Since 1 January 2021, the UK has run its own cosmetics regulatory regime, separate from the EU. Most indie founders I speak to are aware of this in the abstract but have not done the operational work to actually comply. The result is that a brand goes live in Britain on a CPNP notification that no longer applies, with a French or German Responsible Person address on the label that does not satisfy the UK requirement, and zero documentation that would survive an OPSS review.
The fix is procedural. It is not expensive. It does have to be done before first sale into the UK market.
Here is the checklist we run with founders inside LaunchOS when the launch involves Britain.
1. SCPN notification on the OPSS portal
Every cosmetic product must be notified to the UK Office for Product Safety and Standards via the Submit Cosmetic Product Notifications portal before being placed on the British market. Notification is per product, not per range.
If you only ever sold via the EU CPNP database before Brexit, you must re-notify. The two databases are not synced.
The notification covers product identity, formulation, packaging, label artwork, the appointed Responsible Person, and the safety assessor's name. The penalty for selling without notification is, in England and Wales, an unlimited fine. In Scotland and Northern Ireland, up to £5,000. Imprisonment up to three months is on the books.
2. UK Responsible Person with a UK address
Every product label sold into Britain must show the name and UK address of a UK-resident Responsible Person. An EU RP does not satisfy this requirement.
For US and EU founders launching into the UK, the practical move is to appoint a third-party UK RP service. There are several specialist agencies that do this for £500 to £2,000 per product per year depending on portfolio size.
Do not skip this. It is the most common compliance failure I see in indie launches.
3. Cosmetic Product Safety Report on file
The CPSR is the safety dossier the Responsible Person signs off. It includes the safety assessor's qualified opinion on each ingredient at its concentration in the finished product, given the product's intended use.
You do not write this yourself. A qualified safety assessor writes it. The brand keeps it on the Product Information File for ten years, ready to produce within seventy-two hours if the regulator requests it.
If your contract manufacturer or formulator has a CPSR they will share, fine. If not, commission one. Do not launch without it.
4. INCI list, English labelling, and allergens
The product label must show the ingredient list in International Nomenclature of Cosmetic Ingredients (INCI) order, descending by weight at point of mix. Trade names are not acceptable for the legal ingredient declaration.
UK regulations carry forward the EU Annex III restricted substances list, which includes the eighty fragrance allergens that must be declared individually above 0.001 per cent for leave-on and 0.01 per cent for rinse-off. Your fragrance supplier must give you the breakdown. Many do not by default. Ask explicitly.
PAO (Period After Opening) symbol is required where shelf life is over thirty months. Manufacturer's lot code is required.
5. Claims compliance under the CAP code
Marketing claims are governed by the Committee of Advertising Practice and enforced by the Advertising Standards Authority. The CAP rules are stricter than the FTC equivalent in some areas, particularly around comparative advertising, before-and-after photography, and any therapeutic implication.
ASA fines have crossed £100,000 for repeated indie brand violations in the last two years. The risk is real and the enforcement is increasingly active.
Specifically: avoid "treats", "cures", "heals", "clinically proven" unless you have a clinical trial that supports the specific phrasing. Avoid "natural" and "clean" unless you can substantiate the claim against a published standard. Avoid "dermatologist tested" unless you can produce the test report.
6. Retailer due diligence pack
Cult Beauty, Space NK, Boots, John Lewis, Liberty, and Selfridges each have their own onboarding due diligence packs. They typically ask for: SCPN reference number, RP details, INCI list, CPSR cover page, allergen statement, animal testing status (Cosmetics Regulation 1223/2009 retained in UK law bans animal testing for cosmetic ingredients), claim substantiation evidence, packaging artwork, and a sample with batch code.
Get this pack drafted before you pitch. Buyers ask for it as the first email after a positive meeting, and the brand that can produce it within twenty-four hours wins the slot ahead of the brand that takes a week.
7. Animal testing claim discipline
The UK retains the EU ban on animal testing for cosmetic ingredients and finished products. You cannot claim cruelty-free if you sell into mainland China through cross-border eCommerce that does not require animal testing, but you must be careful about claims if you sell into mainland China through any channel that does require testing.
Leaping Bunny is the operational standard most retailers prefer. Ecocert and Soil Association cover the natural and organic claims. Pick what is true and document it.
8. Product Information File and retention
The PIF is the master file that holds the CPSR, manufacturing method, product specification, claim substantiation, and any adverse event reports. It must be available at the RP's address for ten years from the last batch placed on the market.
In practice this is a folder per SKU, kept by the RP. Founders who treat the PIF as a one-time setup miss the "ongoing" requirement: every claim change, every ingredient change, every packaging change, the PIF gets updated.
What this means for indie launches
Pre-Brexit, EU compliance covered Britain by default. Today it does not. UK founders who outsourced to an EU consultant pre-2021 often have a stale set-up that has not been updated for British rules. EU and US founders launching into Britain often skip the SCPN entirely.
Inside LaunchOS, UK compliance is one of the twelve readiness categories scored before launch. We do not write your CPSR. We do make sure the SCPN reference, RP details, retention windows, retailer due diligence pack, and claim substantiation files are all in place before the brand opens its UK cart.
If your launch involves Britain in the next six months, take the Launch Readiness Audit or speak to us. The compliance fix is procedural, but the cost of getting it wrong - delayed launch, retailer delisting, ASA fine - compounds quickly.
This post is not legal advice. For binding regulatory guidance, speak to a qualified UK Responsible Person or cosmetics compliance consultant.