US vs EU Hair Dye Regulations Compared: A 2026 Compliance Guide for Hair Color Suppliers
Hair dye regulations in the United States and the European Union start from opposite assumptions, and a formulation that sells legally in one market is often not compliant in the other. The two regulators do not simply apply different numbers — they disagree about who has to prove what, and they demand different words on the label. For a hair color supplier, an ODM project manager or a private-label brand serving both markets, those differences decide your formulation count, your packaging SKUs and your documentation budget.
Short answer: The EU runs a positive-list system under Regulation (EC) No 1223/2009 — every hair dye precursor, coupler and colorant must be explicitly authorised in Annex III or Annex IV, inside a numeric ceiling measured after mixing. The US runs the opposite way, under the FD&C Act: cosmetic ingredients are permitted unless prohibited, with one large exception — color additives must be FDA-approved for their intended use, and most must be batch certified. The clearest single example is p-phenylenediamine (PPD): the EU caps it at 2% calculated as free base after mixing under oxidative conditions, while the FDA sets no numeric limit at all.
Key takeaways
- One formulation rarely covers both markets. Separate EU and US formulas are normal for permanent colour.
- EU labels carry a fixed, prescriptive warning block. US labels only need the statutory coal-tar hair dye caution statement.
- Market entry differs: CPNP notification before sale in the EU; facility registration plus product listing in FDA Cosmetics Direct for the US.
- As of September 2026 the FDA has still not issued final MoCRA GMP rules, while ISO 22716 remains mandatory in the EU.
- Since 31 July 2026 the EU requires around 82 fragrance allergens to be declared on the ingredient list — a change US labels do not mirror.
US vs EU Hair Dye Regulations at a Glance
Seven differences decide most dual-market projects. The table below is the fast version; each row is explained in detail further down.
| Dimension | European Union | United States |
|---|---|---|
| Regulatory model | Positive list: Annexes II–VI of Regulation (EC) No 1223/2009 | Permitted unless prohibited; color additives need FDA approval |
| PPD in oxidative dyes | Max 2% calculated as free base, measured after mixing (Annex III, ref. 8a) | No numeric limit set by FDA; safety must be substantiated |
| Color additives | Annex IV closed list; an unlisted colorant is prohibited | FDA-approved and listed in 21 CFR Parts 74 or 82; most need batch certification (Part 80) |
| Safety dossier | Cosmetic Product Safety Report (CPSR) by a qualified safety assessor, held in the PIF | Manufacturer's safety substantiation; no formal report required |
| GMP | ISO 22716 — mandatory under the Regulation | MoCRA mandates GMP rules; FDA final rule still outstanding as of September 2026 |
| Market entry filing | CPNP notification before the product is placed on the market | Facility registration plus product listing via Cosmetics Direct |
| Label warnings | Prescriptive, fixed wording for oxidative hair dyes | Only the statutory coal-tar hair dye caution statement |
Why the Two Systems Start From Opposite Assumptions
The single most useful thing to understand about US and EU hair dye rules is that they place the burden of proof in different places. In the EU the regulator decides in advance which substances may be used. In the US the manufacturer decides, and the regulator reacts afterwards.
The EU: prohibited unless expressly permitted
Regulation (EC) No 1223/2009 splits substances into six annexes, and the annex a substance sits in determines everything about how it can be used:
- Annex II — prohibited substances, banned outright in cosmetic products.
- Annex III — restricted substances, allowed only inside stated concentration limits and conditions of use, often with mandatory label wording.
- Annex IV — permitted colorants, again with limits and conditions.
- Annex V and Annex VI — permitted preservatives and UV filters.
The practical consequence: a hair dye substance that is not listed, or that exceeds its listed ceiling, cannot be placed on the EU market at all — there is no route to sell it by arguing that it is safe. A qualified safety assessor must also sign off the finished product before it goes on sale.
