CPNP Decoded: What Every K-Beauty Reseller Needs to Know About EU Cosmetic Compliance

What Is CPNP and Why Should You Care?

If you sell — or plan to sell — Korean beauty products in Europe, there is one acronym you cannot afford to ignore: CPNP. The Cosmetic Products Notification Portal is a free online system operated by the European Commission, established under EU Regulation (EC) No 1223/2009 — the cornerstone legislation governing cosmetic products across the European Union and European Economic Area. Since July 11, 2013, every cosmetic product placed on the EU/EEA market must be notified through this portal before a single unit reaches a consumer's hands.

Let's be clear about what CPNP is — and what it is not. CPNP is a notification system, not an approval system. There is no such thing as "CPNP approval" or "CPNP certification." The European Commission does not review or approve your product through CPNP. Instead, the portal serves as a centralized database that enables two critical functions: it allows national market surveillance authorities across 31 countries to monitor what cosmetic products are being sold in their jurisdictions, and it provides poison control centers with detailed ingredient data so they can deliver rapid emergency treatment if a consumer has an adverse reaction.

The scale of CPNP is staggering. As of late 2025, over 4 million cosmetic products have been notified through the portal, spanning everything from luxury serums to mass-market shampoos. Every major global beauty brand selling in Europe has a presence in this database — and every K-beauty product legally sold in Germany, France, Italy, Spain, the Netherlands, or any other EU/EEA member state is in there too.

For K-beauty resellers, the implication is straightforward and non-negotiable: if a product is not notified in CPNP, it cannot legally be sold in any EU or EEA country. Not in a physical store, not on an e-commerce platform, not through social commerce, not at a pop-up market. The regulation applies regardless of sales channel, volume, or business size. A single unit of unnotified product on the EU market is a regulatory violation.

The Responsible Person (RP) — The Gatekeeper of EU Compliance

At the heart of the EU cosmetic regulatory framework sits a concept that is unfamiliar to many K-beauty resellers operating outside Europe: the Responsible Person. Article 4 of Regulation 1223/2009 mandates that every cosmetic product placed on the EU market must have an appointed Responsible Person — and that entity must be a legal person established within the EU.

For Korean beauty brands — which are, by definition, non-EU manufacturers — the Responsible Person is typically one of the following:

The EU-based importer who first places the product on the EU market. The moment an importer brings a K-beauty product into the EU, they automatically assume RP obligations under the regulation.
A designated EU-based distributor appointed by the Korean manufacturer through a formal written mandate. This allows the brand to choose who bears the compliance responsibility.
A third-party regulatory consultancy firm that specializes in cosmetic compliance. Many such firms operate across Europe, offering RP services to non-EU brands for an annual fee — typically ranging from €1,500 to €5,000+ per product line, depending on complexity and the number of SKUs.

What the Responsible Person Actually Does

The RP role is not ceremonial. It carries significant legal weight and a set of concrete obligations:

Ensure full regulatory compliance — the RP must verify that the product meets all EU safety requirements, including ingredient restrictions, labeling rules, and good manufacturing practice (GMP) standards.
Submit the CPNP notification — only the RP (or their authorized representative) can submit the product notification to the portal.
Maintain the Product Information File (PIF) — this comprehensive dossier includes the safety assessment, product description, manufacturing method, proof of claimed effects, and animal testing data. The PIF must be kept for 10 years after the last batch is placed on the market.
Ensure correct labeling — the RP's name and address must physically appear on the product label or packaging. This is a legal requirement, not a suggestion.
Cooperate with national authorities — if a market surveillance authority in any EU country requests information about the product, the RP must respond.

Why does all of this matter for resellers? Because the chain of compliance starts with the RP. No Responsible Person means no CPNP notification, and no CPNP notification means no legal path to selling in the EU. When you evaluate a potential K-beauty product for the European market, the very first question should be: who is the Responsible Person, and is the CPNP notification in place?

The RP's name and address printed on the product label is your first and most accessible verification point. If you pick up a K-beauty product and see only a Korean address with no EU-based entity listed, that product almost certainly lacks CPNP notification and is not legal for EU sale.

What's Inside a CPNP Notification?

Understanding what information goes into a CPNP notification helps resellers appreciate both the rigor of the system and the legitimate effort required to bring a product to the EU market. A notification is not a one-line form — it is a structured data submission that covers multiple dimensions of the product.

