Cosmetics Vigilance Reporting in France: What the ANSM Expects from Responsible Persons
France's cosmetovigilance system predates EU Regulation 1223/2009. Learn what Article 23 SUE reporting requires in practice and how to meet ANSM's expectations.
Point clé
France's cosmetovigilance system predates EU Regulation 1223/2009. Learn what Article 23 SUE reporting requires in practice and how to meet ANSM's expectations.
France has been running a formal cosmetovigilance network since 1997 — a full twelve years before Regulation (EC) No 1223/2009 made SUE reporting mandatory across the EU. That history matters, because the ANSM (Agence Nationale de Sécurité du Médicament et des Produits de Santé) approaches cosmetic vigilance with a level of institutional rigour that newer national programmes simply don’t match. And yet, we consistently see brands that have correctly notified their products on the CPNP, appointed a Responsible Person, and assembled their PIF — only to discover they’ve never established a working serious undesirable effect (SUE) reporting pipeline to the French authority.
The gap is almost always the same: companies conflate product notification with ongoing vigilance. They are two entirely separate obligations.
What Actually Qualifies as a Serious Undesirable Effect
Before you can build a reporting system, you need a precise internal definition. Article 2(1)(p) of Regulation 1223/2009 defines an undesirable effect as “a harmful effect on human health attributable to the normal or reasonably foreseeable use of a cosmetic product.” A serious undesirable effect — the subset that triggers Article 23 — is any UE resulting in one of the following outcomes:
- Temporary or permanent functional incapacity
- Disability
- Hospitalisation
- Congenital anomalies
- Immediate vital risk
- Death
What isn’t on that list: isolated redness, transient itching, or a mild contact reaction in a consumer with a known sensitisation history who ignored the patch-test recommendation. Ordinary effects that resolve without clinical intervention don’t trigger Article 23 reporting. But the line between “irritation a consumer treated at home” and “hospitalisation for a chemical burn requiring topical corticosteroid therapy” is thinner than brands sometimes assume. When in doubt, document the assessment and report. ANSM guidance consistently favours over-reporting over silence.
One practical complexity: most reports arrive as consumer complaints, not clinical diagnoses. In those cases, the Responsible Person is responsible for causality assessment — and that assessment must be documented in the PIF regardless of whether a formal notification is ultimately filed with the ANSM.
What Article 23 Actually Requires — and What It Doesn’t Say
Article 23 of Regulation 1223/2009 requires the Responsible Person to notify the competent authority in the member states where the SUE occurred “without undue delay” after becoming aware of it. Distributors carry a parallel obligation: they must notify both the RP and the competent authority in the relevant member states.
What the text doesn’t provide: a hard numeric deadline. “Without undue delay” has been interpreted differently across the EU. ANSM guidance aligns with the industry best practice of 15 calendar days for SUEs that are life-threatening or fatal, and 90 days for other serious effects — but these timelines are not formally codified in French national legislation. If your internal vigilance SOP specifies reporting windows, make them explicit and conservative, and document any deviation.
A compliant Article 23 notification must include, at minimum:
- Product identity — commercial name, batch number, CPNP portal reference number
- A description of the effect, including date of onset and clinical duration
- The nature and date of any medical treatment received by the affected person
- The source of the report (healthcare professional, consumer, distributor, third party)
- The RP’s causality assessment and methodology
- Any corrective or precautionary measures already taken or planned
France additionally expects a copy of the filed notification — and the underlying causality assessment — to be incorporated into the Product Information File. This is ANSM practice rather than explicit pan-EU text, but it’s the standard applied consistently during inspections, and it’s not worth arguing about.
France’s Reporting Channel: The ANSM Cosmetovigilance Portal
Notifications to the ANSM are submitted through the national adverse effects reporting portal — the Portail de Signalement des Effets Indésirables, accessible via signalement.social-sante.gouv.fr. This is the same technical infrastructure used for pharmacovigilance, medical device vigilance, and haemovigilance; cosmetic products have their own dedicated reporting category within the system.
The critical practical point: the CPNP is not the reporting channel for SUEs. The CPNP is a pre-market product registration portal. Article 23 notifications are a post-market vigilance obligation routed entirely through national competent authority channels. Brands that assume their CPNP filing covers ongoing obligations will have a structural gap in their compliance programme.
Healthcare professionals — dermatologists, allergists, emergency physicians — can also file reports directly through the same portal without going through the RP. In practice, the ANSM receives several hundred cosmetovigilance reports annually, and the agency publishes summary data in its public safety reports. Those reports are worth reading: they identify which product categories and ingredient classes are attracting the most scrutiny in a given year, which is useful intelligence for safety assessment updates.
