Does Sea Buckthorn Seed Oil Need CPNP Notification and a CPSR to Enter the German Cosmetic Market?

The oil itself is not notified as a raw material — the finished cosmetic product is. But if sea buckthorn seed oil is used in a cosmetic product sold in Germany, that finished product must have a completed CPSR safety assessment and a CPNP notification before it is placed on the market, submitted by an EU Responsible Person; the oil supplier's job is to deliver the raw material data file that makes both possible.

This article is written for German skincare OEM/ODM plants, soft capsule toll manufacturers and repacking houses that buy sea buckthorn seed oil (Sanddorn-Samenöl) from China. It clarifies who does what in the (EC) 1223/2009 compliance chain, and what a raw material supplier must provide so that your safety assessment and notification do not stall.

Why Does the Food-or-Cosmetic Decision Come First?

Sea buckthorn seed oil is genuinely dual-use. The same drum can go into an oral supplement or into a facial oil, and the two routes are regulated differently.

The decision is driven by the end use, the claims, the dosage form and the route of exposure:

• Oral oils and soft capsules intended to supplement the diet follow the food supplement route.
• Facial oils, serums and creams applied to the skin follow the cosmetic route.
• A product that is applied to the skin but promoted with claims about treating a condition risks being treated as a medicinal or as a non-compliant cosmetic claim.

If the classification is wrong, the consequences are not limited to paperwork. A cosmetic product without a valid notification and safety assessment cannot be placed on the market, and a food supplement sold with a cosmetic-style claim can trigger a warning letter. This is why regulatory managers treat the classification decision as the first control point and document it before development work starts.

What Does Regulation (EC) 1223/2009 Require?

Regulation (EC) 1223/2009 is the EU framework regulation for cosmetic products. Its core obligations are:

• Safety: a cosmetic product must be safe for human health under normal or reasonably foreseeable conditions of use, supported by a safety assessment.
• Safety assessment (CPSR): the Cosmetic Product Safety Report must be completed before placing on the market.
• Notification (CPNP): the product must be notified through the Cosmetic Products Notification Portal before it is made available.
• Responsible Person (RP): a legal or natural person established in the EU must take responsibility for compliance and hold the product information file (PIF).
• Good Manufacturing Practice: production should follow cosmetic GMP, commonly demonstrated against ISO 22716.
• Labelling and claims: ingredient listing using INCI names, responsible person details, batch number, durability information and compliant claims.

In Germany, supervision is carried out at state level, while packaging is additionally subject to the packaging act (VerpackG) and its LUCID registration. Cosmetic compliance and packaging compliance are separate obligations that are often confused.

Who Notifies CPNP, and When?

The notification is made by the Responsible Person, not by the raw material supplier and not automatically by the contract manufacturer. In practice, the RP is usually the brand owner or a designated EU entity acting for the brand.

Key points that buyers get wrong:

• The finished product is notified, not the oil. The oil appears in the notification as part of the formulation.
• Notification must be completed before the product is placed on the market, not retrospectively.
• The notification captures product category, formulation details (including any nanomaterials), RP identity, country of origin and the label artwork.
• A Chinese supplier cannot act as the RP unless it has an EU-established entity; the RP must be established in the Union.

The practical consequence for a toll manufacturer: your customer (the brand) normally handles the notification, but they can only do it if you hand over a complete raw material data file. Missing data is one of the most common reasons a project slips by weeks.

What Does the CPSR Contain, and What Data Does the Oil Supplier Owe You?

The Cosmetic Product Safety Report has two parts.

Part A — Cosmetic Product Safety Information collects the data: qualitative and quantitative composition, physicochemical and microbiological specifications, purity, impurity profile, packaging material interaction, stability, normal and foreseeable use, exposure and the toxicological profile of each substance.

Part B — Safety Assessment is the conclusion: the assessor's judgement that the product is safe, with reasoning, any conditions of use, and the assessor's credentials and signature.

The safety assessor cannot complete Part B without the raw material data. For sea buckthorn seed oil, the file should contain:

If any of these are missing, the assessment cannot be finalised and the product cannot be placed on the market. This is the single most useful checklist to send to a supplier at enquiry stage.

How Does the Cosmetic Route Compare with the Food Supplement Route?

For dual-use material, the two routes must never be mixed. The comparison below is the quickest way to explain the difference to a purchasing colleague.

