PIF Inspection Readiness: What to Do When Authorities Ask | NestQual
Share
Quick Answer
When an enforcement authority asks for your Product Information File, the law expects you to produce it promptly, completely and in the right language. In Great Britain the file must be maintained in English, it must be readily accessible at the address notified on the SCPN, and it must be kept for ten years after the last batch is placed on the market. The brands that handle a request calmly are the ones that checked their file before anyone asked.
Why Authorities Ask for the PIF in the First Place
A request for your PIF is not necessarily a sign that something is wrong. Market surveillance is a routine duty. Article 22 of the Cosmetics Regulation, titled "In-market control", requires authorities to run checks on products and economic operators on an adequate scale, and it specifically names checks through the product information file, alongside physical and laboratory checks on samples.
In practice, a request can follow a routine sampling programme, a consumer complaint, a retailer or marketplace query, a customs interception, or a reported undesirable effect. Whatever the trigger, the question is the same: can you show that this product complies? Our guide to the Product Information File explains what the five sections contain, and this article focuses on what happens when someone asks to see them.
What the Law Obliges You to Provide
The duty to cooperate sits in Article 5 of the Regulation. Following a reasoned request from a competent authority, the Responsible Person must provide the information and documentation necessary to demonstrate that the product conforms. The Great Britain version adds that this material must be in English. Separately, Article 11 requires the PIF to be kept at the address on the notification and made readily accessible to the authority, and allows that to be done electronically.
GOV.UK's statutory guidance on the Regulation and the Enforcement Regulations 2013 also notes that information requests should allow a response period that is reasonable and proportionate to the concern, and that where corrective action is requested, authorities set the deadline case by case. The practical lesson: you will not be given unlimited time, so the file needs to be retrievable quickly.
The 24-Hour Response Playbook
If a request lands in your inbox tomorrow, this is a sensible order of work. It is a practical sequence rather than a legal timetable.
What an Inspector Typically Looks For
Inspectors work through the file looking for consistency, not perfection. The same few questions come up again and again. Is there a named Responsible Person and a notified address that matches the file location? Is the safety report complete, with Part A and Part B, a conclusion on safety, and the assessor's credentials? Do the claims on pack and online have evidence in the file? Is there a manufacturing and GMP statement? Is animal testing information recorded? You can see how each section is built in our step-by-step guide to building a PIF.
The safety report in particular follows a fixed structure set by Annex I, so a report missing a required element is easy to spot. Claims are another frequent focus, which is why our article on cosmetic claims substantiation is worth reading alongside this one.
Readiness Self-Audit: Section by Section
| PIF section | Quick test | Red flag |
|---|---|---|
| Product description | Can it be matched to the pack on sale? | Name or code differs from the label |
| Safety report (CPSR) | Signed, dated, Part A and B present? | Formula in report differs from current formula |
| Manufacturing / GMP | Statement and evidence on file? | Only a verbal assurance from the manufacturer |
| Claimed effects | Every claim linked to evidence? | Website claims never reviewed against the file |
| Animal testing | Supplier statements recorded? | Section left blank |
| Location and language | At notified address, English for GB? | Address on SCPN no longer used |
If you sell in both markets, remember that language and location expectations differ. Our comparison of UK and EU PIF requirements sets the differences out side by side.
Common Mistakes
Mistake #1 — Nobody knows where the file is. If the master copy lives on a former employee's laptop or a consultant's drive, you will lose hours finding it. Name an owner and a storage location.
Mistake #2 — Editing documents after the request arrives. Updating a file is fine; rewriting history is not. Add new, dated documents rather than altering old ones.
Mistake #3 — Sending everything. Provide what was requested, clearly organised. Volume is not the same as proof.
Mistake #4 — Ignoring the deadline. If you genuinely need more time, say so in writing, explain why, and propose a date. Silence is the worst response.
Practical Checklist
- Name a PIF owner and a backup, and record where the master file lives.
- Keep the file at the address notified, accessible electronically if you prefer.
- For Great Britain, keep the whole file in English.
- Run a quarterly check that label, claims and formula all match the file.
- Keep a dated change log so you can show what changed and why.
- Prepare a one-page index of the file so you can respond quickly.
- Keep a written record of every authority request and your response.
Frequently Asked Questions
How quickly must I respond to a PIF request?
There is no single fixed number of days in the Regulation. GOV.UK guidance says information requests should allow a reasonable and proportionate response period, and the authority will normally state a deadline in its request. Read it carefully and, if you need longer, ask in writing before it passes.
Does the whole PIF have to be sent?
Not necessarily. Authorities usually ask for specific information to demonstrate conformity. Provide what was requested, in an organised form, and keep the complete file ready in case more is asked for.
What if my PIF turns out to be incomplete?
Be honest about it. The Regulation requires a Responsible Person who considers a product non-compliant to take corrective measures immediately. Work with your safety assessor to close the gaps, document what you did and when, and keep communicating with the authority.
Can I keep my PIF in electronic form?
Yes. The UK text allows the file to be made readily accessible in an electronic or other format at the notified address. Make sure it can actually be retrieved and shared quickly, with access for more than one person.
Final Word
An inspection request tests your system rather than your nerves. If you know who owns the file, where it lives and how it maps to your label and claims, a request becomes an administrative task instead of an emergency. A short internal audit today is far cheaper than a scramble later.
Not sure your PIF would survive a request? NestQual reviews and builds complete Product Information Files alongside CPSR, notification and Responsible Person services.
Get a CPSR for your product See the Complete Compliance Pack
Sources
- Regulation (EC) No 1223/2009, Article 22 — In-market control (as it applies in the UK) — legislation.gov.uk
- Regulation (EC) No 1223/2009, Article 5 — Responsible Person — legislation.gov.uk
- Regulation (EC) No 1223/2009, Article 11 — Product information file — legislation.gov.uk
- Regulation (EC) No 1223/2009, Annex I — Cosmetic product safety report — legislation.gov.uk
- OPSS, Regulation 1223/2009 and the Cosmetic Products Enforcement Regulations 2013 (Great Britain) — GOV.UK
- Related guides on this site: PIF explained, How to build a PIF, UK vs EU PIF
This article is for general information and does not constitute legal advice. Always confirm current requirements for your specific product and market with a qualified safety assessor or Responsible Person.