To comply with the EU’s expanded fragrance allergen rules under Commission Regulation (EU) 2023/1545, enforced on new products from 31 July 2026, every cosmetic brand must obtain a written Allergen Declaration from each fragrance and essential-oil supplier listing all 82 declarable allergens and their exact percentage in the supplied raw material. An IFRA certificate alone is not sufficient. This article gives you the request workflow, a copy-paste supplier template, and a validation checklist.
If your CPSR, PIF, label, and CPNP records cannot be validated for compliance by 31 July 2026, non-compliant new products will be detained at EU customs. Supplier updated data is the rate-limiting input, and most regulatory teams underestimate how long it takes to collect.
Why isn’t an IFRA certificate enough for EU 82-allergen compliance?
This is the single most expensive misconception in cosmetics compliance today. An IFRA Certificate of Conformity and an Allergen Declaration are two different documents that answer two different regulatory questions.
| Document | What It Tells You | What It Does NOT Tell You |
| IFRA Certificate of Conformity | Maximum safe use levels of the fragrance per IFRA Standards (the latest IFRA Amendment, including IFRA 51), expressed as a percentage in 12 product categories | The specific allergens inside the fragrance and their individual concentrations |
| EU Allergen Declaration | Each of the declarable Annex III allergens present in the fragrance and the exact percentage of each in the neat fragrance oil or ingredient | Maximum safe use level (that’s what the IFRA certificate is for) |
| Safety Data Sheet (SDS) | Hazard classification of the raw material under REACH and CLP | Cosmetic-specific allergen disclosure |
The practical takeaway: you need all three, but the Allergen Declaration is the document that drives your label and your CPSR. Without it, your safety assessor cannot calculate allergen exposure, your artwork team cannot list the right INCI names, and your Responsible Person cannot maintain a compliant PIF.
Many suppliers will send you an updated IFRA 51st Certificate of Conformity and assume the request is complete. It is not. You must specifically request the Allergen Declaration aligned with Regulation (EU) 2023/1545.
What exactly do I need from my fragrance suppliers?
Below is the complete supplier deliverables list for EU 82-allergen compliance. Every line on this list should be considered mandatory before the safety assessor begins CPSR work.
| Deliverable | What “Complete” Looks Like | Why It’s Required |
| Allergen Declaration aligned with EU 2023/1545 | All 82 Annex III allergens listed; concentration of each in the neat fragrance/EO expressed as % w/w; substances “not detected” or “below LOD” identified with method limit of detection | Drives CPSR exposure math and label disclosure |
| Updated IFRA Certificate of Conformity (IFRA 51 / 52) | Maximum use level per IFRA product category; signed and dated within the last 12 months | Confirms the fragrance can be used at the brand’s intended dose |
| SDS (REACH / CLP) | Section 1–16, in EU language, current revision | Hazard communication and downstream CLP duties |
| Allergen content statement for naturals | For essential oils, botanical extracts, and absolutes — explicit confirmation that natural allergens (e.g., linalool, limonene, geraniol) have been quantified | Naturals do not get an automatic exemption |
| Prehapten / prohapten oxidation note | Statement on oxidation behavior of limonene, linalool, geraniol, alpha-terpinene, eugenol, isoeugenol, cinnamyl alcohol — including recommended antioxidant and packaging strategy | Required for the CPSR safety assessor’s view on oxidation risk |
| Method statement | The analytical method used (typically GC-MS/MS to ISO 17025), method validation, and limit of detection per allergen | Confirms the declaration is reliable for regulatory submission |
| Batch variability statement | Confirmation of whether the declaration applies to one batch or all batches; expected allergen variation by harvest/season for naturals | Critical for naturals; affects how the CPSR documents worst-case exposure |
| Date of analysis + valid-until date | A specific issue date and expiry, not “valid indefinitely” | Forces refresh cycles for regulatory currency |
| Signed by a qualified party | Quality manager, regulatory affairs lead, or laboratory director with name, title, and date | Required for auditability |
If a supplier returns a document that omits any of the above, that is a gap, and it needs to be closed before the safety assessor can complete the CPSR update.
The 4-stage supplier outreach workflow
Time is the rate-limiting variable. Below is the proven sequence Personal Care Regulatory (PCR) teams use to extract clean allergen data from suppliers in time for the 31 July 2026 deadline. Each stage assumes the prior stage was attempted.
The timing math matters. If a brand starts the supplier outreach on 31 May 2026, has typical 21-day cycles, then enters an 8–10 week CPSR update cycle, the brand is already at the deadline before testing alternatives. The earlier the outreach starts, the more leverage you have.
