Your Cosmetic Product Landed in Safety Gate — What to Do in the First 72 Hours

A notification in Safety Gate — the EU's rapid alert system for dangerous non-food products — is a serious situation, but not a death sentence for the brand. The European Commission publishes new notifications every week, and cosmetics appear among them regularly: most often because of an ingredient banned or restricted under the annexes to Regulation 1223/2009. Companies that react quickly and transparently usually come out of it with their reputation intact. Companies that ignore the matter or try to sweep it under the rug — do not.

Below is a plan for the first 72 hours. Calmly, step by step.

Note: this text is for informational purposes only and does not constitute legal advice. In a specific case, consult a lawyer specializing in product law.

Hours 0–4: read the notification and establish the facts

Before you write or send anything, open the alert in the Safety Gate portal and note down:

• Which product and which batch? Notifications often concern a specific batch or packaging version, not the entire line. Compare the EAN code (barcode), batch number, and photo from the alert with your own documentation.
• What type of risk? Most often chemical — e.g. an ingredient from Annex II of Regulation (EC) No 1223/2009 (the list of substances prohibited in cosmetics) or an exceeded limit from Annexes III–VI.
• Which country made the notification and what measure was applied? The alert shows the notifying authority and the measure: ban on sale, withdrawal from the market, recall from consumers.

In parallel, pull out the product documentation: the PIF (Product Information File — mandatory documentation for every cosmetic product in the EU), the CPSR safety report (Cosmetic Product Safety Report — the safety assessment prepared by a safety assessor), raw material certificates, and batch records. You will need them in every conversation with the authority.

Day 1: suspend sales and launch corrective measures

As the Responsible Person (the entity that, under Art. 4 of Regulation 1223/2009, is responsible for the cosmetic product's compliance with the law), you are obliged to act immediately. Art. 5(2) of Regulation 1223/2009 says it plainly: if the product does not comply with the requirements, you immediately take corrective measures — bringing it into conformity, withdrawal from the market, or recall of the product — and where the product presents a risk to health, you inform the competent national authorities.

It is worth knowing how the general product safety regulation, the GPSR (General Product Safety Regulation, Regulation (EU) 2023/988), relates to this: for cosmetics — as products covered by their own harmonised regime under 1223/2009 — the chapter on basic obligations of manufacturers does not apply (Art. 2(1) GPSR), but provisions including those on corrective measures and product recall from consumers (Art. 35–37 GPSR) and on cooperation with authorities do apply. The basis of your obligation to act immediately remains Art. 5(2) of Regulation 1223/2009.

In practical terms, on day one:

1. Block sales of the indicated batch across all your own channels (webshop, marketplaces, wholesale).
2. Secure the warehouse stock of that batch — count the units, physically separate them.
3. Designate one person for contact with authorities and distributors, so communication does not splinter into several versions.

Day 1–2: notify the authority via the Safety Business Gateway

The channel for notifying market surveillance authorities is the Safety Business Gateway — the European Commission's portal for businesses (webgate.ec.europa.eu/safety-business-gateway). This is where, in practice, you report to the authorities of the countries where the product was available what risk was identified and what measures you have already taken — the portal itself and the rules of its operation are described in Art. 27 GPSR, while the obligation to inform authorities in case of a risk to health follows directly from Art. 5(2) of Regulation 1223/2009.

If the Safety Gate notification originated from an authority (and not from you), contact the notifying authority indicated in the alert anyway — show that you are acting, and agree on the expected scope of measures. Under Art. 25 of Regulation 1223/2009, the authority may demand specific actions within a specific deadline; it is better to agree on them than to wait for them.

One thing on a separate track: if the product caused serious harm to someone's health, you have a separate obligation to report the accident via the same portal (Art. 20 GPSR), and serious undesirable effects of a cosmetic product must also be reported to the authorities under Art. 23 of Regulation 1223/2009.

Day 2: withdrawal from the market or recall from consumers?

