{"id":4047,"date":"2026-06-30T11:53:00","date_gmt":"2026-06-30T09:53:00","guid":{"rendered":"https:\/\/aquralabs.com\/?p=4047"},"modified":"2026-07-06T18:24:33","modified_gmt":"2026-07-06T16:24:33","slug":"selling-cosmetics-eu-us-safety-substantiation","status":"publish","type":"post","link":"https:\/\/aquralabs.com\/es\/selling-cosmetics-eu-us-safety-substantiation\/","title":{"rendered":"Selling Cosmetics in the EU and US: What Safety Substantiation Really Requires"},"content":{"rendered":"<p>When you say a cosmetic is \u00absafe,\u00bb EU and US regulators don&#8217;t hear a slogan. They hear a legal claim that has to be backed by structured data and expert judgement. This article compares what <strong>safety substantiation<\/strong> actually means under the EU Cosmetic Product Safety Report (CPSR) system and under US MoCRA, and shows how to build one safety package that satisfies both.<\/p>\n<h2>The EU Model: CPSR and Pre-Market Safety Assessment<\/h2>\n<p>In the EU and the UK, you cannot legally place a cosmetic on the market without a <strong>Cosmetic Product Safety Report (CPSR)<\/strong> signed by a qualified safety assessor.<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/aquralabs.com\/wp-content\/uploads\/2026\/07\/04_building_package_jars.jpg\" alt=\"Business professional signing a cosmetic safety document representing the EU CPSR sign-off process\" class=\"aligncenter size-full\" style=\"margin-top:30px;margin-bottom:30px;display:block;width:100%;\"><\/p>\n<p>Regulation (EC) No 1223\/2009 requires every cosmetic to undergo a safety assessment documented as a CPSR before it reaches consumers. The report follows a harmonised two-part structure recognised across the EU: <strong>Part A<\/strong> covers the safety information itself, composition, raw material specifications, impurities, microbiology, packaging, stability, toxicological profiles, exposure assessment and margin-of-safety calculations. <strong>Part B<\/strong> contains the assessor&#8217;s conclusion on safety under normal and foreseeable use, along with their reasoning and any conditions of use or warnings.<\/p>\n<p>The CPSR sits inside the <strong>Product Information File (PIF)<\/strong>, which must stay readily available to authorities and be maintained by the EU or UK <strong>Responsible Person<\/strong>. Because the safety opinion is issued before launch, it explicitly answers one question for the specific formula, packaging and use pattern: is this product safe under normal and reasonably foreseeable conditions of use?<\/p>\n<p>In practice, this means safety substantiation is formalised, centralised and front-loaded. <strong>No CPSR, no legal placing on the EU market.<\/strong><\/p>\n<h2>The US Model: MoCRA and \u00abAdequate Substantiation of Safety\u00bb<\/h2>\n<p>MoCRA does not create a US clone of the CPSR, but it does turn safety substantiation into a clear, enforceable obligation rather than a \u00abnice to have.\u00bb<\/p>\n<p>Under MoCRA, the <strong>Responsible Person<\/strong> must ensure and maintain records supporting <strong>\u00abadequate substantiation of safety\u00bb<\/strong> for each cosmetic product. The law defines this as tests, studies, research, analyses or other information that experts would consider sufficient to support a reasonable certainty of safety under labelled or customary use. FDA and specialist commentators point to toxicological reviews, ingredient safety data, in vitro and in vivo tests, HRIPT and dermatological tests, along with clinical and consumer data where relevant, as valid building blocks.<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/aquralabs.com\/wp-content\/uploads\/2026\/07\/01_cover_eu_us_cream.jpg\" alt=\"Scientist reviewing safety data on screen representing US MoCRA safety substantiation record-keeping\" class=\"aligncenter size-full\" style=\"margin-top:30px;margin-bottom:30px;display:block;width:100%;\"><\/p>\n<p>These records must be in place and available to FDA on request. They are not pre-approved, but a lack of adequate substantiation can support enforcement action, recalls or warning letters. Mirroring the EU, MoCRA also introduces a US <strong>Responsible Person<\/strong>, accountable for compliance including safety substantiation and adverse event management.<\/p>\n<p>In contrast to the EU, MoCRA emphasises <strong>post-market oversight<\/strong> backed by mandatory documentation, not a formal pre-market approval or a prescribed report template.