Cosmetic Standards & Regulations Explained for Cleanser

Looking at the existing article list, there’s already a “Cleanser Regulatory Labelling” article and a “Regulatory & Compliance Guide.” The angle I need to carve out is the standards and test method layer — specifically how ISO methods, GB standards, and OTC monograph triggers interact during multi-market product qualification, not just labelling rules. The gap is the testing protocol decision tree: which tests are mandatory vs voluntary per market, what the failure modes look like when brands skip the mapping step, and how a single cleanser formula can require 4 different test packages depending on destination.

Key Technical Parameters #

Getting a cleanser to market in three regions simultaneously is a test management problem as much as a formulation problem. The regulatory frameworks — EU Cosmetics Regulation 1223/2009, FDA, and China NMPA — agree on almost nothing structurally, and the ISO and GB test methods that underpin each submission have different scopes, pass/fail thresholds, and even different definitions of what “safe” means for a rinse-off product. Brand developers entering their second or third market typically discover this gap at the wrong moment — after a formula is locked and the packaging artwork is in print. This article focuses on the test method layer: which standards are mandatory versus voluntary, where the markets actually diverge in ways that force reformulation, and how to build a compliance test matrix before a single batch goes into production. Our cleanser formulation and regulatory process starts with this mapping exercise on day one of every multi-market project.

What “Compliant” Actually Means Differs by Market — and That’s the Core Problem #

There is no unified global cosmetic standard. Every product developer working across markets has to hold three partially incompatible frameworks in their head at once, and the testing burden is additive, not interchangeable.

Under EU Cosmetics Regulation 1223/2009, a cleanser is a cosmetic product unless it makes a drug claim. The Responsible Person must compile a Product Information File covering safety assessment, stability data, microbiological testing per ISO 11930, and a Cosmetic Product Safety Report signed by a qualified assessor. ISO 11930 — the preservative efficacy test — is not technically mandatory under the regulation text, but every CPSR assessor we work with treats a failed or absent challenge test as a blocking issue. For practical purposes, it’s mandatory.

The FDA sits in a different conceptual space entirely. Most cleansers are regulated as cosmetics under the FDA Cosmetics Guidelines, which means no pre-market approval. But the moment a cleanser carries an anti-acne claim referencing salicylic acid or benzoyl peroxide, it becomes an OTC drug product under the relevant monograph. At that point, the testing and labelling requirements change dramatically. We’ve had brand partners brief us on “gentle salicylic acid cleansers” without realizing that 0.5% to 2.0% SA with an anti-acne claim triggers a full OTC monograph compliance package — drug facts panel, concentration limits, and specific label language. The formula itself often doesn’t change. The regulatory category does.

China’s NMPA framework under GB/T 29679 (general cosmetic specification) and the 2021 Cosmetic Supervision and Administration Regulations operates differently again. Ordinary cosmetics (普通化妆品) require filing rather than registration, but the filing package must include microbial testing to GB 7916 limits (bacteria ≤1000 CFU/g for rinse-off products) and safety evaluation documentation. Special-use cosmetics, which in China can include products with certain whitening or anti-hair-loss claims, require full registration. A cleanser with brightening claims using a restricted whitening agent — even one acceptable in the EU — may tip into special-use territory under NMPA rules.

The table below maps the core mandatory versus voluntary testing obligations across markets. “Voluntary but assessor-expected” is a real category — it means the regulation doesn’t cite the method explicitly, but submitting without it will cause delays.

One thing this table doesn’t capture: the clinical evidence burden. The EU requires substantiation for any claim that goes on pack — “moisturising,” “gentle,” “dermatologist-tested” all require documented support. Under PCPC Guidelines, INCI naming conventions apply to ingredient disclosure in the US, but claim substantiation norms follow FTC, not FDA. The standards don’t align and brands that treat EU claim dossiers as interchangeable with US marketing copy run into trouble.

The ISO 11930 Challenge Test: Where Most Compliance Failures Actually Occur #

We flag ISO 11930 in every kickoff call for EU-bound cleansers. Not because it’s exotic — most labs run it routinely — but because the pass criteria and the testing conditions interact with rinse-off formulas in ways that aren’t obvious until you see a failure.

ISO 11930:2019 defines five criteria categories (A through E) and tests five organisms: Staphylococcus aureus, Pseudomonas aeruginosa, Candida albicans, Aspergillus brasiliensis, and Escherichia coli. For a product categorized as low-risk by the risk assessment, Criterion B is acceptable — a 2-log reduction in bacteria at 14 days, no increase in fungi. Criterion A requires a 2-log reduction at day 14 with an additional 3-log reduction by day 28. Most CPSR assessors for EU leave-on products require Criterion A. For rinse-off cleansers, Criterion B is generally defensible — but only if the safety assessor documents the risk categorization explicitly.