These are two different things and it is worth not confusing them (definitions: Art. 3 GPSR):

• Withdrawal — you stop the product within the supply chain: it disappears from shelves, warehouses, and wholesalers, but you do not ask consumers to return it.
• Recall — you actively retrieve the product also from consumers who have already bought it.

Which measure is appropriate depends on the severity of the risk and on what the authority ordered — you will find the content of the measure in the alert. If a recall from consumers is necessary, the GPSR specifies how to do it: Art. 35 requires you to directly notify all customers you are able to identify (e.g. from online orders), and where that is not possible — to announce the recall through other channels, including your website and social media. Art. 36 requires a recall notice following the official template (set out in Implementing Regulation (EU) 2024/1435) — without downplaying phrases, with clear information on what to do with the product. Art. 37 requires you to offer consumers an effective, free-of-charge remedy: as a rule, a choice of at least two options among repair, replacement, and a refund.

Day 2–3: notify distributors and stores

Distributors have their own obligations (Art. 6 and 26 of Regulation 1223/2009), so the sooner they receive specifics from you, the smaller the chaos. A short, matter-of-fact message is enough:

> Please be advised that product [name], batch [no.], EAN [code], has been the subject of a notification in the EU Safety Gate system due to [risk, e.g. the presence of ingredient X]. We ask that you immediately suspend sales of this batch, secure the units in your possession, and confirm their quantity by [date]. Collection and settlement adjustments are on our side. Other batches/products are not covered by the notification. Contact for this matter: [name, phone, e-mail].

Ask for written confirmation from every recipient — it is part of documenting the effectiveness of your measures.

Throughout: document everything

Keep a simple action log: what, when, who, with what result. Retain copies of correspondence with authorities and distributors, the numbers of secured and returned units, screenshots of disabled listings. The authority will assess not only whether you acted, but how effectively — and solid documentation is your best argument.

What NOT to do

• Do not erase the traces. Quietly deleting the product page, posts, and listings without any announcement looks like covering up the matter and makes it harder for consumers to check whether they have an affected batch.
• Do not ignore it. The notification will not expire on its own, and a lack of response invites the authority to use coercive measures.
• Do not argue with the authority publicly before you have established the facts. If you believe the notification is erroneous (e.g. it is not your batch), clarify it with the notifying authority, not on Instagram.
• Do not quietly "rebrand" the same formula under a new name — that is a straight path to a second, much worse notification.

After the storm: how to reduce the risk of a repeat

Most cosmetic notifications in Safety Gate involve banned ingredients or exceeded limits — that is, things that can be caught earlier. Three habits for a calmer future:

1. Track alerts on an ongoing basis. The Commission offers a free subscription to Safety Gate notifications — worth having regardless of anything else.
2. Cross-check your catalog against changes in the law. The annexes to Regulation 1223/2009 are amended, and an ingredient that is legal today may get a limit or a ban tomorrow. Reviewing the full INCI lists (International Nomenclature of Cosmetic Ingredients — the standardized nomenclature for ingredients) of your entire catalog after every change is work worth automating — this is exactly the problem we solve at BeautyGuard, cross-referencing a brand's catalog against alerts and the annexes with a nightly re-check.
3. Maintain batch traceability. The more precisely you can pinpoint where a specific batch went, the narrower (and cheaper) any withdrawal will be.

A Safety Gate notification is a test of crisis management, not the end of the brand. 72 hours of a diligent, documented response make a difference for years.

Sources

• Regulation (EC) No 1223/2009 on cosmetic products (Art. 4, 5, 6, 23, 25, 26, Annexes II–VI) — EUR-Lex
• Regulation (EU) 2023/988 on general product safety (GPSR; Art. 3, 9, 20, 25–27, 35–37) — EUR-Lex
• Implementing Regulation (EU) 2024/1435 — template for the product recall notice — EUR-Lex
• Safety Gate portal (alerts and free subscription) — ec.europa.eu/safety-gate
• Safety Business Gateway — the notification portal for businesses — webgate.ec.europa.eu/safety-business-gateway

The best moment to react is before an alert catches you from outside: BeautyGuard re-checks your catalog nightly and alarms you when a product's status worsens.