The US: permitted unless prohibited, with one exception
Under the FD&C Act, cosmetic ingredients — including most hair dye precursors and couplers — do not need pre-market FDA approval. Enforcement happens after the product is on the market: FDA can act against a cosmetic that contains a poisonous or deleterious ingredient that may make it harmful when used as directed, or that is adulterated or misbranded.
Color additives are the exception, and it is a big one. They must be approved by FDA for their intended use before they can be used in cosmetics. That single difference is why an EU-compliant shade can still be blocked in the US, and why colorant selection has to be reviewed twice.
PPD Concentration: The Difference That Forces Two Formulas
p-Phenylenediamine is the workhorse precursor in permanent colour and a well-documented skin sensitiser. It is also the clearest illustration of how far the two regimes sit apart.
| Question | European Union | United States |
|---|---|---|
| Numeric ceiling | 2% calculated as free base | None set by FDA |
| Point of measurement | After mixing under oxidative conditions, i.e. the maximum concentration applied to hair | Not applicable |
| Legal basis | Annex III, reference 8a, Regulation (EC) No 1223/2009 | Manufacturer must substantiate safety under conditions of use |
| Mixing ratio on label | Mandatory | Not required |
| Enforcement | Product may not be placed on the market above the limit | Post-market action if FDA considers the product unsafe |
EU: 2% calculated as free base, measured after mixing
Annex III reference 8a covers p-phenylenediamine and its salts and states that after mixing under oxidative conditions the maximum concentration applied to hair must not exceed 2% calculated as free base. Two details matter in practice:
- The ceiling applies to the ready-to-use mixture applied to the hair, not to the tint as it leaves the factory. That is exactly why the mixing ratio must also be printed on the label.
- It is expressed as free base. If you formulate with a PPD salt, the salt content has to be converted back to free-base equivalent before you can claim compliance.
US: no numeric limit, but no free pass either
The FDA does not publish a concentration limit for PPD in hair dyes. That does not make concentration irrelevant. The manufacturer remains responsible for substantiating that the product is safe under its conditions of use, and FDA can take action against a product it considers unsafe. Two further points matter for hair dyes specifically:
- Coal-tar hair dyes — which is how the FD&C Act classifies most permanent hair colour, including PPD-based formulations — do not need FDA color additive approval, and FDA cannot treat them as harmful simply because they contain a coal-tar ingredient. That protection is conditional, not automatic.
- The condition is labeling: the product must carry the statutory caution statement and come with adequate directions for a skin test. Remove either, and the exemption does not apply.
One more boundary worth remembering: coal-tar hair dyes are not eyelash or eyebrow dyes. No color additive is approved for dyeing eyebrows or eyelashes in the US.
Color Additive Regulation: Where the Two Systems Invert
Hair dye precursors and hair colorants follow different rules, and the two markets handle that split differently.
EU: Annex IV is a closed list
In the EU, colorants used in hair dyes must appear in Annex IV of Regulation (EC) No 1223/2009 and be used within the listed concentration limits and conditions. A colorant that is not on the list is prohibited, regardless of how it performs in formulation or how much safety data the supplier holds.
US: approval plus batch certification
In the US, a color additive must be approved by FDA for its intended use, must be listed in the color additive regulations (21 CFR Parts 74 and 82), and for most color additives each batch must be certified under 21 CFR Part 80 before it can be used. Certification is a per-batch administrative step, not a one-off approval, and it is a common cause of launch delay for suppliers who assume an approved colorant is immediately usable.
The two systems have recently converged in one direction. FDA removed lead acetate from the permitted hair dye color additives, with the final rule effective in January 2022 after an enforcement-discretion period — bringing the US position on that ingredient closer to the EU's.
