Skincare bottles, serum dropper, cosmetic cream jars, and a clipboard representing cosmetic product documentation and regulatory compliance.

What Goes Into a Cosmetic Product Information File (PIF)?

Alongside the CPSR, the Product Information File the PIF is the document every cosmetic brand must hold for each product it sells. It is the complete dossier a market surveillance authority will ask to see, and keeping a compliant one is a core legal duty of the Responsible Person. This guide explains exactly what a PIF must contain and why each part matters.

The PIF sits at the centre of cosmetic compliance, with the CPSR at its core. Here we look at the file as a whole and its five defined components.

What the PIF is

The PIF is the structured file of information a business must keep to demonstrate that a cosmetic product is safe and compliant. Under Regulation (EC) No 1223/2009 and the retained UK Cosmetics Regulation, the Responsible Person must hold a PIF for each product and make it readily accessible to the competent authority on request. It is not submitted anywhere by default it is held on file, ready to be produced if asked.

Think of the PIF as the evidence bundle that proves a brand has done everything the regulation requires. If an authority investigates a product following a complaint, a market check, or a routine inspection the PIF is the first thing they will want to examine. A complete, well-organised PIF is therefore both a legal requirement and a practical safeguard.

The five components of a PIF

The regulation prescribes what a PIF must contain. There are five components: a description of the product, the CPSR, a description of the manufacturing method with a GMP statement, proof of any claimed effect where justified, and data on animal testing. A file missing any required component is not compliant. We take each in turn.

While the CPSR is the safety heart of the file, the other components matter too they establish what the product is, how it is made, that its claims are supportable, and that it meets the animal-testing rules. Together they form a complete picture of the product's compliance.

1. A description of the cosmetic product

The PIF opens with a description of the product clear enough that the file can be unambiguously linked to the product it concerns. This identifies exactly which product the dossier relates to its name, its identity, and enough detail to tie the file to the item on the shelf. It sounds simple, but it is essential for a file that may need to be located and produced years later.

For a brand with a range of products, this component is what keeps the files distinct and traceable. Each product has its own PIF, and the description is what anchors each file to its specific product and formulation.

2. The Cosmetic Product Safety Report

The CPSR Parts A and B is the core of the PIF. This is the safety assessment that concludes the product is safe for human health, together with the underlying safety information. Without a valid CPSR, the PIF is fundamentally incomplete, because the safety assessment is the very thing the file exists to evidence.

This is why the CPSR and the PIF are so closely linked, and why obtaining the CPSR is usually the central task in building compliance. Our guides to the CPSR Part A and Part B explain the assessment; here, the point is simply that it belongs at the heart of the file.

3. Manufacturing method and GMP statement

The PIF must include a description of the manufacturing method and a statement of compliance with Good Manufacturing Practice (GMP). GMP for cosmetics is set out in the harmonised standard ISO 22716, and compliance with it is presumed where a product is manufactured in line with that standard. This component demonstrates the product is made consistently and hygienically.

GMP matters for safety: a well-formulated product can still be unsafe if manufactured poorly contaminated, inconsistent, or wrongly dosed. The manufacturing description and GMP statement give the authority confidence that the product reaching consumers matches the one that was assessed. Brands using a third-party manufacturer should ensure they can obtain this information.

4. Proof of the claimed effect

Where the nature or effect of a product justifies it, the PIF must contain proof of the effect claimed. If a product makes a specific claim a performance or benefit claim there should be evidence to support it. This does not mean every trivial descriptor needs a clinical trial, but significant claims must be substantiable, and the supporting evidence lives in the PIF.

This component ties into the wider rules on cosmetic claims, which must be truthful, evidence-based and not misleading. Marketplaces and regulators scrutinise claims closely, so holding the substantiation for what you say about a product is both a PIF requirement and sound commercial practice.

5. Data on animal testing

Finally, the PIF must include data on any animal testing carried out in relation to the development or safety assessment of the product or its ingredients. Both the UK and EU operate a ban on animal testing for cosmetics and on marketing products tested on animals, so this component documents the position and reflects the testing methods used.