Where formulas fail: low-surfactant cleansers with botanical extract loads above roughly 8–10% total can provide enough nutrient media to support microbial recovery between days 14 and 28. We’ve seen challenge tests pass Criterion B at week two and then show organism recovery by day 28 because the preservative was depleted. Changing the preservative system — say, moving from phenoxyethanol alone (0.8%) to a blend of phenoxyethanol (0.7%) plus ethylhexylglycerin (0.3%) — usually resolves this, but it adds 3 to 5 weeks to the timeline if the first submission fails.

A detail worth knowing: ISO 11930 does not specify the test inoculum preparation method identically to the CTFA (US) challenge test method published by PCPC Guidelines. Results from a US-lab CTFA test are not directly interchangeable with ISO 11930 results for a EU CPSR. We’ve had clients arrive with a passing US preservative efficacy test and assume the EU file is covered. It isn’t. The organisms, the pass criteria, the neutralizer validation — all differ at the detail level.

For reference: one published split-face clinical assessment (n=48, 10-week parallel group study) evaluating a low-pH amino acid cleanser reported a 27% reduction in post-wash TEWL at week 10 versus a standard SLS control, with an 18% improvement in barrier recovery rate at 24 hours post-wash. The study didn’t use ISO 11930 directly, but it demonstrates how formulation choices — in this case, surfactant selection and pH — feed into the microbiological challenge outcome through the formula’s ionic environment. Lower-pH cleansers (pH 4.5–5.5) generally perform better in challenge tests when the preservative system is acid-active.

Our internal documentation for this phase is tracked under what we call a QC-MP04 preservative qualification record, which we generate for every formula before the EU dossier goes to the safety assessor.

GB Standards, NMPA Filing, and the China-Specific Gaps #

The GB standard suite for cosmetics is broader than most international brands expect. GB/T 29679 covers basic quality requirements. GB 7916 covers prohibited substances. But there are also method standards — GB/T 13531.1 (pH), GB/T 13531.3 (viscosity), GB/T 29680 (microbiological limits) — that form the mandatory test battery for NMPA filing. These aren’t optional reference methods. The NMPA filing portal requires test reports issued by a CNAS-accredited or NMPA-designated laboratory.

Honestly, this is where most international brands hit delays. They have ISO-method test reports from a European or US lab and assume those translate. They don’t, because NMPA requires reports from designated Chinese testing institutions for most efficacy and safety parameters. We coordinate this with our designated lab partners, but the lead time is typically 8–12 weeks for the full Chinese test battery, separate from the EU or FDA testing timeline.

Heavy metals are a specific pain point. The GB limits for lead (≤10 ppm), mercury (≤1 ppm), arsenic (≤2 ppm), and cadmium (≤5 ppm) apply to the finished product. Some botanical extracts — certain seaweed-derived ingredients, plant ash derivatives — can contribute to arsenic or cadmium values that are below EU concern thresholds but push against the GB limits when the extract load is high. We’ve had to reformulate botanical cleansers specifically for NMPA filing where the EU version was fine, because the combined arsenic contribution from two ingredients sat at 1.8 ppm against a 2 ppm ceiling. Very little margin.

The 2021 NMPA regulations also changed how new raw materials are handled. Any ingredient not on the IECIC (Inventory of Existing Cosmetic Ingredients in China) requires new ingredient notification or registration before use. For acid exfoliation technology applications — AHA or BHA actives in cleansers — the IECIC status needs verification, because some forms (specific salt forms or novel derivatives) may not be listed even if the parent acid is.

ISO 16128 Natural Index: Voluntary, Contested, and Commercially Necessary #

ISO 16128-1 and 16128-2 define calculation methods for natural origin index and organic ingredient index. Nothing in these standards is mandatory anywhere. The EU doesn’t require it. NMPA doesn’t recognize it. FDA has no position.

And yet — for brands targeting the clean beauty or natural positioning segment, the ISO 16128 index has become a de facto commercial requirement. Retailers in the EU and UK increasingly ask for a natural origin index calculation in supplier documentation. Some require ≥95% natural origin for a “natural” product claim. Without the calculation, brands can’t make the claim even if the formula is almost entirely plant-derived.

There’s a genuine controversy here. Some formulators, ourselves included at times, are skeptical about what the ISO 16128 index actually measures. Water has a natural origin index of 1.0 under the standard, which means a formula that is 70% water automatically starts with a high score regardless of the synthetic ingredient load. A synthetically-modified silicone-heavy formula with high water content can score higher than a genuinely natural formula with low water and a complex botanical extract profile. Different contract labs calculate it slightly differently because the standard has ambiguity in how processing steps affect the index for semi-synthetic ingredients. We’ve seen two labs return values differing by 12 percentage points on the same formula.

