Here is a detailed guideline for Cosmetovigilance, structured similarly to a pharmacovigilance guideline, but based on the core principles of EU Cosmetics Regulation (EC) No 1223/2009.
To provide a structured framework for the monitoring, collection, evaluation, and reporting of Undesirable Effects (UEs) associated with cosmetic products placed on the EU market, in compliance with Regulation (EC) No 1223/2009. The goal is to ensure the ongoing safety of cosmetic products and protect consumer health.
Scope: This guideline applies to the Responsible Person (the legal entity responsible for compliance for a cosmetic product in the EU) and all other actors in the supply chain, including manufacturers, importers, and distributors.
1. Definitions
- Cosmetovigilance: The systematic activities relating to the detection, assessment, understanding, and prevention of any Undesirable Effects related to the use of a cosmetic product.
- Undesirable Effect (UE): An adverse reaction for human health attributable to the normal or reasonably foreseeable use of a cosmetic product.
- Serious Undesirable Effect (SUE): An Undesirable Effect which results in temporary or permanent functional incapacity, disability, hospitalization, congenital anomalies, an immediate vital risk, or death.
- Responsible Person: The legal or natural person in the EU designated to ensure compliance with the Cosmetics Regulation for a given product.
- Product Information File (PIF): The comprehensive set of data for a cosmetic product, which must include information on the safety, composition, and UEs.
2. Roles and Responsibilities
2.1. The Responsible Person
The Responsible Person has the primary legal obligation for cosmetovigilance. Their duties include:
- Establishing and managing a cosmetovigilance system.
- Collecting and evaluating all reports of UEs from any source.
- Identifying and categorizing Serious Undesirable Effects.
- Reporting SUEs to the National Competent Authorities (e.g., ANSM in France, BfR in Germany) within the required timeframe.
- Maintaining detailed records of all UEs.
- Taking corrective actions (e.g., product recall, formulation change) if a product is deemed unsafe.
- Ensuring the Product Information File is kept up-to-date with all relevant safety information.
2.2. Distributors and Other Supply Chain Actors
- Must cooperate with the Responsible Person.
- Must immediately inform the Responsible Person of any Undesirable Effects, and particularly any Serious Undesirable Effects, of which they are aware.
3. The Cosmetovigilance Process
3.1. Data Collection and Detection
The Responsible Person must have a system in place to proactively collect information on UEs from:
- Consumer complaints (the most common source).
- Healthcare professionals.
- Distributors and retailers.
- Scientific literature.
- Social media and other public sources (proactive monitoring is considered good practice).
3.2. Triage and Data Entry
- All reports must be logged in a systematic and accessible manner.
- Each report should be triaged to assess urgency and potential seriousness.
3.3. Assessment and Causality
For each UE report, an assessment should be performed to determine:
- Seriousness: Is it a Serious Undesirable Effect (SUE)?
- Causality: What is the likelihood that the cosmetic product caused the event? Factors to consider include:
- Temporal relationship (did the effect occur after product use?).
- Previous knowledge of similar events with the product or its ingredients.
- The consumer’s medical history and use of other products.
- Improvement after discontinuing use (positive dechallenge).
- Recurrence upon re-use (positive rechallenge) – which should NOT be recommended.
3.4. Reporting to Authorities
- What to Report: Only Serious Undesirable Effects that are attributable to the product.
- Timeline: The Responsible Person must report to the relevant National Competent Authority without delay and no later than 20 days from the date they become aware of the SUE.
- Content of Report: The report should include, as a minimum:
- The name of the cosmetic product.
- The Responsible Person’s name and contact details.
- The nature of the SUE.
- All available data and details to allow for a proper assessment.
3.5. Record Keeping
- The Responsible Person must keep a record of all Undesirable Effects (both serious and non-serious).
- These records must be included in the Product Information File (PIF).
- Records must be maintained for a period of 10 years following the date when the last batch of the product was placed on the market.
3.6. Follow-up and Corrective Actions
- The Responsible Person should have procedures for following up with reporters to obtain additional information if needed for the assessment of an SUE.
- If the analysis of UEs indicates that a product is no longer safe, the Responsible Person must take immediate corrective action. This may include:
- Reformulating the product.
- Updating the product’s labeling or warnings.
- Withdrawing or recalling the product from the market.
- The safety assessment in the PIF must be updated to reflect these findings.
4. Quality Requirements
- Documentation: All cosmetovigilance activities must be documented. This includes procedures for data collection, assessment, reporting, and record keeping.
- Personnel: Staff involved in cosmetovigilance activities should be adequately trained.
- Product Information File (PIF): The PIF serves as the central repository for all safety-related data and must be readily available for inspection by the competent authorities.
Summary of Key Differences from Pharmacovigilance
| Aspect | Pharmacovigilance (GVP) | Cosmetovigilance (EU) |
|---|---|---|
| Legal Basis | Medicines Directive & Regulation | Cosmetics Regulation (EC) 1223/2009 |
| Central Database | EudraVigilance (mandatory) | No central public database. Records kept in the PIF. |
| Formal Signal Management | Yes (structured process for detection & validation) | No. Focus is on incident reporting and trend analysis. |
| Reporting Trigger | All suspected adverse reactions | Serious Undesirable Effects with a causal link. |
| Record Retention | As per GVP Module I (at least 10 years) | 10 years from the last batch on the market. |
Example 1: Serious Undesirable Effect – Chemical Burn from a Peel-Off Mask
Scenario: A consumer uses a new “charcoal deep cleansing” peel-off mask. A few hours after use and removal, she experiences intense redness, burning, and swelling on her cheeks. The next day, the skin is blistering. She goes to a hospital emergency room where a doctor diagnoses a “chemical burn” and prescribes a topical treatment.
