What is a Responsible Person under EU and UK cosmetics law?

The Responsible Person (RP) is a legal entity or natural person established in the relevant market who takes responsibility for a cosmetic product's compliance with the applicable cosmetics regulation. For the EU, that is Regulation 1223/2009. For the UK, it is the UK Cosmetics Regulation (Schedule 34 of the Product Safety and Metrology etc. (Amendment etc.) (EU Exit) Regulations 2019).

The RP holds and maintains the Product Information File (PIF), submits the product notification (via CPNP in the EU, via the SCPN portal in the UK), ensures the Cosmetic Product Safety Report is up to date, and is the contact point for the market surveillance authorities.

The RP must be a person or legal entity established within the relevant market. For EU placements, that means an EU-established RP. For UK placements (since 1 January 2021), that means a UK-established RP. A non-EU brand selling into both markets needs both.

The role can be played by the manufacturer (if EU/UK established), the importer (where the product is brought in from outside), the distributor (in limited cases where they modify or relabel the product), or a third party formally designated and accepting the role in writing.

The RP is the legal point of accountability. If a product is found to be unsafe, mislabelled, or non-compliant, the authorities approach the RP first. That can mean product recalls, market withdrawals, fines, and (for serious breaches) criminal liability. Third-party RP providers typically carry professional indemnity, but the brand owner remains contractually liable.

The implication: the RP needs real visibility into product data, not a snapshot at notification. PIF updates, formulation revisions, supplier changes, adverse event records and customer complaints all need to flow to the RP in a controlled way.

Brands with their own EU and UK presence usually hold the RP internally. Brands selling cross-border from elsewhere typically appoint a specialist third-party RP in each market. The cost of getting it wrong (failed CPNP notification, blocked import, market withdrawal) far outweighs the cost of getting it right.

The PIF, the safety assessment and the notification all share the same underlying product data. Worldover holds that data centrally, so the RP function (internal or outsourced) works from a current source of truth rather than a quarterly email of updates.

The Responsible Person under EU 1223/2009 (and UK CPR) carries personal regulatory liability for every SKU placed on market: PIF maintenance, CPNP/SCPN notification, adverse event handling and label compliance. Doing that across a multi-market portfolio without one source of truth is where exposure builds.

Worldover holds the PIF, CPNP/SCPN status, label artwork and adverse event log for every SKU under each Responsible Person record. When a formula or label changes, affected notifications and PIFs surface immediately, and Willow drafts the RP communications and updates for sign-off.