Scalp Health & Hair Growth — Regulatory & Compliance Guide

Key Technical Parameters #

Scalp and hair growth products sit at one of the most fragmented regulatory intersections in cosmetics — the line between a cosmetic claim and a drug claim shifts depending on which market you’re filing in, which active you’re using, and sometimes which packaging copy your brand team drafted at 11pm without checking with us first. Brand partners entering EU, US, and China simultaneously face three different documentation frameworks, three different pre-market requirements, and in some cases three different product classifications for the same SKU. What most teams discover too late is that the compliance bottleneck isn’t usually the formulation itself — it’s the paper trail that has to accompany it. This guide covers what that paper trail actually looks like, where the gaps appear, and what we ask for before we commit to a production timeline.

The Classification Decision That Sets Everything Else in Motion #

Before any safety assessment, before any stability protocol, before we even discuss actives — the first question in every scalp and hair brief is: how is this product classified in your target market?

Get this wrong and every downstream decision is built on the wrong foundation.

In the EU, scalp and hair products are governed by EU Cosmetics Regulation 1223/2009. A product claiming to “reduce hair loss” or “strengthen the hair shaft” can stay within the cosmetic category provided the claim refers to appearance or the condition of the hair — not to a physiological change in follicle biology. The SCCS has reviewed several actives in this space; their SCCS Scientific Opinions on ingredients like piroctone olamine and zinc pyrithione inform how we write claim language in EU-destined products.

In the US, the FDA applies a binary framework: cosmetic or drug. The FDA Cosmetics Guidelines are clear that any product intended to affect the structure or function of the body — including follicle stimulation — falls under OTC drug rules. Minoxidil 2% and 5% are the obvious cases, but we’ve seen brands get caught by claims like “reactivates dormant follicles” on a botanical serum. That phrase, on a US product, is a drug claim regardless of the active. It trips the OTC monograph review. We flag this in every brief intake call.

China sits differently again. Under NMPA Cosmetic Regulation, hair products that claim anti-hair-loss function fall into the “special-use cosmetics” (特殊化妆品) category, requiring pre-market registration rather than notification. The registration dossier includes safety assessment, efficacy substantiation, and a full ingredient list cross-referenced against the Inventory of Existing Cosmetic Ingredients in China (IECIC). Registration timelines under the current framework typically run 6–18 months. We’ve had clients underestimate this by a factor of three.

The classification decision doesn’t just affect claims copy. It changes your required documentation, your testing burden, and your timeline. We almost always push back when a brand wants to file the same claims package across all three markets simultaneously without adjusting language per market.

Market-by-Market Compliance Requirements: What Documentation You Actually Need #

This is the section we refer back to most often in project kickoffs. The table below reflects the documentation we currently track for active scalp and hair growth SKUs across the three primary markets our partners target.

A few things this table doesn’t capture: the EU Responsible Person obligation, which requires a legal entity physically established in the EU to hold the PIF and accept liability — this is a structural commitment, not a paperwork box. And China’s registration timeline variability. The 6–18 month range isn’t sloppy estimation; it reflects real variation between provinces and between new ingredient flags versus clean IECIC-listed formulas.

For brands targeting all three markets, we track documentation status through what we internally call the MR-04 compliance matrix — a living spreadsheet that maps each SKU against its market filing status, responsible party, and gap list. It’s not glamorous, but it’s where projects either stay on track or quietly fall behind.

Where Regulatory Filings Actually Break Down — The Paperwork Failures We See Repeatedly #

The formulation is rarely what causes a compliance delay. In our experience across projects over the past several years, the delays almost always come from one of three sources.

Claim language written after the formulation is locked. Brand teams finalize copy at the end of the project and then discover that the language they’ve drafted doesn’t match the substantiation data they have. A panel study showing “hair feels thicker” supports an aesthetic claim. It does not support “increases hair density by 30%.” Those are different claims with different evidentiary standards. In the EU, EU Cosmetics Regulation 1223/2009 Annex I explicitly requires that the Product Information File include substantiation for each claim made on-pack. We now require brands to draft a claims matrix in week one of the project, not week twelve.

