Who Should Prepare Your Cosmetic Product Safety Report? Choosing a CPSR and Responsible Person Partner for the UK and EU

Every brand reaches the same crossroads: the product is finished, the labels are designed, and a search for cosmetic safety assessment returns fifty providers between five pounds and five thousand. The stakes are higher than the price range suggests, because the Cosmetic Product Safety Report is the document that makes the product legal, the Responsible Person's address goes on your label for the life of the product, and both are the first things a regulator, a marketplace or an insurer will ask to see. Regulation (EC) No 1223/2009 requires a Responsible Person established in the market, a safety report signed by a person with a specified qualification, a Product Information File and a notification; the UK regulation enforced through the Cosmetic Products Enforcement Regulations 2013 requires the same for Great Britain. Choosing well is a week's work. Choosing badly can cost a launch.

This is the evaluation Spectra would like to be judged by, written so you can apply it to us or to anyone. It covers what the law actually requires of whoever prepares your Cosmetic Product Safety Report, how to check a Responsible Person is genuinely established, how to read a sample Part B before you buy, the seven questions to send every provider and the answers to expect, why the whole chain from one submission saves months, what should happen after delivery, how pricing and turnaround should behave, the red flags to walk away from, a worked comparison of three quotes for a ten product range, and a short scorecard. Ask the questions. A good provider will be pleased you did.

What does the law require of whoever writes your CPSR?

Article 10 requires the safety assessment to be carried out by a person in possession of a diploma or other evidence of formal qualifications awarded on completion of a university course of theoretical and practical study in pharmacy, toxicology, medicine or a similar discipline, or a course recognised as equivalent. That person signs Part B in their own name. This is the floor and it is not negotiable. A Cosmetic Product Safety Report signed by a company, by an unnamed team, or by someone whose credential is a formulation diploma or twenty years of making soap does not satisfy Article 10, however professional the document looks. Separately, Article 4 requires a Responsible Person established in the Union, and the UK regulation requires one established in the UK for Great Britain, who holds the Product Information File at the address that appears on the label and answers to the authorities.

How do I check a Responsible Person is genuinely established?

Ask for the legal entity that will be named on your label, then look it up. For Great Britain that means a UK registered company with a UK address; for the EU, a company registered in a member state with a physical address there, and Northern Ireland counts for the EU regime. That address must be the one printed on your pack, and the entity must actually hold your Product Information File and be able to produce it to an inspector. A serviced office with no staff, a mail forwarding address, or a UK company offering to be your EU Responsible Person are all failures of establishment, and the consequence is not theoretical: the Responsible Person carries the legal exposure and is who the authority writes to. Any provider should be able to answer this in one sentence, with a company number.

How do I judge a Cosmetic Product Safety Report before I buy one?

Ask for a redacted Part B for a product like yours and read it for six things. A named signatory with a stated qualification and a date. A conclusion that names the product and every variant it covers. Conditions and warnings in exact wording, not general advice. A margin of safety calculation with the sources it used. A sensitisation assessment that names the limiting fragrance constituent and produces an allergen declaration. And, if you sell in both markets, an explicit statement that the product has been assessed against both the UK and EU regulations. A sample that runs to a page of generic text and ends with a company stamp is not a safety report; it is a certificate of nothing, and it will be recognised as such by the first marketplace compliance team that reads it.

The seven questions to send every provider

Do I need one partner for the whole chain?

You are not required to, but the pieces are joined. The frame formulation in your notification comes from Part A. The warnings on your label come from Part B. The Product Information File holds the report, the supplier documents, the manufacturing information and the claims evidence. The Responsible Person is answerable for all of it. When the assessor, the notifier and the Responsible Person are three companies who have never spoken, the gaps appear at exactly the points a regulator looks. Spectra's Complete Compliance Pack exists for this reason: one submission produces the CPSR, the Product Information File, the Safety Data Sheet and the SCPN or CPNP notification at £295, and Responsible Person cover sits on top where a brand needs it. A brand with in house regulatory staff may sensibly buy only the report.

What should happen after the report is delivered?

This is where providers differ most and where evaluation should spend most of its time. Products change: a fragrance supplier switches, a scent is added, packaging changes, a claim is revised, a new market opens. The law changes: annex amendments, the expanded EU allergen list with its July 2026 and 2028 deadlines, divergence between Great Britain and the EU. Authorities and marketplaces ask questions. A partner worth keeping issues addenda quickly at a known price, monitors the annexes for your ingredients and tells you when something lands, updates the Product Information File and the notification when you change something, and answers a Trading Standards or marketplace enquiry on your behalf. Ask what each of those costs and how long it takes, because the answers describe the next five years of the relationship rather than the next five days.

