How CSCP Compliance Works for Cosmetic Brands in California
If you're a growing indie brand looking to expand in the US, you need to pay attention to CSCP compliance to avoid fines, product removal from California, and losing retail partnerships if a vendor compliance audit turns up unreported ingredients
A practical guide for brand founders navigating California's cosmetic safety requirements
If you're building a cosmetic brand and selling into California, you've probably heard the term CSCP thrown around. Maybe it came up in a conversation with your contract manufacturer. Maybe a retailer asked you about it. Either way, if you don't have a clear picture of what it means and what it requires, you're not alone. California's cosmetic safety regulations are genuinely one of the more nuanced compliance frameworks in the U.S. beauty industry, and getting them wrong can cost you shelf space, retailer relationships, and real legal exposure.
This guide breaks down what CSCP compliance actually involves, why it matters for your brand, and what practical steps you need to take to stay on the right side of California law.
What Is CSCP and Why Does It Exist?
CSCP stands for the California Safe Cosmetics Program. It was established under the California Safe Cosmetics Act of 2005 (CSCA), which was later amended and expanded by subsequent legislation including the Cosmetics Fragrance and Flavor Ingredient Right to Know Act of 2020. The program is administered by the California Department of Public Health (CDPH).
The basic premise is simple. California wants to know if the cosmetics sold within its borders contain ingredients that are known or suspected to cause cancer, reproductive harm, or developmental harm. The state maintains a list of such chemicals, primarily drawn from California's Proposition 65 list, and requires manufacturers to disclose when those chemicals appear in their products above certain thresholds.
Think of it like a nutritional label for beauty products, but instead of calories and sodium, you're reporting potentially hazardous ingredients. The goal is transparency: giving regulators, researchers, and ultimately consumers the information they need to make informed choices.
Who Needs to Comply?
This is where many founders get tripped up. CSCP compliance isn't just for California-based businesses. If your product is sold at retail in California, whether in a physical store, through a distributor, or online to California consumers, and your brand has annual sales of $1 million or more across all sales channels, you are subject to reporting requirements.
That $1 million threshold applies to the responsible party, typically the brand owner, not the specific product. So if you're a growing indie brand that just crossed seven figures in total revenue, you need to pay attention to this, even if you've never thought much about California regulations before.
The reporting obligation applies to cosmetics as defined under California law, which largely mirrors the FDA definition: products intended to be applied to the body to cleanse, beautify, promote attractiveness, or alter appearance. That covers a broad range of products, including skincare, haircare, color cosmetics, nail products, fragrances, and more.
What Do You Actually Have to Report?
The core reporting obligation under CSCP is to submit ingredient information to the CDPH whenever a cosmetic product contains an ingredient that appears on California's list of chemicals known or suspected to cause cancer, developmental toxicity, or reproductive toxicity. This list, derived from Proposition 65 and other authoritative scientific bodies, is updated regularly, which means your compliance work is never truly finished.
Specifically, you must report:
• The identity of each reportable ingredient
• The concentration range of that ingredient in the product
• The product category and intended use
• Basic product and company identifying information
As of 2021, expanded reporting requirements under SB 312 also apply to fragrance ingredients and flavors, which historically were protected as trade secrets and didn't require disclosure. Fragrance formulas are often closely guarded, but California now requires disclosure of any fragrance allergens or chemicals of concern present in a product's scent blend, even if the full formula stays proprietary.
If you're using complex fragrance blends from a third-party supplier, you need to push for full ingredient disclosure from them. "We don't know what's in our fragrance" is not a defensible compliance position.
How the Reporting Process Works
Reporting is done through the CDPH's online California Safe Cosmetics Program Product Database. The process involves creating an account, registering your company, and submitting product reports that include the ingredient information described above.
You're required to submit a report within five days of first selling a product in California that contains a reportable ingredient. In practice, that means you need to assess your products before they ever hit California shelves or ship to California customers. Waiting until a product is already in distribution to check compliance is a recipe for scrambling.
You also need to update your reports when formulations change, when new ingredients are added to the state's list of chemicals of concern (which can trigger reporting obligations for products you've already submitted), or when you discontinue a product.
CSCP compliance is an ongoing process, not a one-time checkbox. The Prop 65 list is updated at least once a year, and each update could implicate ingredients already present in your formula. Building a process to monitor those updates, rather than relying on a compliance review you did two years ago, is essential for staying current.
