Cosmetic Ingredient Safety: A Practical Compliance Guide for Brands

How Brands Vet Ingredient Safety

Before a single gram of active goes into a formula, a responsible beauty brand runs every ingredient through a structured safety screen. This is not a box-ticking exercise; it is the difference between a product that ships cleanly and one that gets detained at a border or recalled after launch. The screen starts with a regulatory lookup, moves to a toxicological review, and ends with a documented safety assessment signed by a qualified person.

Build a master ingredient list first

Every raw material, fragrance component, preservative, and colorant belongs on a single master ingredient list with its INCI name, CAS number, and supplier documentation. Without a clean master list you cannot run reliable regulatory checks, because the same plant extract can appear under several trade names. A disciplined list also makes reformulation faster when one region tightens a limit.

Screen against the target market

Vet each ingredient against the specific regulation for every market you sell in. An ingredient legal in the United States may be restricted in the European Union or absent from China's positive list. Brands that plan to export should screen against the strictest applicable framework and then relax only where the data supports it, rather than building a separate formula per region.

Demand a safety dossier from suppliers

Your contract manufacturer or raw material supplier should hand you a safety dossier: specification sheet, Certificate of Analysis, heavy-metal and microbiological test results, and where relevant a toxicological summary. If a supplier cannot produce these, treat the material as unproven and source elsewhere. Documented evidence is what protects you during an audit or customer complaint.

Restricted, Limited, and Prohibited Substances

Regulatory language is precise, and mixing these three categories is the most common compliance mistake new brands make. Each term carries a different legal meaning and a different action.

Prohibited substances

A prohibited substance is banned outright from cosmetic products. Under EU Regulation 1223/2009, Annex II lists more than 1,600 such substances, including certain heavy metals, hormones, and known carcinogens. China's rules take a similar approach with its own banned catalogue. If an ingredient is prohibited, there is no acceptable concentration and no exemption for "natural" sourcing.

Restricted substances

Restricted means the substance is allowed only within defined conditions, usually a maximum concentration and sometimes a limit on product type or application area. EU Annex III covers hundreds of restricted entries, and many preservatives, UV filters, and hair dyes live here. The condition is part of the law: exceed the limit or use it in the wrong product format and the product becomes non-compliant.

Limited-use substances

In China's framework, the "limited-use" catalogue sets maximum concentrations for preservatives, colorants, and certain functional ingredients. The practical takeaway is the same as for restricted substances: stay inside the number and document how you confirmed it. Treat any limit as a hard ceiling, not a target to design toward.

Common Allergens and Sensitizers

Even fully compliant formulas can trigger reactions in sensitive users, so allergen management is both a safety and a labeling obligation. Knowing the usual suspects helps you formulate defensively and label honestly.

Fragrance and the 26 named sensitizers

The EU requires declaration of 26 specific fragrance allergens on the label when they exceed 0.001 percent in rinse-off products and 0.01 percent in leave-on products. These include well-known names such as limonene, linalool, geraniol, and citral. Brands selling into Europe must obtain the allergen breakdown from their fragrance house, not guess at it.

Preservatives that surprise formulators

Methylisothiazolinone and the methylchloroisothiazolinone combination are efficient preservatives but frequent sensitizers, and their permitted levels have been tightened in recent years. Formaldehyde-releasing agents draw similar scrutiny. If your formula leans on these, document the concentration precisely and consider milder alternative preservation systems for sensitive-skin positioning.

Naturally derived irritants

Essential oils, citrus extracts, and some botanical actives carry their own allergenic compounds. "Natural" does not mean hypoallergenic. A patch-testing program and a conservative use level are the practical controls here, especially for products aimed at compromised or reactive skin.

Regulatory Frameworks You Must Know

Three frameworks dominate global cosmetics trade, and a brand's documentation strategy should map to all of them from day one.

EU Annex system under Regulation 1223/2009

The EU uses annexes: Annex II for prohibited substances, Annex III for restricted substances, Annex IV for permitted colorants, Annex V for preservatives, and Annex VI for UV filters. A Responsible Person must hold a Product Information File and a Cosmetic Product Safety Report before placing a product on the market, and notifications go through the CPNP portal.

