Salicylic Acid Limits and Warnings Under EU Rules

Salicylic acid shows up in a huge range of EU-sold products, exfoliating cleansers, scalp treatments, body washes marketed for texture and clarity. It's a permitted, useful ingredient. It's also one of the clearer examples in EU cosmetic regulation of a restricted substance, meaning it's allowed, but only within defined boundaries and with a specific consumer-facing warning attached.

Restricted, not banned

Under Regulation (EC) No 1223/2009, salicylic acid is addressed in Annex III, the list of substances that cosmetic products can contain only subject to the restrictions set out there. That's a meaningfully different category from Annex II, the outright prohibited list. Being in Annex III means the substance has a defined path to compliant use, provided you stay within the concentration ceiling and meet any attached conditions, rather than being off the table entirely.

This distinction matters for how you talk about your formula too. A product containing salicylic acid within its permitted limit and with the correct warning is a compliant product, not a borderline one. The restriction exists precisely so the ingredient can keep being used safely at the right concentration.

Concentration ceilings depend on product type

Annex III entries commonly set different concentration limits depending on the type of product and how it's used, since a leave-on facial product and a rinse-off body wash present very different real-world exposure. A ceiling appropriate for a wash-off product is not automatically the same ceiling that applies to a leave-on product, and general body-use products may carry different limits again from products designed for a smaller, more targeted area of use.

Because Annex III entries are amended periodically as new safety data emerges, the specific current percentage ceilings for salicylic acid are exactly the kind of detail to confirm against the current Annex III text or your Responsible Person's guidance before finalizing a formula, rather than relying on a percentage you saw referenced somewhere a year or two ago. Treat any number you've seen quoted online as a starting point for verification, not a final answer.

The child warning requirement

Beyond the concentration ceiling itself, salicylic acid's Annex III entry is one of the clearer examples of a substance carrying a mandatory warning statement tied specifically to child safety, generally along the lines of not to be used on children under a specified age, depending on the exact entry and product type. This warning has to appear on the label itself, not buried in a product insert or only on a website.

If your product falls into a category where this applies, the warning isn't optional based on your judgment about the product's actual risk to children. It's a labeling requirement tied to the ingredient's Annex III listing, and skipping it is a labeling non-compliance regardless of how you feel about the product's real-world safety.

Why this trips up reformulators and private label brands

Two situations tend to catch salicylic acid users off guard:

• Private label and white label products. If you're sourcing a base formula from a manufacturer and rebranding it, the concentration and warning obligations travel with the formula, not with who originally built it. Confirm your supplier's documentation actually states the salicylic acid concentration and that the required warning is already accounted for in your label artwork, rather than assuming it's handled because the base formula is "already compliant somewhere."
• Multi-functional formulas. A product marketed primarily as a moisturizer that also contains salicylic acid as a secondary exfoliating ingredient still triggers the same Annex III obligations as a product marketed explicitly as a salicylic acid treatment. The restriction is tied to the ingredient's presence and concentration, not to how prominently you market it.

A short pre-launch check

Before you finalize a salicylic acid product for the EU market:

1. Confirm the exact concentration in your finished formula, not just the raw material's stated potency
2. Check that concentration against the current Annex III limit for your specific product type
3. Confirm your label includes the required child warning if your product and concentration trigger it
4. Make sure your Cosmetic Product Safety Report explicitly addresses salicylic acid's presence and concentration, since this is exactly the kind of restricted-substance detail a safety assessor will want documented clearly

Keeping restricted-ingredient formulas straight across markets

If you're selling the same salicylic acid product in multiple markets, remember that concentration ceilings and required warnings are set independently by each regulator. A concentration that's fine in one market's rules isn't automatically fine in another's, so don't assume EU compliance transfers cleanly to, say, a Canadian filing or vice versa.

Cosmetic Comply's EU coverage is coming, joining the Canadian notification process already live today, and part of the build is making sure restricted-ingredient checks like this one are flagged clearly against the current rules for whichever market you're filing in, rather than left for you to track down entry by entry.