When the Message Arrives: What Is Cosmetovigilance?
A message comes in. "I applied the product and my arm turned red." At that moment there are two paths. The first is panic: pulling the product wholesale, trying to silence the customer, or saying "that can't happen with our product." The second is procedure: record, assess, monitor, report if necessary. This article is the map for the second path.
Cosmetovigilance is the cosmetic industry's equivalent of pharmacovigilance in the pharmaceutical sector. The definition is clear: the collection, assessment and monitoring of spontaneous reports of undesirable effects observed during the use of cosmetic products under normal or foreseeable conditions. In other words, it is the safety surveillance that begins after a product reaches the shelf.
The key word here is "spontaneous." Nobody sends you a survey. Information arrives on its own — a DM, a comment, a return request, a pharmacist's phone call. Your system must be set up to capture these scattered signals.
Let us distinguish two concepts from the outset, because the entire workflow is built on this distinction. An Undesirable Effect (UE) is an unintended adverse effect on human health resulting from the normal or foreseeable use of a cosmetic product. A Serious Undesirable Effect (SUE) is a category with a far higher threshold: an undesirable effect that results in temporary or permanent functional incapacity, disability, hospitalisation, congenital anomalies, or an immediate vital risk or death.
The most common mistake: treating every complaint as a cosmetovigilance matter. The regulations are clear on this — dissatisfaction relating to the quality of a product, consumer dissatisfaction complaints, and complaints regarding refunds and similar matters are not considered within the scope of cosmetovigilance. "The scent isn't what I expected," "the bottle leaked," "the colour looks different" — these are quality complaints. They belong in a separate register. But they are kept with the same rigour.
The opposite mistake is more dangerous: filing a health-related report under "dissatisfaction" and moving on. Redness, itching, burning, blistering, eye irritation, respiratory complaints — these all go into the UE pool. Severity is assessed later; the decision to record is made immediately.
There is one more point that most small businesses overlook: causality. Undesirable effects caused by misuse break the causal link and therefore fall outside the scope of cosmetovigilance. If the customer sprayed fragrance directly into their eyes, or ingested it despite a "cosmetic fragrance oil — not for consumption" warning, the picture changes. But you do not make that call — a documented assessment does. In an audit, the difference between the two is everything.
The Responsible Person: Where the Burden Sits
Regulations lean not on an abstract "company" but on a named individual. In cosmetovigilance, that individual is the responsible person. When a complaint arrives, it must be clear from the outset whose desk it lands on.
In Turkey, designating a responsible person resident within the country is a legal requirement for every cosmetic product placed on the market. This person is not merely a name — they are a function. The responsible person is obliged to establish a cosmetovigilance system that ensures the collection, analysis and monitoring of undesirable effects, and to operate that system effectively.
The obligations on the manufacturer side run in parallel. The TITCK (Turkish Medicines and Medical Devices Agency) expects the manufacturer to establish and operate the systems necessary to carry out cosmetovigilance activities, and to prepare, report and update the working methods required to monitor and assess all suspected undesirable effects that reach them. Note: the phrase "preparation of working methods" implies the existence of a written procedure. The plan in your head is not a procedure.
It is important to distinguish between process and responsibility here. The process side is mechanical: a form, a record, a file, a notification screen. The responsibility side is legal: the product is on the market under your name, so the consequences of an incomplete assessment are also yours. If you use contract manufacturing, the two can diverge — your contract must state in writing who holds cosmetovigilance responsibility.
| Role | Primary cosmetovigilance duty | Common gap |
|---|---|---|
| Responsible person | Establishes the system, maintains records, manages causality assessment, notifies the Agency of SUEs | Person nominally appointed but unaware of any complaint |
| Manufacturer / contract manufacturer | Provides batch records, production deviations, raw material traceability | Omitting the batch number from the label; failing to retain reference samples |
| Distributor / retailer | Forwards any SUE that reaches them to the responsible person and the Agency | "Nobody told us" defence — yet the obligation is direct |
| Safety assessor | Feeds incoming data into the CPSR; recommends formula revision if necessary | CPSR written once and then frozen |
| End user | May report to the manufacturer or directly to the Agency | Inability to find the company's contact channel |
The last row matters. If the customer cannot reach you, they will reach the Agency. Reports to the TITCK can also arrive via channels such as CİMER, BİMER, SABİM, and public prosecutors. In other words, not capturing a complaint in your own system does not make it disappear — it simply catches you unprepared.
