Cosmétovigilance in France: What Your Brand Must Report — and When

A French dermatologist calls your customer service line on a Tuesday morning. One of her patients was hospitalised overnight after a severe anaphylactic reaction to a face serum your brand launched in France six months ago. She wants to know what you’re going to do about it.

Do you know, right now, exactly who files a report with ANSM, what information it must contain, and how many days you have? If the answer is “we’d have to look that up,” that’s a compliance gap worth closing before it costs you.

Cosmétovigilance — France’s mandatory surveillance system for cosmetic adverse events — is one of the least-discussed corners of EU cosmetics compliance, yet it carries some of the most direct legal exposure for responsible persons and distributors operating in the French market. And because ANSM’s cosmétovigilance unit has been running for longer than the EU-wide framework that now governs it, the bar for a well-handled report is higher than many brands expect.

What Article 23 of EU Regulation 1223/2009 Actually Requires

The legal foundation is Article 23 of EU Regulation No 1223/2009 on cosmetic products. Under it, responsible persons (RPs) and distributors must notify the competent authority of the EU member state where a serious undesirable effect (SUE) occurred — and must also notify authorities in any other member state where the same product is placed on the market.

In France, the competent authority for cosmétovigilance is ANSM: the Agence nationale de sécurité du médicament et des produits de santé. ANSM inherited these responsibilities from its predecessor agency, AFSSAPS, which had developed a national adverse-event monitoring programme for cosmetics well before the EU-wide framework took full effect on 11 July 2013. That institutional history matters: ANSM’s cosmétovigilance team is experienced, methodical, and not inclined to accept vague or incomplete submissions.

Article 23 also requires that information about any SUE be recorded in the product’s information file (PIF) under Article 11, and that the RP relay relevant safety data to competent authorities in other EU member states where the product is marketed. This isn’t a one-country problem. A single SUE report in France can trigger a cascade of notifications across up to 26 other member states if your product has pan-European distribution.

What Counts as “Serious” — and What Doesn’t

This distinction trips up many brands. Not every customer complaint about a skin reaction is a reportable event. EU Regulation 1223/2009 defines a serious undesirable effect in Article 2(1)(p) as one resulting in any of the following 5 outcomes:

1. Temporary or permanent functional incapacity — a demonstrable loss of physical or mental function linked to product use
2. Disability — a lasting impairment affecting daily life or work capacity
3. Hospitalisation — inpatient admission (not just a GP visit) resulting from the adverse reaction
4. Congenital anomalies — relevant where pregnant users are exposed to the product
5. Immediate vital risk or death — anaphylaxis, severe systemic reactions, cardiac events, or fatalities

A customer reporting that a moisturiser caused a red patch that resolved in 48 hours is an undesirable effect worth logging internally — but it does not trigger Article 23 notification. A customer hospitalised for a systemic allergic reaction clearly does. In practice, the ambiguous cases sit in the middle: a reaction severe enough to require emergency room treatment, or a localised chemical burn that leaves permanent scarring. These require a case-by-case legal and medical assessment, ideally with your qualified safety assessor or a regulatory consultant involved in the decision before any report is filed.

French health professionals — dermatologists, pharmacists, allergists — also have a direct reporting channel to ANSM’s cosmétovigilance system that bypasses the responsible person entirely. That means ANSM may know about a SUE involving your product before you do. When they contact you for information, you need a current PIF and a reporting protocol that’s already been tested.

The Responsible Person’s Liability and the Distributor Problem

Under Articles 4 and 23 of Regulation 1223/2009, the responsible person carries primary notification liability. If a distributor — a retailer, an importer, a third-party logistics operator — learns of a SUE first, they must forward that information to the RP without delay. The RP then notifies ANSM.

In practice, this creates a predictable communication failure. Distributors often don’t recognise a customer complaint as a potential SUE. Customer service teams receive the complaint, log it as “product feedback,” and it never reaches the regulatory function. By the time the RP is aware, days or weeks have passed, and ANSM may already be looking at a report filed by a healthcare professional.

The fix is contractual and procedural. Distribution agreements should include explicit clauses requiring distributors to escalate any adverse event report — including consumer complaints describing hospitalisation, persistent injury, or medical intervention — to the RP’s designated pharmacovigilance contact within 24–48 hours of receipt. Your internal SOPs should define what constitutes an adverse event broadly enough that a call-centre agent can flag it, even if they can’t assess its severity.

ANSM expects notification “without undue delay, taking into account the gravity of the serious undesirable effect.” The regulation doesn’t specify a fixed number of calendar days. In our advisory practice, we align with a 15-working-day target for initial notification in non-fatal cases, and immediate notification — within 24–72 hours — for events involving death or immediate vital risk. Some larger multinationals apply a 15-calendar-day standard borrowed from pharmaceutical pharmacovigilance, which is a defensible approach that signals a mature compliance culture.