Core Notification Data

Product category — selected from the EU's predefined cosmetic product categories (e.g., face cream, shampoo, lip product, sunscreen). This classification determines which specific regulations apply.
Product name and brand — the commercial name under which the product will be sold.
Country of origin — for K-beauty, this will typically be South Korea (though some brands manufacture in other countries).
Responsible Person details — the RP's full legal name, physical address within the EU, and contact information.
Frame formulation or exact composition — the RP can submit either a "frame formulation" (a standardized description of the product type and ingredient ranges) or the exact quantitative composition. Most choose the frame formulation for the public notification, while providing exact composition data through a separate, confidential channel to poison control centers.
Original product label — a photograph or scan of the actual product packaging, showing all label elements.

Sensitive Ingredient Declarations

Certain categories of ingredients require specific declaration within the notification:

CMR substances (carcinogenic, mutagenic, or reprotoxic) — if the product contains any CMR substances in categories 1A, 1B, or 2, their CAS and EC numbers must be provided along with concentration data.
Nanomaterials — must be specifically declared with their IUPAC name, expected exposure conditions, and safety data. The EU has been particularly vigilant about nanomaterial transparency, especially in sunscreens — a category where many K-beauty products excel.
Certain ingredients above threshold concentrations — for example, products containing essential oils or specific fragrance allergens above 0.5% require additional concentration data.

Upon successful submission, the portal generates a unique CPNP reference number immediately. This number becomes the product's compliance fingerprint within the EU system — it's how authorities, poison centers, and compliance officers track the product.

How CPNP Numbers Flow — From Brand HQ to Your Shelf

One of the most common points of confusion for K-beauty resellers is how the CPNP notification actually flows through the supply chain. Let's trace the journey step by step:

The Notification Chain

Step 1: Manufacturing in Korea. A Korean beauty brand manufactures the product at an OEM/ODM facility (Cosmax, Kolmar, or similar). At this stage, no CPNP obligation exists — the product is not yet on the EU market.

Step 2: Export to the EU. The product is shipped to an EU-based entity — either a direct subsidiary of the Korean brand, an appointed importer, or a distribution partner.

Step 3: RP receives documentation. The EU-based Responsible Person receives the complete product documentation from the Korean manufacturer: the full formulation, safety assessment report, stability testing data, GMP certificates, and product labels.

Step 4: CPNP notification submitted. The RP logs into the CPNP portal and submits the notification using the product documentation. Upon successful submission, the system generates the unique CPNP reference number.

Step 5: Documentation shared downstream. The RP shares the CPNP reference number and compliance documentation with importers and distributors — often via a formal compliance certificate, a letter of authorization, or as part of the product documentation package.

Step 6: Resellers receive proof. Distributors and wholesalers pass the CPNP documentation to their reseller customers. As a reseller, you keep this reference on file as proof that the products you sell are legally compliant.

Critical Details Resellers Must Know

There is an important nuance that catches many distributors off guard: if you translate the product label into another EU language (for example, translating from English to French for the French market), you are required to submit your own CPNP notification linked to the RP's original notification. This distributor-level notification ensures that the translated label information is also captured in the system.

Another frequently misunderstood point: the CPNP reference number is not printed on the product itself. It is an internal compliance reference used in business-to-business documentation and regulatory interactions. You will not find it on the box or bottle. This is why requesting it from your supplier requires an explicit, proactive step — it won't be visible just by examining the product.

When evaluating a new supplier or product line, here is what you should request:

The CPNP reference number for each product you intend to sell
The Responsible Person's name and contact information
Confirmation that the notification is current — notifications can be withdrawn or may become outdated if the formulation changes
A copy of or access to the Product Information File (PIF) — while you may not need to review it in detail, knowing it exists and is accessible is a compliance safeguard

Why Every European Buyer Asks for Your CPNP Number

If you've ever dealt with European buyers — whether retailers, distributors, or even savvy individual consumers — you've likely encountered the question: "Can you provide the CPNP number?" This isn't arbitrary bureaucratic gatekeeping. There are compelling reasons why this question has become a standard part of EU cosmetics procurement.

Legal Obligation

EU cosmetics regulation requires products to be notified before sale. Buyers at every level of the supply chain need assurance that the products they purchase and resell are compliant. Carrying non-notified products exposes them to the same penalties and liabilities as the original importer.

Due Diligence and Self-Protection

Professional buyers in the EU market understand that they share liability for the products they sell. Requesting CPNP documentation is a basic due diligence measure — the commercial equivalent of checking that a car has valid registration before buying it.

Market Surveillance Reality

EU national authorities conduct random and targeted market surveillance checks. Products found without CPNP notification are immediately flagged as non-compliant. The authorities have direct access to the CPNP database and can verify any product's notification status instantly. Being caught selling non-notified products triggers investigation, potential fines, and mandatory product withdrawal.