Tip: Add a visible "report an undesirable effect" contact route to your label and product page. Zero cost, significant benefit: the complaint reaches you first, you conduct the initial causality assessment, and you enter the official channel fully prepared.
Complaint Received: Step-by-Step Workflow
A good procedure is one that requires no thinking in a moment of panic. Pin the workflow below to the wall. Do not break the sequence.
- Open a record — without passing judgement
Do not let your first sentence be defensive. Date, time, channel (phone/DM/email/in-store), person reporting, product name, batch number, expiry date/PAO information, date and place of purchase. Assign the record a unique complaint number. That number lives until the file is closed.
- Have the event described — without leading
Which area of the body, how many hours after application, what kind of symptom (redness/itching/burning/blistering/swelling), how long it lasted, whether it is still ongoing. The chronology (the time relationship between product use and the onset of the effect) is the backbone of the causality assessment. "A few days later" and "within 20 minutes" are two entirely different scenarios.
- Enquire about the conditions of use
How was the product used? Were the label warnings followed? What other products were used at the same time? Did the person go out in the sun after application? That last question is critical: some natural raw materials — for example cold-pressed bergamot — are phototoxic and can cause pigmentation on skin exposed to sunlight. Miss this and you will reach the wrong conclusion.
- Request medical information and documentation — but do not compel
Did the person see a doctor? Is there a report? Was a diagnosis made? Was treatment given? Where available, a physician's report and laboratory findings determine the weight of the file. If the person does not wish to share, do not insist; note "no documentation provided." You do not make a diagnosis — medical assessment is the physician's role; direct the person to a doctor.
- Classify severity
Does the event meet the SUE definition? Is there hospitalisation, permanent or temporary functional incapacity, or vital risk? If yes, the workflow changes and accelerates. If not, the case is logged as a UE and monitored. Record this decision with a written rationale.
- Track and quarantine the batch
Are there other complaints from the same batch? Pull the production record, raw material lot numbers, and the reference sample. If there is any doubt, temporarily halt dispatch of that batch. This is not a "recall" — it is a precautionary hold, and it is reversible.
- Complete the causality assessment
Causality assessment involves analysing the probable cause-and-effect relationship between the product and the undesirable effect. Work through four headings: chronology, semantic fit (does the symptom match a known reaction pattern?), alternative explanation, and resolution on discontinuation. Record the date you completed the assessment; the clock for the next step starts from that date.
- Notify the Agency if required
If the case is an SUE, a notification obligation arises. Undesirable effect reports can be submitted via the UTS (Product Tracking System) and the UTS Mobile application. A separate form exists for manufacturers: they may submit serious undesirable effect cases by completing the "Manufacturer SUE Notification Form."
- Define and implement corrective action
Formula revision, addition of a label warning, change to usage instructions, batch disposal, or a decision that "no action required." Whatever the outcome, record it with its rationale. The regulations also ask, within the notification content, for any corrective action taken by the notifier.
- Close the file and update the PIF
Transfer a case summary to the cosmetovigilance section of the PIF (Product Information File). The file closes; the data remains. The question you will be asked at the next inspection is: "What did you do about this complaint?" Your answer should be a folder, not a memory.
All ten steps exist for a single purpose: to make every decision traceable. Making the right decision but failing to document it puts you almost in the same position as making the wrong one at an audit.
Timelines, Forms and the Grammar of Batch Tracking
Timelines are the most frequently confused aspect of the regulations — because two separate clocks run simultaneously: immediate notification and post-assessment notification. Let us separate them.
The language of the Regulation is sharp. In the event of serious undesirable effects, the responsible person and distributors must immediately notify the Agency and the product's manufacturer of all serious undesirable effects known or expected to be known to them, together with the product name and any corrective action taken.
