Sourcing Skincare and Cosmetics: The Compliance Guide

Cosmetic compliance when importing skincare and cosmetics from China comes down to three gates: product registration or notification, safety documentation, and correct labeling. Miss any one and your shipment can be held, pulled from shelves, or recalled.

The hard truth most sourcing guides skip: the importer is legally liable, not the factory. Your Chinese manufacturer can deliver perfect products, and every regulatory obligation still sits on you. This guide covers the four regimes that matter (US MoCRA, EU Regulation 1223/2009, the UK's SCPN system, and China's CSAR), the labeling and INCI rules that trip up importers, and the order to complete compliance work.

A sourcing agent on the ground can help with the factory-side checks below. Consider CN Ally for pre-shipment factory verification. But hire a qualified regulatory consultant before your first commercial sale: this guide is a structural overview, not legal advice.

The three gates every importer has to clear

Cosmetic compliance always rests on the same three pillars; regulators just name them differently.

Registration or notification. Your products must be on file with the regulator before sale: FDA facility registration and product listing in the US, CPNP notification in the EU. Filings are usually free or cheap; the expense is the dossier.

Safety documentation. Evidence that the product is safe: toxicological assessments, stability and microbiological test data, manufacturing records. Nobody asks for this until something goes wrong, which is exactly when not having it gets expensive.

Correct labeling. INCI ingredient lists, net quantity, the responsible party's name and address, warnings, country of origin, and each market's language requirements. Mislabeling is one of the most common reasons cosmetic shipments get detained.

Watch the cosmetic-versus-drug boundary. In the US, sunscreens, antiperspirants, anti-acne products, and fluoride toothpaste are regulated as drugs, not cosmetics; anti-aging serums with active drug claims can cross the line too. Drug status triggers a far heavier regime; for a first import, stay in clear cosmetic territory.

United States: what MoCRA requires of importers

The Modernization of Cosmetics Regulation Act (MoCRA), signed in December 2022, is the first significant update to US cosmetics regulation in decades, and it is now fully operational. The FDA's MoCRA overview is the authoritative reference for the rules below. Before MoCRA, you could more or less label a product to FDA format and ship it. That era is over.

MoCRA created five obligations for every cosmetic sold in the US, regardless of where it was made:

1. Facility registration. Every facility manufacturing or processing cosmetics for the US must register with the FDA through its Cosmetic Direct portal, so your Chinese factory must be registered: free filing, due within 60 days of first US marketing, renewed biennially in odd-numbered years. Foreign facilities file through a US agent.

2. Product listing. Each finished product must be listed with the FDA, identifying ingredients, the manufacturing facility, and the responsible person, due within 120 days of first marketing and updated annually; free filing.

3. Safety substantiation. The responsible person must hold documented evidence that each product is safe for its intended use: a toxicological assessment by a qualified expert plus stability and preservative-efficacy data. Keep records for six years (three for small businesses).

4. Serious adverse event reporting. Labels must carry a US address, phone, or electronic contact for consumer reports. Serious events (hospitalization, disfigurement, life-threatening reactions) must reach the FDA within 15 business days.

5. Good Manufacturing Practice. MoCRA requires the FDA to establish cosmetic GMP regulations, but the agency has not yet published a proposed rule; the statutory deadlines for a proposal and a final rule have both passed. Until the rules are final, treat ISO 22716 certification at your factory as the practical benchmark: it is the international cosmetic GMP standard, and the eventual FDA rules are expected to draw on it as a reference.

Two points worth internalizing. First, the responsible person is the manufacturer, packer, or distributor whose name appears on the label; as the importer, that is usually you. Second, registration and product listing are not an approval program. The FDA does not approve cosmetics or issue registration certificates, and any supplier claiming "FDA certification" for a cosmetic is selling you fiction.

European Union: the strictest gate in cosmetics

If you plan to sell into the EU, work backward from Regulation (EC) No 1223/2009, the single piece of EU law governing cosmetic products, directly applicable across all member states since 2013. It is widely regarded as the toughest cosmetics regime in the world, and it is where Chinese factory formulations most often need changes.

A Responsible Person in the EU is mandatory. Every product placed on the EU market must have an EU-based Responsible Person, the legal entity that guarantees compliance and holds the product dossier. As a non-EU brand, you contract an RP service; consultants typically quote a few hundred to a couple of thousand euros per year per brand.

The Product Information File and the safety report. Before sale, the RP must hold a Product Information File (PIF) for each product. Its core is the Cosmetic Product Safety Report (CPSR), a formal safety assessment by a qualified assessor built on your toxicological, stability, and microbiological data. A different shade of lipstick counts as a different product with its own safety file. This is where the real cost lives.

Notification through CPNP before sale. Once the PIF is complete, the RP notifies the product through the Cosmetic Products Notification Portal: one notification covers the entire EU, the filing is free, and the cost was in building the PIF.