Copy-paste supplier request template (email + attachment)
Below is a regulator-ready supplier request you can adapt. Replace bracketed fields, attach the structured response form (immediately below), and send by email with read receipt.
Subject line
URGENT — EU 82-Allergen Declaration Required for [Product/Material Name] — Response Due [Date]
Email body
Dear [Supplier Regulatory / QA Contact],
We are writing to request updated Allergen Declaration data for the following fragrance / essential-oil materials we currently purchase from [Supplier Name]:
- [Material Name 1 Internal Code]
- [Material Name 2 / Internal Code]
- [Material Name 3 / Internal Code]
This request is driven by Commission Regulation (EU) 2023/1545, which expands mandatory fragrance allergen labeling under Annex III of Regulation (EC) No 1223/2009. Enforcement of the expanded list begins 31 July 2026 for new cosmetic products placed on the EU market, with a withdrawal date of 31 July 2028 for non-compliant existing inventory.
Our records currently hold your IFRA Certificate of Conformity for these materials. The IFRA certificate confirms maximum usage levels per product category, but it does not provide the allergen-level concentration data required to update our CPSR (Cosmetic Product Safety Report), PIF (Product Information File), CPNP notification, and product labeling. We therefore require a separate, current Allergen Declaration for each material listed above.
Please complete the attached structured response form for each material, returning it no later than [Date — 14 days from send].
For each material, the response must include:
- Each of the 82 declarable allergens in EU Annex III (per Regulation (EU) 2023/1545 and its 2025 Corrigendum), with the concentration of each expressed as % w/w in the neat fragrance/essential oil.
- For substances not detected, please report the limit of detection (LOD) and the analytical method used.
- Analytical method statement (we expect GC-MS or GC-MS/MS to ISO 17025 accredited methods) including method validation and LOD per allergen.
- Naturals-specific allergen content for any essential oils, botanical extracts, or absolutes — confirming that naturally occurring allergens (e.g., linalool, limonene, geraniol, citral) have been quantified.
- Prehapten / prohapten statement describing the oxidation behavior of relevant substances (limonene, linalool, geraniol, alpha-terpinene, eugenol, isoeugenol, cinnamyl alcohol) and recommended storage / packaging conditions.
- Batch variability statement — whether the declaration applies to a single batch or is representative of all batches, and expected seasonal variation for naturals.
- Date of analysis and a clear valid-until date.
- Document signed by a qualified party (Quality Manager, Regulatory Affairs Lead, or Laboratory Director) with name, title, signature, and date.
Please also re-send the current SDS (REACH/CLP-compliant) and updated IFRA 51st Certificate of Conformity for each material so our regulatory file is complete.
If you cannot provide this data within the requested timeframe, please respond by [Date — 5 business days from send] with: (a) the date you expect to provide it, or (b) confirmation that the data is unavailable, so we can evaluate alternatives — including independent ISO 17025 laboratory testing and supplier change — before our EU deadline runs out.
Thank you for your prompt attention. We are committed to maintaining our partnership through this transition and appreciate your support in meeting these regulatory obligations.
Sincerely,
[Your Name] [Title — Regulatory Affairs / QA / Procurement] [Brand / Manufacturer] [Email] | [Phone]
Attached response form (suppliers complete this)
Provide a one-page form that the supplier fills in per material. At minimum, the fields are:
| Field | Required Format |
| Material name / supplier code | Free text |
| Material type (synthetic / natural / mixture) | Drop-down |
| Annex III allergen list (all 82) | One row per allergen, % w/w in neat material, “<LOD” allowed with LOD value |
| Analytical method | Free text (e.g., GC-MS/MS, ISO 17025-accredited) |
| Method LOD per allergen | Numeric (%) |
| Batch number (if batch-specific) | Free text |
| Batch variability statement | Free text |
| Date of analysis | DD-MMM-YYYY |
| Valid-until date | DD-MMM-YYYY |
| Prehapten / prohapten notes | Free text |
| Signed by (name, title) | Free text + signature block |
| Date of signature | DD-MMM-YYYY |
A pre-built version of this form is part of the deliverables our team provides during a Free EU Allergen Compliance Review.
Follow-up cadence — Day 0 / Day 7 / Day 14
A clean cadence is the difference between getting data in three weeks and getting nothing in eight.
Day 7 — first follow-up email
Subject: Reminder — EU 82-Allergen Declaration Request for [Material Name(s)]
Hello [Contact],
Following up on our request of [Date] for updated Allergen Declaration data on [Material Name(s)]. Can you confirm receipt and provide an expected response date?
