Importing Cosmetics from China: EU CPNP & FDA MoCRA Guide

Most sourcing conversations with a skincare OEM China partner start with unit price and MOQ. They should start with a different question: when a regulator in Brussels, London, Washington or Canberra opens a file on your product, whose name is on it? Almost always, it is yours — not the factory's.

If you are a brand, an importer, an Amazon aggregator or a distributor buying from China, this guide is written for you. The Chinese factory's export paperwork is not your compliance. Importing is a legal act performed by you, and the two big destination regimes — the European Union and the United States — assign responsibility in completely different ways.

Two markets, two legal philosophies

The single most useful mental model is this: the EU is pre-market notification with a very long prohibited list; the US is post-market enforcement with a duty to hold your own evidence. Everything else follows from that.

Neither system "approves" your formula. FDA does not approve cosmetics (with the narrow exception of colour additives). The CPNP portal is a notification database, not a licence. What both systems do is create a named, reachable legal person who can be held to account — and that person is usually the brand.

Who carries the liability: EU RP, US Agent, and the label's "responsible person"

This is where most first-time importers get surprised.

In the EU you cannot list a product without a Responsible Person. The RP must be a legal entity established in the Union. It holds the Product Information File (PIF), ensures the safety assessment exists, and is the addressee of any competent-authority enquiry. You have three options:

1. Set up your own EU entity (an Irish, Dutch or German GmbH/SARL is common) and become your own RP;
2. Appoint a third-party RP service — typically US$400–1,500 per year per brand, sometimes per product family;
3. Ask the factory to nominate a partner RP — convenient, but you then do not control your own file, which is a real risk if you later switch suppliers.

In the US the requirement splits in two. Under MoCRA, every facility that manufactures or processes a cosmetic for US distribution must register with FDA and renew every two years, and a foreign facility must designate a US Agent — a US-based contact who receives FDA communications, answers questions and can be served in place of the foreign facility. Your US Agent service typically runs US$150–800 per year. Separately, MoCRA defines the "responsible person" as the manufacturer, packer or distributor whose name appears on the label; that party must hold the safety substantiation and file serious adverse event reports.

Practical consequence: if your brand name is on the carton, you are the responsible person in the US whether or not you own a factory. And if you sell into both markets, you need two different local anchors — an EU RP and a US Agent — before the first pallet ships.

The US route under MoCRA: six obligations

MoCRA is not a registration you tick once. It is a standing obligation set:

1. Facility registration — each manufacturing/processing facility registers with FDA and renews biennially. Registration is free but must be accurate; a Chinese factory that has never registered is a red flag, not a detail.
2. Product listing — each marketed cosmetic is listed with FDA, including ingredients and label images, with annual updates.
3. US Agent designation — mandatory for any non-US facility.
4. Safety substantiation — the responsible person must maintain records establishing that the product is safe. You do not file it, but you must be able to produce it within a reasonable time on request.
5. Serious adverse event reporting — report to FDA within 15 business days of becoming aware, and keep records for six years.
6. Good manufacturing practice — FDA is developing binding GMP regulations; until finalised, recognised standards such as ISO 22716 remain the practical benchmark.

Fragrance and flavour compositions may be listed generically as "Fragrance", and colour additives are regulated separately — but safety substantiation still has to cover them, and FDA has proposed a rule that would require disclosure of specific fragrance allergens on labels. Build your label template with that in mind instead of reprinting cartons later.

The EU route: CPNP notification in six steps

1. Appoint the EU Responsible Person. No RP, no notification. Start here, not at step four.
2. Screen the formula against Annexes II–VI. Annex II is prohibited; Annex III restricted; Annexes IV, V and VI are the only permitted colourants, preservatives and UV filters. Anything outside those annexes needs its own safety justification.
3. Build the Product Information File (PIF). Description, manufacturing method and GMP statement, CPSR, efficacy evidence, and any animal-testing data. Keep it for 10 years after the last batch is placed on the market.
4. Obtain the CPSR. A qualified safety assessor reviews the toxicological profile of each ingredient, the impurity profile (heavy metals, residual solvents, hydroquinone traces in arbutin, and so on) and the exposure scenario. Expect US$300–1,200 per product, more for complex or nano-containing formulas.
5. Notify through the CPNP. The RP submits ingredient data, label artwork, category and country of first placing. Nanomaterials need a separate notification six months ahead.
6. Label to INCI. Full INCI list in descending order above 1%, function, nominal content, batch code, PAO symbol, precautions, the RP's name and address, and country of origin for imported goods. Fragrance allergens above threshold must be named individually — the EU list has expanded well beyond the original 26 to 80+ declarable substances, at 0.001% for leave-on and 0.01% for rinse-off.

Step two is where deals die. A formula that has sold happily in Asia can be unsellable in the EU because of one preservative or one UV filter. Screen the formula before you pay for tooling, not after.

UK and Australia: two more systems nobody warns you about

The UK left the EU regime. Great Britain now runs its own retained regulation, requires a UK Responsible Person, and notification goes through the SCPN — a separate portal, a separate file, and a separate fee. Northern Ireland continues to follow EU rules. If you appoint only an EU RP, you have no lawful route into Great Britain.

