TL;DR: Add “clinically proven to repair damaged skin barrier” and you’ve introduced language that, in the EU, invites scrutiny under [EU Cosmetics Regulation 1223/2009](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32009R1223) Article 20 on cosmetic claims substantiation
TL;DR: We track this internally under what we call our **CR-04 claims risk classification**, which assigns every claim phrase to one of three tiers before formulation even begins
Key Technical Parameters #
Getting the regulatory side of moisturizer and cream products right is genuinely harder than most brand owners expect — not because the rules are obscure, but because they interact with each other in ways that aren’t obvious until you’re already mid-development. The challenge compounds when you’re launching across EU, US, and China simultaneously, which is the brief we see more and more. Our formulation team sits at the intersection of product development and compliance every day, and the documentation burden alone has reshaped how we structure project timelines. This guide covers what that documentation actually looks like in practice, where the common failures happen, and how the three major markets diverge in ways that directly affect your formulation choices — not just your paperwork.
The Specification That Drives Compliance Burden — And It’s Not What You Think #
The parameter that determines your regulatory pathway faster than any other is not your active concentration. It’s your product’s intended claim.
That sentence sounds obvious. It rarely is, in practice.
A moisturizer positioned as “helps maintain the skin’s natural moisture barrier” sits cleanly in the cosmetic category across all three major markets. Add “clinically proven to repair damaged skin barrier” and you’ve introduced language that, in the EU, invites scrutiny under EU Cosmetics Regulation 1223/2009 Article 20 on cosmetic claims substantiation. In China, the same phrasing may trigger reclassification under NMPA Cosmetic Regulation depending on the specific wording and how it’s rendered in Chinese on the label. In the US, under FDA Cosmetics Guidelines, the drug/cosmetic boundary is notoriously fuzzy, and “repair” language has historically attracted more scrutiny than “support” language.
We track this internally under what we call our CR-04 claims risk classification, which assigns every claim phrase to one of three tiers before formulation even begins. Tier 1 claims need no additional substantiation documentation. Tier 2 need in-vitro or consumer perception data. Tier 3 require clinical study data or go back to the brand for reframing. Roughly 40% of the briefs we receive come in at Tier 2 or Tier 3 without the brand realizing it.
The practical consequence: your claim copy should be drafted before your formula is finalized, not after. We push back on timelines where marketing writes the claims deck six weeks after the formula is locked. By that point, you may have built a formula that can’t substantiate what marketing wants to say, or you’re paying for clinical testing you didn’t budget for.
On the measurement side, the EU’s SCCS Scientific Opinion framework requires that claims be “fair, informed, and respectful of consumers” — specific criteria that feed directly into the Product Information File (PIF) structure mandated under Annex I of Regulation 1223/2009. For moisturizers specifically, the PIF must include a safety assessment signed by a qualified safety assessor, a cosmetic product notification (via CPNP), and, where claims are made, supporting evidence indexed to those claims. Miss the indexing and the file technically fails, even if all the data is present.
Supplier Qualification — What the Paperwork Actually Tells You #
When we onboard a new raw material supplier for a moisturizer project, the first document we request is not the TDS. It’s the SDS — specifically Section 15 on regulatory information — cross-referenced against the EU Cosmetics Regulation 1223/2009 Annexes II through VI.
The reason is direct: Annexes II and III list prohibited and restricted substances. A surprising number of mid-tier suppliers still ship SDS documents that don’t flag Annex III restrictions accurately — particularly for preservatives, UV filters, and colorants, which have concentration caps that vary by product type. An incorrect or outdated SDS at the supplier stage can trigger a full reformulation nine weeks into a project. We’ve had this happen.
For China-bound products, the ask changes. NMPA requires that all raw materials used in “special cosmetics” (which includes certain moisturizers with whitening or sunscreen claims) be sourced from suppliers who can provide NMPA-recognized ingredient registration documentation. This is separate from, and in addition to, the standard raw material spec sheet. Ask your supplier directly: “Can you provide documentation supporting NMPA ingredient status for this material?” The response time tells you a lot. A supplier who comes back in 48 hours with a clean file is a different kind of supplier than one who sends a translated spec sheet and a question mark.
REACH compliance is the other axis. Under REACH Regulation (EC) No. 1907/2006, every substance above 0.1% w/w in a mixture that appears on the SVHC candidate list requires disclosure. For moisturizers, the relevant materials are usually fragrances and certain preservative systems. We run every formula through an internal SVHC check before we generate the batch record — this is logged in our QC-11 compliance trace file and forwarded to the brand partner as part of the outgoing documentation package.
One thing I’d add: don’t conflate ISO certification at the factory level with regulatory compliance at the product level. A manufacturer can hold ISO Standards ISO 22716 (GMP for cosmetics) and still produce a product that fails EU notification because the PIF is incomplete. They’re different things. ISO 22716 governs how the product is made. Regulatory compliance governs what the product is and says about itself.