On the guidance side, an operational timeline has been defined. Legal sources state it as follows: the responsible person is obliged to notify the TITCK of serious undesirable effects within a maximum of 15 working days, and this period begins from the date on which the causality assessment is completed.
The subtlety here is this: the clock starts not on the day the complaint arrives, but on the day you finish the assessment. However, this does not give you the right to extend the assessment indefinitely. An unreasonable delay is read as a violation of the "immediately" principle. The practical rule: close the assessment within days, document the completion date, then submit the notification.
Do not confuse the timelines. The "15 days" figure that appears frequently in non-Turkish sources may belong to a different regulatory regime; in the US, for example, cosmetic companies must report any serious undesirable effect to the FDA within 15 days of becoming aware of it. In Turkey, the applicable timeline and the clock start point follow the TITCK guidance definition. Do not copy foreign templates from the internet.
| Situation | Scope | Action | Where |
|---|---|---|---|
| Scent disliked, bottle leaked, refund request | Outside cosmetovigilance | Logged in the quality complaint register; trends monitored | Internal |
| Mild redness, itching that resolved within a few hours | UE | Record + causality assessment + batch tracking; entered in PIF | Internal file |
| Widespread dermatitis, physician-documented reaction, loss of working capacity | UE → approaching SUE threshold | Severity recorded with written rationale; when in doubt, decide in favour of notification | Subject to assessment |
| Hospitalisation, functional incapacity, vital risk | SUE | Act immediately; formal notification after assessment is complete | TITCK (UTS) + manufacturer |
| Cluster of repeated complaints from the same batch | Signal | Batch quarantine, root-cause analysis, recall if signal is confirmed | TITCK + entire distribution chain |
Batch tracking: the physical side of traceability
The regulations require that the product be reported in a way that allows it to be specifically identified. In practice, this means the batch number must actually correspond to something. The three most common breakdowns seen in small workshops:
- Link the batch code to the production date
Set up a simple, readable scheme (e.g. year–day–run sequence). For each batch: raw material lot numbers, fragrance oil lot number, alcohol/solvent lot, quantity produced, bottling date. Always record the lot number from your fragrance oil supplier; if a problem originates from a raw material, that is your only evidence.
- Retain a reference sample
Keep at least one sealed unit from every batch. When a complaint arrives you will have a comparison specimen to hand. Storage conditions: room temperature, dark, upright. Without a reference sample, the sentence "there is no problem with our product" is nothing more than a claim.
- Link dispatch records to the batch
Which batch went to which distributor, on what date, in what quantity? If a recall is needed, without this table the job takes two weeks instead of two days. A single spreadsheet is sufficient; complex software is not required.
A note from the formulation side: Some reaction complaints arise not from the formula itself but from manufacturing practice. Maceration in an alcohol-based fragrance (the chemical maturation that occurs through alcohol–fragrance oil interaction and esterification) is carried out at room temperature — roughly 15–20 °C — and in the dark; in the cold, reactions slow and the process takes longer. Separately from this step, chilling (approximately 0–4 °C, around 24 hours) applied after maceration causes insoluble waxy structures to precipitate; these are then removed by cold filtration. Skip these two steps and you will see sediment at the bottom of the bottle, which in turn triggers a "product has gone off" perception and a flow of complaints.
Allergen side: the root of most complaints lies here
For redness and itching complaints, the first place to look is the formula's fragrance allergen profile. With the expanded EU fragrance allergen list (2023/1545), the number of substances requiring label declaration has risen above 80; updating your labels throughout the transition timeline is both a compliance and a defence matter. A declared allergen means an informed consumer.
At this point a dangerous industry cliché needs breaking: the perception that "natural is safe, synthetic is risky" is wrong. Many of the most strictly restricted allergens on IFRA's list — Citral, Eugenol, oakmoss derivatives — are found in the highest concentrations in natural essential oils. Conversely, some pure synthetics, such as Ambroxan and Iso E Super, have a very low allergenic profile. Safety depends on the molecule and the use level, not on the source.
