Every cosmetic product affected by the EU’s expanded fragrance allergen rules must have a CPSR that is fully compliant at the time of development, safety assessment, and market submission — no grace period, no transitional window. Under Annex I of Regulation (EC) No 1223/2009, a qualified Safety Assessor must evaluate allergen exposure, refresh the toxicological profile, and sign Part B based on the current regulatory framework. Below is what assessors examine, with worked examples and a compliance checklist.
If the CPSR is not compliant by 31 July 2026, the new product cannot be lawfully placed on the EU market, and the Responsible Person who maintains the PIF carries the legal exposure. Existing products already placed on the EU market before the 2026 deadline have until 31 July 2028.
Why the 82-allergen rule requires CPSRs to be compliant at submission
Because the CPSR documents the safety assessment of every substance present in the finished product, and the 82-allergen rule changes which substances must be individually accounted for. Under Article 10 and Annex I of Regulation (EC) No 1223/2009, the CPSR is the legal safety dossier that lives inside the Product Information File (PIF). It is split into Part A — Cosmetic Product Safety Information and Part B — Cosmetic Product Safety Assessment, the latter of which must be signed by a qualified Safety Assessor.
When Commission Regulation (EU) 2023/1545 expanded Annex III from 26 entries to approximately 82 substances and substance groups, it changed two things at once:
- More substances now require individual quantitative and qualitative disclosure in CPSR Part A — including allergens already present in your formula that were never previously declarable.
- More substances now require an individual safety assessment in CPSR Part B — including an evaluation of skin sensitization risk, oxidation behavior, and aggregate exposure across the consumer’s broader product use.
In other words: The Safety Assessor’s review of a new formula must be done with the extended allergen list. And if the assessor cannot reconcile that the finished-product allergen concentrations are within allowable limits under SCCS guidance, then the product is deemed unsafe and illegal for sale, and the CPSR will not be signed.
If I made my formula a year ago, how do I know if my CPSR is compliant?
The CPSR is not a one-time document. It is a living safety record that must reflect the current regulatory framework, the current SCCS opinions, and the current composition data the brand can defend in front of a Member State inspector.
The 82-allergen update touches at least five sections of the CPSR even when the formula is otherwise unchanged:
| CPSR Section | What Must Be Updated for the 82-Allergen Rule |
| Quantitative and qualitative composition | Each newly declarable allergen quantified at finished-product level |
| Microbiological quality | Generally unchanged unless preservative system was touched |
| Impurities, traces, packaging | Update Annex III information to account for the expanded list of regulated fragrance allergens; document relevant impurities and trace allergens from natural ingredients; confirm packaging remains suitable to prevent degradation or formation of additional allergens. |
| Exposure to the cosmetic product and substances | Recalculate individual allergen exposure and aggregate exposure across regimen |
| Toxicological profile of the substances | Refresh allergen profiles citing current SCCS opinions and IFRA data |
| Adverse effects and serious undesirable effects | Update if post-market data exists for the affected SKU or category |
| Information on the cosmetic product | Update if claims, presentation, or warning statements change |
If your formula was made over a year ago, it is important to review if the CPSR was checked against the updated allergen list or the previous list. If it was not done against the 82-allergens list, it needs to be updated. If even one of these sections needs material updating, Part B must be updated and re-signed by the Safety Assessor.
What does a Safety Assessor actually look for in an allergen CPSR update?
A qualified Safety Assessor holds a recognized degree in pharmacy, toxicology, medicine, or equivalent. For the 82-allergen update, the review focuses on five distinct technical questions.
These five questions are the spine of every allergen CPSR review. Below, we unpack what each one looks like in practice.
Quantitative and qualitative composition
The CPSR Part A composition table must list every substance present in the finished product, including those naturally present from essential oils. For the 82-allergen update, the practical change is that previously aggregated entries like “parfum” must now be broken out at the declarable-allergen level.
