Introduction
A cosmetics brand can have a beautifully formulated product, a clean safety assessment and a strong retail pitch, and still lose a listing because the contract manufacturer behind it cannot show how a batch was made, tested and traced. For years, good manufacturing practice in cosmetics was a customer expectation.
With the US Modernization of Cosmetics Regulation Act and the long-standing EU framework, it is becoming a regulatory one, and ISO 22716 is the document most buyers, brands and regulators point to when they ask for evidence.
Tip: Test GMP traceability by retrieving batch materials, equipment records, test results, retained samples and customer shipment details within one hour.
Cosmetic Manufacturing Regulatory Mandates
In the European Union, Regulation (EC) No 1223/2009 requires cosmetics to be manufactured in line with good manufacturing practice, and conformity with the harmonised standard EN ISO 22716 gives a presumption of conformity.
Every EU cosmetic must have a Responsible Person, a Product Information File and a notification to the portal, and GMP evidence forms part of that file.
In the United States, MoCRA, enacted in 2022, directed FDA to establish GMP requirements for cosmetic facilities, with final rules not yet issued as of early 2026, so current status should be checked.
Other markets, including the UK, Canada, ASEAN countries and the Gulf, either reference ISO 22716 directly or accept it as proof of GMP.
Regulators increasingly treat inspection findings and complaint data as linked, so a GMP failure can surface through a consumer incident rather than an inspection.
Contract manufacturers face dual exposure: their own regulatory duties and the audit demands of every brand owner they supply.
Meeting US MoCRA and European Regulations
A single quality system aligned to ISO 22716 is the most efficient way to produce the evidence both regimes ask for.
Cleanroom HVAC and Water System Audits
Production areas should be designed to prevent contamination, with defined flows for people, materials and waste.
Air handling should match product risk, with filtration, pressure differentials and monitoring where the product or process justifies it.
Water used in formulation and cleaning is a leading microbial risk, and the quality required should be defined for each use.
Water treatment systems need routine sanitization, monitoring and records, with attention to dead legs, storage tanks and biofilm.
Microbiological and chemical trends should be reviewed, not only individual results.
Maintenance of filters, drains, pipework and ventilation should be scheduled and documented.
Environmental monitoring should be based on risk, with defined limits and a response when trends move.
Takeaway: Auditors rarely fail a plant for lacking a cleanroom. They fail it for being unable to show that its water and air are controlled to the level its own product risk assessment says is needed.
Raw Material Vetting and Ingredient Verification
Suppliers should be approved on documented criteria, with specifications, certificates of analysis and, for higher-risk materials, audits.
Incoming materials should be checked against specification before release, with identity verification where the risk justifies it.
Restricted and prohibited substances in each target market must be screened for in formulations and raw materials.
Materials of natural origin need particular attention for contaminants, microbial load and variability between lots.
Quarantine, release and rejection status must be clear and physically controlled.
Storage conditions and expiry or retest dates should be defined and monitored.
Changes to a supplier's source or process need to be communicated and assessed before they affect product.
Sanitization Validation and Record Integrity
Cleaning and sanitization procedures should be defined for each piece of equipment and area, including frequency and agents.
Validation or verification should show that residues and microbial levels are reduced to acceptable limits.
Cleaning status labels on equipment should be accurate and tied to completed records.
Records should be completed at the time of the activity, not reconstructed later, and corrections should be traceable.
Batch records should be reviewed before release, with deviations documented and investigated.
Electronic records need access controls and audit trails so that entries cannot be changed without trace.
Disinfectant rotation, in-use dilution and shelf life should be controlled.
Calibrated Equipment Out of Calibration
Equipment used for critical measurements, such as balances, pH meters, temperature probes and gauges, should be on a calibration schedule with traceable standards.
Calibration status should be visible on the equipment itself.
An out-of-tolerance result must trigger an assessment of products made or released since the last good calibration.
Balances and scales used for weighing actives and preservatives deserve particular scrutiny.
Calibration intervals should be adjusted based on history, not left fixed regardless of drift.
Equipment found out of calibration should be removed from use until corrected.
Batch Traceability and Sample Retention
Each batch should have a unique identifier linking raw material lots, equipment, personnel, test results and distribution.
Traceability should work in both directions, from finished product back to materials and from a material forward to every batch it entered.
Reference samples of finished product are retained under defined storage conditions, typically for the product's shelf life, so complaints can be investigated.
Mock recalls test whether the system can identify and locate affected product quickly.
Rework and reprocessing should be controlled and recorded, with the original batch identity preserved.
Complaint handling should feed into trend analysis and corrective action.
Production Line Complexity Influencing Mandays
Number of employees and shifts within scope.
Range of product types, such as emulsions, powders, aerosols, hair dyes or products applied to sensitive areas, each of which carries different risks.
Number of production lines, degree of automation and manufacturing steps.
Whether activities are subcontracted, such as filling or testing, and how they are controlled.
Number of sites and the similarity of their processes.
Maturity of the system, including the history of findings.
Satisfying Enterprise Retail Vetting Requirements
Many request independent evidence of GMP, and a third-party certificate against ISO 22716 is a common way to provide it.
Private-label and contract-manufacturing relationships typically involve the customer's own audit as well.
Retailers increasingly examine complaint handling, adverse event processes and recall readiness, not just the plant floor.
Documentation requested often includes safety assessments, ingredient declarations, claims substantiation and product listing records.
Corrective action closure on a customer audit is monitored, and slow responses damage the relationship.
A plant that can show one controlled system, rather than a patchwork of customer-specific exercises, spends less time on repeat audits.
Securing Accredited Cosmetics GMP Certification
Define the scope of products, sites and processes to be covered.
Perform a gap analysis against ISO 22716 and the requirements of the target markets.
Establish or tighten procedures for premises, equipment, materials, production, quality control, documentation and traceability.
Train personnel and run internal audits across every area of the guideline.
Choose a certification body whose accreditation covers the scheme being certified, and confirm the scope of that accreditation.
Complete the initial audit, resolve findings and obtain the certificate.
Maintain compliance through surveillance audits and renewal.
ISO 22716 is guidance, so the certificate confirms conformity with the guideline rather than with a requirements standard in the way ISO 9001 does. Buyers differ in what they accept, so confirm in advance.
How Pacific Certifications can help?
ISO 22716 is a guidelines document, and certification services against it are provided subject to applicable accreditation, competence and certification-scope arrangements, which should be confirmed with the certification body and with the buyers who will rely on the certificate. Pacific Certifications can provide:
Review of proposed certification scopes, including products, sites and subcontracted activities
Independent audits against ISO 22716 where applicable
Stage 1 documentation and readiness audits
Stage 2 implementation and effectiveness audits
Surveillance audits and renewal audits
Pacific Certifications conducts impartial audits and does not design, implement or manage manufacturing or quality systems for its clients, and does not provide regulatory submissions or legal advice on MoCRA or EU cosmetics law.
Contact Us
To schedule your ISO 22716 certification, contact us at support@pacificcert.com or +91-8595603096.
For training programs on ISO 22716 certification requirements and preparation, contact us at trainings@pacificcert.com.
Read More at: ISO certifications for skincare product manufacturing