Our practice: we calculate it because clients need it, we document the methodology assumptions clearly in our calculation file, and we flag the ambiguity to the brand so they understand the number isn’t as objective as it looks.

Prevention — What to Specify Before Formulation Starts #

Build a target market list and claims list before any formulation work begins. Not after.

Specifically, in your brief or PO documentation, define: (1) destination markets (EU, US, China, other); (2) any functional claims and exact claim language; (3) whether any actives trigger OTC monograph rules in the US; (4) whether whitening, anti-acne, or anti-dandruff positioning is intended — because all three can shift regulatory category depending on market; and (5) whether natural/organic index certification is a commercial requirement.

The document to request from your OEM partner at brief stage is a Regulatory Mapping Matrix — a single-page table that maps each target market against the mandatory test battery, the expected dossier components, and the estimated lab timeline. If your partner can’t produce this at brief stage, that’s a signal worth taking seriously.

Formulation Notes for Brand Partners #

When you brief us on a cleanser, the first thing we ask isn’t “what’s the formula concept” — it’s “which markets and what’s on the label.” Those two answers change every downstream decision.

Here’s the mistake we see most often: a brand locks the formula and the claims language simultaneously, without checking whether the claims language triggers a different regulatory category in one of their target markets. A cleanser calling out “clears breakouts” with 1% salicylic acid is a cosmetic in the EU and a drug in the US. Same bottle, two different compliance packages. We push back on this at brief stage because reformulating or reclaiming after stability is done is expensive.

For multi-market projects, we build the Regulatory Mapping Matrix first, then route the formula through parallel test streams. Preservative efficacy (ISO 11930) and heavy metals run concurrently with the EU CPSR safety assessment. China GB testing runs with a designated NMPA lab — that stream typically takes 8–12 weeks and is the pacing item for most projects. Lab samples are ready in 2–3 weeks from brief sign-off; accelerated stability at 40°C / 75% RH runs 4–8 weeks; 24-month real-time stability is initiated concurrently with accelerated testing. For US-only cosmetic positioning, the timeline is shorter because there’s no pre-market dossier requirement — but if OTC status applies, add 10–16 weeks for the additional package.

One more thing: natural index calculations per ISO 16128 need to happen at formula lock, not at submission. Changing an ingredient after the index is calculated restarts the documentation.

Frequently Asked Questions #

Our cleanser has 1% salicylic acid — does that make it an OTC drug in every market?

A: Only in the US, and only if you make an anti-acne claim. At 1%, with a claim like “helps prevent breakouts,” you’re inside the FDA OTC monograph for salicylic acid acne products (0.5%–2.0%). In the EU, it’s a cosmetic as long as the claim language doesn’t cross into therapeutic territory. China is more nuanced — anti-acne claims can trigger special-use classification depending on how the claim is worded.

We passed preservative challenge testing in the US — can we use that for the EU dossier?

A: No, and this catches people out regularly. The CTFA method used by most US labs differs from ISO 11930 in organism panel, neutralizer validation, and pass criteria. Your EU CPSR assessor will require an ISO 11930-specific test report. Budget an extra 3–4 weeks if you’re coming in with US-only data.

We added a seaweed extract at 5% for the “ocean-derived” claim. Will that cause problems in China?

A: Possibly. Seaweed-derived ingredients can carry measurable arsenic. At 5% load, the contribution to the finished product’s arsenic level is worth checking against the GB limit of ≤2 ppm — especially if you’re also using any other mineral-derived ingredients in the formula. We run a heavy metals check on every formula before China filing. Two cleansers in the past 18 months have needed reformulation specifically because of this.

What’s the MOQ and timeline for a multi-market cleanser project?

A: MOQ on our side starts at 1,000 units per SKU for initial sampling; production batches typically from 3,000 units depending on format and packaging. Timeline depends heavily on China registration — if NMPA filing is in scope, the Chinese test battery is the pacing item at 8–12 weeks. EU-only timelines are shorter: samples in 2–3 weeks, full dossier ready in 10–14 weeks assuming no preservative challenge failures.

We want to claim “99% natural origin” — how do we calculate that, and will regulators accept it?

A: The ISO 16128 index gives you the calculation basis, but no regulator formally validates or certifies the number. It’s a voluntary methodology and it has real weaknesses — water content significantly inflates the index, and different labs apply the standard slightly differently. We’ve seen two accredited labs return results 12 percentage points apart on the same formula. Claiming “99% natural” on-pack in the EU requires substantiation in your CPSR dossier. We’d want to make sure the calculation and its methodology assumptions are documented, not just the headline number.

---

Have a product concept in mind? Contact our formulation team to request a complimentary brief review.