What Happens When a Cosmetic Fails EU Market Surveillance

The CPNP notification is the part everyone focuses on, but it's really just the front door. What happens after your product is on shelves, if a competent authority decides to look closer, is a separate process worth understanding before it happens to you rather than during it.

Who's doing the checking

Under Regulation (EC) No 1223/2009, member state competent authorities carry out market surveillance on cosmetics already in circulation. This can be triggered by a consumer complaint, an adverse reaction report, a routine inspection sweep of a product category, or sometimes just random sampling. It's not tied to some fixed schedule tied to your notification date. A product can sit on shelves quietly for a long time and then get flagged because of an unrelated industry-wide concern about an ingredient class, or because one customer had a bad reaction and reported it.

The first ask: the Product Information File

When a competent authority opens an inquiry, the standard first step is requesting the Product Information File from the Responsible Person. This is exactly why the Responsible Person role, and why that person needs to be established in the EU, matters so much beyond just being a box to check during notification. The PIF needs to actually exist, be current, and be producible on request, not assembled retroactively once an inquiry lands.

A PIF that's genuinely ready to hand over typically includes documentation supporting the product's safety, its labeling, and the assessment behind it, tied back to the Cosmetic Product Safety Report signed by a qualified safety assessor. If a Responsible Person can't produce a PIF promptly, or produces one that's incomplete or clearly assembled after the fact, that itself becomes part of the problem the authority is now looking at.

What the CPSR is doing at this stage

The Cosmetic Product Safety Report is the technical backbone the authority will scrutinize most closely if there's a genuine safety concern. It needs to reflect the actual finished formula, the actual intended use, and a real safety assessor's real conclusions, not a template lightly adapted from a similar product. If an inquiry reveals the CPSR doesn't hold up to scrutiny, whether because the assessment doesn't match the real formula or because the assessor's reasoning doesn't support the conclusion, that's typically treated more seriously than a labeling or paperwork issue.

Escalation: from inquiry to Safety Gate

If a competent authority's inspection concludes there's a genuine safety issue, not just a documentation gap but an actual risk to consumers, the situation can escalate to a Safety Gate alert, the EU's rapid alert system for dangerous non-food products. A Safety Gate listing is a public record, and it typically triggers or accompanies a recall process, meaning the product has to come off shelves and, depending on the severity, be pulled back from consumers who already purchased it.

This is a materially different outcome from a quiet warning letter asking you to fix your labeling. A Safety Gate recall is visible, it's public, and it follows the product and the brand.

A rough sense of the escalation path

1. Trigger event: complaint, adverse reaction report, routine inspection, or category sweep
2. Competent authority requests the PIF from the Responsible Person
3. Authority reviews the PIF, CPSR, and labeling against the actual product
4. If the review finds the documentation adequate and the product genuinely safe, the inquiry typically closes there
5. If it finds a genuine safety concern, escalation toward a Safety Gate alert and recall process follows

What this means for how you prepare, not just how you notify

The lesson here isn't really about the notification step at all. It's that the notification is the easy, fast part, and the PIF and CPSR are the parts that actually have to hold up months or years later under real scrutiny. A Responsible Person who treats the PIF as a formality to file away and forget is taking on real risk that only becomes visible the day an inspector actually asks for it.

If you're building out a product for EU notification, the discipline that matters most is making sure your actual formula, your actual safety assessment, and your actual labeling are all telling the same consistent story, because that consistency is exactly what a market surveillance inquiry is checking for. Cosmetic Comply's current focus is Canada's Cosmetic Notification Form process, with EU support on the roadmap, but the underlying habit of keeping your formula, your ingredient documentation, and your filing perfectly aligned from day one is the same habit that keeps a PIF defensible whenever someone actually asks to see it.