Australia does not register most cosmetics, but it regulates the ingredients through AICIS (Australian Industrial Chemicals Introduction Scheme). Your Australian importer must be an AICIS-registered introducer, and certain new or higher-risk ingredients require assessment or exemption before import. If the product makes a therapeutic claim — treating acne, correcting pigmentation, treating eczema — it stops being a cosmetic and becomes a therapeutic good listed on the ARTG with the TGA. That is a different project with a different budget.

Ingredient red lines: why the EU banned list is the real design constraint

The biggest information gap for buyers is the sheer asymmetry between the two prohibited lists. The EU bans or restricts well over a thousand substances; FDA has prohibited only a handful at federal level. Designing one formula to the stricter EU standard is almost always the cheaper path, because the marginal cost of a compliant preservative system is far lower than the cost of running two SKUs.

Note what the table says about hydroquinone. It is prohibited in EU cosmetics and in the US it is a prescription drug, not a cosmetic ingredient. If a "brightening" brief from any supplier depends on hydroquinone or its precursors, the answer is no — and the same caution applies to mercury and high-dose corticosteroids, which still turn up in informal supply chains.

Labelling and claims for Amazon, Shopify and TikTok Shop

Compliance does not stop at the border. Marketplace enforcement is often stricter and faster than the regulator.

• Amazon will request an image of the actual product label, ingredient list and, for certain categories, a safety data sheet or test report. Mismatches between the listing copy and the physical carton are the most common cause of a blocked ASIN.
• Shopify DTC gives you freedom but not immunity. Your own site is the first place the FTC, an NAD challenger or a plaintiff's firm will look. Every performance claim on a PDP should exist in a file you can produce.
• TikTok Shop enforces its own cosmetic-claim policy on top of local law and will reject "medical-grade", "treats" or before/after skin-condition claims outright.
• Ulta Beauty, Sephora, Target and Walmart each run ingredient and claim screens. Several now apply retailer "clean" or "conscious" restricted-substance lists that are stricter than federal law — which means your formula has to satisfy your retail buyer's list, not just the statute.

Claims deserve one blunt sentence: the US does not pre-approve claims; it punishes unsupported ones. "Clinically tested" with no study behind it is the classic own goal. If you ran a 4-week consumer-perception study with 32 participants, say "in a 4-week consumer study of 32 participants, 87% reported skin felt firmer" — a claim you can defend — rather than a vague badge.

Cost, timeline and the 8-point due-diligence checklist

Plan 8–14 weeks from frozen formula to a lawful first delivery into the EU, and 4–8 weeks for the US where the steps are cheaper but the labelling and substantiation work is the same.

The 8-point due-diligence checklist before you wire the deposit

1. Export track record — ask for actual EU/US shipment references and the CPNP or MoCRA registration numbers they have supported, not a certificate on a wall.
2. Full INCI with CAS numbers and supplier names — you cannot screen a formula you have not seen in full.
3. Batch documentation — COA, MSDS, microbiological test, heavy-metal screen, stability and compatibility data.
4. Preservative efficacy test (ISO 11930) — the test that proves the preservation system actually works.
5. RP and US Agent support — can they supply the contact, or will you appoint your own? Prefer your own.
6. Formula screening capability — can they pre-check against the current EU annexes and the retailer restricted list you intend to sell under?
7. Traceability and change control — batch records, ingredient lot traceability, and a written commitment to notify you before any raw-material substitution.
8. Adverse-event process — who logs complaints, who reports, and within what internal deadline.

FAQ

Does FDA approve my cosmetic before I can sell it?

No. MoCRA is a registration and listing regime, not an approval regime. FDA does not clear formulas. What it can do is inspect, demand records, order a mandatory recall and refuse admission at the border.

Can the Chinese factory be my EU Responsible Person?

Only if it has a legal entity established in the EU. Most do not, and appointing your own RP is usually wiser because the RP holds your PIF — you do not want your product file sitting with a supplier you may leave.

Can one formula serve both the EU and the US?

Usually yes, if you design to the stricter EU annexes and then adapt the label: INCI plus declarable fragrance allergens for the EU, and the US format with the responsible person's US address.

Do I need organic certification to sell in Europe?

No. COSMOS, NATRUE and Ecocert are private certifications. They can be commercially useful, but the legal floor is Regulation 1223/2009.

What happens if a customer reports a serious reaction?

In the US, the responsible person must report serious adverse events to FDA within 15 business days and retain records for six years. In the EU, serious undesirable effects are reported through the RP to the competent authority. Set up the intake process before launch, not after.

---

🔗 Where QuickOEM fits. QuickOEM works with 500+ vetted Chinese cosmetics factories and pre-filters them on the six things that decide whether an import programme survives contact with a regulator: export track record, full INCI disclosure, ISO 22716/GMPC certification, test-report packages, RP and US Agent coordination, and formula screening against EU annexes and retailer restricted-substance lists. Typical MOQ for an export programme is 3,000–5,000 units, with 7–15 day sampling on stock formulas and 3–5 weeks for custom work. Tell us your destination markets and we will return a shortlist with the compliance documentation each factory can actually produce. → https://www.quickoem.com/en/contact