Cost-Performance Trade-offs in Multi-Market Compliance #
The most common false economy we see: brands assume that a single global formula with a single PIF will cover all markets. It rarely does, and the cost of adapting late is higher than the cost of planning early.
Here’s how the compliance cost and burden actually breaks down by market, based on our current project portfolio:
| Market | Pre-market Filing Required | Safety Assessment | Claim Substantiation Level | Typical Lead Time (Compliance) |
|---|---|---|---|---|
| EU | CPNP notification (post-launch) | Mandatory, qualified assessor | Art. 20 — fair, proportionate, evidence-based | 4–6 weeks (PIF prep + assessor review) |
| USA | No pre-market registration (OTC drug exceptions apply) | Not mandatory for cosmetics | FTC guidelines — competent and reliable evidence | 2–3 weeks (label review + SDS) |
| China (general cosmetics) | NMPA filing via CSAR system | Required in dossier | Must align with NMPA-approved claim categories | 3–6 months (dossier + review) |
| China (special cosmetics) | NMPA registration, not just filing | Full dossier incl. clinical data | Restricted to NMPA-approved claim list | 12–18 months |
The time gap between general and special cosmetic registration in China is not an exaggeration. We’ve seen brands underestimate this by a full year, which turns a straightforward moisturizer with a single brightening claim into an 18-month regulatory project. That changes your launch calendar fundamentally.
Now, the counterargument for simpler: if your launch is US-only, the compliance overhead for a basic moisturizer is genuinely low. FDA’s voluntary cosmetic registration program (now mandatory under MoCRA for certain categories) is not the burden that EU or China filing represents. For a brand doing a direct-to-consumer play in the US with no EU ambitions in the near term, spending development budget on a full SCCS-grade safety assessment is excess. Know your market, then size your compliance spend accordingly.
The middle path, which we usually recommend when the eventual goal is multi-market, is to build the PIF to EU standard from day one. It’s overkill for the US. For China, you’ll still need additional work. But an EU-standard PIF gives you a documentation foundation that’s easier to build on than to reconstruct.
Technical Deep-Dive: Preservative Compliance Across Markets #
This is where moisturizer compliance gets genuinely complicated, and where we spend more formulation time than on almost any other compliance issue.
Preservative selection in moisturizers sits at the intersection of efficacy, regulatory status, and consumer perception — and the three don’t always point in the same direction. Parabens are the clearest example. Methylparaben and ethylparaben remain permitted under EU Annex V with concentration limits of 0.4% for single esters and 0.8% for mixtures. The SCCS Scientific Opinion on parabens (SCCS/1514/13 and subsequent updates) concluded that the shorter-chain parabens are safe at current use levels in leave-on products. The science is reasonably settled.
The market reality is different. A significant portion of the brand briefs we receive now explicitly exclude parabens — not for regulatory reasons, but because the brand’s retail channel or consumer positioning requires a “no parabens” claim. This is a commercial constraint, not a regulatory one, but it has the same effect on formulation: you’re working without one of the most reliable and well-characterized preservative systems available.
The alternative systems we use most frequently for O/W cream formulations are phenoxyethanol combined with ethylhexylglycerin (typically at 0.9% + 0.1%), sodium benzoate with potassium sorbate in pH-adjusted systems (effective below pH 5.5), and more recently, a multi-functional approach using 1,2-hexanediol with caprylyl glycol. Each has its own regulatory profile across markets.
Phenoxyethanol is a good example of where the markets actively diverge. In the EU, the maximum permitted concentration under Annex V is 1.0%. In Japan, the limit is also 1.0%. In the US, there’s no federally mandated limit, though the Cosmetic Ingredient Review (CIR) and PCPC Guidelines have assessed it as safe up to 1.0%. In China, NMPA permits phenoxyethanol up to 1.0% in rinse-off and leave-on products, though formulas destined for products for children under 3 years now carry additional restrictions introduced in the 2021 NMPA regulations update.
Where it gets complicated is when you’re also trying to achieve a broad-spectrum pass on the ICH Stability Guidelines challenge test criteria — which, adapted for cosmetics, typically means meeting the preservative efficacy test (PET) requirements of USP <51> or ISO 11930. A 0.8% phenoxyethanol system that passes PET in a water-rich lotion at pH 6.0 can fail in a heavier cream at pH 6.5 because the effective concentration of the undissociated acid form shifts. This isn’t hypothetical. Across our stability batches over the past two years, we’ve had preservative systems that passed PET at pilot scale fail on reformulated batches where the oil phase was increased by 8% to meet a different sensory brief.
Clinical backing matters here too. A 2022 open-label consumer use study (n=45, 8 weeks) evaluating a ceramide-based moisturizer using a phenoxyethanol/ethylhexylglycerin system showed no adverse skin reactions in 97.8% of participants, with a 22% improvement in self-reported skin comfort. That’s a useful data point for safety dossier purposes — but it’s a consumer perception study, not a microbiological efficacy study. Don’t conflate the two when building your PIF documentation.
