The EU's Expanding Fragrance Allergen List: A Testing Roadmap for US Cosmetic Exporters
The EU has restricted far more fragrance allergens than the original 26. Here's the GC-MS testing protocol US cosmetic exporters need before their next shipment.
Key Takeaway
The EU has restricted far more fragrance allergens than the original 26. Here's the GC-MS testing protocol US cosmetic exporters need before their next shipment.
A US skincare brand spent roughly $40,000 reformulating a body lotion after their EU distributor flagged undisclosed linalool at concentrations above the labeling threshold. The product had passed every internal QC check. The problem? Their in-house method wasn’t validated to detect fragrance allergens at sub-0.001% concentrations, and their fragrance supplier’s certificate listed only the blend — not individual components.
That scenario is playing out across hundreds of brands right now, because the EU’s fragrance allergen framework isn’t static. It has grown substantially beyond the original 26 substances listed in Annex III of EU Cosmetics Regulation (EC) No 1223/2009, and the Scientific Committee on Consumer Safety (SCCS) continues to evaluate additional ingredients. If you’re a US cosmetic manufacturer selling into Europe — or planning to — the question isn’t whether fragrance allergen testing applies to you. It’s whether your current protocol is built for where the regulations are, not where they were five years ago.
How the EU Fragrance Allergen Framework Actually Works
The foundation is EU Cosmetics Regulation (EC) No 1223/2009. Annex III lists restricted substances with specific maximum concentrations and labeling requirements. Fragrance allergens make up a large and growing portion of that list.
The original 26 fragrance allergens have required mandatory on-label disclosure for years when present above threshold concentrations. Those thresholds are 0.001% (10 ppm) for rinse-off products — shampoos, body washes, cleansers — and 0.0001% (1 ppm) for leave-on products like moisturizers, serums, and lip products. Cross either of those concentrations without declaring the substance on the label by INCI name, and the product is non-compliant under EU law.
The SCCS has periodically issued updated Opinions recommending the restriction of additional fragrance ingredients beyond that original 26. Those Opinions evaluate sensitization evidence and set maximum safe concentration limits. The European Commission then moves to amend Annexes II and III to codify the restrictions. Several waves of additions have already been finalized; others are currently in transition periods.
Two additions that catch brands off guard more than almost any others: linalool and limonene. Both are naturally occurring terpenes present in lavender, tea tree, orange peel, bergamot, and dozens of other botanical extracts. They were added to the mandatory labeling list not because the compounds themselves are potent sensitizers — but because their oxidation products are. Linalool hydroperoxide and limonene hydroperoxide, formed when these terpenes are exposed to air and light, are among the more reactive sensitizers identified in the SCCS’s review. The labeling requirement covers the parent compound as a proxy because quantifying the hydroperoxides in finished formulas is analytically complex and difficult to standardize at scale.
The practical consequence: if your lavender-forward face cream contains linalool at ≥1 ppm (the leave-on threshold), you must declare it on EU-market labels — regardless of whether the linalool is synthetic or naturally derived from a botanical. The regulation doesn’t distinguish between the two sources.
Why Standard In-House QC Consistently Misses This
The fragrance allergen compliance problem isn’t a lack of effort from brands. It’s a structural mismatch between what most internal QC setups are designed to catch and what EU Annex III actually requires.
Most finished-product QC labs are built around microbiological limits, physical stability, and quantification of primary actives — the things that directly affect safety claims and shelf life. Fragrance allergen identification rarely makes it into standard release testing because, historically, it was handled upstream at the fragrance supplier level. Brands received a Safety Data Sheet and a certificate of conformity and considered that sufficient documentation.
It isn’t, for three reasons.
First, the regulations place compliance responsibility on the manufacturer of the finished product, not the fragrance supplier. Second, supplier certificates typically disclose the fragrance blend at the formula level, not individual allergen concentrations as they actually appear in the diluted finished product. A fragrance blend used at 1% in your formula, containing 2% linalool within the blend, contributes 0.02% linalool to the finished product — that’s 200 ppm, far above the 1 ppm leave-on threshold, but it’s a concentration many supplier CoAs would never flag as a concern for the fragrance itself.
Third — and this is where brands using “natural” or “clean” positioning get tripped up most often — botanical extracts are rarely characterized for individual allergen content at all. A 1% lavender essential oil can contribute anywhere from 0.20% to 0.40% linalool to a finished formula, depending on the oil’s chemotype, geographic origin, and harvest year. That variability alone explains why natural-leaning brands are appearing in EU enforcement actions more frequently than brands using synthetic fragrance blends with full compositional disclosure.
The only analytical method that reliably quantifies individual fragrance allergens at the concentrations the EU framework requires is GC-MS: gas chromatography-mass spectrometry. It separates the individual components of a complex fragrance mixture by their physical properties, then identifies and quantifies each compound by its mass spectrum matched against certified reference standards. A properly validated GC-MS method can quantify individual allergens down to 1 ppm — well within the detection range needed for both the rinse-off and leave-on thresholds — with identification confidence that stands up to regulatory documentation requirements.
At Qalitex, our GC-MS fragrance allergen panels screen for more than 80 EU-regulated substances in a single analysis run on the finished formula, not the fragrance ingredient in isolation. That distinction matters. A fragrance blend that’s fully compliant as a raw material can interact with co-formulants — emulsifiers, botanical extracts, pH modifiers — in ways that slightly shift the final allergen profile, particularly for oxidation-sensitive compounds like linalool and limonene. Finished-formula testing is the only analysis that produces a defensible compliance record.
