/
A cosmetic brand outside the EU can have flawless formulations, a spotless safety record and full compliance back home, and still be legally unable to sell a single unit in Europe — because under Regulation (EC) 1223/2009, no cosmetic product may be placed on the EU market without a designated Responsible Person. It is not a formality: Article 4 makes it a precondition, and it is the name that ends up on the label, on the CPNP notification and in front of the inspector if something goes wrong. This guide explains what the role actually is, the obligations that come with it, how it differs from being an importer or distributor, and the mistakes non-EU brands make.
What Article 4 actually requires
Article 4 states that only cosmetic products for which a legal or natural person is designated within the Union as Responsible Person may be placed on the market. For a product manufactured in the EU, the manufacturer is the default Responsible Person unless they designate someone else in writing. For a product manufactured outside the EU, the importer becomes the Responsible Person by default — again, unless a written mandate designates a different person established in the Union.
In practice this means a Chinese, Korean or Brazilian brand with no EU entity cannot self-appoint: someone established in the Union has to formally accept the role and the liability that comes with it. The designation has to be in writing and accepted — a name on a label without a real mandate behind it does not satisfy Article 4.
The obligations that come with the role (Article 5)
Being Responsible Person is not a mailbox address on a label. Article 5 makes the Responsible Person accountable for the product’s compliance, and in concrete terms that means:
- ensuring Good Manufacturing Practice (Article 8, generally demonstrated through ISO 22716);
- keeping the Product Information File (PIF, Article 11) available to the competent authority, at the address on the label, within a short timeframe of a request;
- maintaining the Cosmetic Product Safety Report (CPSR, Article 10) — the safety assessment that underpins the whole file;
- notifying the product through the Cosmetic Products Notification Portal (CPNP, Article 13) before it reaches the market;
- ensuring the labelling and claims comply, and cooperating with authorities on any non-conformity, including corrective action and, if required, product withdrawal or recall.
In our experience, the last point is where non-EU brands get caught out. They treat the Responsible Person as a paperwork checkbox and only discover the operational weight of the role when an inspector, a Safety Gate alert or a serious undesirable effect shows up — and by then the Responsible Person is the one who has to act.
The documents behind the role
The Responsible Person does not just hold a title; they hold a file that has to be complete and current. The Product Information File gathers the product description, the CPSR, the manufacturing method and a GMP statement, evidence of any claimed effects, and data on animal testing. At its core is the Cosmetic Product Safety Report, signed by a qualified safety assessor. When an authority asks, the Responsible Person has to produce this, in the language the Member State requires, quickly. A PIF that is incomplete, out of date or held by someone who cannot access it is a finding waiting to happen.
Responsible Person, importer and distributor are not the same role
The three roles overlap in practice but are legally distinct. The importer places the product on the EU market from a third country and, by default, inherits the Responsible Person obligations unless someone else is designated. A distributor who only makes available a product already placed on the market by someone else has narrower duties — mainly checking labelling, language and dates, and storage conditions — but can trigger Responsible Person obligations if they market the product under their own name or modify it in a way that affects compliance. The Responsible Person is the one who carries the full accountability for conformity. One entity can hold more than one of these roles, but the obligations of each still apply in full and have to be documented as such.
Who can be the Responsible Person
The Responsible Person must be a legal or natural person established in the EU. It can be the EU manufacturer, the importer, a distributor who takes on the role, or a third party appointed by written mandate — for example a specialised regulatory partner acting as Responsible Person on behalf of a non-EU brand. What matters is not the label of the entity but its capacity to actually perform the duties: hold and update the PIF, respond to authorities, manage vigilance and corrective action. A Responsible Person that cannot do these things in practice exposes the brand precisely when it is most vulnerable.
The mistakes non-EU brands make
- Assuming the distributor “sorts it out” — without a written mandate, no one has legally accepted the role.
- Treating it as an address, not a function — a name on the label with no PIF behind it fails the first inspection.
- No CPSR, or a weak one — the safety report is the backbone; a notification reference does not replace it.
- Forgetting vigilance — the Responsible Person has to react to undesirable effects and Safety Gate alerts, not just file paperwork at launch.
- Confusing CPNP notification with approval — the CPNP reference confirms the product exists in the database; it is not a safety clearance, and it does not transfer the liability away from the Responsible Person.
Frequently asked questions
Can a non-EU brand be its own Responsible Person? No. The Responsible Person must be established in the EU. A non-EU brand designates an EU-established person or partner by written mandate.
Is the Responsible Person the same as the CPNP notifier? The Responsible Person is who notifies (or delegates the notification), but the role is far broader: they hold the PIF and the CPSR and answer for the product’s compliance and safety throughout its life on the market.
Does a CPNP reference number mean the product is approved? No. It only confirms the product is in the database. The Responsible Person remains fully liable for its safety and conformity from day one.
Can the importer and the Responsible Person be the same company? Yes, and by default the importer is the Responsible Person unless another EU-established person is designated in writing. The duties of the role apply in full either way.
How ASC Services helps
We act as Responsible Person, or support your own, through the full obligation: we build and maintain the Product Information File, produce the Cosmetic Product Safety Report, run the CPNP notification, review labelling and claims, and stand behind the vigilance and corrective-action duties — with our Technical Manager validating and signing each regulatory output. If a market surveillance authority asks for the file, it is ready. Talk to our team through our contact page.