Platform Requirements

Major e-commerce platforms operating in the EU have increasingly incorporated CPNP compliance into their seller requirements. Amazon EU marketplaces (Germany, France, Italy, Spain, Netherlands, and others) now require evidence of regulatory compliance for cosmetic products. eBay EU has similar policies. Sellers who cannot demonstrate CPNP notification risk listing removal and account suspension.

Insurance and Liability

Business insurance policies for EU cosmetics distributors typically include compliance requirements. Selling products that are not properly notified through CPNP can void product liability insurance — leaving the reseller fully exposed in the event of a consumer claim or adverse reaction.

B2B Procurement Standards

Major EU retailers — from large pharmacy chains to department stores to specialty beauty retailers — include CPNP compliance in their supplier qualification agreements. Without documented CPNP notification, your products simply won't make it past the procurement team's compliance checklist, regardless of how exceptional the formulations may be.

The bottom line: CPNP compliance isn't red tape for the sake of red tape. It's the EU's mechanism for ensuring consumer safety across a market of over 450 million people in 31 countries. European buyers ask about CPNP because they are protecting themselves, their customers, and the integrity of a market that takes cosmetic safety seriously.

Can You Verify CPNP Registration Without the Brand?

This is one of the most frequently asked questions we receive from K-beauty resellers exploring the EU market, and the answer is nuanced.

The short answer: not easily. The CPNP portal is not publicly accessible. It is a restricted-access system with different permission levels for different stakeholders.

Who CAN Access CPNP

The Responsible Person who submitted the notification — they have full access to their own submissions and can modify, update, or withdraw notifications.
Distributors who have submitted their own linked notifications (e.g., after translating a label) — they can access their own notification data.
National competent authorities — such as ANSM (Agence nationale de sécurité du médicament) in France, BVL (Bundesamt für Verbraucherschutz und Lebensmittelsicherheit) in Germany, or AEMPS in Spain. These authorities have full search access to verify any product's notification status.
Poison control centers — they have access to the confidential formulation data for emergency treatment purposes.

Who CANNOT Access CPNP

The general public
Resellers or retailers who have not submitted their own notifications
Competitors seeking product intelligence
Journalists, researchers, or advocacy groups

What Resellers CAN Do to Verify Compliance

Even without direct portal access, there are several practical steps you can take:

Request the CPNP reference number directly from the brand, Responsible Person, or your supplier. A legitimate, compliant supplier will have this information readily available and should be willing to share it.
Check the product label for the RP's name and address. EU regulation requires this information to be physically printed on the product packaging. Its presence is a strong (though not absolute) indicator of compliance.
Contact the Responsible Person directly to verify the notification status. The RP's contact information should be on the label or available from the supplier.
Contact the national competent authority of the target market country. While response times and willingness to confirm vary, some authorities (particularly in France and Germany) will confirm whether a specific product has an active CPNP notification.
Engage a third-party regulatory consultant who can verify notification status through official channels. This is especially valuable when evaluating new suppliers or product lines at scale.

Red Flags That a Product May Not Be CPNP-Notified

Be alert to these warning signs when evaluating K-beauty products for the EU market:

No Responsible Person name or address on the label — this is the most obvious red flag. EU regulation requires this information on every cosmetic product sold in the EU.
Supplier refuses or is unable to provide CPNP reference — a legitimate supplier with properly notified products will have this information. Evasive responses should be treated as a serious warning.
Product label only in Korean or English without any EU-required information — while English is widely accepted across the EU, the absence of an EU RP address, ingredients list in INCI format, and other required label elements suggests the product was not prepared for the EU market.
No batch number on packaging — batch coding is required under EU regulation for traceability purposes. Its absence indicates the product may not meet EU compliance standards.

What Happens If You Sell Without CPNP?

The consequences of selling non-notified cosmetic products in the EU are real, escalating, and affect both your business operations and your personal liability. This is not a theoretical risk — EU authorities actively enforce cosmetic product regulations, and the EU's RAPEX/Safety Gate rapid alert system regularly flags non-compliant cosmetics, including K-beauty products.

Immediate Consequences

Customs seizure — products can be intercepted and held at EU border control. Customs authorities have access to CPNP data and can verify notification status during import inspections.
Market withdrawal orders — national authorities can order the immediate removal of non-notified products from the market, including recall from downstream distributors and retailers.
Online listing removal — e-commerce platforms will remove product listings upon notification from authorities, often accompanied by account-level sanctions.

