How EU CPNP Works for Cosmetic Brands (And Why It Matters More Than You Think)

If you're a cosmetic brand with any ambition to sell in Europe, there's one acronym you need to get comfortable with: CPNP. It stands for Cosmetic Products Notification Portal, and it's the gateway between your products and the European market. No notification, no legal sales. It's that simple.

But while the concept is straightforward, the process behind it trips up a lot of brands, especially those coming from markets like the U.S. or South Korea where the regulatory framework looks completely different. This guide breaks down how CPNP actually works, what you need to prepare, and how to avoid the most common mistakes brands make when entering the EU.

What Is the CPNP, Exactly?

The CPNP is an online notification system created under EU Cosmetics Regulation (EC) No 1223/2009. Every cosmetic product sold in the European Union has to be registered in this portal before it hits the market. Not after. Not during. Before.

The system serves two main purposes. First, it gives EU regulatory authorities access to key product information so they can monitor what's being sold across all 27 member states. Second, it provides poison control centers with the data they need to respond to health emergencies involving cosmetic products.

Once your product is notified in the CPNP, that single notification covers the entire EU. You don't need to file separately in France, Germany, Italy, or anywhere else. One portal, one notification, all of Europe. That's the upside. The downside is that the bar for entry is high, and the preparation required to get there is where most brands underestimate the workload.

The Responsible Person Requirement

Here's where things get real for non-EU brands. You cannot notify a product in the CPNP yourself unless you are a resident of the European Union or have a legal entity established within the European Union. The regulation requires what's called a Responsible Person, or RP, to handle the notification and take legal accountability for the product's compliance.

If you manufacture within the EU, your manufacturer is typically the RP by default. But if you're importing products from outside Europe, which is the case for most Korean and American indie brands, you need to either appoint an EU-based importer as your RP or hire a third-party consultant to take on that role.

The Responsible Person isn't just a name on a form. They're legally on the hook for making sure your product meets every requirement under EU Regulation 1223/2009, from ingredient safety to labeling to post-market monitoring. They maintain your Product Information File, submit your CPNP notification, and serve as the primary contact for EU authorities if anything goes wrong. Choosing your RP is one of the most important decisions you'll make when entering Europe, and it's not one you should rush.

The Product Information File: Your Compliance Backbone

Before you can even think about submitting a CPNP notification, you need a complete Product Information File, or PIF. Think of the PIF as the master dossier for each product you want to sell. It contains everything an EU authority would need to verify that your product is safe and compliant.

At minimum, your PIF needs to include a detailed product description with intended use, a full quantitative and qualitative formula, your manufacturing method along with a statement of Good Manufacturing Practice (GMP) compliance per ISO 22716, stability test data supporting your shelf life or Period After Opening claim, a Cosmetic Product Safety Report (CPSR) prepared by a qualified safety assessor (only EU residents with specific degrees are allowed to sign off on the CPSR), and proof of any efficacy claims you make on the label.

The CPSR alone is a significant undertaking. It has to be prepared by someone with a degree in pharmacy, toxicology, or chemistry, and it must include a toxicological assessment of every ingredient in your formula. For brands used to the relatively lighter-touch requirements in markets like the U.S. or Korea, this is often the part that causes the most sticker shock, both in terms of time and cost.

Your PIF also has to be kept on file at your Responsible Person's address for 10 years after the last batch of the product is placed on the market. It's not a one-and-done document. If your formula changes, if you update your packaging, if you add or remove an ingredient, the PIF has to be updated accordingly.

What Goes Into the Actual CPNP Notification

Once your PIF is ready, the CPNP notification itself is relatively mechanical. Your Responsible Person logs into the portal and submits the following information: the product category and its primary function, the product name (including brand, product line, and specific name), the name and address of the Responsible Person, the country of origin, the first EU member state where the product will be sold, the product's frame formulation (a standardized way of describing the formula's composition range), and any nanomaterials or CMR (carcinogenic, mutagenic, or reprotoxic) substances present.

One important nuance: if your product contains nanomaterials that aren't already listed in the regulation's annexes for colorants, preservatives, or UV filters, you have to notify the CPNP six months before placing the product on the market. That's a meaningful lead time that can catch brands off guard if they're not planning ahead.

After submission, you'll receive a CPNP reference number and a PDF summary. There's no formal approval process. The CPNP confirms registration, not compliance. Your Responsible Person still carries the full weight of ensuring the product actually meets every requirement of Regulation 1223/2009.

Why This Matters for Korean Brands Especially

Korean cosmetics have been gaining serious traction in Europe over the past few years. Brands like COSRX, Beauty of Joseon, and Innisfree have built loyal followings, and European consumers are actively seeking out K-beauty products for their innovative formulations and textures.

But the EU regulatory environment is a different beast from what Korean brands are used to at home. In Korea, cosmetics are regulated under the Cosmetics Act and overseen by the Ministry of Food and Drug Safety (MFDS). The notification process involves a Cosmetic Product Notification (CPN) that's structured differently from the EU's CPNP. Ingredient restrictions don't map neatly between the two markets. The EU bans or restricts certain ingredients that are permitted in Korea, and claims that are standard in the Korean market may not fly under the EU's strict claims regulation (Regulation (EU) No 655/2013).

