- EU Cosmetic Products Regulation
- 1223/2009
Digital Product Passport for Cosmetics
Perfumes, makeup, deodorants, and skincare all carry a Product Information File already — a DPP turns it into something a shopper can scan. INCI ingredient lists, allergen declarations, and Responsible Person data, built directly in Shopify.
1223/2009
EU Cosmetic Products Regulation
12+
Years EU compliance experience
Free
Plan — up to 10 products
5 min
Average setup time
A digital record that travels with every bottle, tube, and compact
A Digital Product Passport (DPP) for cosmetics is a machine-readable data record built on the same information your Product Information File (PIF) already contains — repackaged into a format shoppers, allergy sufferers, and regulators can scan and trust instantly.
Each product or production batch gets a scannable code linking to a live, always-current passport.
Full formulation data mirrors your existing INCI declaration — no separate data entry, no conflicting labels.
Reformulate a product or update its safety assessment, and the passport updates automatically — no relabelling stock.
Fragrance allergens and known irritants are surfaced clearly — not buried in a fine-print ingredient panel.
Built on your Product Information File — extended into a passport
Cosmetics already carry more mandatory documentation than almost any consumer product category. A DPP doesn’t replace your Product Information File, CPNP notification, or Responsible Person obligations under Regulation (EC) 1223/2009 — it packages the shopper-relevant parts of that data into a scannable, on-pack format.
Your Product Information File already holds formulation, safety assessment, and manufacturing data the passport can draw from.
Every product sold in the EU has a designated Responsible Person accountable for its safety file — the passport surfaces who that is.
Products notified through the Cosmetic Products Notification Portal already have a registered baseline the passport can reference.
- Reg. 1223/2009 · Product Information File
- INCI labelling · allergen declarations
- Scannable Digital Product Passport
Required DPP data
What your chemicals DPP must include
Four data categories cover what your Product Information File already documents. PassoNext maps each one to a guided, pre-built field.
INCI-aligned declarations
- Full ingredient list by INCI name
- Fragrance allergen declarations
- Preservative and colorant declarations
- Natural, organic, or vegan content
- Nanomaterial declarations, where present
PIF-aligned, Responsible Person data
- Responsible Person name and address
- CPNP notification reference
- Cosmetic Product Safety Report reference
- Batch code and manufacturing date
- Manufacturing site and country of origin
On-pack information, made scannable
- Period-After-Opening (PAO) duration
- Usage instructions and application guidance
- Storage conditions and shelf life
- Precautions and patch-test recommendations
- Claims substantiation references
Beyond the ingredient panel
- Key ingredient sourcing origin (e.g. palm oil, mica)
- Cruelty-free and vegan certifications
- Packaging recyclability and refill options
- Carbon and water footprint indicators
- Company sustainability programme details
Live DPP preview
See a cosmetics passport, exactly as a shopper would.
Every field below is generated from your Shopify product data and existing Product Information File, and stays current as formulations or certifications change.
- Full INCI ingredient list and allergens
- Period-After-Opening and batch code
- Responsible Person and CPNP reference
- Sourcing story and certifications, shown prominently
Who must create the cosmetics DPP?
Regulation 1223/2009 already defines these roles precisely — the passport adds a scannable layer on top of responsibilities you likely already hold.
The EU-established or EU-designated entity accountable for a product's safety file carries primary DPP responsibility.
Companies formulating and producing the cosmetic bear responsibility for the accuracy of ingredient and safety data.
Companies bringing cosmetics into the EU from outside must confirm a Responsible Person and valid passport before sale.
Brands selling contract-manufactured cosmetics under their own name inherit the DPP obligation, not just the manufacturer.
How it works
A compliant chemicals DPP in 6 steps — from Shopify
No re-authoring your Product Information File, no separate compliance platform. PassoNext plugs into your existing Shopify catalogue.
INCI list, allergens, PAO, and Responsible Person details — pull directly from your existing Product Information File.
Guided fields validate entries against 1223/2009's structure as you type, with templates for common cosmetic product types.
Guided fields validate entries against REACH and CLP schema as you type, with templates for common chemical product types.
PassoNext validates the data and creates a compliant Digital Product Passport for the product or variant.
A unique GS1 Digital Link QR code is automatically generated and linked to the DPP, ready for printing on hang tags, care labels, or packaging.
Print the QR code on the product. If product information changes (supplier, materials, certifications, etc.), the DPP updates automatically while the same QR code continues to work.
Your ingredient and safety data is already there — make it scannable.
Give shoppers, allergy-conscious buyers, and regulators the same trusted record, in a format they can actually use.
- Templates built on 1223/2009 & PIF data
- Syncs directly with Shopify products
- Allergen & PAO fields built in
- QR codes generated per SKU or batch
- Live updates, no re-printing labels
- Free plan — up to 10 products
Frequently asked questions
Is a Digital Product Passport legally required for cosmetics yet?
Cosmetics are already tightly regulated under Regulation (EC) 1223/2009 — INCI labelling, a Product Information File, and CPNP notification are mandatory today. Whether a separate scannable DPP mandate will extend to cosmetics, and on what timeline, is still developing. We’d recommend checking the current EU regulatory status for your specific product category rather than treating any date as fixed, and building the passport now so you’re ready either way.
Is a DPP different from my Product Information File (PIF)?
Yes. Your PIF is an internal compliance file kept available to authorities, containing your full safety assessment, manufacturing method, and testing data. A DPP is a scannable, shopper-facing passport that surfaces the relevant parts of that file — ingredients, allergens, usage instructions — in a format a customer can actually read at the shelf.
Do I need to list every single ingredient?
Under 1223/2009, the full ingredient list in INCI nomenclature is already required on-pack, so the same list carries directly into the passport. PassoNext’s cosmetics template also flags the 26 recognised fragrance allergens separately, since they need clear, easy-to-find labelling above a certain concentration threshold.
Who is the "Responsible Person" if I sell into the EU from outside it?
If you manufacture outside the EU, you need an EU-established Responsible Person — often an importer or an appointed representative — who takes on the safety file and regulatory obligations for the product. Their details are a required field in the passport’s Safety & Regulatory data category.
Does this apply to online sellers on Shopify?
Yes. Regulation 1223/2009 applies to any cosmetic product placed on the EU market, including through e-commerce and Shopify stores. If you ship perfumes, makeup, or skincare to EU customers, the same ingredient, safety, and Responsible Person data requirements apply regardless of channel.