Financial Penalties

Fines for non-compliance vary by EU member state, as enforcement is handled at the national level. However, the financial impact is consistently significant:

Administrative fines — typically ranging from several thousand to tens of thousands of euros per infringement. In some member states, fines can reach €50,000 or more for serious or repeated violations.
Product recall costs — if non-notified products have already been distributed, the cost of recall, retrieval, and destruction falls entirely on the responsible parties.
Loss of inventory investment — seized or recalled products represent a total loss. There is no insurance recovery for products that were illegally placed on the market.

Business Consequences

Compliance violation records — some member states maintain public records of cosmetic compliance violations. A company appearing in these records faces severe reputational damage in a market that values regulatory trust.
Market re-entry barriers — once flagged for non-compliance, re-entering the EU market becomes significantly more difficult. Authorities may apply heightened scrutiny to all future product notifications from the same company or RP.
Damaged business relationships — EU buyers, retailers, and platform partners who discover non-compliance in your product line will typically terminate the relationship immediately and permanently.
Personal liability for directors — in some EU jurisdictions, company directors or officers can be held personally liable for placing non-compliant cosmetics on the market, particularly if negligence or willful disregard can be demonstrated.

Who Bears the Liability?

This is a critical point that many resellers overlook: liability is shared across the supply chain. The Responsible Person bears primary regulatory responsibility, but distributors and resellers are not exempt. Under Article 6 of the regulation, distributors must verify that the product bears the RP's information, has the required labeling, and is within its shelf life. Failure to perform these basic checks makes the distributor directly liable.

In practice, if you are a reseller who sells a non-notified K-beauty product in the EU, both you and the RP (if one was even appointed) can face enforcement action simultaneously. Claiming ignorance — "I didn't know it needed CPNP notification" — is not a valid defense under EU law.

Practical Checklist — Ensuring Your K-Beauty Products Are CPNP-Ready

Before offering any K-beauty product for sale in the EU/EEA market, work through every item on this compliance checklist. Each point represents a critical link in the chain of legal market access.

Pre-Sale Compliance Verification

Verify RP information on the product label — Confirm that a Responsible Person's name and physical EU address are printed on the product packaging. This is the most basic and visible compliance indicator.
Request CPNP reference number from your supplier — Ask for the specific CPNP notification reference for each product and each variant (different shades, sizes, or formulations are typically separate notifications).
Confirm the notification is current — CPNP notifications can be withdrawn or may become outdated if the product formulation, labeling, or RP changes. Verify that the notification reflects the current version of the product.
Check EU-required label elements — Ensure the product label includes all mandatory information: INCI ingredients list, period after opening (PAO) symbol or minimum durability date, batch number, net content, product function (if not obvious), warnings and precautions as required.
Verify target-market language compliance — Many EU countries require certain label elements (particularly ingredients, warnings, and usage instructions) to be in the local language. Confirm that labels are available in the language(s) required by your target market.
Keep copies of all CPNP documentation — Maintain organized records of CPNP reference numbers, RP correspondence, compliance certificates, and any other regulatory documentation in your business files. Authorities can request this information at any time.
Verify PIF accessibility — Confirm that your supplier or the Responsible Person can produce the Product Information File (PIF) upon request. You don't need to hold the PIF yourself, but you need to know it exists and can be accessed.
Submit distributor notification if needed — If you translate or modify the product label for a specific EU market, you are required to submit your own CPNP notification linked to the RP's original notification. Factor this step — and its cost and timeline — into your go-to-market planning.

Ongoing Compliance Maintenance

Monitor regulatory updates — EU cosmetics regulation evolves. Ingredient restrictions are updated, new labeling requirements are introduced, and enforcement priorities shift. Stay informed through industry associations, regulatory consultants, or services like KCOSW's market intelligence.
Re-verify after product reformulations — If a Korean brand reformulates a product (even minor ingredient changes), the CPNP notification must be updated. Confirm with your supplier that notifications are current whenever product specifications change.
Track RAPEX/Safety Gate alerts — The EU's rapid alert system for dangerous non-food products publishes weekly reports of non-compliant cosmetics. Monitoring these alerts helps you identify compliance risks in your product categories and avoid problematic suppliers.

Navigating EU cosmetic compliance can feel daunting, especially for resellers whose primary experience is in less regulated markets. But the framework exists for good reason, and the resellers who master it gain a powerful competitive advantage: the ability to serve Europe's 450 million consumers with confidence, legitimacy, and the trust of professional buyers who insist on full compliance.

KCOSW provides CPNP-documented K-beauty products with full compliance support for the EU market. Create your account to access our compliance-ready wholesale catalog and start selling K-beauty in Europe the right way.