Ingredient restrictions in the annexes. The regulation's substance annexes are long and actively updated: Annex II (prohibited), Annex III (restricted), Annex IV (colorants), Annex V (preservatives), Annex VI (UV filters). Do not assume a factory's stock formulation is EU-compliant. Screen the full INCI list for every variant against the current annexes before committing to production; this single step prevents the most common and expensive compliance failure in EU-bound sourcing.

Animal testing is banned. Since 2013, the EU has prohibited animal testing of finished cosmetic products and cosmetic ingredients, and it bans the marketing of cosmetics tested on animals.

Claims are regulated. Under Commission Regulation 655/2013, marketing claims must satisfy common criteria including truthfulness and evidence support. Align your packaging claims with what your safety dossier can defend.

Labels must be in the language of each market. INCI list, the RP's name and address, warnings, and the period-after-opening symbol are standard elements, and every required element must appear in the language of the country of sale. Because the EU is the strictest regime, formulas cleared for Europe usually clear the US with fewer changes, though MoCRA's filings still apply.

The United Kingdom: a separate notification many importers forget

Post-Brexit, the UK runs its own portal, SCPN (Submit Cosmetic Product Notifications). The substantive rules are similar to the EU's, built on the same retained regulation, but the notification is separate and you need a UK-based Responsible Person.

If you launch in both the EU and the UK, the same PIF and CPSR can support both, but you file two notifications and maintain two Responsible Persons. Brands that set up EU compliance and then "also ship to the UK" without a separate notification are non-compliant. Budget the UK track from the start.

China: CSAR when you sell into the Chinese market

China's own regime matters if you sell into the Chinese market. It is governed by the Cosmetic Supervision and Administration Regulation (CSAR), in force since 2021, on a two-track system:

Track · Applies to · Pre-market step · Authority

• **Registration**: Special cosmetics: hair dyes, perms, freckle-removing/whitening, sunscreen, anti-hair loss, products claiming new efficacy · Full registration with dossier review · NMPA
• **Notification**: General cosmetics: everything else · Filing before sale, shorter process · NMPA or entrusted provincial MPA

Industry sources describe typical timelines of roughly three to six months for a notification and up to ten months for a full registration, with categories like sunscreen and whitening taking longer because additional efficacy testing is required. Treat these as planning ranges. The filing itself is free at the NMPA; the money goes to testing, translation, notarization, and consultants.

Two points deserve emphasis. First, overseas registrants must designate a domestic responsible person in China, a mainland enterprise that handles the registration or notification, assists with adverse-reaction monitoring and recalls, and cooperates with inspections: commonly your China subsidiary, distributor, or a regulatory consultant. Second, CSAR narrowed the special-cosmetics categories, so products like hair removers and deodorants moved from special-use to general cosmetics with a simpler notification path.

Animal testing: four markets, four different answers

Animal testing is the most misunderstood topic in cosmetic compliance importing, because each regime answers it differently:

Market · Position on animal testing

• **EU**: Banned since 2013: no testing of finished products or ingredients, no marketing of animal-tested cosmetics.
• **UK**: Banned in line with the EU regime.
• **US: MoCRA does not** require animal testing. Safety must be substantiated by adequate evidence, but the FDA states animal testing is not a marketing prerequisite.
• **China: Imported general** cosmetics have been exempt from mandatory animal testing since May 1, 2021, provided two conditions are met: the manufacturer holds a GMP certificate issued by the competent authority of its home country or region, and the product safety assessment fully confirms safety. Exceptions still apply: products intended for infants and children, products using a new cosmetic ingredient during its three-year monitoring period, and notifiers or manufacturers flagged as key supervision targets can still be required to test. Special cosmetics remain subject to animal testing requirements.

Cruelty-free brands should note the conditions on the China exemption: the GMP certificate must come from a government competent authority, not a trade association, so confirm the issuance mechanism for your manufacturing country first.

Labeling and INCI: the gate that fails most often

Across all four regimes, labeling errors are the cheapest mistake to make and the most common reason shipments are detained or listings are pulled. The rules share a backbone: ingredients listed in INCI nomenclature, in descending order of predominance, so the first ingredients are the ones present in the largest amounts.

US labeling. The Fair Packaging and Labeling Act requires a front Principal Display Panel (product identity, net quantity) and a back or side Information Panel (INCI ingredient declaration, distributor name and address, warnings). Country of origin, typically "Made in China," must appear; MoCRA adds the domestic adverse-event contact.

EU labeling. The INCI list, the Responsible Person's name and address, warnings, and the period-after-opening symbol are the core elements. Named fragrance allergens must appear individually above defined thresholds; the allergen list keeps expanding, so check current requirements rather than an old template. Every required element must be in the language of each country of sale.

China labeling. Labels on cosmetics sold in China must be in Chinese, and ingredient information follows Chinese regulatory requirements. Your domestic responsible person should review artwork against the current rules, which differ in detail from US and EU conventions even where the INCI system is common ground.

