CPNP Registration for Non-EU Cosmetic Brands: Obligations, Costs & Solutions

• CPNP notification is mandatory for all cosmetics sold in the EU
• A non-EU brand must appoint an EU Responsible Person
• The Responsible Person manages notification, PIF, labeling, and safety
• Penalties and blocks apply for non-compliance
• Prices and services vary: check what is included
• Marketplaces and customs check for the Responsible Person

Updated 24 October 2026 · 8 sources checked

Providers compared

Prices as published on each provider's website on 24 October 2026, excluding VAT unless stated. Each row links to its source.

Legal Requirements: Articles, Obligations, and Responsibilities for Non-EU Brands

Regulation (EC) No 1223/2009 governs the safety and marketing of cosmetic products in the European Union. Article 4 states that every cosmetic product placed on the EU market must have a Responsible Person established within the Union. This role is mandatory for all non-EU brands intending to sell in the EU, regardless of sales channel (B2B, B2C, marketplaces, distributors).

• CPNP Notification (Art. 13): Each product must be notified on the CPNP portal before sale.
• PIF Custody (Art. 11): The Product Information File, including the safety assessment (CPSR), must be available at the Responsible Person's premises for 10 years.
• Labeling (Art. 19): The name and address of the Responsible Person must appear on the label.
• Vigilance (Art. 23): Reporting of serious adverse effects to competent authorities.

National authorities carry out spot or complaint-based checks, verifying the presence of the PIF, correctness of the CPNP notification, and label compliance (source). Failure to appoint an EU Responsible Person results in sales blocks, fines, and marketplace removal.

Practical note: If your EU importer or distributor agrees in writing to act as Responsible Person, you can avoid an external provider, but most brands choose an independent provider to maintain control and product ownership in case of distributor changes.

How to Choose a Provider: Criteria, Practical Comparison, and Decision Matrix

Choosing the provider for the EU Responsible Person and CPNP notification is crucial for compliance and quick market access. Key criteria to evaluate include:

• Service inclusiveness: Does the provider offer just CPNP notification or also PIF custody, CPSR review, authority response, and labeling support?
• Experience and recognition: Is the provider accepted by marketplaces and authorities?
• Turnaround time: How long to get the certificate and label address?
• Geographic coverage: EU only or also UK? Some providers (like REP27) offer both.
• Document management: Does the provider keep the PIF and respond to authority requests traceably?

Comparison table: included / not included / extra fees

Decision matrix:

Always check if the provider is recognized by marketplaces (Amazon, Etsy) and offers multilingual support and verifiable documentation.

What the Price Includes: Detailed Checklist and Practical Tips

Published prices from providers can vary widely depending on included services. It is essential to understand what you are actually buying:

• EU Responsible Person: Name and address to print on the label, valid for all 27 EU countries.
• PIF custody and updates: The provider must keep the Product Information File and make it available to authorities upon request for at least 10 years.
• CPNP notification: Some providers include it in the price, others offer it as an add-on.
• CPSR review: Verification that the safety assessment is signed by a qualified assessor.
• Authority response and vigilance: Handling market requests, reporting adverse effects.

Compliance checklist for today:

1. Check if you sell cosmetic products in the EU (including samples and testers).
2. Identify who will be the EU Responsible Person (importer/distributor or independent provider).
3. Prepare the safety assessment (CPSR) signed by a qualified assessor.
4. Prepare the complete PIF with all required information.
5. Contact the chosen provider and sign the designation.
6. Receive the address to print on the label and the appointment certificate.
7. Perform (or delegate) the CPNP notification for each product.
8. Keep all documents for at least 10 years after the last sale.

Tip: Always request a detailed list of what is included in the price and if there are costs for adding products, changes, or extraordinary authority requests.

Hidden Costs, Exclusions, and What Providers Don’t Say

Many providers advertise base prices that do not cover all activities needed for full compliance. Here is what is often excluded or incurs extra costs:

• CPSR drafting: The safety assessment must be signed by a qualified assessor, but drafting is almost never included.
• Legal advice on claims and disputes: If you need legal support for marketing claims or disputes, it is usually a separate service.
• Handling extraordinary requests: Additional responses or documentation requested by authorities may be billed separately.
• Adding products: If you exceed the number of products in your plan, you pay the difference for the current year.
• Data changes: Formula, label, or Responsible Person changes may incur update fees.

Also verify:

• Notice period for service termination: Some providers require written notice to terminate the contract.
• Liability in case of non-compliance: The provider is responsible only for their activities; product safety remains with the manufacturer and CPSR assessor.
• Importer role: REP27 and others do not act as importers or distributors, so they do not handle logistics or customs.

Always ask for a copy of the contract and check clauses on liability, exclusions, and authority response times.

How Appointment Works: Step by Step, Timing, and Documents

Appointing the EU Responsible Person follows a precise procedure. Here is how it works in practice:

1. Request a quote: Contact the provider and provide company data and product/formula list.
2. Form completion: Fill out an online form with company, product info, and electronic signature.
3. Document review: The provider checks PIF completeness, CPSR validity, and label compliance.
4. Designation signing: Receive the appointment document to sign digitally. Some providers (like REP27) issue a certificate with QR code for public verification.
5. Receive address and label block: Get the EU address to print on labels and documentation for marketplaces and distributors.
6. CPNP notification: The provider (or you, if preferred) submits notification for each product on the CPNP portal. Notification must include: product category, formula, country of first sale, label, packaging photo, presence of nanomaterials or CMR substances.
7. Ready to sell: Only after notification confirmation and document review can you legally start selling in the EU.

Timing: With REP27, designation can be issued within 24 hours of receiving complete documentation. CPNP notification can take from a few hours to several days depending on complexity and product count.

Tip: Print labels only after receiving the official address and appointment certificate to avoid costly reprints in case of errors or changes.

Risks, Penalties, and Controls: What Happens Without a Responsible Person

Failing to appoint an EU Responsible Person or notify products on CPNP entails real risks and severe penalties:

• Customs blocks: Customs authorities may hold products lacking a Responsible Person or CPNP notification.
• Marketplace removal: Amazon, Etsy, and others require the Responsible Person and notification compliance; otherwise, products are removed.
• Administrative fines: National authorities can impose fines and order immediate market withdrawal.
• Document and physical checks: Authorities may request the PIF, conduct lab tests, and verify product safety.
• Civil and criminal liability: In case of serious adverse effects or unsafe products, the Responsible Person and manufacturer may be held accountable.

The risk of losing EU market access is real: even one non-compliant product can block the entire line, causing economic and reputational damage.

Note: Lack of an EU Responsible Person is sufficient cause for immediate market withdrawal and penalties without further warnings.

Practical Scenarios: Who Must Do What? Three Real Cases

Scenario 1: US SaaS launching a skincare line in the EU
An American software company decides to sell a skincare line in Europe via e-commerce. They must appoint an EU Responsible Person, prepare the PIF with CPSR signed by a qualified assessor, notify each product on CPNP, and print the EU address on labels. Solution: providers like REP27 or FDABridge.

Scenario 2: Chinese Amazon seller
A Chinese manufacturer wants to sell perfumes and creams on Amazon.it and Amazon.de. They must appoint an EU Responsible Person, prepare PIF and CPSR, notify each product on CPNP. Without these steps, Amazon blocks listings and customs hold shipments.

Scenario 3: UK online shop post-Brexit
A UK e-commerce wants to sell in the EU after Brexit. They must appoint an EU Responsible Person distinct from the UK one, prepare separate PIF and CPSR, and notify products on both CPNP (EU) and SCPN (UK). Solution: providers offering combined EU+UK service like REP27.

Decision table: