EU Cosmetics Regulation 2026: New Annex V Restrictions and Deadlines

One deadline has already passed. Two more land in July. Here's how to close the gaps before an inspector or notified body finds them first.

The EU Cosmetics Regulation (EC) No 1223/2009 is not a static document. Its Annexes are the operational core that governs what ingredients are permitted, at what concentrations, and under what labelling conditions. In 2026, three Annex V changes have landed in rapid succession, all affecting preservative systems.

For quality and compliance managers at cosmetic manufacturers, this is not a regulatory curiosity. It is a live compliance risk. The first deadline on May 1st 2026 — Commission Regulation (EU) 2026/78 — has already passed with no transitional period. If your organization has not yet audited affected formulations, updated Cosmetic Product Safety Reports (CPSRs), or revised labelling, you are already operating outside compliance.

This article breaks down what changed, what still needs to happen, and where quality systems are most likely to show gaps.

Each of these changes originates from a different regulatory mechanism — CMR reclassification, SCCS safety assessment, and a separate labelling amendment — which means they require different internal responses from quality, regulatory, and production teams.

The most significant Annex V change this year flows from Commission Delegated Regulation (EU) 2024/2564, the 21st Adaptation to Technical Progress (ATP) to the CLP Regulation. This update reclassified several substances as CMR (carcinogenic, mutagenic, or reprotoxic), triggering automatic review under Article 15 of the Cosmetics Regulation.

This is a process every compliance team should understand, because it is the primary driver of future restrictions. When a substance receives a harmonized CMR classification under CLP, it becomes prohibited in cosmetics by default, unless the Scientific Committee on Consumer Safety (SCCS) has assessed and approved a safe use condition. Tracking developments in the CLP ATP pipeline provides forward-looking regulatory intelligence, enabling proactive action rather than reactive compliance.

o-Phenylphenol (CAS 90-43-7) has been a permitted preservative in Annex V for both rinse-off and leave-on applications. Its CMR category 2 reclassification triggered an SCCS assessment in October 2024, which concluded that both o-Phenylphenol and its sodium salt (Sodium o-Phenylphenate, CAS 132-27-4) can be used safely.

Under revised conditions effective May 1st 2026:

For quality teams, this means any product formulated with either substance — even one that has been on the market for years — requires a CPSR update, a labelling revision, and a format-specific risk assessment if it is delivered as a spray or aerosol.

Regulation (EU) 2026/78 also added substances to Annex II (prohibited substances). Two are directly relevant to preservation systems:

For quality management teams, this is a change control and inventory event, not just a regulatory filing. It requires batch traceability, stock reconciliation, and formal CAPA documentation if any non-compliant product reached the market past the deadline.

This change originates from Commission Regulation (EU) 2022/1181 and applies to the preamble of Annex V. It does not ban formaldehyde-releasing preservatives — they remain listed and permitted. What changes is the threshold that triggers a mandatory consumer warning.

The mandatory "releases formaldehyde" warning was previously required when released formaldehyde exceeded 0.05% (500 ppm). From July 15th 2026, that threshold drops to 0.001% (10 ppm) — a 50-fold reduction.

The SCCS determined that the former threshold was insufficient to protect already-sensitised consumers from developing contact dermatitis. This is a consumer safety-driven amendment, not a CMR-triggered ban.

The following Annex V preservatives are subject to the updated warning requirement when released formaldehyde in the finished product exceeds 10 ppm:

For formulations using any of these, the practical decision is binary: add the updated mandatory warning text to the label, or reformulate to bring released formaldehyde below 10 ppm. Either path requires CPSR documentation and, if reformulation occurs, a full change control record.

The third 2026 deadline — full compliance with Regulation (EU) 2023/1545 — expands the mandatory allergen disclosure list under Annex III from 26 to 81 substances. This is a labelling-intensive change with implications for products across fragrance-containing categories.

For compliance teams managing large product portfolios, the operational challenge here is less about regulatory interpretation and more about labelling workflow: identifying which products contain newly listed allergens above the threshold concentrations, updating INCI declarations, and coordinating artwork revisions before the July 31st deadline.

These three changes share a common thread: they all expose weaknesses in how quality and compliance systems handle regulatory-triggered updates. The following are the failure points we see most commonly in cosmetic manufacturer quality programs.