For most modern cosmetics developed without animal testing, this component records that fact and the alternative methods relied upon. It ensures the file reflects the animal-testing rules that are a defining feature of UK and EU cosmetic regulation.

Keeping the PIF accessible and current

Holding a PIF is not a one-off task. It must be kept up to date reflecting any reformulation, new safety data, or regulatory change and kept accessible at the address of the Responsible Person indicated on the label, in a form and language the competent authority can readily use. A file that exists but is out of date or inaccessible does not meet the requirement.

There are also rules on how long the PIF must be retained after a product is last sold, which we cover in our guide to how long a PIF must be kept. The overall principle is that the file is a living record, maintained throughout the product's life and beyond.

Common PIF failings

A few failings recur when authorities examine Product Information Files. The most common is an incomplete file one where a component is missing, most often gaps in the ingredient or testing documentation that underpins the CPSR, or an absent GMP statement. The second is an out-of-date file that no longer reflects a reformulation or a regulatory change affecting one of the product's ingredients. The third is a file that is inaccessible held somewhere it cannot be produced promptly, or not at the Responsible Person's address on the label.

A further, subtler failing is a disconnect between the file and the product actually on the market: a label that carries different warnings from those the CPSR specifies, or a formulation that has quietly drifted from the one assessed. Each of these turns a nominally present PIF into a non-compliant one. The fix in every case is the same discipline keep the file complete, current, accessible and genuinely matched to the product it describes.

For a growing brand, the practical challenge is maintaining this across many products at once. Treating the PIF as a living record for each product, reviewed whenever the product or the regulations change, is what keeps a portfolio of files audit-ready rather than quietly slipping out of compliance.

The PIF at a glance

PIF component What it demonstrates
Product description Identifies the specific product
CPSR (Parts A & B) The product is safe the file's core
Manufacturing & GMP Made consistently and hygienically (ISO 22716)
Proof of claims Claimed effects are supportable
Animal testing data Compliance with the testing ban

Need help building or reviewing your PIF? Spectra assembles complete, audit-ready Product Information Files around your CPSR, so you can produce them with confidence if an authority asks.

 Get PIF support from Spectra

Frequently asked questions

What is a Product Information File?

The PIF is the dossier a cosmetic brand must hold for each product, demonstrating it is safe and compliant. The Responsible Person keeps it and makes it available to the competent authority on request.

What must a PIF contain?

Five components: a description of the product, the CPSR, a description of the manufacturing method with a GMP statement, proof of any claimed effect where justified, and data on animal testing.

Is the PIF the same as the CPSR?

No. The CPSR is the safety assessment and sits at the core of the PIF, but the PIF is the wider file that also includes the product description, manufacturing and GMP information, claim evidence and animal-testing data.

Do I submit the PIF to an authority?

Not by default. The PIF is held on file by the Responsible Person and produced on request. It must be readily accessible at the RP's address indicated on the label, in a language the authority can understand.

What is the GMP standard for cosmetics?

ISO 22716, the harmonised Good Manufacturing Practice standard. Manufacturing in line with it supports the GMP statement in the PIF and gives confidence the product is made consistently and hygienically.

Do I need proof for every claim?

Significant claims must be substantiable, with the evidence held in the PIF. Not every descriptor needs a clinical trial, but claims must be truthful, evidence-based and not misleading.

Who is responsible for the PIF?

The Responsible Person. They must hold a compliant, up-to-date PIF for each product and keep it accessible to the competent authority throughout the required retention period.

What are the most common PIF problems?

Incomplete files (missing documentation or GMP statement), out-of-date files that don't reflect a reformulation or regulatory change, inaccessible files, and files that no longer match the product on the market for example a label carrying different warnings from those the CPSR specifies.

References: Regulation (EC) No 1223/2009, Article 11 (EUR-Lex); UK Cosmetics Regulation as retained; ISO 22716 (GMP); OPSS guidance. General information only, not legal advice.

 

Zurück zum Blog