EU Responsible Person for Cosmetics: What UK and Non-EU Brands Need to Know in 2026

What the Responsible Person is

Article 4 of the EU Cosmetics Regulation says that only cosmetic products for which a legal or natural person is designated within the EU as Responsible Person may be placed on the market. The logic is simple. The authorities in Germany, France or Italy need one address inside their jurisdiction where they can ask for the file, order a correction or, in the worst case, a recall. A brand in Manchester, Los Angeles or Seoul is out of their reach. The Responsible Person is not.

The regulation assigns the role by default:

• If the product is manufactured in the EU and not exported and re-imported, the EU manufacturer is the Responsible Person.
• If the product is imported, the importer is the Responsible Person for each product they bring in.
• A distributor becomes the Responsible Person if it sells the product under its own name or brand, or changes the product in a way that affects compliance.

Any of them can hand the role to another person or company established in the EU by written mandate, and that person must accept in writing. This is how regulatory service providers and brand-owned EU entities come into the picture.

What the role covers

Article 5 lists the obligations. In plain words, the Responsible Person makes sure that:

• the product is safe and the Cosmetic Product Safety Report exists and is signed by a qualified assessor,
• the Product Information File is complete, kept at the Responsible Person's address for ten years after the last batch, and available to the authorities in a language they understand,
• the product is notified in the CPNP before it is placed on the market,
• the formula respects the annexes on prohibited, restricted and permitted substances, including the deadlines that change every year,
• the label carries the mandatory particulars, including the Responsible Person's own name and address,
• the claims are supported,
• manufacturing follows Good Manufacturing Practice,
• serious undesirable effects are reported to the authorities, and corrective measures or recalls are carried out when needed,
• the authorities get information on request, including the identity of distributors.

Read that list again from the point of view of the person taking the role. They carry legal responsibility for a product they did not formulate. That is why a serious Responsible Person reviews the file before accepting, and why the cheapest offer is rarely the one that holds up when a German authority writes.

Why your UK Responsible Person does not count

Until the end of 2020 a Responsible Person in London covered the whole EU. Since 1 January 2021 Great Britain runs its own cosmetics regulation, a copy of the EU text with its own Responsible Person requirement, its own notification system run by the Office for Product Safety and Standards, and its own annexes, which have started to differ from the EU's. Northern Ireland continues to follow the EU rules.

For a UK brand this means two files in parallel. A UK Responsible Person and a UK notification for Great Britain. An EU Responsible Person with an address in a member state and a CPNP notification for the EU, which in practice also covers Northern Ireland. The two Product Information Files start identical and drift apart as the annexes change on each side. Ask your safety assessor which version of the annexes the CPSR was written against before you reuse it.

The same logic applies to brands from the US, Korea, South Africa, Australia or anywhere else outside the EU: compliance at home proves nothing in Brussels, and a local Responsible Person is non-negotiable.

Who can take the role, and what each option means

For prestige brands planning more than one partner in DACH, our standing advice is a neutral Responsible Person, either your own entity or a provider. It keeps the label stable, it keeps the file in your hands, and it removes the role from your distributor negotiations.

What it costs

Service providers price the role in three layers. A one-off fee to review or build the Product Information File per product, because nobody accepts responsibility for a file they have not read. An annual fee for holding the role, per brand or per product. And the CPNP notifications, sometimes included, sometimes per product. Translation of label texts, safety assessments and formula checks are usually extra.

The spread between offers is wide, and in our experience the difference is not the fee for the role itself but the work the provider has to do on your file. A brand with complete, EU-ready PIFs pays little. A brand that arrives with a UK CPSR from 2021 and no stability data pays for the gap. If a quote is much cheaper than the others, ask what has been left out. Most of the time it is the file review.

Your own EU entity costs more in the first year and less per product after that, which is why brands with more than ten products and a long-term EU plan tend to end up there within two years.

How to appoint one, step by step

1. Get the file ready. One Product Information File per product, with a Cosmetic Product Safety Report written against the EU annexes. Without this, no serious Responsible Person will sign.
2. Choose the model from the table above, and write it into your DACH plan, because it affects your distributor contracts.
3. Sign the mandate. A written mandate from you, a written acceptance from them. Keep both in the file.
4. Transfer the PIF to the Responsible Person's address. Digital access is fine if the authority can be given access on request.
5. Notify in the CPNP under the Responsible Person's account, every product and every variant, with the label and the pack photo.
6. Change the artwork. Name and EU address of the Responsible Person on the pack, and the rest of the German label particulars while you are at it.
7. Brief your distributors. They need to know who the Responsible Person is, because the authorities will ask them.

With a complete file, the whole sequence takes a few weeks. The artwork is usually the slowest step.

What is specific to Germany

Enforcement in Germany sits with the federal states, through their food and consumer protection offices. They sample products in retail, check labels and ask the Responsible Person for the file. English PIFs are generally accepted, but an authority can ask for a German translation of parts of the file, in particular the safety assessment. A Responsible Person who cannot answer a German letter within the deadline is a problem you will only discover once.

German retailers add their own layer. dm, Rossmann and Douglas check the Responsible Person before listing. A pack that still shows a UK or US address, or a Responsible Person that the buyer has never heard of and cannot find, slows down the conversation at exactly the wrong moment.

Five mistakes we see most often

1. The UK address on the EU pack. The most common one, and the fastest way to fail a buyer's compliance check.
2. The distributor as Responsible Person without a written mandate. By law the importer is the Responsible Person anyway, but when nobody has written it down, nobody holds the file, and the first authority request lands in a vacuum.
3. Several Responsible Persons for the same product, because each distributor imported under its own name. Legal, but every pack now needs a different address and every CPNP entry a separate update. Clean it up before you grow.
4. A Responsible Person without the file. A mandate was signed, the PIF never travelled. The Responsible Person is liable for a file they have not seen.
5. Forgetting Switzerland. Switzerland is outside the EU. The Swiss market needs its own responsible person with a Swiss address on the pack, usually your Swiss importer.

Questions brands ask us

Tity Sonko

Founder and Managing Director of SONKO Consulting GmbH in Leverkusen, Germany. Tity works with international prestige beauty brands on their entry into Germany, Austria and Switzerland, from the first compliance check to the first retail order. She writes the weekly newsletter The DACH Prestige Signal.