Buyer guide

Cosmetic Compliance by Market: EU, UK, US, Gulf and Russia for Makeup Brands

2026-10-07 · Magic Color product development team

Cosmetic rules shift market by market. That isn't new — and it isn't going away. Ask a brand selling into five markets what compliance costs and you'll get five answers. A safety assessor in the EU. A notification in Great Britain. A listing on an FDA portal. An Arabic label. A Data Matrix code on every unit. Same formula underneath. The paperwork? It rarely lines up.

We make makeup for brands caught in that middle ground. Here's the map we use. The map below also draws the line: what your team owns, and what ships from our factory with your order.

One caveat up front: this is planning material, not legal advice. For your own obligations, talk to a regulatory consultant in each market.

The rulebooks we formulate to

We also ship often to markets covered by India's Cosmetics Rules 2020 and the ASEAN Cosmetic Regulation. Same shape: a named local party, a notification, a language rule. Different logos on the form.

What you own, and what we hand over

Get the split wrong and it costs real money. Buyers sometimes assume a factory's GMP audit covers everything. It doesn't. GMP proves the product was made consistently to a documented standard. It says nothing about whether your label is legal in Lisbon.

EU: 1223/2009 rewards paperwork discipline

The product information file is the anchor. Someone established in the EU holds it. That person is your Responsible Person. Their address goes on the label. Inside the file: the safety assessment, the formula, GMP evidence, test data, artwork, batch records.

We feed it. INCI names. Colourants matched against Annex IV. A CoA for every raw material. REACH statements. Stability and microbial results. Mostly boring documents. They're also the first thing a reviewer asks for.

What we cannot be is your Responsible Person. A factory in Jinhua can't hold that role. If a supplier hints otherwise, they're selling you a delay with a friendly email attached.

Children's makeup adds a second layer. Our kids' items meet EN-71 and CE requirements, and we run skin-irritation and oral non-toxicity tests. Those tests sit on top of 1223/2009 — they don't replace it. If a set includes a toy element, toy rules apply to that part as well.

UK: same rules, different front door

Great Britain kept 1223/2009 in substance, then built its own notification route. You need a UK Responsible Person, an SCPN notification through the GOV.UK service, and English labelling. An EU notification does nothing for a warehouse in Manchester. Northern Ireland still follows EU rules. That's the sort of detail that quietly breaks one shared label across the whole UK.

Low effort? Yes. Low attention? No. A missing SCPN is cheap to avoid and slow to unwind once stock is on a shelf.

US: no pre-approval, plenty of duties

Cosmetics in the US have never needed pre-market approval. They still don't. Colour additives are the exception — several need FDA batch certification before use. If your palette leans on brights, check that early, not at the end.

MoCRA added the admin layer. Facility registration. Product listing. A named Responsible Person. Safety substantiation for every product. Adverse-event reporting. Ordinary work once the systems exist. Brutal if it lands the month before launch. Read the FDA's MoCRA page before you lock a date.

Where we stand: compliant with FDA and MoCRA requirements. No regulator in Washington pre-approves a cosmetic factory, whatever a framed document on a supplier's wall suggests. So ask what that paper proves.

Gulf: GSO 1943/2021 and the Arabic label

The regional safety standard is GSO 1943/2021. Registration, though, happens country by country, usually through your importer. Saudi Arabia's SFDA portal is the one most brands meet first. Other Gulf states have their own processes, their own quirks, their own fees.

Arabic labelling is standard. English usually sits alongside it. Reviewers want one tidy package: formula, safety data, GMP documents, CoAs and artwork. Not a trail of twelve emails.

We formulate to GSO 1943/2021 and keep a running view of how ingredient limits and labelling differ between Gulf states. Religious-conformity documents sit on a separate track we don't hold. If your buyer wants one, start early — the customs desk is too late.

Russia: TR CU 009/2011 plus a code on every unit

Across the Eurasian Economic Union, cosmetics are governed by TR CU 009/2011 (you'll also see it written TR TC 009/2011). Adult products usually take the declaration-of-conformity route. Children's cosmetics need state registration — slower, and hungrier for paper. Labels in Russian.

Then there's marking. Chestny ZNAK Data Matrix codes are required on perfumery and cosmetics. They're generated at production, not printed in advance. We've run Data Matrix coding on our lines since October 2025: codes created at filling and packing, validated in line, traceable to batch, synced with your importer's system. A manufacturer who can't do this leaves your goods parked at the border.

Where multi-market projects go wrong

• One artwork for five markets. Ingredient order. Ingredient naming. The period-after-opening symbol. Nominal content. The Responsible Person's address. Sometimes three of those change at once.
• Claims that travel badly. A phrase that's routine at home can be a regulated claim somewhere else. Substantiate per market, not once.
• Assuming one formula fits everywhere. Preservative and colourant limits differ. Often the honest answer is two variants, not one compromise.
• MOQ arithmetic. Every variant is its own run: 3,000 sets on standard processes, 6,000 sets where there's a special process such as electroplating, 3D printing, silk screen or embossing. Five market variants of one compact means five SKUs. The MOQ explainer has the tiers.
• Test requests that arrive late. Third-party reports from SGS, Intertek or CTI are available per batch on request. Ask at the brief, not the week the container sails.

Timing follows the same logic. Formula development runs 14 days, or 7 on express. Samples: 3–7 days. Production: 45 days, 30 express. Then 30–45 days at sea to Europe or North America. A five-market launch is a sequencing problem long before it's a manufacturing one. Start with whichever market has the slowest registration, not the biggest order.

How we keep five rulebooks straight

Compliance is a standing job here: a team follows 1223/2009 and FDA requirements. Our database tracks banned ingredients, labelling rules and claim restrictions across Europe, the Americas, the Middle East and Southeast Asia. Every raw material has a valid REACH number. Colourants get checked against Annex IV. Formulas leave out talc, phthalates, formaldehyde and heavy metals.

Behind that: 500+ mature formulas and more than 600 development samples a year. That's where most market-specific tweaks happen. Same brief. Two destinations. Different preservative system. Building the variant from the start beats reformulating after your assessor says no.

Each shipment travels with its test report, compliance documents, packing list and a copy of the retained-sample report. The retained samples themselves live in a constant-temperature, constant-humidity room, filed by batch, and are kept until six months after the end of the product's shelf life. Questions arrive eighteen months later. There's something to open. The standards we hold (GMPC, ISO 22716, BRCGS, SMETA, BSCI, RSPO) are on our standards and certificates page, and the inspection routine is described under quality.

What we can't do: sign as your Responsible Person, write your safety assessment, or decide your claims. What we can do: make sure nothing you need from the manufacturing side is missing when your consultant asks. That's the line. Better to be blunt about it. A supplier who promises more is promising the wrong thing.

Mapping a launch across several markets? Send the destination list and the product idea. We'll tell you which formula variants and documents you're looking at, and where the timeline pinches. Talk to us here.