Labeling: What Has to Be Printed, and Where
This is where the two markets diverge most visibly, and where a single label almost never works. The EU approach is prescriptive: the Regulation dictates exact warning sentences. The US approach is minimal: most warnings are not required, but the coal-tar hair dye caution statement is mandatory for the products it covers.
| Requirement | EU | US |
|---|---|---|
| Responsible person or agent | Responsible Person established in the EU | US agent required for foreign cosmetics facilities |
| INCI ingredient list | Mandatory | Mandatory, in descending order of predominance |
| Fragrance allergen declaration | Approximately 82 fragrance allergens above threshold limits, from 31 July 2026 (Regulation (EU) 2023/1545) | Not required; FDA proposed rule still pending |
| Full hair colourant warning block | Mandatory for oxidative hair dyes | Not required |
| “Contains phenylenediamines” | Mandatory for PPD-type oxidative dyes | Not required; PPD must still appear in the ingredient list |
| “Do not use to dye eyelashes or eyebrows” | Mandatory for these products | Required through the statutory coal-tar caution statement |
| Skin test instruction | Not a mandatory Annex III sentence; the 48-hour Allergy Alert Test is harmonised industry practice | Required for coal-tar hair dyes: a preliminary test according to accompanying directions |
| Mixing ratio | Mandatory for oxidative hair dyes | Not required |
| “For professional use only” | Mandatory where the Annex III entry restricts the substance to professional use | No equivalent legal category |
| Not intended for persons under 16 | Mandatory for oxidative hair dyes | Not required |
The EU warning block, in the Regulation’s own words
For oxidative hair dyes, Annex III requires a fixed warning set to be printed on the label. The wording is not adaptable:
“Hair colourants can cause severe allergic reactions. Read and follow instructions. This product is not intended for use on persons under the age of 16. Temporary ‘black henna’ tattoos may increase your risk of allergy. Do not colour your hair if: you have a rash on your face or sensitive, irritated or damaged scalp, you have ever experienced any reaction after colouring your hair, you have experienced a reaction to a temporary ‘black henna’ tattoo in the past.”
Products containing PPD-type substances must add: “Contains phenylenediamines.” and “Do not use to dye eyelashes or eyebrows.” Professional-use products add a professional-use statement, and the mixing ratio must also be printed.
One correction worth flagging, because it is widely mis-stated: EU law does not itself mandate the sentence “conduct an allergy test 48 hours before use”. The 48-hour Allergy Alert Test is harmonised industry practice across European hair colour brands, and the Responsible Person still has to ensure the mandatory Annex III wording appears correctly on every SKU.
The US coal-tar caution statement
US labeling is lighter, with one exception that covers most permanent colour. Under section 601(a) of the FD&C Act, a coal-tar hair dye must carry this caution statement:
“Caution — This product contains ingredients which may cause skin irritation on certain individuals and a preliminary test according to accompanying directions should first be made. This product must not be used for dyeing the eyelashes or eyebrows; to do so may cause blindness.”
Beyond that, US hair dye labels need the standard cosmetic elements: product identity and net quantity, the name and place of business of the manufacturer, packer or distributor, the ingredient declaration in descending order of predominance, and the coal-tar warning where it applies.
Note the asymmetry. The US caution statement bundles both a skin-test instruction and an eyelash/eyebrow prohibition into one sentence. The EU splits the same ideas across a long warning block plus a separate “contains phenylenediamines” line. Neither label can be reprinted as-is for the other market.
Safety Assessment: CPSR vs Manufacturer Responsibility
EU: a formal Cosmetic Product Safety Report
Every EU cosmetic product must have a CPSR prepared by a qualified safety assessor before it is placed on the market. The CPSR covers the toxicological profile of each ingredient, exposure assessment, an overall safety conclusion and labeling recommendations, and it is held in the Product Information File that the Responsible Person must keep available for inspection.
US: safety substantiation and adverse event reporting
US law puts the same obligation on the manufacturer but formalises it differently. MoCRA requires adequate safety substantiation for the product, records retained for inspection, and reporting of serious adverse events to FDA within 15 business days of receiving the information. There is no prescribed report format and no safety assessor sign-off.
The absence of a mandatory dossier is not permission to skip testing. FDA retains post-market authority, and a serious adverse event triggered by an unsubstantiated formula is exactly the situation where the missing paperwork becomes the whole case.