China IECSC and the inventory system

In China, a cosmetic ingredient must appear on the Inventory of Existing Cosmetic Ingredients in China, or IECSC, to be used without a new-ingredient registration pathway. New ingredients face a separate, longer approval process. China also maintains positive lists for preservatives, colorants, and sunscreen agents, and its compliance filing system requires a domestic responsible entity for foreign brands.

United States FDA and MoCRA

The U.S. FDA regulates cosmetics under the Federal Food, Drug, and Cosmetic Act, with the Modernization of Cosmetics Regulation Act adding registration, listing, and adverse-event reporting obligations. The U.S. uses a prohibited and restricted approach rather than a full positive list, which gives formulators flexibility but shifts the safety burden squarely onto the brand and its manufacturer.

How a Qualified OEM/ODM Manages Safety

A strong manufacturing partner does far more than mix your batch. The right OEM/ODM builds safety into the process so compliance is evidence-based rather than assumed.

Safety dossier and PIF management

Qualified factories maintain ingredient specifications, batch records, and stability data, and they assemble the Product Information File your responsible person needs. They track formulation versions so a single change in preservative or supplier triggers a fresh review instead of silently drifting out of compliance.

Patch testing and stability studies

Before scale-up, a credible partner runs stability testing across temperature and light conditions and conducts patch testing, often through a third-party laboratory, to flag irritation or sensitization risk. Challenge testing confirms the preservative system actually controls microbial growth. These studies are what let you make "dermatologically tested" claims without exposing yourself to challenge.

Change control and traceability

Ingredient substitutions happen when a supplier runs short. A disciplined OEM logs every substitution, re-screens the new material, and keeps traceability from finished batch back to raw lot. That paper trail is exactly what regulators and retailers ask for during an inspection.

Practical Steps for a New Brand

Compliance is achievable even for a first-time brand if you follow a repeatable sequence rather than scrambling at launch.

1. Define your target markets before you brief the formula, because the allowed ingredient set changes with each one.
2. Lock a master ingredient list with INCI names, CAS numbers, and supplier documents.
3. Run a regulatory screen against EU Annex, China IECSC, and FDA rules for every material.
4. Confirm restricted and limited concentrations with test data, not supplier claims alone.
5. Obtain the fragrance allergen breakdown and label the 26 named sensitizers where required.
6. Require stability, patch, and preservative challenge testing from your OEM before production.
7. Keep the full safety dossier, PIF, and batch records accessible for the life of the product.

Compliance is not a final checkpoint before launch; it is a habit built into how you choose ingredients, screen suppliers, and document every decision. Brands that treat safety as continuous protection, not paperwork, scale into new markets with far less risk.

Frequently Asked Questions

What is the difference between a restricted and a prohibited cosmetic ingredient?

A prohibited ingredient is banned entirely from cosmetics with no acceptable level. A restricted ingredient is permitted only within defined conditions such as a maximum concentration or limited product type.

How many fragrance allergens must be labeled in the European Union?

The EU requires declaration of 26 named fragrance allergens when they exceed 0.001 percent in rinse-off products and 0.01 percent in leave-on products. Brands must obtain this breakdown from their fragrance supplier.

What is IECSC and why does it matter for China?

IECSC is the Inventory of Existing Cosmetic Ingredients in China. An ingredient must be on this list to be used without a separate new-ingredient registration, so it directly controls what you can formulate.

Does the U.S. FDA use a positive or negative list for cosmetics?

The U.S. uses a prohibited and restricted approach rather than a full positive list. This gives formulators flexibility but places the safety burden on the brand and its manufacturer.

What does patch testing prove for a new formula?

Patch testing, usually run by a third-party lab, flags skin irritation or sensitization risk before scale-up. It supports claims like dermatologically tested and reduces the chance of post-launch reactions.

What documents should an OEM provide for a safety dossier?

Expect a specification sheet, Certificate of Analysis, heavy-metal and microbiological results, stability data, and a toxicological summary. These feed the Product Information File your responsible person signs.

How often should a brand re-screen its formula for compliance?

Re-screen whenever you change a supplier, substitute an ingredient, or when a target market updates its lists. Treat every formula change as a trigger for a fresh regulatory review.