PIF Retention: How to Store and Archive for 10 Years

Quick Answer

The Responsible Person must keep each Product Information File for ten years from the date the last batch of the product is placed on the market, not ten years from launch. The file must stay readily accessible to the authorities, electronically or in another format, at the right address, and in the right language (English in Great Britain, a language the authority can easily understand in the EU). A good archive is therefore not a folder you forget; it is a system you can still open, read and explain a decade later.

When Does the Ten Years Start?

The retention rule sits in Article 11 as it applies in Great Britain and in the EU text of Regulation (EC) No 1223/2009. Both say the file is kept for ten years following the date on which the last batch was placed on the market. GOV.UK guidance repeats the point for British businesses: the PIF must be kept for ten years after the last batch was made available.

A simple example shows why this matters. Suppose a cream launches in 2026 and the final batch is sold in 2029. The ten-year clock starts in 2029, so the file must be kept until 2039, and that is true even if you stopped selling the product years earlier. Each reformulated version has its own "last batch", so older versions of the file need to be kept as well. That makes version control part of retention, not a separate task.

What "Readily Accessible" Means in Practice

The wording in both versions is practical rather than technical. In the EU, the file must be readily accessible at the address indicated on the label, in electronic or other format, and the information must be in a language the competent authorities can easily understand. In Great Britain, the file must be accessible at the address notified, and the information in it must be in English. The details differ, which is why brands selling in both markets should read our comparison of UK and EU PIF requirements before they design an archive.

"Readily" is the important word. An archive that only one person can open, or that sits on a drive nobody can find, does not meet the spirit of the rule. Our guide to PIF inspection readiness shows how quickly requests can arrive and why retrieval speed matters.

Where Should You Store It? Comparing the Options

No single option is legally required. Many brands combine a primary electronic archive with an independent backup. Whichever you choose, the address on the label (EU) or on the notification (Great Britain) should match where the file is actually kept, or be a place from which it can quickly be provided.

Designing an Archive That Survives Ten Years

Ten years is long enough for software, staff, suppliers and even company names to change. These habits keep a file usable:

• Use open formats. PDF for finished reports, with source documents kept alongside. Avoid formats tied to software you may stop using.
• Name files consistently. Product code, document type, version and date in every filename.
• Keep an index. One page that lists each section, where it lives and who owns it.
• Back up in a second place. A copy under separate control from the original.
• Plan for people leaving. Access must not depend on one employee or one personal account.
• Keep signed originals. Safety reports, GMP statements and test reports should be the signed, dated versions.

The safety report in particular is built to a fixed structure set by Annex I, so keep the full document, not an extract, and keep the supporting data it refers to. Our guide to building a PIF step by step lists all the documents that belong in each file.

What Happens If the Business Changes?

Retention duties follow the Responsible Person, so they do not disappear when a business changes. If you close a brand, sell it, change your Responsible Person or switch service providers, plan the handover of the files before it happens. Check who will hold the file, what the notified address will be, and whether the notification needs updating, because Article 13 requires changes to notified information to be updated without delay. If you use an external Responsible Person, see our guide on the Responsible Person role for the questions to ask about file custody. For the law's treatment of business transfers or insolvency, take advice from a qualified adviser, because those situations depend on the facts.

Common Mistakes

Mistake #1 — Counting from launch. The clock starts at the last batch placed on the market, so file dates alone do not tell you when you can discard it.

Mistake #2 — Keeping only the latest version. Batches sold under earlier formulas need the file that applied to them.

Mistake #3 — Depending on one person's laptop or login. Staff leave; archives should not.

Mistake #4 — Forgetting the address. If you move premises or change provider and the notified address is not updated, the file may not be where authorities expect it.

Practical Checklist

• Record the date the last batch of each product version is placed on the market.
• Calculate and diarise the earliest deletion date for each file.
• Keep every superseded version of the file, with dates.
• Store an electronic master and an independent backup.
• Make sure at least two people can access and explain the archive.
• Keep the notified or label address in line with where the file is held.
• Review the archive once a year and test that a file can be opened and retrieved.

Frequently Asked Questions

Does the ten years start when I launch the product?

No. It runs from the date the last batch of the product is placed on the market. A product sold for five years therefore needs its file kept for fifteen years from launch.

Can I keep my PIF only in digital form?

Yes. Both the UK and EU texts allow the file to be made readily accessible in electronic or other format. What matters is that it can be retrieved, read and provided promptly, in the right language.

Do I need to keep old versions after reformulating?

Yes. Batches sold under the earlier formula still fall under the retention period, so keep the version of the file that applied to them for ten years after their last batch.

Can my Responsible Person service hold the file for me?

Often yes, provided it is agreed in writing and the file is accessible at the right address. It is sensible to keep your own complete copy as well, so you are never dependent on one provider.

Final Word

Retention is the least glamorous part of compliance and the one most likely to be forgotten, because the consequences arrive years later. A few habits, a clear index and a second copy turn a ten-year obligation into a small annual task.

Want your files organised and kept ready? NestQual prepares complete PIFs and CPSR documents in a structure that is built for long-term retention.

Get a CPSR for your product See the Complete Compliance Pack

Sources

1. Regulation (EC) No 1223/2009, Article 11 — Product information file (as it applies in the UK) — legislation.gov.uk
2. European Parliament and Council, Regulation (EC) No 1223/2009 on cosmetic products — eur-lex.europa.eu
3. Regulation (EC) No 1223/2009, Article 13 — Notification — legislation.gov.uk
4. Regulation (EC) No 1223/2009, Annex I — Cosmetic product safety report — legislation.gov.uk
5. OPSS, Making cosmetic products available to consumers in Great Britain — GOV.UK
6. Related guides on this site: UK vs EU PIF, PIF inspection readiness, Keeping a PIF up to date

This article is for general information and does not constitute legal advice. Always confirm current requirements for your specific product and market with a qualified safety assessor or Responsible Person.