CPNP Notification Under EU Regulation 1223/2009: Six Errors That Block Your Market Entry

Every cosmetic product placed on the European Union market must be notified through the Cosmetic Products Notification Portal before a single unit reaches a shelf. Article 13 of Regulation (EC) No 1223/2009 — the regulation governing cosmetics across all 27 member states — is unambiguous on this point. And yet, in the European Commission’s 2023 Safety Gate Annual Report, cosmetics and personal care products accounted for approximately 7% of all product safety alerts, with formulation non-compliance and incorrect documentation appearing repeatedly in the root-cause summaries.

The CPNP submission process sounds procedurally simple. Create an account, upload your data, link your Responsible Person, submit. But the portal is deceptively tolerant of incorrect data — it accepts submissions that contain significant compliance gaps without flagging them. The problems surface later: during market surveillance inspections, after a consumer complaint reaches a national competent authority, or when a distributor’s legal team discovers the Responsible Person named in the notification hasn’t had an EU address since December 2020.

We work with European brands at various stages of compliance maturity, from first-time launches to post-inspection remediation. These six errors come up repeatedly, and every one of them is avoidable.

What a Complete CPNP Notification Under Regulation 1223/2009 Actually Contains

Before getting to the errors, it helps to revisit what a compliant submission looks like. Article 13 requires the Responsible Person to notify the European Commission — via CPNP — with the following data:

• Product name(s) exactly as they appear on the packaging
• Product category and intended function
• The country or countries of placement on the market
• The Responsible Person’s name and registered EU address
• Contact details for a physical person reachable in emergencies (the Article 13(1)(d) urgency contact)
• The original label and a photograph of the finished packaging
• A complete INCI ingredient listing, with nano-form status identified for each applicable ingredient
• Any applicable frame formulation reference numbers
• Where nanomaterials are present, the reference number from the separate Article 16 pre-notification

That final item is where Article 13 and Article 16 intersect — and where a significant number of non-conformities originate. Products containing nanomaterials require a separate notification filed at least 90 days before placement on the market. The Article 13 CPNP notification and the Article 16 nanomaterial notification are two distinct legal obligations under cosmetic regulation 1223/2009. Many brands treat them as a single submission and file nothing under Article 16 at all.

Six CPNP Errors We See Repeatedly

Error 1: Misclassified Product Category

CPNP’s category taxonomy is more granular than most brands expect, and the category you select has direct regulatory consequences. Sunscreens, anti-dandruff formulations, oral care products with whitening claims, and products containing ingredients with documented physiological effects each sit in classification zones where cosmetics regulation and medicinal product law can overlap.

Anti-dandruff shampoos are a persistent example. A shampoo containing zinc pyrithione at 1.0% sits comfortably within EU cosmetics regulation. Push that concentration toward 2.0%, and several member states — France’s DGCCRF (Direction Générale de la Concurrence, de la Consommation et de la Répression des Fraudes) is notably active here — may classify it as a borderline medicinal product under Directive 2001/83/EC. File it as a cosmetic in CPNP under those conditions and you’re exposed on two regulatory fronts simultaneously.

The practical rule: if your product’s claims extend beyond modifying appearance toward a physiological mechanism of action, seek formal classification advice before touching CPNP.

Error 2: Post-Brexit Responsible Person Designations

Since the UK formally left the EU single market on 31 December 2020, a Responsible Person established only in the United Kingdom is no longer valid for products placed on the EU market. Article 4 of Regulation 1223/2009 requires the RP to be established in the EU. This hasn’t changed, and no transitional arrangement exists.

We still encounter CPNP records — typically from British-owned brands with Continental distribution partners — where the Responsible Person address is a London office or a UK-registered entity. National competent authorities in Germany, France, and the Netherlands have all issued formal non-conformity notices to distributors carrying products with invalid RP designations. Some of those notices have led to mandatory market withdrawal.

If you’re a UK brand selling into the EU, the options are clear: appoint an EU-established regulatory entity as Responsible Person, assign your EU distributor as RP under Article 4(2) with a formal written acceptance of those obligations, or establish an EU legal entity. The portal accepts a UK address without complaint. Market surveillance authorities won’t.

Error 3: Nanomaterial Declarations and the Article 16 Pre-Notification Gap

The definition of “nanomaterial” under the regulation — aligned with Commission Recommendation 2022/C 229/01 on the revised nanomaterial definition — catches more cosmetic ingredients than brands typically anticipate. Titanium dioxide (TiO₂) and zinc oxide (ZnO) in their nano-form are present in physical sunscreen formulations across the industry. SCCS Opinion SCCS/1583/17 specifically restricted nano-TiO₂ from spray applications due to inhalation risk, while permitting it in non-spray face products and rinse-off formulations under defined particle size and coating specifications.

The compliance failure follows a predictable pattern: a formulator switches UV filter supplier mid-development cycle, the new grade is nano-classified while the previous one was not, and no one updates the CPNP record or files the Article 16 pre-notification. By the time the product is in retail distribution, the notification is non-compliant.

