Cosmetic Stability Testing Under ISO 22716: The Protocol Gaps EU Brands Discover Too Late

A cosmetics manufacturer spent 14 months preparing their new SPF moisturiser for EU market launch. Safety assessment completed. CPNP notification filed. Responsible Person in place. The compliance team was confident.

Then a third-party GMP audit flagged the stability file. Not because data was missing — because the 6 months of accelerated testing at 40°C they’d submitted didn’t support the 24-month minimum durability date printed on the label. The auditor’s note was blunt: “Stability data does not substantiate the claimed shelf life. Corrective action required before commercial release.”

Launch delayed by four months. That’s the reality of stability testing in EU cosmetics when teams treat it as a box to tick rather than a technical commitment to the data behind every label claim.

What ISO 22716 Actually Requires — and What It Leaves Up to You

ISO 22716:2007 — the international GMP standard for cosmetics, formally referenced under Regulation (EC) No 1223/2009 — is deliberately non-prescriptive about stability protocols. Section 15 (Quality Control) states that cosmetic products should be tested under “appropriate storage conditions,” but it doesn’t specify temperatures, time points, or testing frequencies. That flexibility is intentional. It’s also the source of most compliance failures.

The true regulatory obligation for stability data comes from Regulation (EC) No 1223/2009 itself. Annex I of that regulation — the Cosmetic Product Safety Report — explicitly requires that the safety assessor document “the stability of the cosmetic product under reasonably foreseeable storage conditions.” Article 19 governs the labelling claims your stability data must support.

Two distinct claims require substantiation:

• Minimum durability date (“best before”): mandatory for any product with a shelf life under 30 months
• Period After Opening (PAO): the open-jar symbol applied when durability exceeds 30 months, indicating the number of months the product remains safe after first opening

Products below the 30-month threshold need particularly robust real-time data, because the “best before” date is a harder regulatory commitment than a PAO. Yet many brands focus their entire stability investment on the open-jar symbol and treat shelf-life data as secondary. That’s a category error that will surface at audit.

One clarification worth making here: ISO 22716 GMP compliance and Regulation (EC) No 1223/2009 compliance are not interchangeable obligations. GMP governs how you operate your quality system; 1223/2009 governs what data must appear in your safety file. Both require stability evidence, but they approach it from different angles. A stability programme that satisfies your GMP auditor but leaves your safety assessor unable to sign the Product Safety Report has failed in half its purpose.

Real-Time vs. Accelerated Testing: Why Auditors Treat Them Differently

The most common structural problem we see in stability files is the assumption that accelerated testing at 40°C ± 2°C / 75% ± 5% RH substitutes for real-time data. It does not.

Accelerated stability testing — borrowed in design from ICH Q1A(R2), though that guideline was written for pharmaceuticals — uses elevated temperature and humidity to accelerate degradation kinetics. It’s genuinely useful for early formulation screening and for identifying weaknesses quickly. A product showing significant viscosity drop, phase separation, or colour change at 40°C after 3 months has a problem that needs no further investigation.

But passing accelerated testing does not prove a product will remain within specification over 24 or 36 months under ambient storage conditions. Degradation chemistry at 40°C differs meaningfully from what happens at 20–25°C over three years. Oxidative pathways, microbial stress, and packaging-formulation interactions all behave differently across temperature regimes. A product stable under accelerated conditions has cleared a useful early screen — not the regulatory finish line.

Real-time stability at 25°C ± 2°C / 60% ± 5% RH, with time points at T0, T1, T3, T6, T12, and T24 months (extending to T36 for longer durability claims), is what safety assessors need to finalise the Product Safety Report. Accelerated data can support an interim shelf-life claim at early launch — provided real-time studies are running in parallel and the interim status is clearly documented in the PIF.

Freeze-thaw cycling is often filed separately but belongs in the same protocol planning conversation. A minimum of three cycles between 5°C ± 3°C and 40°C ± 2°C (48 hours per step) will expose emulsion instability and ingredient incompatibilities that isothermal studies simply miss. For products entering distribution channels in Scandinavia, Central Europe, or the Middle East — where thermal excursions during transport are routine — this testing is as non-negotiable as it gets.

The Three Stability Tests That Show Up Most Often on Audit Deficiency Lists

Preservative Efficacy Testing (PET)

The antimicrobial challenge test — conducted according to EN ISO 11930:2019 — evaluates whether your preservative system is adequate to protect the formulation from microbial contamination under real consumer use conditions. It’s a fundamental requirement of both ISO 22716 and Annex I of Regulation (EC) No 1223/2009, which mandates microbiological quality assessment in the safety report.

What brands consistently underestimate is the scope of EN ISO 11930:2019. The standard defines five product categories (A through E) with different acceptance criteria depending on intended use, application route, and microbial risk level. An eye cream and a body lotion do not use the same pass/fail thresholds. Submitting PET results without specifying the applicable category and acceptance criteria is one of the most frequent nonconformities we see in pre-audit file reviews.