A Safety Assessor’s first read of a 2026 CPSR will check:
- Each of the 82 Annex III substances is screened for presence
- Substances above threshold are listed individually with concentration in finished product
- Substances below threshold are documented as “below threshold” with the underlying calculation shown
- Naturally occurring allergens are quantified at finished-product level (not just in the source ingredient)
- The exact Annex III INCI name appears — old synonyms are no longer acceptable
Individual allergen exposure calculations
Exposure is calculated using Systemic Exposure Dose (SED) following the SCCS Notes of Guidance defaults. The basic formula is:
SED (mg/kg bw/day) = (A × C/100 × F × DAp/100 × 1000) / BW
Where: • A = amount of product applied per day (g/day, SCCS default) • C = concentration of substance in finished product (%) • F = retention factor (1 for leave-on; ~0.01 for rinse-off) • DAp = dermal absorption (%, substance-specific or 100% default) • BW = body weight (60 kg adult default)
Leave-on and rinse-off products are treated very differently because retention factor and product amount diverge sharply.
| Parameter | Leave-on Body Lotion | Rinse-off Body Wash |
| SCCS default amount applied (g/day) | 7.82 | 18.67 |
| Retention factor (F) | 1 | ~0.01 |
| Labeling threshold | 0.001% (10 ppm) | 0.01% (100 ppm) |
| Typical SED impact | High | Lower (due to retention factor) |
Toxicological profile and SCCS references
Every Annex III allergen has an evolving toxicological dossier. A 2026-ready CPSR cites:
- The relevant SCCS opinion for each allergen where one exists
- The relevant IFRA standard and dose limit
- REACH / CLP hazard classifications from the SDS
- CIR assessments where applicable (especially for North American cross-references)
- Public dermatology databases (e.g., baseline dermatitis incidence) where post-market data informs the assessment
If a Safety Assessor cannot point to the underlying scientific basis for a substance’s safety conclusion, the assessment is not defensible in an inspection.
Prehapten and prohapten reasoning
For substances that autoxidize in the bottle or on the skin, the assessment must address the activated form, not just the parent compound. This means the CPSR Part B narrative includes:
- Identification of which formulation ingredients are prehapten or prohapten
- Antioxidant strategy (e.g., tocopherol, BHT, BHA at functional levels)
- Packaging strategy (airless pump vs. open jar; opaque vs. clear; nitrogen flush)
- Shelf-life modeling tied to oxidation behavior
- Whether the labeling and warnings reflect the activated form’s risk
Margin of Safety reasoning
The Margin of Safety (MoS) is the ratio of the substance’s No Observed Adverse Effect Level (NOAEL) to the calculated SED from the product. A MoS of 100 or greater is the generally accepted threshold for systemic safety.
For allergens, the Safety Assessor must also narrate sensitization risk separately, because the labeling threshold (0.001% / 0.01%) is a disclosure trigger, not a safety determination. The assessor’s narrative explicitly addresses whether the labeled declaration plus any warnings are sufficient consumer protection in light of the allergen’s NESIL (No Expected Sensitization Induction Level).
How do toxicologists calculate allergen exposure? (Worked example)
Below is a simplified worked example illustrating the math a Safety Assessor performs on a single allergen in a single SKU. Numbers are illustrative; actual SCCS defaults and substance-specific data should always be used for real assessments.
Scenario: A leave-on body lotion contains 0.5% bergamot oil. The supplier Allergen Declaration confirms that the bergamot oil contains 30% limonene as a natural constituent.
Step 1 — Finished product allergen concentration
| Calculation | Value |
| Bergamot oil in finished product | 0.5% |
| Limonene in bergamot oil (supplier) | 30% |
| Limonene in finished product | 0.5% × 30% / 100 = 0.15% |
Step 2 — Label threshold check
| Calculation | Value |
| Limonene in finished product | 0.15% (1,500 ppm) |
| Leave-on labeling threshold | 0.001% (10 ppm) |
| Threshold exceeded? | Yes — 150× the threshold. “Limonene” must appear in the ingredient list. |
Step 3 — Systemic Exposure Dose (SED)
Using SCCS Notes of Guidance defaults:
| Parameter | Value |
| Body lotion amount applied (A) | 7.82 g/day |
| Limonene concentration (C) | 0.15% |
| Retention factor (F) | 1 (leave-on) |
| Dermal absorption (DAp) | 100% (default — conservative) |
| Body weight (BW) | 60 kg |
| SED (mg/kg bw/day) | (7.82 × 0.0015 × 1 × 1 × 1000) / 60 ≈ 0.196 |
Step 4 — Margin of Safety
| Calculation | Value |
| Limonene NOAEL (illustrative; verify per current SCCS / dossier) | ~250 mg/kg bw/day |
| SED from above | 0.196 mg/kg bw/day |
| MoS = NOAEL / SED | ~1,276 (above 100 — systemic safety acceptable) |
Step 5 — Sensitization narrative (qualitative)
The Safety Assessor cannot stop at MoS. The Part B narrative must address:
- Limonene is a prehapten — the sensitizing form is the hydroperoxide that forms via air oxidation
- Stability data must demonstrate that limonene hydroperoxide formation is controlled across shelf life
- Antioxidant strategy and packaging selection (airless pump) are referenced
- Labeling reflects “Limonene” declaration above threshold
This five-step pattern is repeated per allergen, per SKU — which is why brands with broad portfolios and citrus-heavy fragrance palettes face the heaviest CPSR workload heading into 2026.
