Cosmetic Product Recalls: What the Responsible Person Must Do

Cosmetic Product Recalls: What the Responsible Person Must Do

Quick Answer

If you are the Responsible Person and you think a cosmetic product on the market does not comply, the Regulation says to act immediately: take the corrective measures needed to bring it into conformity, or withdraw or recall it as appropriate, and, where there is a risk to human health, promptly inform the authorities. Serious undesirable effects must be notified without delay. This guide turns those duties into a practical response plan you can write down before you ever need it.

What the Law Actually Requires

The core duty is in Article 5 of the Regulation. A Responsible Person who considers, or has reason to believe, that a product they placed on the market does not comply must immediately take the corrective measures necessary to bring it into conformity, or withdraw or recall it as appropriate. Where the product presents a risk to human health, they must also promptly inform the competent authorities of the Member State, or in Great Britain the relevant authorities, giving details of the non-compliance and the corrective measures taken. Article 5 also requires the Responsible Person to cooperate with authorities on action to address risks from products they have placed on the market, and, in the UK version, to provide information and documentation in English.

Notice what is not there: a threshold of certainty. The trigger is that you "consider or have reason to believe" the product does not comply. Waiting for an authority to tell you is not the standard.

The Authority's Powers if You Do Not Act

Article 25 covers the other side. Where a Responsible Person fails to meet listed requirements, including good manufacturing practice, safety assessment, labelling, claims and communication of serious undesirable effects, the authority must require them to take corrective action, withdraw or recall the product, with measures proportionate to the risk and a deadline set by the authority. Where there is a serious risk to human health, or where the Responsible Person does not complete the measures by the deadline, the authority itself must prohibit or restrict the product or order its withdrawal or recall. Authorities that act on a serious health risk must also inform the other competent authorities. Our guide to PIF inspection readiness describes how that process usually starts.

Corrective Action, Withdrawal and Recall: Know the Difference

Measure In plain terms Typical example
Corrective measures Fix the non-compliance so the product conforms Relabel stock with a missing warning, update the claims, correct the notified address
Withdrawal Stop the product moving further along the supply chain, so it cannot reach consumers Halt shipments and recover stock from distributors and retailers
Recall Get the product back from consumers who already have it Public notice and a way to return or refund affected units

The Regulation says to choose measures that are appropriate and proportionate to the risk. A missing label detail on stock still in your warehouse may be fixed by corrective action. A contamination concern that affects consumers who already own the product is a very different matter. Your safety assessor can help you judge which level fits, and the decision should be recorded in the file.

A Seven-Step Response Plan

1. Stop and contain. Pause sales and shipments of the affected product or batches while you assess.
2. Identify the scope. Use batch numbers, manufacturing records and sales data to work out which units are affected and where they are.
3. Assess the risk. Ask your safety assessor whether there is a risk to human health, and how serious.
4. Inform the authorities when required. Where there is a risk to human health, tell them promptly, with details of the non-compliance and the measures taken.
5. Act on the supply chain. Notify distributors and retailers, who have their own duties under Article 6 not to sell a product that may not comply and to inform the Responsible Person of risks.
6. Fix the cause. Correct the label, formula, process or document, and update the PIF and, if needed, the notification.
7. Record everything. Keep dated notes of decisions, communications and results in the file.

Serious Undesirable Effects: A Separate Duty

Not every recall starts with a label error. Sometimes it starts with a consumer reaction. Article 23 requires the Responsible Person and distributors to notify serious undesirable effects without delay, giving the product name so it can be specifically identified and any corrective measures taken. The authority then informs other competent authorities, so your report may lead to action beyond your own business. Our guide to SUE reporting explains what counts as serious and how to log it.

Preparation Is What Makes Recalls Possible

A recall is fast only if you can answer three questions quickly: which batches, which customers, which documents. Build that capability now.

  • Traceability. Batch numbers on every pack, linked to manufacturing records and sales data. See our guide to GMP and ISO 22716 for how factories keep this link.
  • Contact lists. Distributors, retailers, marketplaces and your Responsible Person service, in one place.
  • A complaints log that someone actually reviews, as described in our guide to keeping a PIF up to date.
  • A written procedure with named owners, so nobody improvises under pressure.
  • A rehearsal. Once a year, pick a batch and test how fast you can identify it and list where it went.

Many recalls trace back to avoidable labelling gaps. Our article on labelling mistakes that trigger recalls lists the eight most common, and our common PIF mistakes guide shows how to find file problems before they reach consumers.

Common Mistakes

Mistake #1 — Waiting for certainty. The duty starts when you consider or have reason to believe the product does not comply.

Mistake #2 — No batch traceability. If you cannot tell which units are affected, you may have to treat all of them as affected.

Mistake #3 — Informing retailers but not the authorities. A risk to human health triggers a separate duty to tell the authorities.

Mistake #4 — Fixing the stock but not the file. If the PIF, label artwork and notification are not updated, the problem will return.

Practical Checklist

  • Write a one-page recall procedure with named owners and phone numbers.
  • Make sure every pack carries a batch number linked to your records.
  • Keep up-to-date contact lists for distributors, retailers and marketplaces.
  • Agree with your safety assessor how risk will be judged and recorded.
  • Know when to notify authorities, and how to do it in the right language.
  • Review complaints regularly and escalate possible serious effects at once.
  • Rehearse a mock recall each year and fix what slows you down.

Frequently Asked Questions

When must a Responsible Person take action on a non-compliant product?

Immediately, once they consider or have reason to believe a product on the market does not comply. They must take the corrective measures needed to bring it into conformity, or withdraw or recall it as appropriate.

Do I have to tell the authorities about every non-compliance?

The Regulation requires prompt notification where the product presents a risk to human health. For lower-risk issues, the duty is to correct the problem, but take advice if you are unsure about the level of risk.

What happens if I do not act and an authority steps in?

Authorities can require corrective action, withdrawal or recall by a set deadline. If there is a serious risk to human health, or the deadline is missed, they must themselves prohibit or restrict the product or order its withdrawal or recall.

Are retailers responsible for recalls too?

Distributors have their own duties. They must not make a product available if it may not comply, must ensure corrective measures or withdrawal where needed, and must inform the Responsible Person and authorities of risks to human health.

Final Word

Nobody plans to recall a product, but the Regulation expects every Responsible Person to be able to. A written procedure, batch traceability and an honest complaints log turn a crisis into a managed process. Prepare while it is calm, and the day you need it, you will know exactly what to do next.

Want a recall-ready compliance file? NestQual provides Responsible Person services, PIFs and notifications with clear procedures for complaints and corrective action.

Get a CPSR for your product See the Complete Compliance Pack

Sources

  1. Regulation (EC) No 1223/2009, Article 5 — Responsible person (as it applies in the UK) — legislation.gov.uk
  2. Regulation (EC) No 1223/2009, Article 6 — Distributors — legislation.gov.uk
  3. Regulation (EC) No 1223/2009, Article 23 — Communication of serious undesirable effects — legislation.gov.uk
  4. Regulation (EC) No 1223/2009, Article 25 — Non-compliance by the responsible person — legislation.gov.uk
  5. Related guides on this site: SUE reporting, Labelling mistakes that trigger recalls, PIF inspection readiness

This article is for general information and does not constitute legal advice. If you believe a product on the market is unsafe or non-compliant, take immediate advice from a qualified safety assessor or your Responsible Person and check the current duties that apply in your market.

Back to blog