Business Solutions
Subscription Box Compliance
A beauty box curator is selling cosmetics even when it made none of them. We cover the Responsible Person, importer and labelling duties that arise when products are sourced, decanted or repackaged into a subscription box.
A beauty or subscription box curator is selling cosmetics, even when it manufactured none of them, and the way boxes are assembled creates compliance questions that catch curators out. Sourcing widely, sampling and repackaging are exactly the activities the regulations attach duties to.
Every product still has to be compliant
Each cosmetic in a box must have a Responsible Person, a CPSR, a notification and a compliant label for the market in which it is sold. Where the products are already on that market through their own brands, the curator’s main duty is the distributor’s: checking and holding the documentation. But where a curator sources products from abroad to fill a box, it becomes the importer, and the importer is the Responsible Person unless another established party holds the role. A box of internationally sourced products can therefore carry a stack of Responsible Person duties the curator did not anticipate.
Decanting and repackaging make a new product
Decanting a bulk product into sample or travel sizes, or repackaging an item into box-specific presentation, creates a product that needs its own labelling and its own safety coverage. The original CPSR and label do not automatically extend to the new size or pack, because the exposure, the packaging interaction and the label have changed. Curators who build their own sample sizes are, in regulatory terms, putting new products on the market.
Multi-brand boxes and traceability
A box that mixes brands and items needs documentation held per item and batch traceability across the whole box, so that if one product is recalled the curator can identify which boxes it went into. That record-keeping is part of the distributor and Responsible Person duties, not an optional extra.
What we provide
We act as the Responsible Person for sourced and imported items, prepare CPSRs and labelling for decanted or own-curated products, check the documentation across a multi-brand box, and support traceability and any border or recall issue. Where imported stock is held at the border, our team can help resolve a detention.
How we help
We map a box concept to its real regulatory footprint, where the curator is simply a distributor, where it has become an importer and Responsible Person, and where decanting has created new products, and then put the missing pieces in place so the box can ship compliantly.
Relevant services
Responsible Person
From £149 · per product, per year
Oxford Biosciences acts as your Responsible Person in the UK and the EU under a single quality management system, holding the regulatory obligation: PIF maintenance, SCPN and CPNP notification, labelling oversight, and cosmetovigilance.
Learn more →CPSR
From £70 · 2 to 3 days
The Cosmetic Product Safety Report is the safety assessment required under Article 10 and Annex I of Regulation (EC) No 1223/2009 before a cosmetic product may be placed on the UK or EU market. Prepared and signed by a qualified safety assessor.
Learn more →Labelling
From £195 · from receipt of artwork
Independent review of packaging artwork against Article 19, and of product claims against the six Common Criteria of Regulation (EU) 655/2013. Label review £195; per-claim review from £125; substantiation dossiers from £1,495.
Learn more →Border Detention
Expedited
Rapid resolution where a cosmetic shipment is detained at a port of entry for missing or deficient compliance documentation.
Learn more →Frequently asked questions
What compliance does a beauty subscription box need?
In the EU and UK, every product in the box needs a Responsible Person, CPSR, notification and compliant label for its market. Sourcing products from abroad can make the curator the importer and Responsible Person, and multi-brand boxes need per-item documentation and batch traceability for recalls.
Does decanting or repackaging a cosmetic need its own compliance?
In the EU and UK, yes: decanting a bulk product into sample or travel sizes, or repackaging it, creates a product that needs its own label and safety coverage. The original CPSR and label do not automatically carry over, because the packaging, exposure and label have changed.
What is a Responsible Person?
Every cosmetic product placed on the EU or UK market must have a Responsible Person established within that jurisdiction. Under Articles 4 and 5 of Regulation (EC) No 1223/2009, the Responsible Person is the legal entity that holds the regulatory obligation for the product: it maintains the Product Information File, makes the CPNP or SCPN notification, oversees labelling, and handles cosmetovigilance and contact with the competent authority. It is not simply a postal address. Oxford Biosciences acts as Responsible Person in both the UK and the EU under a single quality management system.
What is a CPSR?
A Cosmetic Product Safety Report (CPSR) is the safety assessment required by Article 10 and Annex I of Regulation (EC) No 1223/2009 before a cosmetic product is placed on the UK or EU market. Annex I sets out two parts: Part A, the cosmetic product safety information (composition, physico-chemical and microbiological characteristics, stability, exposure and the toxicological profile of each substance), and Part B, the safety assessment, in which a qualified assessor states and reasons the conclusion on safety. It is the pivotal scientific document held within the Product Information File.
What must appear on a cosmetic label?
Article 19 of Regulation (EC) No 1223/2009 sets out the mandatory particulars: the Responsible Person's name and address, the nominal content, the date of minimum durability or the period-after-opening (PAO) symbol, precautions for use, the batch number, the product function, and the list of ingredients in INCI nomenclature. In Great Britain the same requirements apply through the Cosmetic Products Enforcement Regulations 2013, and since 1 January 2026 the UK Responsible Person's details must appear on the label of products sold in GB. Oxford Biosciences reviews packaging artwork against these requirements for £195.