GMP: ISO 22716 vs a Rule That Is Still Pending
- EU: ISO 22716 cosmetics GMP is the recognised standard, and compliance is mandatory under Regulation (EC) No 1223/2009.
- US: MoCRA directs FDA to establish GMP regulations for cosmetic facilities. As of September 2026 the final rule has still not been issued, which leaves facilities working without a published US-specific GMP text.
In practice that gap has a straightforward answer for anyone supplying both markets: build to ISO 22716 now. It is the only mandatory GMP standard that currently applies to either market, and it is the framework FDA's eventual rule is expected to sit close to. Suppliers who already hold ISO 22716 documentation and GMPC certification will need to adapt processes rather than rebuild them.
Notification and Listing Before You Can Sell
EU: CPNP notification comes first
The Responsible Person must notify the product through the Cosmetic Products Notification Portal before it is placed on the EU market. No CPNP entry, no legal sale.
US: facility registration and product listing
MoCRA introduced two filing duties. Cosmetic product facilities must register with FDA and renew that registration every two years from the date of initial registration. Products must be listed, submitted through FDA's Cosmetics Direct portal or by paper form. Foreign facilities must designate a US agent for the registration and correspondence.
These are administrative obligations, but they gate market access just as firmly as a concentration limit does — and they are easiest to clear when the facility registration and the product listing are handled as one project rather than two.
What This Means for Hair Color Suppliers and ODM Projects
The regulatory comparison only becomes useful when it is turned into project decisions. These are the five that come up most often when a supplier serves both markets.
- Plan for two formulas, not one. A single permanent colour base rarely clears the EU's 2% PPD ceiling and the US colorant requirements at the same time. Brief your formulator for a dual-formula project from the start rather than discovering the split at stability testing. Effort: high.
- Budget two label SKUs. The EU warning block, the fragrance allergen declaration since 31 July 2026 and the mixing ratio cannot be merged with a US label. Treat EU and US artwork as two deliverables in the packaging plan. Effort: medium.
- Build one data package, output two documents. The toxicological and exposure work behind a CPSR is largely reusable as the basis of US safety substantiation. Commissioning them together avoids paying twice for the same testing. Effort: medium.
- Screen every colorant against both lists before sampling. Check the colorant against EU Annex IV and against 21 CFR Parts 74/82, then confirm the batch certification path under Part 80. This is the cheapest step in the project and the one that most often kills a shade late. Effort: low.
- Treat the EU as the cost driver in your quotation. The safety assessor fee, CPSR, PIF maintenance and CPNP notification have no direct US equivalent, so EU market entry normally carries the higher fixed cost. Price the two markets separately. Effort: medium.
None of this changes the chemistry. It changes sequencing, documentation and artwork — and those are the three things that most often delay a dual-market launch.
Frequently Asked Questions
Can a hair dye that is compliant in the US be sold in the EU?
Usually not without reformulation. The EU requires every substance to be authorised in the annexes and to sit inside its listed limit, so a US formula built around a substance that is restricted or absent from Annex III will not qualify. The 2% free-base PPD ceiling is the most common blocker for permanent colour.
What is the EU limit for PPD in hair dye?
2% calculated as free base. Under Annex III reference 8a of Regulation (EC) No 1223/2009, the maximum concentration applied to hair after mixing under oxidative conditions must not exceed that figure. The measurement point is the ready-to-use mixture, not the tint as sold.
Does the FDA set a PPD concentration limit?
No. FDA does not publish a numeric limit for PPD in hair dyes. The manufacturer must still substantiate that the product is safe under its conditions of use, and FDA can act against a product it considers unsafe.
Is a 48-hour allergy test mandatory in the EU?
Not as a Regulation-mandated sentence. The EU Regulation prescribes the hair colourant warning block, but it does not dictate an additional patch-test instruction. The 48-hour Allergy Alert Test is harmonised industry practice across European hair colour brands, and the mandatory Annex III warnings must still appear exactly as written.
Which warnings must appear on an EU hair dye label?
