What Is a Product Information File (PIF) and What Must It Contain?

Quick Answer

A Product Information File (PIF) is the complete compliance dossier every cosmetic product needs before it's placed on the EU or UK market, required under Article 11 of Regulation (EC) No 1223/2009. It brings together five categories of information the product description, the CPSR, manufacturing and GMP evidence, proof of claimed effects, and animal testing data into a single file the Responsible Person must keep accessible for ten years after the last batch is placed on the market. Think of the CPSR as one chapter inside the PIF, not the whole book.

Why the PIF Exists

Market surveillance authorities don't pre-approve cosmetic products before they're sold instead, they rely on being able to request a product's full compliance documentation at any point after launch. The PIF is that documentation, compiled in advance and kept ready, so a Trading Standards officer or equivalent authority can verify a product's safety, manufacturing standards, and claims without needing to chase down scattered records from multiple departments or suppliers.

The Five Required Sections

Article 11.2 of the Cosmetics Regulation sets out exactly what a compliant PIF must contain:

1. A Description of the Cosmetic Product

Enough detail to clearly link the PIF to the specific finished product product name, code, formula reference, and enough identifying information that the Responsible Person or an authority can confidently match the file to the exact product on the shelf.

2. The Cosmetic Product Safety Report (CPSR)

This is the section most brand owners are already familiar with Part A (safety information) and Part B (the assessor's safety conclusion). It's the largest and most technical section of the PIF, but it is only one of five required parts, not the entire file.

3. A Description of the Manufacturing Method and GMP Compliance Statement

An outline of how the product is actually manufactured, together with a statement confirming compliance with Good Manufacturing Practice standards. This section connects your formula on paper to the real-world process used to produce it.

4. Proof of the Effect Claimed for the Product

If your labelling or marketing makes a specific claim "reduces the appearance of fine lines," "24-hour hydration," "clinically tested" the PIF must hold evidence substantiating that claim, proportionate to the nature of the claim being made.

5. Data on Animal Testing

Information on any animal testing carried out by the manufacturer, its agents, or suppliers, in relation to the development or safety assessment of the product or its ingredients, reflecting the EU's animal testing ban framework for finished cosmetics and ingredients.

How Long You Must Keep It

The PIF must be retained for ten years from the date the last batch of the product was placed on the market not ten years from launch, but ten years from the final batch sold. For a long-running product line, this means your documentation obligation can stretch well over a decade from the original launch date.

Where It Must Be Kept and in What Language

The PIF must be kept at a single address within the EU (or the UK, for UK-market products)  typically the address of the Responsible Person listed on the product label and made readily accessible, electronically or otherwise, to the competent authority of that member state. It must also be available in a language the local competent authority can readily understand, which matters in particular for brands selling across multiple EU countries through a single Responsible Person.

CPSR vs PIF: A Quick Clarification

These two terms get used almost interchangeably in casual conversation, but they aren't the same thing. The CPSR is the safety assessment one specific, critical document. The PIF is the complete file that contains the CPSR alongside four other required categories of information. Every product with a CPSR needs a PIF built around it; a CPSR alone, sitting outside a properly assembled PIF, doesn't satisfy your Article 11 obligation on its own.

Who Is Responsible for Maintaining It

The designated Responsible Person for the product carries this obligation. For a UK or EU-based brand formulating and selling under its own name, that's usually the brand itself. For private-label arrangements, imports, or products manufactured elsewhere and rebranded, the Responsible Person role and the PIF obligation that comes with it  needs to be clearly and correctly assigned before the product goes to market.

What Happens During an Inspection

If a market surveillance authority requests your PIF, they expect it to be genuinely ready not compiled retrospectively once the request lands. An incomplete, outdated, or inaccessible PIF can result in the product being treated as non-compliant, regardless of whether the underlying formula is actually safe. This is one of the more common gaps NestQual sees: brands with a solid CPSR but a PIF that was never properly assembled around it.

Practical Checklist

• Confirm your PIF contains all five required sections, not just the CPSR.
• Check that manufacturing and GMP compliance documentation is current and matches your actual production process.
• Keep evidence on file for every specific claim made on your packaging or marketing.
• Document animal testing data (or its absence) clearly, across your own testing and your suppliers'.
• Confirm the PIF is stored at the correct Responsible Person address and in the appropriate language.
• Set a retention reminder for ten years from your product's final batch date, not its launch date.

Frequently Asked Questions

Is the CPSR the same as the PIF?

No. The CPSR is one required section within the PIF. The PIF also requires a product description, manufacturing and GMP evidence, proof of claimed effects, and animal testing data.

How long do I need to keep a product's PIF?

Ten years from the date the last batch of that specific product was placed on the market, not ten years from the original launch date.

Does every cosmetic product need its own PIF?

Yes. The requirement applies to every product that meets the legal definition of a cosmetic product and is placed on the EU or UK market, regardless of company size or sales volume.

Can the PIF be stored electronically?

Yes, the regulation allows electronic or other formats, as long as it remains readily accessible to the competent authority at the Responsible Person's address on request.

What happens if my PIF is incomplete when an authority requests it?

The product can be treated as non-compliant regardless of the actual safety of the formula, potentially leading to enforcement action or removal from the market until the documentation gap is resolved.

Final Word

A strong CPSR is necessary but not sufficient on its own the PIF is the file an authority actually asks for, and it needs all five pieces in place, correctly stored, and genuinely current. Building your PIF properly from the start, rather than assembling it hastily when a formal request arrives, is one of the simplest ways to keep a compliant product genuinely audit-ready.

Want your PIF built correctly from day one? NestQual prepares complete Product Information Files alongside your CPSR, SDS, and notification submissions, so your full compliance record is ready before any authority ever asks for it.

Get a CPSR for your product See the Complete Compliance Pack

Sources

1. European Parliament and Council, Regulation (EC) No 1223/2009 on cosmetic products, Article 11 — eur-lex.europa.eu
2. UK version, Regulation (EC) No 1223/2009, as retained in UK law — legislation.gov.uk
3. GOV.UK, Submit a Cosmetic Product Notification (SCPN) — gov.uk
4. Cosmetic, Toiletry and Perfumery Association (CTPA), Safety of Cosmetics — ctpa.org.uk

This article is for general information and does not constitute legal advice. Always confirm current requirements for your specific product and market with a qualified safety assessor or Responsible Person.