Incomplete supplier documentation for novel actives. We had a project in 2023 involving a proprietary peptide complex from a European supplier — concentration 3%, positioned as the hero active. The supplier’s safety dossier covered the peptide at 1% in a leave-on rinse-off context only. We needed it at 3% in a leave-on scalp serum. The gap meant our safety assessor couldn’t sign off without additional in vitro toxicology data. The delay was eleven weeks. Not eleven days. The formulation was ready. The paper trail wasn’t.

Stability data that doesn’t match the intended claim period. EU and NMPA both require stability data that supports the claimed shelf life. If you’re printing “24 months” on pack, we need to support that with either 24 months of real-time data or ICH Q1-compliant accelerated stability (typically 6 months at 40°C/75% RH for a 24-month claim). Some brands arrive with 12-week accelerated data and expect that to carry a 36-month claim. It doesn’t. Per ICH Stability Guidelines, the extrapolation rules are specific and the EU safety assessor will ask for them.

One thing we’re still not fully resolved on: how to handle stability claims for products containing live microbiome actives at concentrations above 10⁸ CFU/g when positioned as scalp-targeting. The NMPA framework for this is still evolving, and honestly the regulatory pathway is genuinely unclear at this point. We have a working approach but it’s under review.

Technical Deep-Dive: REACH Compliance for Scalp Actives and the Fragrance Problem Nobody Wants to Talk About #

REACH Regulation (EC) No 1907/2006 is the piece of the EU compliance picture that scalp and hair brands most consistently underestimate, partly because it’s processed as a chemicals regulation rather than a cosmetics regulation. But it affects every ingredient in your formula that is imported into the EU — including the fragrance blend, the preservative, the active complex, and the solvent carrier.

For scalp products specifically, the REACH intersection comes up in three places.

Fragrance allergens. The EU’s updated Cosmetics Regulation amendment (in force progressively from 2025) requires disclosure of 56 fragrance allergens on-pack when present above 0.001% in leave-on products and 0.01% in rinse-off products. Scalp serums and tonics are leave-on. This threshold is low enough that even trace-level fragrance contamination from a botanical extract can trigger it. We now run fragrance allergen screening on all incoming botanical raw materials as part of our QC-07 material acceptance procedure — this is not standard across the industry, and we added it after a batch in early 2022 that showed unexpected eugenol from a clove-derived active that wasn’t declared in the supplier’s TDS.

Substances of Very High Concern (SVHCs). The SVHC list is updated every six months. For scalp actives, the most common point of concern is di-n-butyl phthalate (DBnP) and DEHP used as plasticizers in some synthetic polymer delivery systems. If your encapsulation technology uses a phthalate-modified shell material — which some lower-cost encapsulation systems do — you have a REACH issue in the EU. This is a supplier qualification question, not a formulation question, and it needs to happen at brief intake, not during safety assessment.

Registration thresholds. Substances imported into the EU above 1 tonne/year require REACH registration by the importer. For most finished cosmetic products this is handled by the EU importer, not the brand — but the documentation burden falls on whoever acts as the Responsible Person. This matters for brands manufacturing in volume and importing at scale.

The fragrance piece is where projects run into the most friction, in our experience. A clinical study published in Contact Dermatitis (2019, observational design, n=312 scalp-disorder patients, 24-week follow-up) found that 23% of patients with scalp sensitivity showed reactivity to one or more fragrance allergens present in their regularly used hair products — a number that underscores why REACH fragrance allergen compliance isn’t just a legal checkbox for this category. It has real consumer consequences.

The honest position on REACH for scalp brands: most EU importers have it more or less handled for commodity ingredients. Where it breaks down is with novel actives, proprietary encapsulates, and complex botanical extracts where the full INCI composition isn’t fully declared by the supplier. We require full REACH compliance documentation — SDS, registration number where applicable, and SVHC declaration — from all raw material suppliers before anything goes into our scalp-hair-growth product development pipeline.