<\/p>\n<h2>CPSR vs MoCRA: Similar Goals, Different Mechanics<\/h2>\n<p>At a high level, both regimes want the same thing: a documented, science-based rationale that the product is safe for consumers. The differences lie in how structured the process is and when it gets checked.<\/p>\n<p><strong>What they have in common:<\/strong><\/p>\n<ul>\n<li>Both require a systematic safety assessment covering ingredients, impurities, exposure and vulnerable users.<\/li>\n<li>Both expect valid scientific evidence rather than assumptions: toxicology data, literature, historical use, testing and reasoned margins of safety where appropriate.<\/li>\n<li>Both place responsibility on a designated legal entity, the EU\/UK Responsible Person or the MoCRA Responsible Person, to hold and present the safety file.<\/li>\n<\/ul>\n<p><strong>Where they diverge:<\/strong><\/p>\n<ul>\n<li><strong>Format and harmonisation:<\/strong> the EU uses a harmonised CPSR structure that assessors and inspectors recognise instantly, while the US has no mandated report format. \u00abAdequate substantiation\u00bb is principle-based, which allows flexibility but also creates variability in quality.<\/li>\n<li><strong>Pre-market vs post-market:<\/strong> EU safety assessment is explicitly pre-market. A product should not be placed on the market without a signed CPSR. MoCRA does not require pre-market approval. Substantiation must exist but is generally reviewed post-market during inspections or in response to concerns.<\/li>\n<li><strong>Regulatory culture:<\/strong> the EU is more prescriptive, with annexed ingredient lists, SCCS opinions and formal margin-of-safety calculations, while the US is more open-textured, allowing a broader range of data sources and historical use provided the overall package is scientifically sound.<\/li>\n<\/ul>\n<p>For global brands, the practical message is that a well-done CPSR usually goes a long way towards MoCRA compliance, but it is <strong>not automatically sufficient<\/strong> without adaptation to US expectations and product-use specifics.<\/p>\n<h2>Building One Safety Package That Works in Both Systems<\/h2>\n<p>You can realistically design a single safety core, then format it separately for EU CPSR and US MoCRA.<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/aquralabs.com\/wp-content\/uploads\/2026\/07\/02_eu_cpsr_signing.jpg\" alt=\"Cosmetic product samples on a laboratory counter with an in vivo testing consultation in the background\" class=\"aligncenter size-full\" style=\"margin-top:30px;margin-bottom:30px;display:block;width:100%;\"><\/p>\n<p>That core should include:<\/p>\n<ul>\n<li><strong>Formula and raw material data:<\/strong> full INCI, exact concentrations, specs, impurities, allergens and supplier documentation.<\/li>\n<li><strong>Toxicology and exposure:<\/strong> ingredient toxicology plus realistic exposure scenarios, including any vulnerable groups.<\/li>\n<li><strong>Product-specific testing:<\/strong> microbiology, preservative efficacy, stability and packaging interaction, plus patch testing, HRIPT or safety-in-use studies.<\/li>\n<li><strong>Risk management:<\/strong> clear justification for any use restrictions and label warnings, traceable back to the data.<\/li>\n<\/ul>\n<p>From there, you shape the same core into an <strong>EU CPSR<\/strong> Part A\/B with formal margins of safety and an assessor conclusion and organise it separately as a <strong>MoCRA<\/strong> safety substantiation file aligned with the \u00abadequate substantiation\u00bb definition and ready for FDA inspection.<\/p>\n<p>For brands that already have CPSRs in place, the work is mainly mapping and filling gaps for MoCRA: checking US-specific use patterns and language, then confirming the file clearly meets the US \u00abadequate substantiation\u00bb standard.<\/p>\n<h2>What This Means for Your Testing Strategy<\/h2>\n<p>For brand, regulatory and R&#038;D teams planning global launches, safety substantiation should drive the testing plan, not the other way around.<\/p>\n<p>Plan the safety narrative early: identify your highest-risk ingredients, populations and use patterns, then work out what evidence you will need to feel comfortable in both an EU CPSR and a US MoCRA context.<\/p>\n<p>Prioritise safety-in-use studies: microbiology and stability are essential foundations, but real-world <a href=\"https:\/\/aquralabs.com\/patch-test-vs-safety-in-use-study-cosmetics\/\" style=\"color: #008080; text-decoration: none;\">safety-in-use studies<\/a> (ideally dermatologist-supervised, with additional specialist input where relevant) are what demonstrate that the finished product is well tolerated under normal and slightly exaggerated conditions of use.