How should pricing and turnaround behave?

A Cosmetic Product Safety Report is professional time, so honest pricing scales with complexity: anhydrous products with one documented fragrance at the low end, water based products with actives and several essential oils higher, ranges priced per variant, dual market reports above single market ones. A flat price for every product regardless of composition means the toxicological work is not being done. Turnaround should be stated as a range that depends on your documents, with a clear list of what is needed; complete fragrance documentation makes a report fast and missing documentation makes it slow, and a provider who tells you that before you pay will tell you the truth later too. Spectra's standard delivery is 3 to 5 days from complete data, with 72 hour and 48 hour priority tiers, and our product pages carry real prices: perfume CPSR from £84, the Complete Compliance Pack at £295, SCPN from £15.

The red flags

• A Responsible Person address that is a postbox or in the wrong market.
• Reports signed by a company or an unnamed team.
• No sample Part B, or a sample with no calculations and no conditions.
• A flat price for every product type.
• A guaranteed pass, or a CPSR certificate or badge for sale.
• Turnaround promised in hours for a complex water based product.
• No answer on addenda, monitoring, or who handles a regulator.
• Pressure to sign a multi year Responsible Person contract before seeing any work.
• Confusion between a cosmetics Responsible Person and a pharmaceutical WDA(H) responsible person, which is a different regime entirely.

A worked comparison: three quotes for a ten product range

Quote one is cheapest: a flat fee per product, an EU Responsible Person at an implausibly low annual rate, no Product Information File, no notification, and no sample offered. On enquiry the Responsible Person address is a serviced office with no staff and the reports are signed by the company. Quote two is a large consultancy: excellent credentials, high prices, six week turnaround, a German Responsible Person entity, addenda quoted hourly, and the brand would be one of several hundred clients. Quote three is a specialist: named assessors with published qualifications, a sample Part B containing a margin of safety table and an allergen declaration, a real Responsible Person entity with staff, the whole chain from one submission, prices per product by complexity, fixed fee addenda, regulatory monitoring included and a verification page where any report can be checked. The brand takes the third. Eighteen months later, when the expanded allergen list lands and a marketplace asks for documents, it is the only one of the three that would have been worth having.

A scorecard you can use in an afternoon

• Signatory qualification and visibility. Essential. Named, qualified, verifiable.
• Responsible Person establishment. Essential. Real entity, real address, in your market.
• Sample Part B quality. High. Calculations, conditions, allergen declaration.
• Market coverage. High. UK, EU or both, stated in the report; Northern Ireland understood.
• Whole chain from one submission. Medium to high, depending on your in house capability.
• After sales. High. Addenda, monitoring, regulator response, all defined.
• Pricing and turnaround honesty. Medium. By complexity; tied to documents.
• Verification and references. Medium. Can the report be checked?
  

Myths we hear

• Any EU address will do for the Responsible Person. It must be a genuinely established entity that holds the file and answers the authority.
• The cheapest CPSR is legally the same document. Only if a qualified person signed it, and it will not read the same at an inspection.
• I can change providers easily later. Your label carries the Responsible Person's address, so changing means reprinting.
• A big name is automatically safer. Verify the same seven things regardless of size.
• I only need the report. Unless someone in house does the PIF, notification and label, you need the chain.

What to do this week

• Decide which of the four services you actually need.
• Send the seven questions to three providers.
• Look up each Responsible Person entity on the company register.
• Read a redacted Part B from each.
• Choose, sign the mandate and get the first submission moving.

The right partner answers every question specifically and is glad to be checked. Send us the seven questions, or start with a CPSR service for one product and judge the report before you commit the range.

Related reading on the Spectra blog

• Does one Cosmetic Product Safety Report cover every market?
• All Spectra articles
• CPSR services by product type
• Verify a Spectra report

Spectra services mentioned in this article

• The Complete Compliance Pack: CPSR, PIF, SDS and SCPN or CPNP (£295)
• CPSR services by product type
• PIF services
• UK and EU Responsible Person
• UK SCPN Product Notification
• EU CPNP Product Notification
• Contact Spectra

Official sources and legislation

• Regulation (EC) No 1223/2009 on cosmetic products, Articles 4 and 10
• Cosmetic Products Enforcement Regulations 2013
• Scientific Committee on Consumer Safety (SCCS)
• OPSS guidance on cosmetic products regulations
• Office for Product Safety and Standards