CSCP vs. Federal Cosmetics Regulations: What's the Difference?
If you're familiar with the federal Modernization of Cosmetics Regulation Act (MoCRA), which was signed into law in late 2022, you might be wondering how CSCP relates to federal requirements. They overlap in some areas but are distinct obligations.
MoCRA established new federal requirements around facility registration, product listing, safety substantiation, and adverse event reporting. California's CSCP focuses specifically on ingredient transparency and the disclosure of chemicals of concern. A brand can be fully compliant with MoCRA and still have CSCP obligations it hasn't addressed.
The good news is that the documentation work required for MoCRA, particularly around product safety assessments and ingredient documentation, creates a solid foundation for CSCP compliance as well. If you're already building out comprehensive ingredient files and safety dossiers, you're in a good position on both fronts.
Common Compliance Pitfalls for Indie and Emerging Brands
Most CSCP compliance failures don't come from deliberate noncompliance. They come from brands not realizing the obligations applied to them, or from gaps in their ingredient knowledge. Here are the patterns that come up most often:
Not knowing what's in your formula
This sounds basic, but it's more common than you'd think. If you're working with a contract manufacturer, you need full ingredient disclosure, not just an INCI list for your label, but the actual chemical identities and concentrations. Some CMOs are reluctant to share this, particularly with fragrance components. Be prepared to have that conversation directly, and document your requests and responses.
Assuming "clean beauty" means CSCP compliant
Many founders assume that because their products are clean, natural, or non-toxic by their brand's own standards, they don't have CSCP reporting obligations. That's not how the program works. The reporting requirement is triggered by the presence of a listed chemical at reportable levels, regardless of whether your brand markets itself as clean or conventional.
Missing the revenue threshold trigger
Brands sometimes don't realize they've crossed the $1 million threshold, or they calculate it incorrectly by only counting California sales rather than total company revenue. Keep a close eye on this as your brand grows, because the compliance obligation kicks in at the company level.
What Happens If You Don't Comply?
The CDPH has authority to investigate and take enforcement action against non-compliant brands. This can include formal notices, fines, and in more serious cases, product removal from California commerce. The reputational consequences can be just as damaging as any formal penalty, especially if a major retail partner conducts a compliance audit and discovers unreported ingredients.
California has historically been aggressive about cosmetics safety enforcement, and retailers operating in the state are increasingly building CSCP compliance verification into their vendor onboarding processes. Failing to comply isn't just a regulatory risk. It's a business risk.
Next Steps: Getting Your Brand into Compliance
If you're not sure where your brand stands, here's a practical place to start:
• Confirm whether your annual sales meet or approach the $1 million threshold.
• Gather complete ingredient disclosure from your manufacturer or formulator, including fragrance components, for every product sold in California.
• Cross-reference your ingredients against California's current list of chemicals of concern and the most recent Prop 65 list.
• Register with the CDPH's online CSCP portal and submit product reports for any qualifying products.
• Set a calendar reminder to check Prop 65 and CSCP list updates at least once a year.
• If you're working with a compliance consultant or regulatory affairs professional, make sure CSCP is explicitly in their scope of work.
That said, most indie brand founders didn't get into beauty to spend their time tracking regulatory lists and filing reports. Noedal automates the full U.S. compliance process, including California CSCP. Once you're set up, the platform handles ingredient collection, filings, and regulatory monitoring on your behalf. When lists update or deadlines come around, Noedal takes care of it. It's the kind of thing you set up once and don't really have to think about again.
CSCP compliance isn't glamorous. It doesn't show up in your brand story or on your packaging. But it's the kind of foundational work that protects your brand's long-term viability, especially if you're eyeing national retail distribution, investor conversations, or an eventual exit. Investors and acquirers do due diligence on compliance gaps, and California is always near the top of that list.
The brands that treat compliance as part of how they operate, rather than something to deal with later, are the ones that scale without costly surprises. Get the foundation right now, and it becomes a lot easier to grow. If you want to learn more, check out noedal.com.
Disclaimer: This blog post is intended for informational purposes only and does not constitute legal or regulatory advice. Consult a qualified cosmetics regulatory professional for guidance specific to your brand and products.