<\/p>\n<p>If you also want to support performance or \u00abclinically proven\u00bb claims, you will need separate, well-designed clinical efficacy studies with clear endpoints, appropriate controls and statistically sound methods. The same applies to <a href=\"https:\/\/aquralabs.com\/cosmetic-claim-substantiation-consumer-testing\/\" style=\"color: #008080; text-decoration: none;\">consumer perception testing<\/a>, where structured consumer feedback supports the claims you want to make, so the wording of your claims matches what the data can genuinely show.<\/p>\n<p>Treat documentation as a living file too. MoCRA expects safety substantiation and adverse-event data to stay current over the product life cycle. EU authorities can revisit CPSRs whenever new information emerges.<\/p>\n<p>The end goal is one coherent safety story that would satisfy an EU assessor signing a CPSR and an FDA inspector reviewing MoCRA records. With that in place, when you say \u00abthis product is safe,\u00bb you are speaking a language both regulators recognise.<\/p>\n<p>&nbsp;<\/p>\n<style>\n  .corporate-cta-small {\n    display: inline-block;\n    padding: 14px 32px;\n    background-color: #293742;\n    color: #ffffff !important;\n    font-size: 1rem;\n    font-weight: 800;\n    text-decoration: none !important;\n    border-radius: 10px;\n    transition: all 0.4s cubic-bezier(0.175, 0.885, 0.32, 1.275);\n    border: none;\n    cursor: pointer;\n    box-shadow: 0px 4px 10px rgba(0, 0, 0, 0.1);\n    text-transform: uppercase;\n    letter-spacing: 0.5px;\n  }\n  .corporate-cta-small:hover {\n    background-color: #78A4A5 !important;\n    color: #ffffff !important;\n    transform: scale(1.07);\n    box-shadow: 0px 6px 20px rgba(120, 164, 165, 0.35);\n  }\n  .aq-faq{font-family:Montserrat,sans-serif;margin:2rem 0}\n  .aq-faq-heading{font-family:Montserrat,sans-serif!important;font-size:17px!important;font-weight:600!important;color:#1F2124!important;margin:2rem 0 12px!important}\n  .aq-faq-toggle{position:absolute!important;opacity:0!important;pointer-events:none!important;width:1px!important;height:1px!important}\n  .aq-faq-label{display:flex!important;justify-content:space-between!important;align-items:center!important;width:100%!important;box-sizing:border-box!important;background:#F3F3F3!important;padding:14px 16px!important;cursor:pointer!important;font-family:Montserrat,sans-serif!important;font-size:15px!important;font-weight:600!important;color:#1F2124!important;border-radius:6px!important;margin-bottom:4px!important;gap:12px!important;line-height:1.4!important;text-align:left!important}\n  .aq-faq-icon{flex-shrink:0!important;width:14px!important;height:14px!important;position:relative!important;display:block!important;min-width:14px!important}\n  .aq-faq-icon::before{content:\"\"!important;position:absolute!important;width:14px!important;height:2px!important;background:#1F2124!important;top:50%!important;transform:translateY(-50%)!important;left:0!important}\n  .aq-faq-icon::after{content:\"\"!important;position:absolute!important;width:2px!important;height:14px!important;background:#1F2124!important;left:50%!important;top:0!important;transform:translateX(-50%)!important;transition:opacity .2s ease!important}\n  .aq-faq-body{max-height:0!important;overflow:hidden!important;transition:max-height .35s ease!important}\n  .aq-faq-inner{font-family:Montserrat,sans-serif!important;font-size:14px!important;line-height:1.75!important;color:#3A3A3A!important;padding:12px 16px 16px!important}\n  .aq-faq-toggle:checked+.aq-faq-label{border-radius:6px 6px 0 0!important}\n  .aq-faq-toggle:checked+.aq-faq-label .aq-faq-icon::after{opacity:0!important}\n  .aq-faq-toggle:checked~.aq-faq-body{max-height:600px!important;background:#F3F3F3!important;border-radius:0 0 6px 6px!important}\n<\/style>\n<div style=\"text-align:center;margin:1rem 0\"><a class=\"corporate-cta-small\" href=\"https:\/\/aquralabs.com\/contact\/\"> GET IN TOUCH WITH OUR TEAM <\/a><\/div>\n<p>&nbsp;<\/p>\n<div class=\"aq-faq\">\n<h2 class=\"aq-faq-heading\">Frequently Asked Questions<\/h2>\n<div class=\"aq-faq-item\"><input type=\"checkbox\" id=\"aq1\" class=\"aq-faq-toggle\"><label for=\"aq1\" class=\"aq-faq-label\">What is a CPSR and who needs one?<span class=\"aq-faq-icon\"><\/span><\/label><\/p>\n<div class=\"aq-faq-body\">\n<div class=\"aq-faq-inner\">A Cosmetic Product Safety Report is a mandatory safety assessment required under EU Regulation (EC) No 1223\/2009 for every cosmetic product placed on the EU or UK market. It must be signed by a qualified safety assessor before the product can legally be sold.