CPNP & FDA Compliance for Lip Cosmetics: What Importers Need Before Launching in Europe or the US (2026)

September 21, 2026 · 6 min read complianceCPNPFDAEU regulationimport

The cosmetic compliance landscape is the single most underestimated cost and timeline item in a private label lip launch. Founders who budget for formula and packaging but treat compliance as “the factory handles it” lose weeks at customs — or worse, get stock held at the border because a dossier is incomplete.

This article maps the real compliance path for a lip cosmetic imported into the European Union and the United States in 2026. It is written for brand founders, not regulatory lawyers, so we trade precision for clarity where it helps you plan.

Two markets, two frameworks

The EU and US regulate cosmetics from opposite philosophies, and a brand launching into both needs to satisfy each on its own terms.

	European Union	United States
Philosophy	Pre-market notification + safety dossier	Post-market enforcement
Key submission	CPNP notification before placing on market	FDA facility registration + product listing (MoCRA, since 2023)
Safety proof	Cosmetic Product Safety Report (CPSR) by a qualified assessor	Responsibility of the “Responsible Person”
Label claims	Strict; 1223/2009 defines cosmetic vs. medicine	Claims must be truthful, not drug-tied
Border risk	High — incomplete CPNP blocks clearance	Moderate — but MoCRA enforcement is tightening

EU: the CPNP path

CPNP (Cosmetic Products Notification Portal) is the EU’s central database. Before a lip product can be placed on the EU market, a Responsible Person established in the EU must submit a notification containing the product category, formulation, and the responsible person’s details.

What the notification requires

• Product identification: name, category (lip product), photograph of the packaging.
• Responsible Person: a legal entity established within the EU — this can be the brand owner’s EU subsidiary, an appointed EU distributor, or a designated responsible-party agent.
• Formulation breakdown: the full INCI ingredient list with concentrations, broken down to the exact percentages customs and authorities can cross-check against the label.
• Presence of certain substances: flagged ingredients (colourants, UV filters, preservatives) are reported per their regulatory annex.

The Cosmetic Product Safety Report (CPSR)

CPNP notification is not sufficient on its own. Every product must also carry a CPSR — a toxicological safety assessment signed by a qualified safety assessor. The CPSR includes:

• The full formulation and exposure assessment (how much product a consumer applies, how often, to which body area).
• Toxicological profiles of each ingredient.
• The reasoning that the product is safe under normal and reasonably foreseeable use.

A manufacturer operating under GMPC and ISO 22716 will normally produce the technical inputs (stability data, challenge test results, ingredient specs) that the safety assessor uses to write the CPSR. The safety assessor must be independent — they cannot be the same person who developed the formula.

The Product Information File (PIF)

Alongside the CPNP entry, every product needs a maintained PIF — a living dossier held at the Responsible Person’s EU address and available to authorities on request. It contains the CPSR, the GMP certificate, batch records, and the labelling. Failure to maintain the PIF is a standalone violation even if the CPNP notification is correct.

Practical EU timeline

• CPNP notification: can be filed quickly once the CPSR is ready.
• CPSR preparation: 2–4 weeks depending on assessor availability and whether the formula uses novel actives.
• Total realistic lead time: 3–5 weeks from formula finalisation to market-clearable product.

US: the MoCRA path

The Modernization of Cosmetics Regulation Act (MoCRA), effective since late 2023, brought US cosmetics closer to the EU model. A lip product sold in the US is now subject to:

Facility registration

Every facility that manufactures or processes cosmetics for the US market must register with the FDA. For an imported product, this means the overseas manufacturer must be registered — and the brand owner should verify the registration is active before placing an order.

Product listing

Each cosmetic product must be listed with the FDA, including the product name, ingredients, and the responsible facility. This is the cosmetic equivalent of a drug listing and applies even to small brands — there is no small-brand exemption below MoCRA’s thresholds.

Responsible Person and adverse event reporting

Under MoCRA, the “Responsible Person” (the brand whose name appears on the label) must maintain an adverse event reporting system. Serious adverse events (hospitalisation, disfigurement, etc.) must be reported to the FDA within 15 business days.

Label claims and the drug/cosmetic line

US cosmetic claims are policed post-market. The critical risk for lip products is crossing into drug territory — a “treats chapped lips” claim can be read as a drug claim, while “hydrates lips” stays cosmetic. SPF claims push a product firmly into over-the-counter drug territory, requiring a separate monograph pathway.

Practical US timeline

• Facility registration and product listing: filed electronically, normally cleared within days to a couple of weeks.
• The longer lead item is documentation: safety substantiation, labelling review, and GMP records that FDA can request post-market.

What your customs broker actually asks for

When your shipment arrives at an EU or US port, customs is not interested in the CPNP theory. They want:

1. Commercial invoice with correct HS code (for lip cosmetics, typically under the 3304 tariff line for beauty or make-up preparations for lips).
2. Certificate of origin — required for certain preferential tariff treatments and occasionally for anti-dumping verification.
3. Product compliance declaration — a statement from the manufacturer confirming the batch meets the destination market’s cosmetic regulation.
4. For EU: the CPNP reference number, and often the CPSR cover page, are requested as evidence the product is legitimately marketable.
5. For US: the FDA facility registration number and the product listing confirmation, so customs can cross-check the shipment against the database.

If any of these are missing or inconsistent, the shipment is held. Demurrage charges compound daily. A two-week hold can erase a founder’s entire margin on a first run.

How compliance-ready manufacturing works in practice

A manufacturer operating to GMPC and ISO 22716 standards produces, as a matter of routine:

• Stability and challenge test reports for every formula — required inputs for the CPSR.
• Full INCI documentation with supplier certificates of analysis.
• Heavy metal and microbiological test results per batch.
• GMP certificate that the safety assessor and customs broker can rely on.

What the manufacturer typically does not do is act as the EU Responsible Person or sign the CPSR — those are the brand’s legal responsibilities, filled by an EU-based entity and an independent safety assessor. A good manufacturer will, however, deliver the technical dossier in the format the assessor and broker expect, so the brand’s regulatory step is clerical rather than investigative.

Planning rule of thumb

If you are launching a lip product into the EU and US at the same time, build 3–5 weeks of compliance lead time into your launch plan after formula finalisation. This is not a factory delay — it is the regulatory clock. Brands that try to compress it by skipping the CPSR or filing an incomplete CPNP are the brands that lose their first container at Rotterdam.

---

Need documentation your market will accept? Start your brief and specify EU and/or US destination — we deliver the technical dossier in the format your safety assessor and customs broker expect.