Cosmetovigilance Process in Action:
- Data Collection & Triage:
- The consumer files a complaint via the company’s website, attaching photos of her blistered cheeks and a copy of the doctor’s note.
- The customer service team, trained in cosmetovigilance triage, immediately identifies this as a potential Serious Undesirable Effect due to the symptoms (blistering) and the outcome (medical consultation/hospital visit).
- Assessment & Causality:
- The Responsible Person’s safety assessor investigates.
- Causality Assessment:
- Temporal Relationship: Strong. Reaction occurred shortly after use.
- Dechallenge: Positive. Symptoms began to improve after discontinuing the product.
- Rechallenge: Not performed (and must not be recommended).
- Alternative Explanations: The consumer confirms she used no other new products and has no known skin conditions that could explain this severe reaction.
- Product Formulation: The assessor checks the formula for known potent allergens or irritants (e.g., high concentrations of certain alcohols, fragrances).
- Conclusion: The causal link between the cosmetic product and the chemical burn is assessed as probable. The event is confirmed as a Serious Undesirable Effect.
- Reporting to Authority:
- The Responsible Person prepares a report for the National Competent Authority (e.g., in Germany, this would be the BfR).
- This report is submitted within 20 days of the company receiving the initial complaint. The report includes the product details, a description of the SUE, the doctor’s diagnosis, and the photos.
- Record Keeping & Corrective Action:
- All details are meticulously recorded in the Product Information File (PIF) for this mask.
- The Responsible Person investigates if this is an isolated incident or part of a trend. They discover 5 other similar, though less severe, complaints about “skin irritation” for the same product batch.
- Corrective Action: As a precaution, the Responsible Person decides to recall the specific batch from the market due to a potential quality defect. They also initiate a review of the product’s formulation.
Example 2: Non-Serious Undesirable Effect – Mild Contact Dermatitis from a Shampoo
Scenario: A consumer writes an email stating that after using a new “volumizing” shampoo, their scalp became itchy and flaky. The symptoms are annoying but do not require a doctor’s visit. They stop using the shampoo, and the itching subsides after a few days.
Cosmetovigilance Process in Action:
- Data Collection & Triage:
- The complaint is received and logged into the cosmetovigilance system.
- The triage team classifies this as a Non-Serious Undesirable Effect (mild, self-resolving, no medical attention required).
- Assessment & Causality:
- The safety assessor reviews the case.
- Causality Assessment: The temporal relationship and positive dechallenge suggest a possible causal link, likely a mild contact dermatitis to a fragrance or preservative in the formula.
- Conclusion: This is a validated, non-serious UE.
- Reporting to Authority:
- No report is submitted to the National Competent Authority because the effect is not serious.
- Record Keeping & Trend Analysis:
- The case is recorded in the PIF.
- This is crucial. If over the next few months, the Responsible Person receives 150 similar reports for the same shampoo, this trend of non-serious UEs becomes a significant safety signal. It may prompt a reformulation, even without a single “serious” case, to maintain product safety and consumer trust.
Example 3: Serious Undesirable Effect with Unclear Causality – Severe Hair Loss
Scenario: A consumer reports significant hair loss (clumps of hair falling out) two weeks after using a “hair growth stimulating” serum. She is very distressed and has consulted a dermatologist. The dermatologist’s initial notes state “telogen effluvium” (a form of temporary hair loss) but indicates it could be related to recent severe stress the patient experienced or potentially a reaction to a new product.
Cosmetovigilance Process in Action:
- Data Collection & Triage:
- The report is received. The symptom “severe hair loss” leading to a specialist consultation qualifies it as a potential Serious Undesirable Effect due to the functional incapacity (psychological distress) and medical intervention.
- Assessment & Causality (Complex):
- The safety assessor faces a challenging causality assessment.
- Temporal Relationship: Present, but hair loss often appears weeks after a trigger.
- Alternative Explanations: Very strong. The dermatologist documented a recent highly stressful event (e.g., surgery, bereavement), which is a very common cause of telogen effluvium.
- Product Formulation: The serum ingredients are reviewed, and none are known to be associated with hair loss at the concentrations used.
- Conclusion: The causal link is assessed as unlikely (the stress is a more probable cause), but the event itself meets the definition of an SUE from the consumer’s and doctor’s perspective.
- Reporting to Authority:
- The SUE is still reported to the National Competent Authority within 20 days.
- The report will transparently include the dermatologist’s notes about the recent stress, making the causality assessment clear to the authority. The obligation is to report the serious event, even if the link to the product is uncertain.
- Record Keeping & Follow-up:
- The case is recorded in the PIF with the detailed causality assessment.
- The Responsible Person may follow up with the consumer after 3 months to see if the hair loss has resolved (as telogen effluvium typically does). This follow-up information is also added to the PIF. If multiple similar reports with unclear causality arise, it may trigger a deeper investigation into the product.
These examples show how the cosmetovigilance system handles cases of varying severity and complexity, always with the core principles of protecting the consumer, complying with the law, and maintaining comprehensive records.
Conclusion: While less formalized than pharmacovigilance, an effective cosmetovigilance system is a legal requirement in the EU. It is a critical risk management tool that allows the Responsible Person to ensure the ongoing safety of cosmetic products and take prompt action to protect consumer health.