<\/div>\n<\/div>\n<\/div>\n<div class=\"aq-faq-item\"><input type=\"checkbox\" id=\"aq2\" class=\"aq-faq-toggle\"><label for=\"aq2\" class=\"aq-faq-label\">Does MoCRA require pre-market approval like the EU CPSR?<span class=\"aq-faq-icon\"><\/span><\/label><\/p>\n<div class=\"aq-faq-body\">\n<div class=\"aq-faq-inner\">No. MoCRA requires adequate substantiation of safety to be documented and available to the FDA on request, but it does not require pre-market approval or a prescribed report format the way the EU CPSR does.<\/div>\n<\/div>\n<\/div>\n<div class=\"aq-faq-item\"><input type=\"checkbox\" id=\"aq3\" class=\"aq-faq-toggle\"><label for=\"aq3\" class=\"aq-faq-label\">Can one safety file work for both the EU and the US?<span class=\"aq-faq-icon\"><\/span><\/label><\/p>\n<div class=\"aq-faq-body\">\n<div class=\"aq-faq-inner\">Yes, with the right approach. A single core safety file, covering formula data, toxicology, product-specific testing and risk management, can be formatted two ways: as an EU CPSR Part A\/B and as a MoCRA-compliant substantiation file.<\/div>\n<\/div>\n<\/div>\n<div class=\"aq-faq-item\"><input type=\"checkbox\" id=\"aq4\" class=\"aq-faq-toggle\"><label for=\"aq4\" class=\"aq-faq-label\">What evidence counts as \u00abadequate substantiation of safety\u00bb under MoCRA?<span class=\"aq-faq-icon\"><\/span><\/label><\/p>\n<div class=\"aq-faq-body\">\n<div class=\"aq-faq-inner\">Toxicological reviews, ingredient safety data, in vitro and in vivo testing, HRIPT and dermatological testing, plus clinical or consumer data where relevant, are all recognised as valid evidence types under MoCRA.<\/div>\n<\/div>\n<\/div>\n<div class=\"aq-faq-item\"><input type=\"checkbox\" id=\"aq5\" class=\"aq-faq-toggle\"><label for=\"aq5\" class=\"aq-faq-label\">Is a CPSR enough to comply with MoCRA?<span class=\"aq-faq-icon\"><\/span><\/label><\/p>\n<div class=\"aq-faq-body\">\n<div class=\"aq-faq-inner\">A well-prepared CPSR goes a long way, but it is not automatically sufficient. Brands typically need to check US-specific use patterns and confirm the file meets the MoCRA \u00abadequate substantiation\u00bb standard.<\/div>\n<\/div>\n<\/div>\n<div class=\"aq-faq-item\"><input type=\"checkbox\" id=\"aq6\" class=\"aq-faq-toggle\"><label for=\"aq6\" class=\"aq-faq-label\">Who is the \u00abResponsible Person\u00bb under EU and US cosmetic regulations?<span class=\"aq-faq-icon\"><\/span><\/label><\/p>\n<div class=\"aq-faq-body\">\n<div class=\"aq-faq-inner\">Both systems designate a Responsible Person accountable for compliance. In the EU\/UK, this person maintains the CPSR and Product Information File. Under MoCRA, the US Responsible Person maintains safety substantiation records and manages adverse event reporting.<\/div>\n<\/div>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>When you say a cosmetic is \u00absafe,\u00bb EU and US regulators don&#8217;t hear a slogan. They hear a legal claim [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":4040,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"default","adv-header-id-meta":"","stick-header-meta":"default","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"set","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[9],"tags":[],"class_list":["post-4047","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-services"],"_links":{"self":[{"href":"https:\/\/aquralabs.com\/es\/wp-json\/wp\/v2\/posts\/4047","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/aquralabs.com\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/aquralabs.com\/es\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/aquralabs.com\/es\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/aquralabs.com\/es\/wp-json\/wp\/v2\/comments?post=4047"}],"version-history":[{"count":4,"href":"https:\/\/aquralabs.com\/es\/wp-json\/wp\/v2\/posts\/4047\/revisions"}],"predecessor-version":[{"id":4051,"href":"https:\/\/aquralabs.com\/es\/wp-json\/wp\/v2\/posts\/4047\/revisions\/4051"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/aquralabs.com\/es\/wp-json\/wp\/v2\/media\/4040"}],"wp:attachment":[{"href":"https:\/\/aquralabs.com\/es\/wp-json\/wp\/v2\/media?parent=4047"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/aquralabs.com\/es\/wp-json\/wp\/v2\/categories?post=4047"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/aquralabs.com\/es\/wp-json\/wp\/v2\/tags?post=4047"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}