As a reminder, the EU deadline for new product compliance is 31 July 2026 and our CPSR update cycle requires this data well in advance. If there is anyone else on your team I should be working with, please connect us.
Thank you.
Day 14 — escalation email
Subject: ESCALATION — EU Allergen Data Required for [Material Name(s)] — [Brand] Continuity Risk
Hello [Quality / Regulatory Director / Account Manager],
We are escalating this request because the response window has elapsed and we are approaching a hard EU regulatory deadline of 31 July 2026.
Without an Allergen Declaration aligned with Regulation (EU) 2023/1545, we cannot update our CPSR, PIF, label artwork, or CPNP notification. This means we cannot legally place new product on the EU market after the deadline using [Material Name(s)].
We need either: (a) the completed declaration by [Date — 5 business days], or (b) confirmation that the data cannot be provided, so we can begin independent ISO 17025 testing and evaluate alternative suppliers.
Please contact me directly at [Phone] / [Email] today.
Sincerely,
[Senior Title — Regulatory Affairs Director / Head of Quality] [Brand / Manufacturer]
Most suppliers respond at the Day 14 escalation because the implied commercial risk is now in front of their account team. If the silence continues to Day 21, the next step is no longer about the supplier, it’s about alternatives.
Common supplier documentation gaps (and how to close them)
Across hundreds of audits, the following gaps appear in roughly this order of frequency. Each one is closable, usually faster than people think.
| Common Gap | How to Close It |
| Supplier sends IFRA certificate but no Allergen Declaration | Send the email above; specifically request the Allergen Declaration, not the IFRA CoC |
| Allergen Declaration lists only the old 26 allergens | Reply requesting an updated declaration aligned with Regulation (EU) 2023/1545 and its 2025 Corrigendum |
| Allergen Declaration omits naturals (e.g., limonene in citrus) | Specifically request the declaration to include all naturally occurring Annex III substances quantified |
| No analytical method statement | Request GC-MS or GC-MS/MS method details and ISO 17025 accreditation status of the testing lab |
| No LOD reported for “not detected” entries | Request method LOD per allergen; without LOD, “not detected” cannot be defended to a Member State inspector |
| Declaration is undated | Request a date of analysis and valid-until date; safety assessors will not accept undated declarations |
| Declaration is “all batches” without supporting data | Request batch-to-batch variation data, especially for naturals (citrus, lavender, rose, ylang-ylang vary substantially by harvest) |
| Supplier refuses to declare prehapten/prohapten behavior | Reference the SCCS prehapten/prohapten guidance and request a written statement on oxidation behavior |
| Supplier declines to share data (claims trade secret) | Request only the Annex III declarable substances — the supplier does not have to disclose full composition; if still refused, trigger lab testing |
What if my supplier won’t share allergen data?
You have three options, in order of speed.
Option 1 — Independent ISO 17025 lab testing
Send a sealed sample of the supplied fragrance to an ISO 17025 accredited laboratory for GC-MS/MS analysis against all 82 Annex III allergens. Major analytical labs offering this service include Intertek, SGS, and Eurofins.
| Item | Typical Range |
| Method | GC-MS or GC-MS/MS (ISO 17025) |
| Turnaround time | 2–4 weeks (rush available) |
| Indicative cost per sample | $650 – $1,200 USD |
| Output | Quantified allergen profile usable for CPSR and label |
Independent testing is the most defensible path when a supplier is non-responsive. The downside is cost and time, and the brand still needs a batch variability strategy for naturals because a single sample only proves one batch.
Option 2 — Supplier change
If a supplier cannot provide a current Allergen Declaration in 2026, that is a significant regulatory red flag beyond the immediate deadline. Identify alternative suppliers, major fragrance houses (e.g., Givaudan, Symrise, dsm-firmenich, IFF) and reputable independents have all built 2026-ready palettes with full Annex III declarations.
This option takes 8–16 weeks for sensory match, redo all safety and product integrity testing, and CPSR re-work — but it future-proofs the brand for Canada and post-2028 EU adjustments.
Option 3 — Reformulation down or out
Use the framework introduced in the formulator’s guide: reformulate down (reduce use level below threshold), or reformulate out (substitute high-allergen ingredients with allergen-light alternatives). This is the longest path and requires sensory, stability, and CPSR cycles.
In practice, most brands run Option 1 (lab testing) in parallel with Option 2 (supplier change evaluation) for high-risk SKUs while continuing Option 3 (reformulation) for long-term portfolio repair.