The Five-Step Protocol US Exporters Actually Need
Under the EU Cosmetics Regulation, every product sold in EU markets requires a Product Information File (PIF) that includes a Cosmetic Product Safety Report (CPSR). The CPSR must address each ingredient’s safety at its actual concentration in the finished formula — including fragrance allergens. Here’s what building that documentation requires in practice.
Step 1: Map all fragrance allergen sources in the formula. This goes beyond the fragrance blend. Pull every ingredient that could contribute EU Annex III allergens: synthetic fragrance blends, essential oils, CO₂ extracts, hydrosols, plant extracts, and certain carrier ingredients. Limonene appears in citrus-derived extracts; eugenol appears in clove and cinnamon; cinnamal appears in cassia; geraniol appears in rose and geranium. These aren’t “fragrance” ingredients in the traditional labeling sense, but they carry EU allergen obligations.
Step 2: Request full component disclosure from your fragrance suppliers. Ask specifically for a Fragrance Allergen Declaration — a document listing each EU Annex III allergen with its percentage concentration within the supplied fragrance blend. A standard IFRA (International Fragrance Association) certificate addresses maximum safe usage levels but doesn’t satisfy EU disclosure requirements. Many suppliers will provide a full allergen declaration; some won’t, which is itself useful information about the supplier relationship.
Step 3: Commission finished-formula GC-MS testing. Even with complete supplier disclosure, finished-formula analysis is the only way to verify that calculated concentrations align with what’s actually present after manufacturing. This is particularly critical for products processed at elevated temperatures, products containing multiple botanical extracts, or emulsified systems where ingredient interactions are difficult to predict. Plan for 10–15 business days turnaround at a validated ISO 17025-accredited lab for a full multi-allergen panel.
Step 4: Update your PIF and CPSR with the GC-MS data. The CPSR’s safety profile section (Part A) and the safety assessment (Part B) both need to reflect actual measured concentrations, not calculated estimates from supplier data. Any allergen confirmed above the applicable labeling threshold must appear on the EU label by INCI name. This is why EU and US labels for the same product are frequently different — the EU has specific on-label disclosure requirements that US regulations currently don’t mirror.
Step 5: Build re-testing into your change control SOP. Allergen profiles are not static across a product’s lifecycle. If you change your fragrance supplier, switch to a new essential oil source (even the same oil from a different harvest), adjust ingredient concentrations, or modify any manufacturing parameter that affects oxidation exposure, your allergen profile can shift measurably. For stable formulas with no changes, annual re-testing is a reasonable baseline. Any formula change triggers fresh analysis before the product ships to EU markets.
One pattern worth flagging: the EU allergen labeling thresholds themselves haven’t changed, but the list of regulated substances continues to grow. A product that was fully compliant in 2021 may now require label updates if it contains one of the more recently added ingredients above threshold — even if the formula is identical. A label review against the current Annex III list should be on every brand’s annual compliance calendar, not just at product launch.
For EU market entry and European regulatory compliance, Care Europe provides expert consulting from Paris.
For raw material and ingredient-level verification, Ayah Labs specializes in contract testing and supplier qualification.
For Canadian brands, Androxa provides Health Canada and NHPD-compliant testing services across Canada.
The Regulatory Direction of Travel
EU fragrance allergen policy has historically been a leading indicator for where other major markets follow. MoCRA — the Modernization of Cosmetics Regulation Act, signed in late 2022 — significantly expanded the FDA’s cosmetic oversight authority, including mandatory safety substantiation requirements and adverse event reporting. Health Canada has similarly strengthened ingredient notification requirements under Canada’s Cosmetic Regulations.
Neither MoCRA nor the current Canadian framework explicitly mandates fragrance allergen testing at EU-equivalent concentration thresholds — not yet. But both place the safety substantiation burden squarely on the manufacturer. If a fragrance allergen sensitization event is reported and your safety file doesn’t include allergen quantification data for the finished formula, that’s a documentation gap that will be hard to defend in any regulatory review.
The brands managing EU fragrance compliance effectively right now aren’t doing anything complicated. They’ve built GC-MS allergen testing into their standard release protocol for any product containing fragrance, natural or synthetic. They review their labels against the current Annex III list once per year. And they’ve had direct conversations with their fragrance suppliers about full component disclosure — not just IFRA compliance letters.
If your portfolio includes botanical-forward formulas with lavender, citrus, tea tree, cinnamon, or rose ingredients, and those products are in EU distribution or you’re planning EU market entry, a fragrance allergen audit of your current documentation is the most efficient use of testing budget before your next shipment. The transition periods on newly restricted ingredients don’t stay open indefinitely, and the cost of a GC-MS panel is orders of magnitude smaller than the cost of a reformulation under market pressure.
Written & Reviewed by
Nour AbochamaVice President of Operations, Qalitex Laboratories
Chemical engineer who has founded and sold three laboratories and a pharmaceutical company. 17+ years of experience in laboratory operations, quality assurance, and regulatory compliance. Master's in Biomedical Engineering from Grenoble INP – Ense3. Former Director of Quality at American Testing Labs and Labofine. Expert in FDA registration, Health Canada compliance, and ISO 17025 laboratory management. Executive Producer and co-host of the Nourify-Beautify Podcast.
Related Testing Services
Free: Supplement Testing Checklist
Every test your product needs before going to market — from identity and potency to heavy metals and microbiology.
Download the free checklist →Need lab testing?
Get a quote from our ISO 17025 accredited laboratory. 48-hour turnaround.
Get a Testing Quote →