Artwork review by someone who knows the destination regime must happen before mass printing. Catching a missing allergen declaration or a wrong RP address on screen costs nothing; catching it on 50,000 printed units costs the reprint, the delay, and possibly the season.

The compliance timeline: do things in this order

Compliance work has dependencies: test results feed the safety file, the safety file feeds the notification, and the notification must exist before sale. Wrong order means slipped months.

1. Freeze the formulation. No compliance work is valid against a formula that keeps changing.
2. Screen the full INCI list against your target markets. EU annexes, US color-additive approvals where relevant, China rules where relevant. Formulation changes are cheapest now.
3. Verify the factory. Confirm GMP credentials (ISO 22716, current, verified with the issuing body), review challenge-test and stability data, and ask about prior shipments to your target markets. A factory audit before your first production run pays for itself.
4. Run the lab testing. Stability, microbiological, preservative-efficacy, and heavy-metal screening where relevant; these reports are the evidence behind your safety file.
5. Assemble the safety documentation. A qualified assessor or toxicologist builds the CPSR (EU/UK) or safety substantiation (US); start it while testing is still wrapping up, since it is the slowest professional step.
6. Appoint your Responsible Persons. US, EU, UK, and Chinese domestic RP if you sell in China, each with its own contract and timeline.
7. File the registrations and notifications. FDA registration and listings, CPNP, SCPN, China registration or notification. None happen until the dossier exists.
8. Audit the packaging artwork. Full label review against the destination regime before printing.
9. Ship, and keep records. Six years of safety records under MoCRA (three for small businesses); the PIF stays available to EU/UK authorities.

For a realistic schedule, expect two to four months for a single-market launch of a simple formulation once testing is underway, and treat multi-market launches with special-cosmetics categories as six-to-twelve-month projects. Start compliance work in parallel with factory sourcing.

How to vet a Chinese cosmetics factory on compliance

Most compliance failures trace back to supplier selection. Before your first purchase order, run this questionnaire with every candidate factory. Our guide to sourcing beauty products from China covers the broader supplier search; these are the compliance-specific questions.

• Full INCI list for every product variant. The complete formula, not a marketing one-pager; verify against EU restriction lists before committing.
• GMP certification. ISO 22716 or equivalent, verified current with the issuing body.
• Challenge-test and stability data. Proven preservative efficacy and shelf-life stability in the actual packaging.
• Batch documentation. COAs for every batch and MSDS/SDS as routine, not favors.
• Compliance history with your target markets. A factory that has shipped post-MoCRA to the US and under CPNP to the EU knows how formulations get adjusted for EU annexes.
• Testing coordination. Will the factory work with your third-party lab, and who pays for lab testing of products made in China? Clarify before sampling.

For cosmetics, traceability matters: a compliant factory can trace exactly which raw-material batches went into your shipment, which turns a potential full-batch recall into a contained fix.

FAQ

Do cosmetics need FDA approval before I can import them?

No. The FDA does not approve cosmetics, and facility registration and product listing under MoCRA are not an approval program. What the FDA does require is compliance: registered facilities, listed products, substantiated safety, correct labeling, and adverse-event reporting. Treat anyone selling you "FDA approval" as a red flag.

Can I sell Chinese skincare in the EU without a Responsible Person?

No. Every cosmetic product placed on the EU market must have an EU-based Responsible Person who holds the Product Information File and files the CPNP notification. There is no small-brand or small-volume exemption; contract an RP service before your products go on sale.

Does China still require animal testing on imported cosmetics?

Not for general cosmetics in the ordinary case. Since May 1, 2021, imported general cosmetics are exempt from mandatory animal testing when the manufacturer holds a government-issued GMP certificate and the safety assessment fully confirms safety. Exceptions remain for infant and children's products, new-ingredient monitoring periods, and companies flagged as key supervision targets. Special cosmetics are still subject to animal testing.

How much does cosmetic import compliance actually cost?

It depends on SKU count and markets, but the components are predictable: Responsible Person services per market, safety assessments or CPSRs per product variant, stability and microbiological testing, and a regulatory consultant for your first launch.

Your pre-order compliance checklist

Decide your target market before you pick a factory, because the market dictates the formulation, the dossier, and the timeline. Then run a simple go/no-go on each SKU:

No purchase order goes out until: the formulation is frozen and its INCI list screened against every target market's restriction lists; the factory's GMP certification verified and its testing data reviewed; your Responsible Persons appointed; and the budget and calendar reflecting the real compliance track, not the factory's production timeline.

Get those four right and the rest of cosmetic compliance importing is administration. Get any one wrong and you learn about it at the worst moment: a held container, a marketplace takedown, or a recall.

If you are sourcing skincare or cosmetics from China and want the factory-side compliance checks handled by people on the ground, CN Ally can verify supplier credentials, review batch documentation, and coordinate pre-shipment inspections. Reach us at hi@cnally.com to talk through your product and market before you commit to a supplier.