Formulation Notes for Brand Partners #

When you brief us on a scalp or hair growth product, the first things we need from you are: target market or markets, intended claims (draft copy if you have it), and your retail channel. Those three variables determine the entire compliance architecture before we touch a single ingredient.

The mistake we see most often is brands arriving with a finalized formula concept — sometimes even a prototype from a different manufacturer — and asking us to “just handle the paperwork.” The paperwork isn’t separate from the formulation. If your claims require NMPA special-use registration, the formula itself needs to be locked before registration opens because any subsequent change restarts the dossier. If you’re targeting the EU and making anti-hair-loss claims, your safety assessor needs to be involved before the formula is final, not after.

On timeline: lab samples in 2–3 weeks from brief sign-off, accelerated stability (40°C/75% RH, 13 weeks minimum) running concurrently, 24-month real-time stability initiated at first batch. For EU Responsible Person appointment and CPNP notification, add 4–8 weeks post-formula lock. For NMPA special-use registration, build in 9–12 months minimum from the point of formula finalization — not from today.

What market? What channel? What claims? Start there.

Frequently Asked Questions #

We want to call it an “anti-hair-loss” serum for both the EU and US markets — same claims, same pack copy.

Straightforward answer: this won’t work without separate claims versions. In the EU, “anti-hair-loss” is an acceptable cosmetic claim if substantiated with appropriate data, but the copy needs to refer to the cosmetic condition of the scalp or hair, not to follicle biology. In the US, that same phrase can trigger OTC drug classification depending on how the FDA interprets the overall product presentation — and an OTC drug requires an approved monograph or NDA before you can sell it. Two markets, two claims strategies, one formula. That’s a manageable position. One claims strategy for both markets is where it gets expensive.

What happens to our NMPA registration if we need to change the formula after filing?

It restarts. Any change to the formula — concentration, ingredient swap, even a preservative adjustment — requires a new registration application under the current NMPA framework for special-use cosmetics. This is why we push hard to lock the formula completely before filing opens. We’ve had brand partners make what seemed like a minor tweak at week 6 of a 9-month registration process. The restart cost them roughly 8 months. Build the formula right the first time.

Our fragrance supplier says their blend is REACH-compliant — is that enough?

Not as a standalone declaration, no. “REACH-compliant” is not a standardized certification. What we need is a full SDS (Safety Data Sheet) per REACH Annex II, a declaration confirming SVHC content below 0.1% w/w for all substances on the current SVHC candidate list, and ideally fragrance allergen breakdown at the individual compound level. A one-line compliance claim from a supplier, without supporting documentation, doesn’t satisfy our QC-07 material acceptance requirements — and it won’t satisfy an EU safety assessor either. Response quality from suppliers to that request tells you a lot about their internal systems.

What’s your MOQ for a scalp serum with NMPA registration support, and how long does the full process take?

MOQ is typically 500 kg per SKU for scalp serums requiring NMPA registration, though this can flex depending on packaging format. Total timeline from brief sign-off to registered product available for China market sale: 12–18 months. Lab samples in weeks 2–3, stability initiated at week 4, registration dossier submission typically at month 3–4, NMPA review period 6–12 months. That range is real and we can’t compress it — the NMPA review timeline is outside our control once the dossier is submitted.

Should we bother with ISO 22716 GMP certification, or is it just a box-ticking exercise for EU compliance?

It’s not just a box. The ISO Standards framework for ISO 22716 (Cosmetics GMP) directly maps to what the EU’s Responsible Person is accountable for when signing off on the PIF. An audited, certified facility reduces the safety assessor’s burden considerably and reduces the likelihood of queries that delay notification. For scalp products with active claims, where the PIF is thicker than average, having ISO 22716 certification shortens our safety assessment process by roughly 3–4 weeks in practice. The brands that treat it as a checkbox usually haven’t tried to get a complex EU PIF approved without it.

---

Have a product concept in mind? Contact our formulation team to request a complimentary brief review.