Who Is the Responsible Person for Private Label and White Label Cosmetics Compliance?

Spectra Cosmetic Compliance

This is closely tied to the Responsible Person role. Here we focus on how it applies to private and white label products.

What private and white label mean

White label typically means buying a pre made, generic product and branding it as your own. Private label often means a product made to your specification or with some customisation, sold under your brand. The terms are used loosely and overlap, but the common thread is the same: you are selling, under your own name, a product manufactured by someone else.

This model is attractive because it removes the need to formulate and manufacture from scratch. But it does not remove the compliance obligations it simply changes who holds them. That is the key point many new brands miss.

The key principle: selling under your name

The decisive factor is that when you place a product on the market under your own name or brand, you generally become the Responsible Person for it. The regulation treats the party who markets a product under their own brand as carrying the compliance responsibility regardless of who actually made it. Branding a product as yours means taking on the obligations that come with it.

So the fact that a manufacturer made the product does not make them responsible for your branded version's compliance in the market. By putting your name on it and selling it, you step into the Responsible Person role, with all the duties that entails. This is the crux of private and white label compliance.

What that responsibility means

As the Responsible Person, you must ensure the product has a valid CPSR, that a Product Information File is held and kept accessible, that the product is notified, and that its labelling is compliant including your Responsible Person details. You are accountable to the authorities and must be able to produce the file and act if there is a problem.

This is a genuine set of obligations, not a formality. It means you cannot simply assume the product is compliant because a supplier says so you need to be able to demonstrate compliance, with documentation you can access and stand behind. Our Responsible Person guide sets out the full duties.

The documentation question

This raises a practical issue: as the Responsible Person, you need the compliance documentation CPSR, PIF components, ingredient and testing data for the product. A good private label supplier will provide, or help you obtain, this documentation. But you must ensure you actually have it and that it is valid for the product as you sell it.

Before committing to a private label arrangement, confirm what compliance documentation the supplier provides and whether it genuinely covers your obligations. A supplier who cannot support you with proper documentation leaves you, as Responsible Person, exposed holding the responsibility without the evidence to meet it.

The market matters

The Responsible Person must be established in the market of sale, so a private label brand needs an RP in each market it sells in UK Established for Great Britain, EU Established for the EU. A supplier's documentation may have been prepared for one market you need to ensure your product is compliant, and notified, in the market where you are selling it.

This is particularly important for imported private label products. Buying a product made outside your market and selling it under your brand makes you responsible for its compliance in your market, including having an established Responsible Person there. The supplier's home market compliance does not automatically cover yours.

If you customise the product

If you modify a white label base changing the formulation, adding a fragrance or active, or altering it beyond simple branding you may need a new or updated safety assessment for your version, because the CPSR is tied to the specific formulation. A change to the formula can mean the supplier's assessment no longer covers your product.

So the more you customise, the more you take on a formulation of your own, with its own assessment requirements. Simple rebranding of an unchanged product is different from creating a customised version. Being clear about which you are doing and its compliance implications is important before you launch.

Doing private label right

Private label can be a perfectly sound route to market, provided you go in understanding that you carry the compliance responsibility. That means choosing a supplier who supports you with proper documentation, ensuring you have a Responsible Person established in your market, confirming the product is notified where you sell it, and getting a fresh assessment if you customise.

Approached this way, private label is a legitimate model used by many successful brands. The mistake to avoid is assuming that because someone else made the product, someone else is responsible for its compliance. Once your name is on it, that responsibility is yours  so make sure you can meet it.

Marketplaces are asking for proof

A practical pressure making private label compliance unavoidable is that marketplaces and retailers increasingly ask for proof. Platforms selling cosmetics may require evidence of compliance a valid safety assessment, a Responsible Person, proper notification before listing or continuing to list a product. A private label seller who assumed the supplier handled compliance can find a listing blocked or removed.

This means a private label brand cannot rely on being invisible or on the supplier’s reputation. When a marketplace asks the brand as the seller under its own name to demonstrate compliance, the brand as Responsible Person must be able to produce it. Not being able to do so can cut off a sales channel, quite apart from any regulatory consequence.

So the commercial reality reinforces the legal one: as a private label seller, you need to hold and be able to produce the compliance documentation for your products. Choosing a supplier who genuinely supports you with that documentation, and ensuring your Responsible Person arrangements are sound, is what lets you satisfy both the regulators and the marketplaces you depend on.