CPNP and the EU Responsible Person: What K-Beauty Must File Before Selling in Europe
Retinol, kojic acid and arbutin all hit EU concentration caps between 2025 and 2026, and all three are staples of Korean whitening and anti-ageing lines. Reformulation, not paperwork, is usually the real blocker. Here is the full cost and sequence for one SKU.
Korean brands preparing for Europe usually budget for the notification and underestimate the reformulation. That is the wrong way round. CPNP itself is free. The expensive discovery is that your hero product cannot legally be sold in its current formula.
Three ingredient restrictions landed between February 2025 and May 2026, and all three sit at the centre of Korean product development.
The three caps that catch Korean formulas
| Ingredient | EU limit | Cannot be placed on market from | Cannot be made available from |
|---|---|---|---|
| Kojic acid | 1% in face and hand products | 1 Feb 2025 | 1 Nov 2025 |
| Retinol and retinyl esters | 0.05% RE body lotion, 0.3% RE other | 1 Nov 2025 | 1 May 2026 |
| Alpha-arbutin | 2% face cream, 0.5% body lotion | 1 Feb 2025 | 1 Nov 2025 |
| Arbutin | 7% face cream | 1 Feb 2025 | 1 Nov 2025 |
Retinol products above the cap also require a mandatory label warning: "Contains vitamin A. Consider your daily intake before use."
Kojic acid and arbutin are the backbone of Korean brightening lines. Retinol runs through most anti-ageing ranges. If your portfolio leans on 기능성화장품 whitening or anti-wrinkle claims, assume at least one reformulation before you assume a filing timeline.
And note the second-order cost: reformulating to clear a cap can trigger a fresh safety assessment, because the assessment covers the formula you actually sell.
Who can be your Responsible Person
A Korean brand with no EU entity cannot act as its own Responsible Person. It must appoint an EU-based importer, distributor or consultancy by written mandate.
The trap sits in what happens if you skip that step. If no RP is appointed, the importer becomes the RP by default. Your European distributor inherits full legal liability, product information file custody and cosmetovigilance duties, frequently without realising it until a market surveillance inspection arrives.
This is worth raising in distributor negotiations deliberately. It changes the commercial balance. A distributor who understands they are carrying RP liability will price it. A distributor who does not understand it is carrying a risk neither side has agreed.
RP duties run for a long tail. The product information file must be kept for 10 years after the last batch is placed on the market.
One structural point: distributors are not automatically RPs under Article 6 unless they rebrand, private-label or modify the product. Rebranding for the European market therefore moves liability, which brands doing white-label deals often miss.
What the CPSR involves
The Cosmetic Product Safety Report has two parts. Part A is safety data, toxicology and exposure. Part B is the qualified assessor's conclusion. The assessor must hold a degree in pharmacy, toxicology, medicine or equivalent with recognised EU training.
There is no government fee schedule for a CPSR. Every number below is a market rate from compliance vendors, not a regulated price, and providers vary widely.
- Simple formulations, such as soap or a basic moisturiser: €180 to €250
- Complex or higher-risk formulas, eye area or mucous membrane contact: €350 to €450 and upward
- Additional fragrance variants on an already assessed base: roughly £40 each
- Standard turnaround 5 to 10 business days, rush 3 to 5 days at €100 to €150 extra
Two tests sit outside the CPSR and drive the real timeline:
- Preservative efficacy or challenge testing, required for most water-containing products: €150 to €300, and 28 to 40 days
- Stability testing: €300 to €1,000
The challenge test is the schedule. Nothing compresses a 28 day microbiological test.
RP services themselves run €200 to €900 per product per year, or €1,500 to €5,000 annually for a portfolio package.
The UK is a separate country for this purpose
Great Britain left CPNP. It runs its own SCPN regime, and Northern Ireland stays on EU rules.
Selling into both means:
- A separate UK-based Responsible Person
- A separate product information file held at a UK address
- UK sign-off on the safety report
- Notification through the OPSS SCPN portal
The SCPN portal is free. Penalties for failing to notify are an unlimited fine in England and Wales, up to £5,000 in Scotland and Northern Ireland, plus up to three months imprisonment.
The cost structure surprises people in a useful way. UK sign-off appended to an existing EU CPSR is often only £50 to £150, far cheaper than a standalone UK report at £189 and up. The real duplication cost is the separate RP and the separate PIF address, not the science. Budget roughly 40 to 60 percent on top of an EU-only setup.
Total cost and time for one SKU
Using third-party RP and agent services with no EU or UK entity, vendor estimates put a first SKU at roughly €1,500 to €4,500 for the EU and £1,200 to £3,500 for the UK. At ten SKUs the effective per-product cost falls to around €500 to €1,500 and £400 to £1,200.
Realistic timeline once the formula is final: 6 to 10 weeks per product, assuming no reformulation is needed. Add a full development cycle if a cap forces a change.
Two things most compliance guides get wrong
The China animal testing conflict is largely out of date. Nearly every guide still tells Korean brands that EU and Chinese requirements are irreconcilable. Since May 2021 China has exempted imported ordinary-use cosmetics from mandatory animal testing where the exporting country provides a GMP certificate and non-animal safety evidence, and NMPA expanded that exemption again in July 2026. The conflict still exists for categories that do not qualify, so it needs checking at SKU level, but the blanket claim is no longer true.
"Not tested on animals" is a compliance risk on EU packaging, not a selling point. Animal testing for cosmetics has been banned EU-wide since March 2013. Stating it implies a differentiator that cannot exist, which runs against the truthfulness and fairness criteria in the claims regulation. Korean brands used to making this claim elsewhere need EU-specific label variants.
What is coming
Fragrance allergens. Regulation 2023/1545 expands the declarable allergen list from 26 substances to 82. Products placed on the market after 31 July 2026 must comply. Existing stock has until 31 July 2028. This forces label redesign across an entire range at once, and switching a fragrance to avoid a newly listed allergen can trigger a new safety assessment. Audit fragrance formulations now rather than close to the deadline.
Microplastics. Regulation 2023/2055 already banned loose glitter and rinse-off microbeads. Rinse-off cosmetics generally comply by 2027. Make-up, lip and nail products have until October 2035, but from October 2031 must carry the label "This product contains microplastics."
Omnibus VI, which would simplify Regulation 1223/2009 and speed new ingredient approvals, is still a proposal and not law. Do not plan around it. Omnibus VIII, tightening CMR substance rules, did take effect on 1 May 2026.
The sequence that works
1. Screen your INCI list against current EU restrictions before anything else. This is the step that decides whether you have a filing project or a reformulation project.
2. Appoint the RP in writing. Do not let it default to your importer by silence.
3. Start challenge testing early. It is the 28 to 40 day item on the critical path.
4. Commission the CPSR once the formula is genuinely final.
5. Notify through CPNP, and separately through SCPN if you are selling into Great Britain.
6. Build EU-specific label artwork, including the allergen expansion and without the animal testing claim.
The brands that move fastest into Europe are not the ones with the best regulatory consultant. They are the ones who checked their ingredient list against the caps before committing to a launch date.
Ingredient restrictions and deadlines cited here come from amendments to Regulation (EC) No 1223/2009 published in the Official Journal. Cost figures are compliance vendor market rates, not regulated fees, and vary by provider. Confirm current requirements before filing.