What are the most common CPSR rejection or revision triggers?
Across hundreds of EU CPSR reviews, the following triggers appear most often. Each one can stall a Safety Assessor’s sign-off — and each one is preventable with early preparation.
| # | Rejection / Revision Trigger | Why It Happens | How to Prevent |
| 1 | Old INCI names on label and in CPSR composition table | The 2023 amendment redesignated certain INCI names | Use the current EU Common Ingredients Glossary; cross-check against Annex III |
| 2 | Missing supplier Allergen Declaration for one or more fragrance / EO inputs | Reliance on IFRA Certificates alone | Drive supplier outreach early (see prior blog on supplier requests) |
| 3 | “Parfum” listed without allergen breakdown | Legacy composition tables | Break out each declarable allergen at finished-product level |
| 4 | No quantification of naturally occurring allergens (e.g., limonene in citrus) | Assumption of natural exemption | Quantify every allergen above threshold regardless of source |
| 5 | No prehapten / prohapten analysis | Older CPSR templates pre-date the 2023 amendment | Add an oxidation analysis section per substance |
| 6 | Safety Assessor not qualified per Article 10 | Wrong credentials cited | Confirm degree in pharmacy, toxicology, medicine, or equivalent |
| 7 | Generic MoS calculation rather than substance-specific | Template reuse | Recalculate MoS per declared allergen |
| 8 | No reference to current SCCS opinions | Older toxicological profiles | Refresh references; cite SCCS opinion numbers and publication years |
A clean CPSR closes all eight of these out before the assessor signs Part B.
Step-by-step CPSR update workflow for the 2026 deadline
The realistic minimum cycle time per SKU is 6–10 weeks from clean supplier data in hand to refreshed CPNP notification. Brands operating with stretched supplier responsiveness should expect 12–16 weeks. Registrar’s CPSR process typically completes in 10 working days from receipt of all required documentation.
CPSR readiness checklist for July 31, 2026
Use this checklist as a final gate before considering a CPSR “deadline ready.”
| # | Checklist Item | Status |
| 1 | Supplier Allergen Declarations on file for every fragrance / EO input | ☐ |
| 2 | All 82 Annex III allergens screened per SKU | ☐ |
| 3 | All declarable allergens above threshold quantified in Part A composition | ☐ |
| 4 | All allergens labeled with the exact current Annex III INCI name | ☐ |
| 5 | Naturals broken down to substance level (not aggregated as “parfum”) | ☐ |
| 6 | Individual allergen SED calculated per substance | ☐ |
| 7 | Toxicological profile cites current SCCS opinion per allergen | ☐ |
| 8 | Prehapten / prohapten oxidation strategy documented in Part B | ☐ |
| 9 | Antioxidant + packaging strategy referenced for relevant substances | ☐ |
| 10 | Stability data confirms allergen integrity across shelf life | ☐ |
| 11 | Margin of Safety conclusion per substance (≥100 systemic baseline) | ☐ |
| ☐ | ||
| 12 | Safety Assessor credentials confirmed per Article 10 | ☐ |
| 13 | Part B signed and dated within last 12 months | ☐ |
| 14 | PIF updated to reflect new CPSR | ☐ |
| 15 | Artwork updated and proofread against finished-product composition | ☐ |
| 16 | CPNP record re-notified | ☐ |
| 17 | Responsible Person holds current PIF at EU address | ☐ |
| 18 | Production sequencing confirmed — no non-compliant batch enters EU customs after 31 July 2026 | ☐ |
If any item is open within 90 days of the deadline, brands should escalate immediately to a senior Safety Assessor, to the Responsible Person, or to a CPSR partner that can absorb the workload.