What to Include in Your ANSM Submission

ANSM accepts cosmétovigilance reports through its dedicated online cosmétovigilance portal and, in urgent cases, by direct contact with the unit. A complete report should include:

• Product identification: product name, batch number, formulation category, and CPNP notification reference
• Patient details: age, sex, and relevant medical history (allergies, prior dermatological conditions), with appropriate anonymisation where required
• Event description: onset, duration, severity, clinical outcome, and treatment required
• Causality assessment: the RP’s or safety assessor’s evaluation of whether a plausible link exists between the product and the event
• Supporting documentation: medical reports, laboratory analyses, photographs (with patient consent), or specialist assessments

The quality of your initial submission matters more than most brands realise. A thin or incomplete report will prompt ANSM to send follow-up queries — which adds scrutiny, delays, and the opportunity for inconsistencies. A well-structured report that demonstrates your safety team engaged seriously with the case positions you as a responsible operator and reduces the risk of escalation.

After submission, update the product’s PIF with all SUE-related information as required under Article 23(2). If the investigation reveals a new hazard — a sensitising impurity, an unexpected preservative interaction — your safety assessor may need to revise the Cosmetic Product Safety Report (CPSR), and depending on severity, consider voluntary corrective action before ANSM compels it.

France in the EU Cosmétovigilance Network

France shares SUE data with the European Commission and other EU member state competent authorities through the Safety Gate rapid alert system (formerly RAPEX), as well as through bilateral information-sharing under the regulation. ANSM also publishes annual cosmétovigilance reports summarising trends: which product categories generate the most serious reports, which ingredients recur as suspected causes, and what enforcement actions followed.

Reading those annual reports is one of the most underutilised intelligence sources in EU cosmetics compliance. They tell you, with real case data, exactly which product types ANSM is watching most closely. Historically, oxidative hair colourants and leave-on facial preparations have generated a disproportionate share of serious adverse event volume. If your portfolio sits in those categories, your cosmétovigilance protocol deserves corresponding attention.

If ANSM concludes that a product poses a serious risk, the authority has the power under Article 27 of Regulation 1223/2009 to demand corrective measures — including withdrawal from the French market, with potential EU-wide coordination to follow.

Building a System That Works Before You Need It

Most small and mid-sized cosmetic brands operating in France don’t have a dedicated cosmétovigilance function. They have a quality manager who also handles regulatory affairs, a customer service team, and a distributor network. That structure is workable — but only if a clear, documented protocol exists before an event occurs.

The five things that system must include:

1. Defined intake channels: identify every route through which an adverse event report might reach your organisation — e-commerce reviews, retailer feedback lines, direct consumer contacts, healthcare professional communications — and name who receives and triages each one
2. Front-line recognition training: customer service agents should be able to identify language that suggests a serious outcome (“I ended up at the hospital,” “my doctor thinks it’s the product,” “I still can’t see properly”) and escalate to your regulatory contact within one working day
3. A named regulatory contact with PIF access: ANSM expects a specific point of contact for case follow-up; that person must be able to retrieve the current PIF and CPSR on short notice
4. A complete case record: date and time of first notification, nature of the complaint, escalation pathway, the assessment decision (reportable or not, and why), and submission date if a report was filed — this paper trail is your defence if ANSM audits your process
5. Periodic PIF review: adverse events, even non-serious ones, should feed into your ongoing product safety monitoring and be reflected in updated PIF documentation — not just filed and forgotten

France’s cosmétovigilance framework exists because cosmetic products, however low-risk the regulatory category, can cause genuine harm in rare cases. Brands that build a proper internal system aren’t just compliant — they identify ingredient problems earlier, protect their customers before a cluster of events forces a harder conversation, and demonstrate to ANSM the kind of proactive engagement that genuinely matters when they’re deciding how to handle a case.

---

Written by Nour Abochama, Quality & Regulatory Advisor, Care Europe | VP Operations, Qalitex. Learn more about our team

Talk to our team about EU market entry and cosmétovigilance readiness. Contact us

Related from our network

• Third-Party Cosmetic Ingredient & Finished Product Testing — Qalitex Laboratories provides ISO 17025-accredited testing to support your EU cosmetic safety dossier, CPSR preparation, and PIF documentation requirements.
• Health Canada Cosmetic Adverse Reaction Reporting for Canadian Market Entry — Androxa supports NHP and cosmetic brands navigating Health Canada’s adverse reaction reporting obligations for the Canadian market.