And PET is not a one-time exercise. Change the fragrance concentration, switch to a different emulsifier grade, or adjust water activity — and the challenge test must be repeated. Microbial stability in an emulsion is sensitive to compositional changes that look inconsequential on a formulation card.

Packaging Compatibility Testing

This is treated as optional far too often, usually because no specific clause in ISO 22716 names it explicitly. But your safety assessor cannot sign off on the Product Safety Report without it for products where the interaction risk is real. And for most leave-on products, it is real.

Packaging compatibility testing examines chemical interactions between the formulation and its primary contact materials — migration of plasticisers into the product, extraction of metals from pigmented closures, permeation of volatile components through thin-wall PE containers, or physical effects like stress cracking and cap deformation. For formulations with high alcohol content, significant essential oil loads, or lipophilic actives, compatibility testing is not optional; it’s a direct safety input.

A 6-week extraction study at 40°C using the actual commercial packaging is sufficient for most categories. If your packaging supplier provides certified migration data for the specific polymer grade and additive package, that can substitute — but it must be specific to your product type, not a generic characterisation report for the base resin.

Photo-Stability Testing

SPF products require photo-stability data by regulatory convention across EU markets, and EN ISO 24444 and EN ISO 24443 set out the testing protocols for sun protection claims. But photo-stability relevance extends well beyond sun care.

Formulations containing retinoids, L-ascorbic acid, niacinamide at functional concentrations, natural carotenoids, or botanical extracts with light-sensitive polyphenols are all candidates for photo-stability assessment. The standard protocol involves xenon arc irradiation at 1.2 million lux hours (ICH Q1B conditions) alongside dark controls, with physical appearance, colour, pH, and active ingredient concentration as primary endpoints.

If you’re selling through any EU pharmacy or retailer using transparent or translucent packaging — which includes the majority of contemporary cosmetic formats — photo-stability data will be reviewed by any diligent safety assessor. If you’re making efficacy claims around a light-sensitive active, the absence of photo-stability data creates an unresolvable gap in your safety narrative.

How to Build a Stability Protocol That Holds Up at Audit

The practical starting point is a written Stability Testing Master Plan: a document that defines which test battery applies to which product categories, under what storage conditions, at which time points, and against which acceptance criteria. ISO 22716 doesn’t name this document explicitly, but every experienced GMP auditor will ask for it. Without it, individual stability reports look like ad hoc experiments rather than a controlled quality programme.

Map each label claim to its data requirement before a single sample goes into a stability chamber:

• 36-month PAO: real-time data to at least T24 months, with accelerated data to T6 as an early indicator
• 24-month best-before: real-time data running to T24, with interim release supported by accelerated T6 data and documented risk assessment
• Functional efficacy claims (e.g., 72-hour moisturisation, visible firming at 8 weeks): instrumental or clinical endpoints must be tested at stability time points, not just physicochemical parameters — a product that maintains correct pH but loses 40% of its active concentration at T12 cannot support its original efficacy claim

Keep your stability samples in commercial-grade packaging, at commercial fill weight, from production-representative batches. Stability data generated on lab-scale batches in generic glass jars does not transfer to production. This gap shows up, consistently, when commercial batches look different from stability samples at the 12-month review — and explaining it retroactively to a safety assessor is a difficult conversation.

Finally: file everything in your Product Information File continuously, not retrospectively. The PIF is a living document under Regulation (EC) No 1223/2009. Stability data should be added as it accumulates, with your safety assessor reviewing updated data at agreed intervals — annually at minimum for products with ongoing real-time studies. If you’re assembling your PIF for the first time when an authority requests it, the window for proactive correction has already closed.

The manufacturer whose launch was delayed did eventually get to market. They added real-time stability chambers, commissioned a proper accelerated protocol running in parallel, and had their Stability Testing Master Plan rewritten from scratch by an external consultant. Approximately €35,000 in remediation costs and four months of lost commercial time later, they had a file that could withstand scrutiny.

That outcome was entirely avoidable. The technical work isn’t complicated — stability testing is established, well-understood science. What makes it fail in practice is almost always a planning gap, not a knowledge gap. The protocol has to be deliberate from the start, designed against the claims you intend to make, not retrofitted when someone finds the hole.

---

Written by Nour Abochama, Quality & Regulatory Advisor, Care Europe | VP Operations, Qalitex. Learn more about our team

Talk to our team about EU market entry Contact us

Related from our network

• ISO 17025-accredited cosmetic ingredient and finished product testing — Qalitex Laboratories offers accredited stability, microbiological challenge, and chemical analysis supporting EU Regulation (EC) No 1223/2009 safety files
• GMP compliance and testing for brands entering the Canadian market — Androxa provides Health Canada–aligned testing and regulatory support for European manufacturers expanding into North America