How to Keep Your Cosmetic PIF Up to Date
Share
Quick Answer
A Product Information File is a living record, not a launch document. Article 11 requires the Responsible Person to keep it and update it as necessary, and Article 13 requires notified information to be updated without delay when it changes. In practice, any change to the formula, a supplier, the manufacturing site, the packaging, the label or a claim should trigger a short review: does the safety assessment still hold, does the file still match the product on sale, and does anything notified need updating?
Why Changes Quietly Break Files
Most out-of-date PIFs were not neglected on purpose. A supplier changed a raw material grade. A packaging printer swapped a closure. A marketing team added a new claim to the website. Each change looked small, yet each one touches a document in the file. The legal duty is simple: Article 11 requires the file to be kept and updated as necessary, and GOV.UK guidance puts it directly: the PIF supports product safety, "which is why it must be kept up to date". For the wider structure of the file, see our guide to the Product Information File.
The Change-Trigger Map
The table below links common business changes to the part of the file they usually affect. It is a practical aid, not an exhaustive legal list; your safety assessor decides what each change means for your specific product.
| What changed | File sections likely affected | First question to ask |
|---|---|---|
| Ingredient added, removed or percentage changed | Description, CPSR, stability, claims | Does the safety assessment still cover this formula? |
| Raw material supplier or grade | Specifications, SDS, impurities data | Are the new specs equivalent to the old? |
| Manufacturing site or process | Manufacturing and GMP section | Is there GMP evidence for the new site? |
| Packaging material or closure | Stability, packaging information, description | Does stability data still apply to this pack? |
| Label wording or new claim | Claims evidence, label copy | Is there evidence for the exact new wording? |
| Complaint or adverse reaction | Undesirable effects record, CPSR review | Is it a serious undesirable effect needing a report? |
| Change of address or Responsible Person | Notification, file location, label | Has the notification been updated? |
Does the Notification Need Updating Too?
Often, yes. Article 13 lists what must be notified: the product category and name, the Responsible Person, the address where the PIF is kept, contact details for urgent cases, nanomaterial and CMR information where applicable, and the frame formulation. It then states that where any such information changes, the Responsible Person must provide an update electronically without delay. So a change of product name, Responsible Person, PIF address, or notified formulation details must flow through to the notification, not just the file. Whether a given reformulation changes the notified information depends on what you notified, so check it each time rather than assuming. Our comparison of CPNP and SCPN shows how each portal handles notifications.
GOV.UK's guidance on making cosmetic products available in Great Britain also reminds Responsible Persons that new colourants, UV filters or preservatives outside the permitted annexes need a separate safety dossier, and that serious undesirable effects must be reported immediately. A reformulation that introduces such a substance is not just a file update; it is a regulatory decision to take before the change reaches the market.
A Simple Five-Step Change Procedure
Step three matters for the ten-year retention period under Article 11, because you may need to show what the product and file looked like at any point while it was on the market. GOV.UK guidance also notes that manufacturers should record and justify changes to the manufacturing process, so the factory side of the log should line up with yours. For where each document lives in the file, see our step-by-step PIF guide.
Build Updates Into Your Supply Chain
You cannot update a file for a change you never hear about. If you use a contract manufacturer, our guide to PIFs for private label brands explains the change-notification clause worth putting in your contract. Also ask suppliers to notify you of grade or specification changes, and ask your packaging supplier for advance notice of material changes. Our guide to GMP and ISO 22716 shows how change control normally works inside a compliant factory.
Common Mistakes
Mistake #1 — Treating "minor" changes as invisible. A new supplier or closure is minor to the business, but it can change specifications or stability.
Mistake #2 — Updating the file but not the notification. The two must agree on name, address and Responsible Person.
Mistake #3 — Selling before the update is finished. Stock should not move to the new version until file and label match.
Mistake #4 — Overwriting history. Keep dated versions, so you can prove what applied to each batch.
Practical Checklist
- Keep a dated change log for every product, with an owner.
- Ask suppliers and manufacturers to notify you before any change.
- Review the CPSR, stability, claims and labelling after each relevant change.
- Update the notification without delay when notified information changes.
- Archive superseded documents for the full ten-year period.
- Do a scheduled review of each file at least once a year.
- Record every complaint and check whether it is a serious undesirable effect.
Frequently Asked Questions
How often must a PIF be updated?
There is no fixed schedule. Article 11 requires the file to be updated as necessary, which means whenever the product, its supply chain, its labelling or the evidence behind it changes. Many brands also run a scheduled annual review as a safety net.
Do I need a new safety assessment after every reformulation?
Not always the full report, but the assessor must confirm that the existing assessment still covers the new formula. Where the change affects exposure, ingredients or stability, the report is normally revised.
Do I have to update the notification if the formula changes?
If any information you notified changes, such as the product name, Responsible Person, PIF address or notified formulation details, the update must be made without delay. Check what you notified each time rather than assuming.
Should I keep old versions of the PIF?
Yes. The file must be kept for ten years after the last batch is placed on the market, so keep dated versions to show what applied to each batch sold.
Final Word
A file that was perfect at launch can be wrong a year later without anyone noticing. The fix is not heroic effort; it is a simple habit. Log every change, ask the right question, update the paperwork, and only then release the new version.
Reformulating or changing supplier?
NestQual updates safety reports, PIFs and notifications so your files stay in step with your products.
Get a CPSR for your product
See the Complete Compliance Pack
Sources
- Regulation (EC) No 1223/2009, Article 11 — Product information file (as it applies in the UK) — legislation.gov.uk
- Regulation (EC) No 1223/2009, Article 13 — Notification — legislation.gov.uk
- OPSS, Making cosmetic products available to consumers in Great Britain — GOV.UK
- Related guides on this site: PIF explained, PIF for private label, How to build a PIF
This article is for general information and does not constitute legal advice. Always confirm current requirements for your specific product and market with a qualified safety assessor or Responsible Person.