One administrative point that catches non-French brands off guard: the ANSM portal operates in French. If your designated RP is based outside France or operates in English, ensure your vigilance SOP includes explicit translation support. An SUE report stalled because no one on the compliance team reads French is an avoidable problem — and not one you want surfaced during an inspection.
Setting Up a Vigilance System That Actually Functions
The most common failure mode isn’t ignorance of the obligation. It’s the absence of an internal pipeline that reliably connects consumer complaints, distributor reports, and retailer feedback to the RP’s desk before the “without undue delay” clock has run. Here’s what a functional cosmetovigilance system requires:
1. A triage protocol for incoming complaints. Every consumer contact that describes a health effect — not merely a cosmetic preference or packaging dissatisfaction — must enter a documented triage process. The RP or a designated deputy performs a causality assessment within a defined window, typically 5 working days from receipt.
2. Distributor notification clauses in your supply and distribution agreements. Under Article 23(2), distributors are legally obligated to report SUEs to both the RP and the competent authority. In practice, many distributors are unaware of this obligation, and standard commercial contracts don’t address it. Add an explicit clause, provide a standardised reporting template, and brief your distribution network at least annually.
3. A PIF addendum for each assessment. Whether or not a report is filed with the ANSM, the causality assessment and the rationale for non-reporting must be documented and retained in the PIF. DGCCRF and ANSM inspectors routinely cross-reference PIF content against complaint records and reported batch data.
4. Periodic vigilance trend reviews. The ANSM expects the RP to conduct aggregate trend analysis — not just react to individual cases in isolation. A quarterly review of complaint data, cross-referenced against product batches and ingredient lots, is the standard the agency expects to see evidence of. If a specific fragrance compound or preservative system starts appearing across multiple consumer reports, the Article 23 obligation may crystallise faster than expected.
For smaller brands and importers, the RP function is frequently outsourced to a regulatory consultancy. That’s entirely permissible under the Regulation — but the vigilance SOP must clearly define who performs each step, in what timeframe, and how communication flows between the brand and the RP. An outsourced RP who completes the CPNP registration and is never contacted again is only covering the pre-market half of the compliance picture.
The Enforcement Reality
Both the DGCCRF (Direction Générale de la Concurrence, de la Consommation et de la Répression des Fraudes) and the ANSM hold inspection authority over cosmetic products placed on the French market. The DGCCRF tends to focus on labelling accuracy, claims substantiation, and general market surveillance; the ANSM covers toxicological and biological safety, including the adequacy of post-market vigilance procedures.
In recent ANSM inspection cycles, inadequate cosmetovigilance procedures — specifically the absence of an SUE triage process, an undefined causality assessment methodology, or a missing PIF vigilance section — have been cited as findings across a meaningful share of audited entities. The typical outcome is a corrective action request with a defined response deadline. But repeat findings, or documented evidence that a reportable SUE was not notified when it should have been, carry substantially higher regulatory and reputational risk.
This is an area the ANSM actively inspects for. The bar for “adequate” is higher than most newly-entering brands anticipate — and higher than what you’ll encounter in several other EU member states.
If your brand places cosmetics on the French market and you haven’t walked your SUE reporting pipeline end-to-end — from complaint intake through causality triage to ANSM portal notification and PIF update — the time to do that review is before you need to file a report, not after. The obligation is live from the moment your product goes on sale, and a structured internal process review costs a fraction of a corrective action plan filed under regulatory scrutiny.
Written by Nour Abochama, Quality & Regulatory Advisor, Care Europe | VP Operations, Qalitex. Learn more about our team
Talk to our team about EU market entry. Contact us
Related from our network
- Cosmetic Ingredient & Finished Product Testing (ISO 17025) — Stability, microbiological, and contaminant testing for cosmetic raw materials and finished formulations entering the EU market.
- Health Canada-Compliant Testing for Cosmetics and NHP Products — GMP-aligned testing services for brands expanding from Europe into the Canadian market.
Rédigé par
Nour AbochamaQuality & Regulatory Advisor, Care Europe | VP Operations, Qalitex
Chemical engineer with 17+ years of experience in laboratory operations, quality assurance, and regulatory compliance across Europe and North America. VP of Operations at Qalitex (ISO/IEC 17025 accredited US laboratory). Through Care Europe, leads the European entry point to a partner-lab network across the USA, Canada, and local Europe — specialising in USA FDA + Health Canada compliance for European exporters and herbal & supplement testing (a rare expertise on the European continent).
Services réglementaires UE associés
Besoin de conseil réglementaire EU ?
Obtenez des conseils d'experts de notre équipe réglementaire française enregistrée SIREN. Support bilingue EN/FR.
Demander un devis →