (Authorization List) are linked but distinct instruments. When a substance is placed on Annex XIV — meaning it has moved from the Candidate List to the Authorization List — it cannot be placed on the EU market or used after a specified "sunset date" unless an authorization has been granted for that specific use. Authorization is a complex, costly process requiring the applicant to demonstrate either that the risk from the substance is adequately controlled or that the socio-economic benefits of its use outweigh the risks and there are no suitable alternatives.

For the lash adhesive sector, the practical question is: are any substances commonly found in lash adhesives on Annex XIV? As of 2026, the most relevant Annex XIV entries are certain phthalates (DEHP, DBP, BBP, DIBP — all now past their sunset dates and effectively banned for cosmetic uses) and certain chromium (VI) compounds. Cyanoacrylate monomers are not on Annex XIV. Formaldehyde is on the Candidate List but not yet on Annex XIV — it is restricted through Annex XVII instead. However, lash brands should monitor ECHA's twice-yearly updates: a Candidate List substance can be recommended for Annex XIV inclusion, and once it is, the clock starts ticking toward a sunset date that would make continued use illegal without authorization. Early monitoring is far cheaper than scrambling to reformulate under an authorization deadline.

Practical Testing for Common REACH Violators in Lash Adhesives

Knowing which substances are most likely to cause a REACH violation in lash adhesives allows you to prioritize your testing budget. Based on EU market surveillance data (ECHA REF-11 report and cosmetics-specific RAPEX alerts), the most commonly detected restricted substances in adhesive products are:

• Formaldehyde: The single most common non-compliance finding. Found in water-based adhesives using formaldehyde-releasing preservatives (quaternium-15, DMDM hydantoin, imidazolidinyl urea), and as a residual impurity in poorly manufactured cyanoacrylate. Test method: EN 16521 (HPLC with UV detection), limit of quantification must be at or below 10 mg/kg. Cost: EUR 80-150 per sample at ISO 17025 labs.
• Phthalates (DEHP, DBP, BBP, DIBP): Frequently detected as unintentional contaminants from plastic packaging, recycled-content raw materials, or rubberized cyanoacrylate formulations. Test method: GC-MS (gas chromatography-mass spectrometry), limit of quantification should be at or below 100 mg/kg for each phthalate. Cost: EUR 120-200 per sample.
• Benzene: A known human carcinogen (Category 1A) that can appear as a residual solvent in cyanoacrylate monomer, particularly in lower-cost grades. Restricted under Annex XVII Entry 5 — must not be placed on the market or used as a substance in concentrations equal to or greater than 0.1% by weight. Test method: GC-MS headspace analysis, limit of quantification at or below 5 mg/kg. Cost: EUR 100-180 per sample.
• Chloroform: A Category 2 carcinogen that may be present as an impurity from cyanoacrylate synthesis involving chlorinated intermediates. Restricted under Annex XVII Entry 32 — concentration limit of 0.1% by weight. Test method: GC-MS. Cost: EUR 80-130.

For a new lash adhesive being imported into the EU for the first time, the recommended minimum testing panel is: formaldehyde (EN 16521) + phthalate screen (DEHP, DBP, BBP, DIBP, DINP) + benzene + chloroform + total heavy metals (lead, mercury, arsenic, cadmium, antimony). Budget approximately EUR 500-800 for this complete panel from an ISO 17025-accredited lab. For ongoing production, re-test every 12 months and whenever the formulation, raw material supplier, or manufacturing process changes.

How to Verify REACH Compliance from Chinese Suppliers

The most difficult aspect of REACH compliance for a lash brand sourcing adhesive from China is verification. You cannot rely on a verbal assurance that the adhesive is "REACH compliant." You need specific documentation and, in high-risk cases, independent laboratory testing. Here is a practical verification workflow.

1. Request the Full Quantitative Formulation: Ask your factory for the complete list of ingredients in the adhesive, including: INCI name, CAS number, EC number, and weight percentage range for each substance. Any factory that refuses to provide this — citing "trade secrets" — should be considered high-risk. You cannot screen for SVHC or Annex XVII substances without the formula. A legitimate factory will provide this under a Non-Disclosure Agreement (NDA).
2. Request Existing REACH Registration Certificates: For each chemical substance in the formulation that is manufactured in or imported into the EU at volumes exceeding 1 tonne per year, an EU-based entity must have registered it. Ask your supplier for copies of the REACH registration certificates from their upstream chemical suppliers — the cyanoacrylate monomer manufacturer, the pigment supplier, the stabilizer supplier. These certificates confirm that the substance has been registered and provide the registration number (format: 01-XXXXXXXXXX-XX-XXXX).
3. Request Certificates of Analysis (CoA) for Restricted Substances: Specifically request a CoA from an ISO 17025-accredited laboratory showing: formaldehyde content (must be below 0.001% / 10 mg/kg), phthalate content (DEHP, DBP, BBP, DIBP combined below 0.1%), and any other SVHC relevant to the formulation. The CoA must reference the batch number of the specific production run you are purchasing.
4. Request GMP Certification: While GMP (ISO 22716) is a Cosmetics Regulation requirement rather than a REACH requirement, a factory that maintains ISO 22716 certification is systematically controlling its incoming raw materials, production processes, and quality assurance — which reduces the risk of inadvertent REACH violations through contaminated or substituted raw materials.

