A Product Information File (PIF) is the dossier the responsible person must keep for every cosmetic product placed on the EU market. It contains the Cosmetic Product Safety Report (CPSR), but the two are not the same thing. The PIF also holds the product description, manufacturing information, evidence for claimed effects where needed, and data on any animal testing.

This guide covers what goes into the file, who keeps it accessible and when it must be updated. It covers EU requirements only and is not a combined EU, Great Britain and Northern Ireland compliance assessment. For the wider development sequence, use the cosmetic product development roadmap.

Who is responsible for the PIF?

The responsible person keeps the PIF. Hiring a laboratory or consultant does not transfer that duty. Under Articles 4 and 11 of Regulation (EC) No 1223/2009, the responsible person is a legal or natural person designated within the EU. Whether that is the manufacturer, the importer, the distributor or someone appointed by written mandate depends on the supply arrangement.

Name the responsible person before building the dossier. Then agree who obtains supplier information, who coordinates the safety assessment, who controls versions and who answers authority requests. A supplier offering “PIF support” has not told you which of those tasks it covers.

The PIF is one of several launch duties. The EU cosmetic launch checklist covers the roles and handoffs and keeps the PIF, safety assessment and notification as separate deliverables.

What must an EU Product Information File contain?

Article 11(2) sets out five categories. It does not require a standard bundle of certificates. The table paraphrases the PIF contents in Article 11. The last column suggests a practical check for each category. These checks are not extra legal forms.

The animal-testing category covers testing related to the development or safety assessment of the product or its ingredients. It does not require an “official no-animal-testing certificate.” Recording the data also does not show that any testing or marketing complies with the Regulation’s separate animal-testing provisions.

A PIF is not a product approval and does not prove that every obligation is met. What counts is that its contents are relevant and kept current. A full folder says nothing about whether the information inside it is adequate.

The CPSR is the safety component, not the whole PIF

The CPSR combines safety information with a qualified assessment of that information. Article 10 and Annex I set out the pre-market assessment and report requirements. Laboratory findings are inputs to the assessment and cannot replace the assessor’s reasoning.

Part A: cosmetic product safety information

Part A holds the information the assessment needs:

• Qualitative and quantitative composition.
• Physical and chemical characteristics, and stability under reasonably foreseeable storage conditions.
• Microbiological quality, including specifications and preservation challenge-test results.
• Impurities, traces and information about packaging material.
• Normal and reasonably foreseeable use, and exposure to the product and its substances.
• Toxicological profiles, undesirable effects, serious undesirable effects and other relevant information.

This list summarizes Annex I. It is not a testing protocol. The assessor needs information that applies to the actual product. If a report covers an earlier formula or a different pack, someone has to review whether it still applies. Renaming the file does not answer that question.

Part B: cosmetic product safety assessment

Part B contains the safety conclusion, any required warnings and instructions, the scientific reasoning, and the assessor’s credentials and approval. Annex I requires proof of the assessor’s qualification and the assessor’s date and signature. That signature covers the assessment. It does not turn the whole PIF into an “official certificate.”

Under Article 10(2), the assessor must hold a diploma or other evidence of formal qualifications from a university course of theoretical and practical study in pharmacy, toxicology, medicine or a similar discipline, or a course recognised as equivalent by a Member State. There is no general “minimum bachelor’s degree” rule. Ask for evidence of the assessor’s qualification instead of relying on a job title or a membership.

Supporting records must answer a product-specific need

Supporting documents provide the required information. Not every familiar supplier document is a mandatory PIF item. Ask the assessor and responsible person what information is needed and why. For each document, record which material or product it covers and which conclusion depends on it.

Formula and raw materials

Identify every ingredient precisely. Composition, material identity, specifications, purity, impurities and supplier information can all feed the safety assessment. A trade name on its own may not reveal what a mixture contains.

A safety data sheet, a technical data sheet and a certificate of analysis do different jobs. Each is a possible information source. They are not interchangeable, and they are not a legal checklist. The same goes for fragrance information: ask for the composition, allergen and other data the assessment needs. Do not assume one certificate completes the file.