One area where we’re still not fully satisfied with our own approach: anhydrous and low-water formulations. The PET framework assumes a water activity sufficient for microbial growth, and for formulations below about 0.7 Aw, the test methodology gives results that are hard to interpret. We’re currently working through 12 additional batches of a water-in-silicone cream where the standard ISO 11930 criteria may not be the right benchmark. We’ll have cleaner data in the next quarter, but right now, for that specific format, we’re working with the brand on a conservative preservative load and a broader usage guidance statement rather than claiming compliance we haven’t fully demonstrated.
Our barrier-repair-sensitive skincare formulation work runs into this most often — sensitive skin claims tend to attract both low-irritant preservative briefs and the heaviest compliance scrutiny.
Formulation Notes for Brand Partners #
When you brief us on a moisturizer with a regulatory angle, the first questions we ask are: What’s your primary launch market? Is this positioned as a general cosmetic or are you planning any claims that could push it toward special cosmetic territory in China or OTC in the US? And what’s your channel — because retailer requirements (particularly for clean-beauty retailers) sometimes impose restrictions that go beyond the regulatory minimum and aren’t always documented anywhere obvious.
The most common brief mistake we see is brands treating regulatory compliance as a post-formulation task — something the lab handles at the end before you send the file to a notifier. By that point, the formula is locked, the claims deck may already be written, and changing either is expensive. The correct sequence is: claim strategy first, regulatory market mapping second, then formulation. We had a project last year where a brand had finalized packaging copy with “brightening” language before we flagged that the Chinese NMPA registration for whitening/brightening claims requires a full special cosmetics dossier. The timeline moved from 4 months to 14 months.
For our moisturizer-cream category, standard timelines run: lab samples in 2–3 weeks from brief confirmation, accelerated stability initiated at 45°C and 75% RH from the first approved sample, with 24-month real-time stability started concurrently. EU PIF preparation runs 4–6 weeks with a qualified safety assessor. China NMPA filing for general cosmetics: 3–6 months. Build these into your launch plan before you set a go-live date.
Frequently Asked Questions #
We’ve been told our formula needs a “safety assessment” — what does that actually involve and how long does it take?
A: For EU-bound products, a safety assessment under Annex I of EU Cosmetics Regulation 1223/2009 has to be completed by a qualified assessor — typically a toxicologist with relevant credentials. The assessment covers each ingredient’s safety profile, the finished product’s intended use, and exposure calculations. Expect 3–5 weeks once you have a complete PIF ready for review, plus back-and-forth time if the assessor flags ingredient gaps.
Our moisturizer has niacinamide at 5% — does that trigger any special filing in China?
A: At 5%, niacinamide in a leave-on moisturizer is treated as a general cosmetic in China under current NMPA rules, and standard filing via the CSAR system applies. The watch-out is if you pair it with claims around “whitening” or “brightening” — that combination can attract special cosmetics scrutiny regardless of the niacinamide concentration. We had a project where the ingredient was fine but the claims copy triggered a special cosmetics review. Separate your ingredient decisions from your claims decisions early.
We had a stability failure on a previous cream — preservative passed at week 4 then failed at week 12. What causes that?
A: This is usually a pH drift issue. Many O/W cream systems show gradual pH increase over time as carbomer or acrylate-based thickeners interact with the aqueous phase, and if your preservative system is pH-sensitive — sodium benzoate, for example, is only active below pH 5.5 — you can pass at week 4 and fail by week 12 when pH has drifted up by 0.3–0.4 units. We now build pH monitoring into every stability time point specifically for this reason, and we flag any formula using a pH-sensitive preservative where the initial pH is above 5.2.
What’s the minimum order quantity for a moisturizer run with full regulatory documentation included?
A: Our standard MOQ for cream formulations is 500 kg per batch, which typically yields 20,000–25,000 units at 30ml fill. Full regulatory documentation — PIF-ready dossier for EU, CPNP notification support, NMPA filing package for China — is included in project fees above that threshold. Below 500 kg, documentation can be scoped separately. Timeline from brief sign-off to first compliance-ready samples is typically 6–8 weeks.
Should I be worried about fragrance compliance separately from the rest of the formula?
A: Yes, and this is something worth asking about upfront rather than discovering at the PIF stage. The EU’s fragrance allergen disclosure requirements under EU Cosmetics Regulation 1223/2009 — currently covering 26 allergens above 0.001% in leave-on products, with an expanded list coming under the revision — require your fragrance supplier to provide a full quantitative ingredient disclosure (QID) per IFRA standards. Some fragrance suppliers are slow on QIDs, or provide them in formats that don’t map cleanly to INCI nomenclature. Factor 2–3 extra weeks into your PIF timeline if you’re using a bespoke fragrance blend rather than a standard library fragrance with pre-existing documentation.
Have a product concept in mind? Contact our formulation team to request a complimentary brief review.