For Korean brands, this means you can't just take your existing product documentation and drop it into the EU system. The formulas may need to be reviewed against EU annexes. The labeling almost certainly needs to be reworked. And the safety assessment has to be done according to EU standards, which may require additional testing or documentation that wasn't part of your Korean filing.

This is one of the areas where a platform like Noedal can make a real difference. Noedal already works with Korean cosmetics brands on U.S. compliance, handling everything from MoCRA filings to California CSCP. Because the platform is built around centralizing ingredient data and manufacturer collaboration, much of the groundwork you do for U.S. compliance, like collecting ingredient files, organizing formulation data, and managing manufacturer relationships, carries directly over when you're preparing for EU entry. Instead of starting from scratch for every new market, your compliance records become a foundation you can build on.

Common Mistakes Brands Make with CPNP

Having seen how this process plays out across dozens of brands, there are a few patterns that come up again and again.

The first is treating the notification as the finish line. The CPNP submission is just one piece of the puzzle. Without a properly prepared PIF, a qualified safety assessment, and compliant labeling, your product isn't actually legal to sell, even if it has a CPNP reference number.

The second is neglecting to update notifications. If you change your product name, reformulate, switch packaging, or change your Responsible Person, the CPNP notification has to be updated. Brands that treat their initial filing as permanent end up out of compliance without realizing it.

The third is underestimating the ingredient review. The EU maintains detailed annexes of prohibited substances, restricted substances, permitted colorants, preservatives, and UV filters. A formula that's perfectly legal in Korea or the U.S. might contain an ingredient that's banned or restricted in the EU. This review has to happen early, not after you've already ordered packaging with EU labeling.

The fourth is forgetting about distributors. If an EU-based distributor translates your labeling on their own initiative to sell in a different member state, they also have a notification obligation in the CPNP. This catches some brands off guard, especially those working with multiple distributors across Europe.

Penalties Are Real

The consequences of selling unnotified cosmetics in the EU aren't theoretical. Penalties vary by member state, but they can include fines (ranging from around €1,000 to €6,000 or more depending on the country), product withdrawal from the market, and reputational damage that's hard to undo, especially if your product gets flagged in the EU's Safety Gate alert system.

For a brand that's invested significant money in product development, packaging, and marketing for a European launch, getting pulled from shelves over a notification oversight is an expensive and entirely avoidable mistake.

Building a Multi-Market Compliance Strategy

If your brand is selling (or planning to sell) in both the U.S. and the EU, the compliance workload compounds fast. In the U.S., you're dealing with MoCRA for cosmetics, OTC drug registration if you sell sunscreens, California CSCP if your revenue hits certain thresholds, and Prop 65 considerations. In the EU, you're dealing with 1223/2009, the CPNP, PIF preparation, safety assessments, and labeling requirements that are stricter than almost any other market.

The brands that handle this well are the ones that centralize their compliance data from the start. When your ingredient files, formulation records, manufacturer documentation, and regulatory filings all live in one place, expanding into a new market becomes a matter of adapting what you already have rather than rebuilding from zero.

This is the approach Noedal takes. The platform was originally built to automate MoCRA compliance for cosmetics brands entering the U.S., but the underlying architecture, centralized ingredient data, direct manufacturer collaboration, automated filing and monitoring, is designed to scale across regulatory frameworks. EU CPNP is on Noedal's roadmap precisely because so many of the brands already using the platform for U.S. compliance are asking about Europe as their next market. The compliance data you've already organized for MoCRA becomes the starting point for your PIF and CPNP notification, rather than a separate project with a separate set of consultants.

Next Steps

If the EU is on your radar, here's what to do now rather than later.

Start by reviewing your formulations against the EU's ingredient annexes. Identify any substances that are banned or restricted so you know early whether reformulation is needed.

Begin the search for a Responsible Person. Whether that's an EU-based importer, a regulatory consultancy, or a platform that offers RP services, this relationship takes time to set up properly. If you want to save yourself from the headache, Noedal offers RP services from its office in the EU.

Get your ingredient documentation in order. If you're already using Noedal for U.S. compliance, you're ahead of the game because your manufacturer's ingredient files and formulation data are already centralized and organized.

Budget for a Cosmetic Product Safety Report. This is typically the most expensive single line item in your EU compliance budget, and it can't be skipped or shortcut. If you're using Noedal, we can connect you with our partner CPSR assessors based in the EU or handle it on your behalf.

Finally, build EU compliance into your product development timeline, not as an afterthought. The brands that plan for CPNP from the early stages of product development are the ones that launch on time and without regulatory surprises. Alternatively you can use Noedal and not worry about this because we track all compliance updates and deadlines for you.

The EU market is worth the effort. Over 450 million consumers, strong demand for innovative cosmetics, and a regulatory framework that, once you're inside it, actually protects your brand as much as it regulates it. The key is treating compliance as the cost of entry, not an obstacle, and setting up systems that make it manageable as you grow.