Checking Annex II alone does not complete an ingredient-compliance review. This guide does not cover ingredient restrictions, permitted uses, annex changes or transition dates for any particular formula.

Manufacturing, packaging and labels

Article 11 requires a description of the manufacturing method and a statement of GMP compliance. It does not require a third-party ISO 22716 certificate, and it does not require an external audit of every non-EU manufacturer. Agree how the responsible person will get information supporting the statement for the actual manufacturing arrangements.

Annex I brings packaging information into the safety assessment where it is relevant. Keeping the approved artwork and pack specifications with the dossier also helps keep product identity, claims and warnings consistent. These are practical choices. They do not create a general requirement for food-grade certificates or leach testing of cosmetic packaging.

Evidence for claimed effects

Claim evidence must match what the product presentation tells the consumer. Article 2 and the Annex to Regulation (EU) No 655/2013 tie claim wording to the documentation of the claimed effect in the PIF. The common criteria require adequate, verifiable support and, where studies are used, studies relevant to the product. They do not require clinical testing for every claim.

Store the final claim wording with its evidence and the evidence’s limits. An ingredient brochure does not prove how the finished product performs. Use the cosmetic claims substantiation guide to plan the claim-to-evidence review.

Keep the file accessible and calculate retention correctly

The responsible person must make the PIF readily accessible, at the address on the label, to the competent authority of the Member State where the file is kept. Article 11(3) allows electronic or other formats. The information must be in a language the competent authorities of that Member State can easily understand. English will not satisfy every authority.

A document index can link to controlled records, but a link helps only if the information behind it stays accessible. Test access, name backup contacts, and agree what happens if the manufacturer, consultant or hosting provider changes. Confidential information can be protected, but the legal access duty cannot depend on a supplier being available.

Under Article 11(1), the file must be kept for ten years following the date on which the last batch of the cosmetic product was placed on the market. The period does not run from the original launch, the CPSR signature or the date of an early batch. Record the last-batch date so the retention period has a traceable basis.

These rules cover the EU PIF only. They do not settle requirements in Great Britain, Northern Ireland or the United States. For the separate US route, see the MoCRA responsibilities guide, which is not an EU PIF template.

Maintain an evidence index with owners and update triggers

Update the PIF whenever it needs updating, not on an annual reminder. Article 11(2) requires the file to be updated as necessary. Article 10(1)(c) requires the CPSR to be kept up to date as new relevant information emerges after the product is on the market.

Review the file when the formula, safety information, packaging, manufacturing or regulations change. A change to claims or intended use can also alter what the existing evidence supports. Each trigger calls for a qualified review of its effect on the dossier. It does not automatically mean repeating every study.

Copy this checklist into the dossier index. It is a coordination tool, not a legal form.

• Product identity: record the product name, formula version, pack version and intended use covered by the file. Name the person maintaining those references.
• Evidence register: identify each required category, its current document reference and location, and any unresolved gap. Assign an owner for obtaining missing information.
• Safety assessment: identify the applicable CPSR, assessor and qualification evidence. Route new safety information or consequential product changes for assessment.
• Manufacturing: identify the applicable method description and GMP statement. Ask the manufacturing contact to flag relevant site, process or material changes.
• Claims: connect each final claim to supporting documentation. Route wording or presentation changes to the responsible person and appropriate claims specialist.
• Animal-testing information: record the information obtained for Article 11(2)(e), its scope and any questions needing resolution.
• Authority access: record the labelled address, access contact, readable format and language arrangements. Check continuity when providers or systems change.
• Change and retention log: record what changed, the affected documents, the review outcome and who acted. Track the last-batch market-placement date and resulting retention period.

“Received” in the index does not mean “reviewed and applicable.” Track receipt, technical review and open actions separately so a missing decision cannot hide in a folder that looks complete.

Next step: reconcile the dossier with the product sold

Ask the responsible person to check the current product against the five Article 11 categories. For each gap, record the missing information, its owner and the decision needed. Then confirm authority access and the retention basis. The goal is a dossier that is traceable and maintained, not a folder labelled “PIF complete.”