Oxidative hair dyes must carry the hair colourant warning block covering severe allergic reactions, the under-16 restriction and the black henna risk. PPD-type products add “Contains phenylenediamines” and “Do not use to dye eyelashes or eyebrows”. The mixing ratio, and a professional-use statement where the substance is restricted to professionals, are also required.
What must appear on a US hair dye label?
Product identity and net quantity, the name and place of business of the manufacturer, packer or distributor, and the ingredient declaration in descending order of predominance. Coal-tar hair dyes must additionally carry the statutory caution statement covering skin irritation, the preliminary skin test and the prohibition on dyeing eyelashes or eyebrows.
Does MoCRA require fragrance allergen labeling?
No. MoCRA requires FDA to issue a fragrance allergen labeling rule for cosmetics, but that rulemaking is not yet final, so fragrance allergens do not have to be declared on a US label. The EU differs: since 31 July 2026, around 82 fragrance allergens must be declared on the ingredient list where the applicable thresholds are exceeded.
Do hair color suppliers need two separate labels and two formulas?
Two labels, effectively always, for permanent colour sold in both markets. Two formulas, frequently — driven mainly by the EU's concentration ceilings and its closed colorant list. A single shared base is more realistic for non-oxidative or ammonia-free lines with simpler colorant systems.
How much does EU cosmetic compliance cost?
The EU sets no single regulatory fee. Cost comes from the safety assessor's fee for the CPSR, Product Information File maintenance and the Responsible Person service, which are priced commercially rather than by regulation. The US requires safety substantiation and registration and listing, but no equivalent dossier, so EU market entry normally carries the higher fixed cost. Because the amount scales with SKU count and formulation complexity, price the two markets separately instead of applying a percentage rule of thumb.
What are the MoCRA GMP requirements for cosmetic facilities?
MoCRA directs FDA to establish good manufacturing practice regulations for cosmetic facilities, covering manufacturing, processing, packing and holding. As of September 2026 that final rule has not been issued, so there is no published US GMP text for a facility to certify against. ISO 22716 remains the practical standard to build to in the meantime.
Is ISO 22716 GMP mandatory in the United States?
Not directly. MoCRA requires FDA to issue GMP regulations for cosmetic facilities, and as of September 2026 that final rule is still outstanding. ISO 22716 is mandatory in the EU and is the practical standard to build to while the US rule is pending.
When does a hair dye product need CPNP notification?
Before it is placed on the EU market. The Responsible Person must submit the product through the Cosmetic Products Notification Portal first, and without a CPNP entry the product cannot be legally sold in the EU. The US has no equivalent pre-market notification, only facility registration and product listing.
Sources
- Regulation (EC) No 1223/2009 on cosmetic products, Annex III (restricted substances) and Annex IV (permitted colorants) — EUR-Lex
- U.S. Food and Drug Administration, “Hair Dyes” — coal-tar hair dye rules, the section 601(a) caution statement and the lead acetate repeal — fda.gov
- U.S. Food and Drug Administration, “Registration & Listing of Cosmetic Product Facilities and Products” — fda.gov
- U.S. Food and Drug Administration, “Modernization of Cosmetics Regulation Act of 2022 (MoCRA)” — safety substantiation and 15-business-day serious adverse event reporting — fda.gov
- Obelis, “Patch Testing Cosmetics: 2026 EU Compliance Rules Explained”, 31 July 2026 — obelis.net
- Commission Regulation (EU) 2023/1545 amending the labelling of fragrance allergens — EUR-Lex
- Foley & Lardner, “How MoCRA Is Reshaping FDA Oversight of Cosmetics in 2026”, 12 March 2026 — foley.com
- Jairoun et al., “Quantification of p-Phenylenediamine in Hair Dyes and Health Risk Implications in the UAE”, Risk Management and Healthcare Policy, 2024 — PMC10962657
Formulating for both markets?
Mingli Factory is a GMPC-certified cosmetics OEM and ODM manufacturer with more than 17 years in hair colour and hair care. We build parallel EU and US formulations, prepare the documentation each market requires, and produce the label artwork to match.
