EU Cosmetics Regulation: What It Means for Your Products

The European Union's Cosmetics Regulation — Regulation (EC) No 1223/2009, which came into full effect in 2013 — is the most comprehensive cosmetics safety framework in the world. It applies to all cosmetic products sold within the EU and is one of the primary reasons European consumers can have a meaningfully different level of confidence in product safety than their counterparts in many other markets. The regulation operates on a precautionary principle: if there is credible scientific evidence of risk, a substance is restricted or banned regardless of whether definitive harm has been proven at typical consumer exposure levels. This contrasts with regulatory systems in markets like the United States, where the FDA has historically required demonstrated evidence of harm before restricting an ingredient. The practical consequence of this difference is significant: the EU currently prohibits or restricts over 1,300 substances in cosmetics. The US FDA has banned or restricted approximately 11. This isn't necessarily a statement that all banned EU ingredients cause harm — some restrictions are based on theoretical risk or precautionary extrapolation from animal studies. But it does mean that EU-marketed products have been through a more rigorous exclusion process, and that formulations sold in Europe are often meaningfully different from "global" versions of the same product sold elsewhere. For consumers buying cosmetics in European markets (including Romania, which applies EU regulations directly as an EU member state), this regulation offers real protection. For consumers buying products from outside the EU via online retail — particularly US, South American, or some Asian brands — it's worth being aware that regulatory standards differ.

The regulation contains three key annexes that govern ingredient use: Annex II: Prohibited substances — ingredients that cannot be present in any cosmetic product sold in the EU. This list runs to over 1,300 substances including many heavy metals (lead, mercury, arsenic, cadmium compounds), various carcinogens and mutagens classified under EU CLP regulation, some hormonal compounds, certain fragrances with established safety concerns, and substances with significant irritation or sensitization potential. Annex III: Restricted substances — ingredients permitted only under specific conditions, including defined maximum concentrations, types of product (rinse-off vs. leave-on), or mandatory labelling requirements. Hydrogen peroxide in hair care products, fluoride in toothpastes, alpha hydroxy acids in leave-on products (with concentration and pH limits), salicylic acid, and certain UV filters are on this list. Annex IV–VI: Authorised colorants, preservatives, and UV filters — positive lists of substances that may be used in these specific functional categories. Any colorant, preservative, or UV filter not on the authorised list is de facto prohibited in EU cosmetics. This is an important difference from some other systems where only specifically banned ingredients are off the table. In the EU, if your preservative isn't on the approved list, you can't use it, regardless of how safe it might be. The CosIng database (Cosmetic Ingredient database) maintained by the European Commission is the publicly accessible reference for EU cosmetics ingredient regulation. Our ingredient data at WhatsInSkincare draws on CosIng for regulatory classifications, which is why you'll see explicit notation when an ingredient has Annex II, III, or other regulatory status.

The EU regulation imposes specific procedural requirements on cosmetic products that go beyond simply avoiding banned ingredients. Understanding these requirements helps consumers understand why products sold in the EU carry meaningful regulatory accountability. Every cosmetic product sold in the EU must have a Responsible Person — an EU-established individual or company who legally takes responsibility for the product's compliance with the regulation. For brands headquartered outside the EU, this means appointing an EU-based responsible person. This creates a clear legal accountability chain that is absent in some other regulatory frameworks. A safety assessment by a qualified safety assessor (typically a toxicologist with a degree in pharmacy, medicine, or a related discipline) is mandatory before a product reaches the market. This assessment must cover the safety of each ingredient individually and in combination, the intended use pattern (how often, on what body areas, in what quantities), the microbiological safety of the formula, and any applicable restricted substance use within permitted limits. The product information file (PIF) must be maintained for 10 years after the product leaves the market and must be accessible to authorities on request. It includes the formula, manufacturing method, safety assessment, evidence of claimed efficacy, and evidence of preclinical and clinical evaluations. Products must be notified via the EU Cosmetic Products Notification Portal (CPNP) before being placed on the market. This notification creates a publicly searchable record, allows authorities to monitor market trends, and provides information to Poison Centres for emergency response. All of this means that a cosmetic product legally sold in the EU has cleared a series of formal hurdles. It doesn't mean it's effective, but it means it has been assessed for safety by a qualified professional and its formula is on record.

The EU has particularly detailed rules around fragrance disclosure that are worth understanding, especially if you have sensitive skin or known fragrance allergies. Currently, 26 fragrance allergens must be listed individually on cosmetic product labels when present above threshold concentrations (0.001% in leave-on products; 0.01% in rinse-off products). These include well-known allergens such as Limonene, Linalool, Citronellol, Geraniol, Eugenol, Benzyl Alcohol, Cinnamal, and Isoeugenol. When you see these names on an ingredient list, they're there because EU law requires their individual disclosure — they're allergens that cause contact dermatitis in sensitised individuals. However, fragrance regulation is evolving. The EU's Scientific Committee on Consumer Safety (SCCS) has assessed a far longer list of fragrance compounds for allergenic potential, and the EU is in the process of expanding the mandatory disclosure list significantly — from 26 to potentially over 80 substances. This is following revised SCCS opinions and the EU Cosmetics Regulation amendment proposals that have been in progress. The Scientific Committee on Consumer Safety is also reviewing two particularly common fragrance ingredients: Linalool and Limonene. Both are ubiquitous in "natural" and "clean" products because they occur naturally in many plant extracts and essential oils. However, both are significant skin sensitizers, particularly in their oxidised form (they oxidise readily on exposure to air). This is one reason why "natural" or "botanical" fragrances are not categorically safer than synthetic ones. For consumers with fragrance sensitivity or known contact allergies, the EU disclosure rules provide the best basis globally for making informed ingredient choices. Scanning for the 26 disclosed allergens — or using a tool like our ingredient checker to flag them automatically — is the most practical approach.

The gap between EU and US cosmetics regulation translates into practical differences that matter to consumers who purchase from both markets. Formulation differences for the same product: major global brands often maintain different formulations for their EU and non-EU versions. A product sold in the US may contain ingredients restricted or prohibited in the EU — particularly certain fragrances, UV filters (chemical sunscreen filters not yet approved in the US include some that are standard in EU and Asian products, but conversely the US still permits some filters the EU has restricted), some hair dye components, and certain preservatives. The interesting paradox in sunscreens: the EU actually lags the US in one area — the EU has approved advanced UV filter molecules (Tinosorb S, Tinosorb M, Mexoryl SX, Mexoryl XL, Bemotrizinol, Bisoctrizole) that are unavailable in US sunscreens due to the FDA's slow New Drug Application review process. EU sunscreens generally provide better UVA protection partly because of access to these novel filters. Meanwhile, the EU has restricted some chemical filters the US still permits. Packaging and labelling differences: EU products must display the full INCI list on or with the packaging, a manufacturing batch code, a period-after-opening (PAO) symbol indicating shelf life after opening, and the responsible person's EU address. US labelling requirements are less stringent on some points — INCI lists are required, but in decreasing order of concentration only to 1% (same rule), and some disclosure requirements differ. For Romanian consumers specifically: products purchased within Romania, from EU retailers, or by EU-established brands are subject to full EU regulation. Products purchased directly from US, Australian, or Asian sellers may not be, and the formula may differ from a EU-sold version of the same product. If you're checking an ingredient list against our database for regulatory flags, ensure the list is from the version of the product you actually have.