Reporting Serious Undesirable Effects Through the CPNP

A customer emails you saying your new facial serum left them with a burning rash that took three days to calm down and one visit to a walk-in clinic. Most sellers read that message, feel bad, maybe offer a refund, and move on. Under EU cosmetics regulation, that message might also be something you are legally required to report, and the reporting duty is not optional or discretionary once the facts meet the definition.

What actually counts as serious

Under Regulation (EC) No 1223/2009, cosmetics sold in the EU are subject to reporting obligations for serious undesirable effects, generally referred to as SUE. Not every complaint qualifies. A mild, temporary tingling that resolves on its own is an undesirable effect but typically would not clear the bar of "serious." The threshold is tied to effects with real consequence: things involving temporary or permanent functional incapacity, disability, hospitalization, congenital anomalies, or an immediate vital risk. A rash that sent someone to a clinic, required treatment, and caused a functional problem for several days sits much closer to that serious threshold than a passing itch.

The judgment call about whether a specific complaint clears that bar is not something to guess at casually. It involves an actual causality assessment, meaning someone has to reasonably evaluate whether the product is plausibly connected to the reported effect, not just coincidentally nearby in time.

Who does the assessing and who does the reporting

This is one of the clearest reasons the EU requires a Responsible Person established in the EU for every cosmetic product placed on that market. The Responsible Person is the party the reporting duty actually lands on. When a serious undesirable effect is reported to them, whether that report comes from a consumer directly, from a healthcare professional, or via a distributor who received the complaint first, the Responsible Person needs to notify the competent authority of the Member State where the effect occurred.

This is part of why the Product Information File and the Cosmetic Product Safety Report matter beyond just the initial notification. The CPSR, signed by a qualified safety assessor, establishes the baseline safety case for the product. When a real-world complaint comes in, that baseline is what a causality assessment gets measured against. If your PIF is thin or your safety assessment was rushed, you are trying to make a serious judgment call with weaker footing under you.

The practical flow from complaint to report

1. A complaint or adverse effect report reaches you or your distributor, in any form, an email, a review, a message from a pharmacist.
2. It gets escalated to the Responsible Person, who cannot simply file it away as customer service.
3. A causality assessment happens: is this plausibly linked to the product, given its ingredients, the reported symptoms, and the timing.
4. If the effect meets the seriousness threshold and a plausible link exists, the Responsible Person notifies the competent authority in the relevant Member State.
5. Documentation of the whole chain, complaint, assessment, and any reporting decision, gets kept, because "we decided not to report" needs its own defensible reasoning just as much as an actual report does.

Why small sellers underestimate this

It is tempting to think SUE reporting is a big-brand concern, relevant to companies large enough to have a dedicated safety department. But the obligation attaches to the product being on the EU market, not to company size. If you are a small maker exporting into the EU, you still need a Responsible Person in place, and that person still carries this duty the moment a serious complaint reaches them. Skipping it because your operation is small is not a defense recognized by the regulation.

Step in the chain	Who is responsible
Receiving the initial complaint	Whoever the customer contacts, seller or distributor
Escalating it appropriately	The seller, to the Responsible Person
Causality assessment	The Responsible Person, informed by the CPSR
Reporting to the competent authority	The Responsible Person
Keeping records of the decision either way	The Responsible Person

Treating this as part of your safety culture, not paperwork

The healthiest way to think about SUE reporting is as a feedback loop on your safety case, not an administrative burden bolted onto it. A well-built CPSR and a genuinely engaged Responsible Person mean that when something does go wrong, you are equipped to assess it honestly rather than scrambling. Cosmetic Comply is currently focused on Canada, with the EU on its roadmap, but the underlying philosophy carries over regardless of market: get the ingredient and safety groundwork right up front, because that groundwork is exactly what you lean on when a real complaint lands in your inbox.