Cosmetic product safety: testing and ISO 22716 GMP

A safety assessor signs off a new face cream. The dossier is clean, the formula is approved, the product launches across three markets. Five months later a single retail batch comes back with a yeast count above limit, and an importer asks to see the full file the same week. Nothing in that first sign-off was wrong. It was simply a snapshot of one sample on one day, and a cosmetic brand lives or dies on what happens to every batch across an eighteen-month shelf life.

This is the gap that confuses a lot of cosmetic businesses. A passing laboratory report is not the same as a safe product line, and a safety assessment is only as honest as the test data behind it. Demonstrable cosmetic safety has two halves that have to work together: the tests that prove a formula is stable, preserved and tolerated, and the manufacturing system that keeps every later batch faithful to the one that was assessed. Get one without the other and you hold paperwork, not protection.

What "safe" has to mean before a cosmetic reaches the shelf

In the European Union the Cosmetics Regulation (EC) No 1223/2009 sets the frame, and Turkey's Cosmetics Regulation under Law No. 5324 is aligned with it. Before a product is placed on the market, a qualified safety assessor must sign a cosmetic product safety report, the responsible person must hold a product information file, and the product must be notified to the authorities. In the EU that notification runs through the CPNP portal; in Turkey it goes through the product tracking system run by TITCK. You can read how that cosmetic product notification works as a separate step, but the point here is what feeds it.

The safety report is a reasoned argument, not a stamp. The assessor weighs the ingredients, the exposure, the target user, the toxicological profile and the stability and microbiological behaviour of the finished product. Every one of those judgements rests on data. Thin data forces cautious assumptions or leaves a gap that a market-surveillance inspector can open later. Strong data lets the assessor reach a clear conclusion and lets you defend it. So the real work of safety happens upstream, in the laboratory and on the production floor.

The tests that actually demonstrate safety

Cosmetic product testing is not one exam but a small battery of distinct studies, each answering a different question, and a credible file shows all of them rather than leaning on a single certificate. The method behind each one sits on that page; what matters for the safety loop is why each test carries weight.

Stability testing

Stability testing is what turns a fresh formula into a dated promise: it fixes the shelf life and the period after opening that every later batch then has to honour. Get it wrong and the label commits you to a window the product cannot actually hold.

Preservative efficacy, the challenge test

The challenge test is the one that proves the preservative system really protects a user who dips a finger into the jar, which is where many natural or preservative-free formulas quietly fail. It validates the recipe, so every promise the rest of the loop makes rests on the formula it cleared.

Microbiological quality, batch by batch

Microbiological testing is the only one of these that runs on every batch rather than on the formula alone, which makes it the verification step at the far end of the loop. A recipe that is perfectly preservable on paper can still ship contaminated if the line that filled it was not in control.

Skin compatibility

Skin compatibility work shows whether real users tolerate the product, and because both the EU and Turkey ban animal testing for cosmetics, it leans on supervised human panels and validated in-vitro methods. It feeds the safety assessment rather than the production line, which places it on the development side of the loop.

Contaminants and restricted substances

Contaminant and restricted-substance screening proves what is not in the product: heavy metals, banned substances and listed allergens kept under their limits. For many brands this is the quiet failure point, because the problem usually arrives in a supplier's raw material rather than in the formula the brand designed, which is exactly where manufacturing control has to catch it.

Why a clean test result is not the same as a safe product line

Read those studies back and a pattern appears. Stability, challenge testing, contaminant screening and compatibility are mostly done once, on development or pilot batches, to support the safety assessment. Microbiological release testing happens per batch. The product a customer buys eleven months from now was made on a different day, very likely from a different lot of raw material, possibly on a line that was also running something else that morning. Its safety is only as good as the discipline that produced it.

That is the structural reason a single passing report cannot carry a brand. The assessment certifies a formula; it cannot certify a factory's consistency. Closing that gap is the job of good manufacturing practice.

ISO 22716 GMP: making every batch match the one you tested

Good manufacturing practice is the operational discipline that keeps production repeatable, and for cosmetics the recognised standard is ISO 22716. It is named as a harmonised reference for the GMP duty in the EU Cosmetics Regulation, which means a plant that genuinely runs to it can show conformity with that legal obligation rather than improvising its own version of "careful".

The value for safety is concrete. ISO 22716 controls the things that quietly break the link between the tested formula and the shipped product:

• Raw-material release means the preservative the challenge test validated, and the pack the stability study cleared, are the ones that actually go into the batch.
• In-process control keeps mixing order, temperature and time from drifting, so the stability and preservation you proved once still hold on the hundredth batch.
• Finished-product release is where the per-batch microbiological limits are enforced before anything ships.
• Change control makes a reformulation or a new supplier trigger fresh testing, instead of altering the product behind the data that cleared it.
• Batch records give the traceability to reconstruct and contain a contaminated lot when one surfaces.

Seen this way, testing and GMP are not two purchases. They are one loop. Stability and challenge data set the specifications and the period after opening; GMP enforces those specifications on the floor; per-batch microbiological testing verifies that the floor actually held. Break any link and the other two lose their meaning.

How it fits together for a brand or a contract manufacturer

For most cosmetic businesses the practical sequence is steady. Develop and stabilise the formula, generate the stability, challenge, contaminant and compatibility data, commission the safety assessment and build the product information file, notify the product, then produce under GMP with microbiological release on every batch. Ownership matters here. A brand that outsources to a contract manufacturer usually owns the safety report and the notification, while the manufacturer owns the GMP system and the batch records, and a retailer or importer audit will ask to see both halves from whoever holds them.

The brands that handle market-surveillance requests calmly are the ones that treated testing and manufacturing as a single safety story from the start, rather than buying a certificate and hoping the question never comes. If you are mapping that story for your own range, the cosmetics testing and the ISO 22716 GMP routes are the two places to start, and they are far more useful read together than apart.