How do I validate supplier allergen data once received?
When a declaration arrives, validate it with this 10-point checklist before passing it to the safety assessor. A single missing element can stall CPSR sign-off by weeks.
| # | Checklist Item | Pass / Fail |
| 1 | All 82 Annex III allergens listed (per Reg. (EU) 2023/1545 + 2025 Corrigendum) | ☐ |
| 2 | Concentration of each expressed as % w/w in the neat fragrance/EO (not the finished product) | ☐ |
| 3 | “Not detected” entries include the LOD and the analytical method | ☐ |
| 4 | Analytical method named (e.g., GC-MS/MS) and ISO 17025 accreditation referenced | ☐ |
| 5 | Naturals: allergens within essential oils / botanicals are individually quantified | ☐ |
| 6 | Prehapten / prohapten oxidation note included for relevant substances | ☐ |
| 7 | Batch number(s) and batch variability statement included | ☐ |
| 8 | Date of analysis clearly stated | ☐ |
| 9 | Valid-until date clearly stated (12 months typical) | ☐ |
| 10 | Signed by a named qualified party (QM / RA / Lab Director) with title and date | ☐ |
If items 1–4 fail, the declaration is not usable for CPSR. Return it to the supplier for revision before counting the deliverable as received.
Free EU Allergen Compliance Review — supplier-data triage included
→ [Book Your Free EU Allergen Compliance Review] 30 minutes. Expert-led. No obligation.
Frequently asked questions
Is an IFRA Certificate of Conformity enough for EU 82-allergen compliance?
No. An IFRA Certificate confirms maximum use levels per product category against IFRA Standards. It does not list the specific allergens inside the fragrance or their individual percentages — which is the information required to update a CPSR, label, and CPNP notification under Regulation (EU) 2023/1545.
What is the difference between an IFRA certificate and an Allergen Declaration?
An IFRA certificate answers “how much of this fragrance can I use?” An Allergen Declaration answers “what allergens are inside this fragrance and at what concentration?” Both documents are needed — and they come from the same supplier, but they are produced separately.
What if my fragrance supplier says the allergen data is confidential?
You are only requesting the declarable Annex III substances — not the full formula. The supplier is not being asked to disclose proprietary chemistry; they are being asked to confirm regulated allergens and their concentrations. If the supplier still refuses, the most defensible path is independent ISO 17025 GC-MS/MS testing.
How long does ISO 17025 fragrance allergen testing take?
Typically 2–4 weeks per sample, with rush turnaround available. Indicative cost is $650–$1,200 USD per sample at major labs. The output is a quantified allergen profile against all 82 Annex III substances that can be used directly in the CPSR.
Do I need separate allergen data for each batch of essential oil?
For naturals, yes — at least seasonally. Essential oil composition varies with harvest, origin, and distillation. The CPSR must reflect worst-case exposure, which generally means either obtaining batch-specific data or a supplier statement covering batch variability across the year.
What deadline applies to obtaining supplier allergen data?
There is no separate deadline for supplier data, but it is the rate-limiting input for hitting the 31 July 2026 EU deadline. Brands typically need clean supplier data 6–10 weeks before the deadline to allow time for CPSR updates, PIF refresh, artwork changes, and CPNP re-notification. Many smaller fragrance suppliers or ingredient houses did not budget this additional testing and are having issues supplying the require allergen data.
What does an EU Responsible Person do in this process?
The EU Responsible Person holds the PIF (and CPSR within it) at an EU address and is the legal point of contact for Member State authorities. They confirm the PIF includes the updated supplier allergen data and the refreshed CPSR before any product is placed on the EU market.
Closing — supplier data is the gate
There is no way around supplier allergen data. The CPSR cannot be re-signed without it, the label cannot be revised without it, the PIF is incomplete without it, and CPNP cannot be re-notified without it. Every other compliance task depends on the data arriving on time.
Brands that have already started supplier outreach are in good shape. Brands that have not, particularly those relying on indie fragrance houses, smaller essential oil suppliers, or single-source naturals, should treat supplier outreach as the top priority of the next 30 days.
Registrar Corp and Personal Care Regulatory (PCR) support cosmetic brands through the entire data-acquisition cycle, supplier outreach scripts, gap analysis, CPSR updates with toxicologist sign-off, PIF refresh, artwork updates, CPNP re-notification, and EU/UK Responsible Person services for post-market obligations.
⏱️ Supplier outreach is the longest pole in the tent.
Book your Free EU Allergen Compliance Review today. → [Get Your Free Review]
Author