Free EU Allergen Compliance Review — CPSR triage included
→ [Book Your Free EU Allergen Compliance Review] 30 minutes. Expert-led. No obligation.
Frequently asked questions
What is a CPSR in EU cosmetic regulation?
A CPSR (Cosmetic Product Safety Report) is the legal safety dossier required for every cosmetic product placed on the EU market under Article 10 and Annex I of Regulation (EC) No 1223/2009. It is split into Part A (Safety Information) and Part B (Safety Assessment), the latter of which must be signed by a qualified Safety Assessor.
Do I need a new CPSR if my formula didn’t change?
Yes, typically. Even if the formula is unchanged, the 82-allergen rule changes which substances must be individually quantified, exposed, and assessed. The Safety Assessor’s review of the unchanged formula must reflect the current regulatory framework and SCCS science.
Who is qualified to sign a CPSR?
A Safety Assessor holding a recognized degree in pharmacy, toxicology, medicine, or a similar discipline as specified in Article 10 of the EU Cosmetics Regulation. Different specialist credentials are commonly held by safety assessors globally, including the European Registered Toxicologist (ERT), UK Registered Toxicologist (UKRT).
How do toxicologists calculate allergen exposure?
By applying SCCS Notes of Guidance defaults to compute Systemic Exposure Dose (SED) per allergen, then calculating Margin of Safety (MoS) against the substance’s NOAEL. Leave-on and rinse-off products use different retention factors.
What is a Margin of Safety in cosmetic safety assessment?
The Margin of Safety (MoS) is the ratio of a substance’s No Observed Adverse Effect Level (NOAEL) to the Systemic Exposure Dose (SED) calculated from the product. An MoS of 100 or greater is the generally accepted threshold for systemic safety. For allergens, the assessor must also evaluate skin sensitization risk separately.
What happens if my CPSR isn’t updated to reflect the additional allergens by July 31, 2026?
The product cannot be lawfully placed on the EU market. The Responsible Person who holds the PIF carries the legal exposure. EU customs, Safety Gate alerts, and Member State surveillance can trigger detentions, recalls, and market withdrawals.
How long does a CPSR update take?
Typically 1–2 weeks per SKU once supplier Allergen Declarations are in hand, and 12–14 weeks when supplier data has to be chased, retested, or replaced through ISO 17025 GC-MS/MS testing.
Can my US or UK safety assessor sign an EU CPSR?
Only if the assessor’s credentials meet Article 10 requirements, which align with EU-recognized degrees in pharmacy, toxicology, medicine, or equivalent disciplines. Many qualified assessors hold ERT or UKRT credentials in addition to a base degree, but the legal test is the underlying qualification.
Closing — the CPSR is the gate, not the finish line
Updating the CPSR is necessary but not sufficient. A 2026-ready CPSR must flow into a refreshed PIF, an updated label, a re-notified CPNP record, and a Responsible Person who can produce all of it on demand to a Member State inspector.
The brands that come through 2026 cleanly will have:
- Clean supplier Allergen Declarations on file for every fragrance and essential oil
- Refreshed CPSRs with substance-level composition, exposure math, and prehapten/prohapten reasoning
- Safety Assessor sign-off on Part B within the last 12 months
- Updated PIFs held by an EU Responsible Person
- Updated artwork using exact Annex III INCI names
- Re-notified CPNP records before 31 July 2026
Brands that fall short risk customs detentions, Safety Gate alerts, recalls, and a publicly visible regulatory record their retail partners will see.
Registrar Corp and Personal Care Regulatory (PCR) deliver an integrated EU allergen compliance service — supplier data review, CPSR updates with toxicologist sign-off, PIF refresh, artwork updates, CPNP re-notification, and EU/UK Responsible Person services for post-market obligations.
⏱️ The CPSR cycle is the longest. Start now.
Book your Free EU Allergen Compliance Review today. → [Get Your Free Review]
Author