The lesson is operational: run two separate documentation tracks. A shared file is a recurring audit finding, because the evidence required is not interchangeable.

What Should an OEM Plant Build into Its Workflow?

A workable in-house sequence looks like this:

1. Classify: record the intended use for every SKU at project start.
2. Collect: obtain the raw material file from the supplier — COA per batch, third-party testing, TDS, SDS, allergen/GMO/solvent/vegan declarations, traceability and origin evidence.
3. Assess: commission or update the CPSR with the complete data set.
4. Notify: confirm the RP has submitted the CPNP notification for the finished product.
5. Release: only then release the production batch, with batch records and retains.
6. Control change: any change of origin, extraction process or specification triggers reassessment; require advance notice (at least 30 days, 60 preferred).

For customer audits under IFS, BRCGS or ISO 22716, prepare the documentation package early — aim to have it complete at least a week before the audit date so that any gaps can still be closed.

What Belongs in a Supplier Quality Agreement?

To keep the raw material side of the chain under control, purchase contracts and quality agreements should state that:

• The supplier provides a cosmetic-grade documentation package on request, including the data listed in the CPSR table above.
• Every batch ships with a COA, and periodic third-party testing is performed by an ISO/IEC 17025 laboratory.
• Process or origin changes are notified in advance and may trigger re-approval.
• The supplier cooperates with customer audits and provides updated documents within an agreed lead time.
• Falsified or reused documents are a termination event.

These clauses convert a vague expectation into an enforceable obligation, and they give your regulatory team a basis to reject non-conforming material before it reaches the line.

Conclusion and Next Steps

Sea buckthorn seed oil is not notified as an ingredient — the finished cosmetic product is, by the EU Responsible Person, through CPNP, supported by a completed CPSR. The practical bottleneck is rarely the portal submission itself; it is the raw material data that the safety assessor needs and that suppliers often cannot produce on request.

Next steps for a German OEM or toll manufacturer:

1. Classify each SKU as food supplement or cosmetic at project start and record the decision.
2. Send the CPSR data checklist to suppliers at enquiry stage, not after sampling.
3. Confirm who is the Responsible Person and who submits the CPNP notification for each product.
4. Maintain two documentation tracks for dual-use material, with separate files and separate batch release records.
5. Put change control and re-approval into the quality agreement, with advance notification periods.

If you take one action, take the second one: sending the data checklist early removes most of the delays that otherwise appear at the safety assessment stage.

FAQ

1. Does sea buckthorn seed oil itself need a CPNP notification? No. The notification covers the finished cosmetic product, not the individual raw material. The oil appears in the product formulation that the Responsible Person notifies.

2. Who signs the CPSR safety assessment? A suitably qualified safety assessor signs Part B. The credentials required are defined by the regulation; in practice brands commission an assessor with the relevant qualification and experience.

3. Can a cosmetics product be sold in Germany without an EU Responsible Person? No. A Responsible Person established in the EU is required, and they hold the product information file and carry the compliance responsibility.

4. Can the same lot of oil be used for both oral and skincare products? Yes, but you must manage it as dual-use: separate classification, separate documentation tracks, and batch records showing which use each quantity was released for.

5. Is ISO 22716 mandatory? Cosmetic GMP is expected under the regulation, and ISO 22716 is the commonly used reference standard. Customer audits and certification schemes frequently require it, so treat it as a practical requirement.

6. What delays CPSR completion most often? Incomplete raw material data — missing impurity profiles, solvent residue results, microbiological data or stability information. Send the checklist to suppliers early.

7. Do we need a separate notification for each shade or variant? Variant handling depends on how the products are defined and presented. Confirm the grouping rules with the Responsible Person rather than assuming one notification covers all variants.

8. Does VerpackG / LUCID also apply? Yes. Packaging compliance is a separate obligation from cosmetic product compliance, and it applies alongside (EC) 1223/2009.

9. What happens if we place a product on the market without notification? The product is non-compliant and can be withdrawn by the authorities, with associated commercial and reputational consequences. Notification must precede placing on the market.

10. How do we handle a change of oil origin after launch? Treat it as a change: notify in advance, obtain updated documentation, reassess the safety report if the impurity or fatty acid profile changes, and update batch records.

This article was published on 2026-09-09, and last updated on 2026-09-09. The article will be continuously updated.