Building a REACH-Compliant Supply Chain

REACH compliance is not a one-time checkpoint — it is an ongoing system. Every batch, every formulation change, every new supplier, and every ECHA Candidate List update (twice yearly) can affect your compliance status. The most effective approach for a lash brand is to build REACH compliance into the supplier qualification process itself, rather than treating it as a separate regulatory exercise.

Specifically, we recommend: (1) qualify adhesive suppliers against a written REACH compliance checklist before placing the first purchase order, not after; (2) include REACH compliance warranties in your supply contract, with the supplier warranting that all substances in the delivered product comply with REACH Annex XVII restrictions and contain no SVHC above 0.1% w/w, and accepting liability for non-compliance; (3) re-screen each new batch against the latest ECHA Candidate List update before accepting the shipment; (4) archive all compliance documentation — SDS, CoA, registration certificates, supplier declarations — for a minimum of 10 years (matching REACH's own record-keeping requirement); (5) designate one person in your organization (even if it is just you, the founder) as the REACH compliance owner, responsible for monitoring ECHA updates and maintaining the documentation system.

This investment in process pays for itself the first time it prevents a customs hold, a market surveillance finding, or a retailer delisting. EU retailers are increasingly conducting their own REACH due diligence on the products they stock — if you cannot produce documentation within 48 hours of a retailer's request, your shelf space is at risk.

What to Do If a Violation Is Found

Despite best efforts, REACH violations can still occur — a raw material batch substitution by a supplier, a mislabeled ingredient, or a Candidate List update that catches a previously unlisted substance in your formulation. The key to managing this is speed and transparency. If you or your RP receives a market surveillance notification: (1) respond within the deadline (typically 14-28 days for a formal response to a competent authority — do not wait until day 27); (2) isolate the affected batch immediately using batch codes and halt sales; (3) commission independent confirmatory testing from an ISO 17025-accredited lab — do not rely only on supplier-supplied documentation at this stage; (4) if the violation is confirmed, work with your RP to file a corrective action plan with the authority — showing that you have identified the root cause, isolated the affected products, and implemented preventive measures is the single most effective way to avoid punitive fines; (5) communicate proactively with your retail partners — a retailer that learns of a compliance issue from the authority rather than from you will not stock your brand again.

Prevention remains far cheaper than crisis management. A EUR 500 testing panel before production is a fraction of the cost of a EUR 25,000+ market withdrawal and the permanent loss of a retailer relationship that took years to build.

Work with a REACH-Ready Lash Adhesive Manufacturer

REACH compliance for lash adhesives boils down to three things: knowing exactly what is in your formulation, verifying that every substance is below regulatory thresholds, and documenting everything so that when an authority asks, you can respond within 48 hours. The single most important factor in achieving this efficiently is working with a factory that already operates at this standard — one that maintains complete formulation documentation, works with ISO 17025-accredited testing laboratories, and understands what EU-based brands need to clear customs and satisfy retailer due diligence requirements.

At Aurevia Lashes, our factory team in Qingdao supports brand clients with: complete quantitative adhesive formulations (every ingredient with INCI name, CAS number, EC number, and percentage range), third-party test reports for formaldehyde (EN 16521), phthalate screening, and heavy metals from ISO 17025-accredited labs (SGS, Intertek), current REACH registration certificates for all registered substances used in our formulations, written SVHC declarations updated to the latest ECHA Candidate List, and full Safety Data Sheets (SDS) compliant with EU CLP requirements. We provide this technical documentation package as a standard part of our private label lash adhesive service — because we know that without it, your product does not reach the shelf.

Request a quotation and mention REACH compliance documentation — we will include our complete adhesive technical dossier and third-party test reports. You can also request adhesive samples to evaluate performance, viscosity, drying time, and bond strength before committing to a production order.