Why the EU Wants a Challenge Test for Your Water Product

Add water to a formula and you've added a food source for bacteria, mold, and yeast. That's the whole reason preservatives exist, and it's why the EU's safety file for your product wants proof, not just a preservative ingredient on the label, that the system you built actually holds up under attack.

What "proof" looks like here

Under Regulation (EC) No 1223/2009, selling a cosmetic in the EU means notifying through the CPNP portal, appointing a Responsible Person established in the EU, and maintaining a Product Information File. Inside that PIF sits the Cosmetic Product Safety Report, signed off by a qualified safety assessor. The assessor isn't just taking your word that your preservative blend works. For anything with water in it, they typically want to see a preservative efficacy test, commonly referred to by the ISO 11930 standard, sometimes still called a "challenge test" from its older name.

The logic is simple: you deliberately contaminate a sample of your product with a defined panel of bacteria, yeast, and mold, then track over time (usually across several weeks) whether your preservative system knocks the contamination back down to acceptable levels and keeps it there. Pass, and you've got documented evidence your formula resists microbial growth under real conditions. Fail, and you know before a customer does that something in the preservation system needs adjusting.

Which products actually need this

The trigger isn't "does this product contain a preservative," it's "does this product contain water or another growth-supporting medium." That covers a lot of ground:

• Lotions, creams, and emulsions of any kind
• Water-based serums and toners
• Shampoos, body washes, and liquid cleansers
• Aqueous gel formulas

Anhydrous products (a solid oil-based balm with no water phase, for instance, or a pure oil blend) present a much lower microbial growth risk, and the safety assessor's judgment on testing needs will reflect that. But if your formula has a water phase at any meaningful percentage, assume a preservative efficacy test is going to be expected, not optional.

Why this trips up small and new brands

A lot of first-time EU sellers assume that using a well-known, permitted preservative at its typical use level is enough. It isn't, because efficacy depends on the whole formula, not the preservative in isolation. The same preservative that works beautifully in one lotion can underperform in another if the rest of the formula (pH, oil content, other ingredients that might interact with or dilute the preservative's effectiveness) changes the environment it's working in. That's precisely why the test is done on your actual finished formula, not looked up from a preservative's general safety data.

This also means that reformulating, even a change that looks small, like swapping an emulsifier or adjusting a fragrance load, can affect preservation, and a prior challenge test doesn't automatically carry over to a materially changed formula.

Getting this organized before you notify

A practical sequence that avoids scrambling later:

1. Finalize your formula before commissioning the test. Testing a formula you're still planning to tweak wastes the test.
2. Send the test to an accredited lab that runs ISO 11930 or equivalent challenge testing. Your safety assessor can usually point you to one they trust, since they're the one who has to sign off on the report.
3. Build in lead time. These tests run over multiple weeks by design, since the whole point is watching microbial counts over time, not a same-day result.
4. Keep the report in your PIF alongside your CPSR, not as a separate loose document your assessor has to go hunting for.

Where this fits with your ingredient filing

The challenge test itself sits outside what Cosmetic Comply currently handles, since it requires an accredited lab and physical samples, but it's worth having in place before you finalize an EU listing. Cosmetic Comply is built around Canada's notification system today, with the EU, US, and Australia on the way, and part of what it does well even now is map your formula's ingredients to INCI names and CAS numbers with concentrations carried through accurately, which is exactly the kind of clean ingredient documentation your safety assessor will want sitting next to the challenge test report when they compile your CPSR.