The practical fix: require particle size characterisation data — D50 and D90 values confirmed by dynamic light scattering or electron microscopy — from every pigment and UV filter supplier. If the data confirms nano classification, the Article 16 notification must be filed at least 90 days before the Article 13 CPNP submission is completed. Sequence matters here. You cannot reverse the order.

Error 4: Frame Formulation Linkage Failures

CPNP’s frame formulation function was designed to allow fragrance houses and raw material suppliers to share ingredient data with poison centres without publicly disclosing confidential formulation details. A supplier uploads a “frame” — a generic formulation envelope — and assigns it a reference number. The cosmetics manufacturer then links their finished product notification to that frame.

But the linkage works correctly only if the finished product’s actual ingredient profile stays within the stated bounds of the referenced frame, and only if the supplier has actually uploaded a current frame formulation in the first place.

We have seen brands assume their fragrance supplier has a live CPNP frame formulation when no such submission exists. We have seen others link to an outdated frame formulation after a fragrance was reformulated to meet the latest IFRA (International Fragrance Association) industry standards. And we have seen finished product manufacturers add ingredients at concentrations outside the frame’s permitted ranges without creating a corrected linkage. None of these produce automatic error alerts in CPNP.

Confirm frame formulation availability and current validity with each relevant supplier before beginning the finished product submission — not during, and not after launch.

Error 5: CMR Substance Status and Outdated Safety Assessments

Annex II of Regulation 1223/2009 currently lists more than 1,600 prohibited substances. But Article 15 of the regulation introduces an additional layer for substances classified as CMR (carcinogenic, mutagenic, or toxic for reproduction) under the CLP Regulation (EC) No 1272/2008. CMR category 1A and 1B substances are prohibited outright from cosmetic formulations. CMR category 2 substances are prohibited unless SCCS has specifically assessed them as safe under defined conditions of use.

The compliance problem is rarely a deliberate attempt to use a banned ingredient. It’s that CLP classifications are updated through successive Adaptation to Technical Progress (ATP) regulations on a rolling basis, and a preservative or UV absorber that passed scrutiny in a safety assessment 24 months ago may have received a new classification since.

Methylisothiazolinone (MIT) is a well-documented example. Once used as a preservative across both rinse-off and leave-on formats, it was progressively restricted following successive SCCS opinions — first from leave-on products, then at reduced concentrations in rinse-off applications. Brands still holding safety assessments that reference MIT in leave-on formulations at concentrations no longer permitted are non-compliant today, regardless of when those assessments were originally produced.

The working standard: if your safety assessor’s opinion is older than 18 months and your formula includes preservatives, UV filters, or fragrance allergens that have been under active SCCS review, commission an update before your next submission.

Error 6: Failing to Update CPNP After Post-Launch Formulation Changes

Article 13(3) of Regulation 1223/2009 requires the Responsible Person to update the CPNP notification whenever the submitted data changes — including ingredient substitutions, concentration adjustments, label revisions, and supplier switches that affect ingredient specifications.

In practice, formulation changes move through quality management systems that frequently don’t include a mandatory “assess for CPNP update” checkpoint. A fragrance is swapped because of an IFRA standard revision. A preservative changes due to a supply chain disruption. A claim is added to the label for a new distribution channel. Each of these should trigger a CPNP update. Frequently, none of them do.

The consequence: national market surveillance authorities — which increasingly cross-reference CPNP data against physical product samples during inspections — find discrepancies. Under French DGCCRF inspection practice in particular, a documented discrepancy between the notified formulation and the actual product is treated as a compliance failure in its own right, separate from any question about whether the reformulated product is itself safe. Formal non-conformity notices and mandatory market withdrawal have followed from exactly this pattern.

A Pre-Launch CPNP Compliance Checklist

Run your next submission through these six checks before committing to a launch date:

1. Category classification: Confirm the product category matches your functional claims and sits clearly within cosmetics law. If there is any doubt, obtain a formal classification opinion before notification.
2. Responsible Person verification: Verify your RP is EU-established and holds a signed, current letter of acceptance of Article 4 obligations. Confirm the CPNP address exactly matches their registered legal address.
3. Nanomaterial documentation: Request and retain particle size characterisation data for all pigments and UV filters. File any required Article 16 notifications at least 90 days before completing the Article 13 submission.
4. Frame formulation validation: Confirm current frame formulation availability and version validity with each fragrance and ingredient supplier before starting the product notification.
5. CMR and CLP review: Cross-reference your full ingredient list against current CLP classifications for any preservatives, UV filters, and fragrance allergens. Confirm your safety assessment reflects any updates issued in the past 18 months.
6. Change management integration: Build a mandatory “assess for CPNP update” step into your formulation change management procedure, your labeling review workflow, and your approved supplier list change process.

The portal accepts imperfect data. Market surveillance authorities don’t.

---

Written by Nour Abochama, Quality & Regulatory Advisor, Care Europe | VP Operations, Qalitex. Learn more about our team

Talk to our team about EU market entry Contact us

Related from our network

• ISO 17025-accredited testing for US FDA cosmetics and MoCRA compliance — Finished product and ingredient testing for European brands entering the US market under MoCRA registration requirements
• Health Canada NHP and cosmetics testing for Canadian market entry — GMP-compliant testing and regulatory support for European brands expanding into Canada