The same logic applies to IFRA limits. A limit is defined not against your total fragrance oil percentage but against individual substances within the fragrance oil and the product category (leave-on / rinse-off). Do not generalise with statements like "any fragrance oil is safe up to 20%." Request your supplier's IFRA compliance statement for the fragrance oil, and read the applicable ceiling for your category from that document. This certificate is the strongest exhibit in your complaint file.
Laboratory safety — do not neglect it: High-strength ethanol and room-fragrance solvents (DPM, MMB, Dowanol derivatives, etc.) have low flash points and are highly flammable. Avoid static electricity, ensure earthing and adequate ventilation, and wear gloves and eye protection. A contact reaction sustained by a member of staff also goes into the occupational health record — it is documented with the same discipline as a customer complaint.
Weighing and density: a small but costly detail
A silent portion of complaints originates from filling errors. Build your formula on a gram basis, but account for the density difference. The specific gravities of fragrance oils and solvents span a wide range — citrus-dominant compositions can drop to around 0.84, while heavy resins and certain synthetics can exceed 1.10. If you work purely in grams and skip the mL conversion, you will end up with overflow or underfill in a 50 ml bottle. Perform the conversion using density, and verify by weighing a few bottles from every batch.
Equally, longevity is not the same as concentration. The real driver of performance is the volatility of the raw materials. A 25% extract dominated by citrus notes may fade quickly, while a 10% composition built on an amber–musk–resin backbone can linger on skin for a long time. Do not make hourly longevity promises to customers; frame conversations around "concentration alone does not determine performance — formula structure and volatility do." Exaggerated longevity claims are the number-one generator of dissatisfaction complaints.
Fixative terminology — use it correctly: MPG (monopropylene glycol) and IPM (isopropyl myristate) are not true fixatives; they are carrier solvents / emollients — that is, volatility modifiers. Because they slightly slow the evaporation of alcohol, they exhibit a mild fixative effect, nothing more. True fixatives are macrocyclic musks, glucose ethers such as Glucam P-20, and heavy balsams/resins. Use MPG at 2% or above and it will leave a tacky feel on skin — which translates into "my skin feels uncomfortable" complaints.
Frequently Asked Questions and Closing Remarks
The most common questions encountered in practice, with concise answers. Each one corresponds to a line in a procedure.
A customer said "my arm turned red" — do I need to notify TITCK immediately?
What exactly is the difference between an undesirable effect and a serious undesirable effect?
A customer is requesting a refund — does this also require a cosmetovigilance record?
Where do I submit a notification — is an email sufficient?
When does the 15 working-day period start — on the day I receive the complaint?
The customer misused the product — do I still need to record it?
I use contract manufacturing — does responsibility lie with the manufacturer or with me?
Does a single complaint require me to recall the batch?
I use natural fragrance oils — isn't the allergic reaction risk lower?
What happens if I omit the allergen declaration from the label?
How long must I retain cosmetovigilance records?
Can I share the customer's personal details?
Can a complaint change my CPSR?
Is the product notification / UTS registration free of charge?
Can I market my fragrance oil as "food grade"?
Can I mention a relaxing effect for my product?
Closing notice: This article is a reference framework to help you build a complaint procedure; it is not legal advice. Cosmetic regulations — particularly allergen lists, notification forms and guidance versions — are updated regularly; indeed, following the Cosmetics Products Regulation published in the Official Gazette on 08.05.2023, a number of guidelines were amended and renewed, including the guidance on the reporting of undesirable effects. Always verify timelines, form names, fee amounts and guidance versions against the current TITCK/Official Gazette source.
A complaint is not your brand's enemy. An undocumented complaint is. A well-built cosmetovigilance system closes a bad day before it becomes a crisis — and, as a bonus, improves your formula without you ever having to ask for it.
Build the procedure, keep the record, track the batch. The rest is your signature.
Related Articles
Expanded EU Fragrance Allergen List (2023/1545): Over 80 Allergens and the Transition Timeline
The EU has raised the number of fragrance allergens requiring label declaration from 26 to over 80. What Regulation (EU) 2023/1545 brings,
Read →How to Prepare a PIF (Product Information File)
The contents of the mandatory technical file for every cosmetic product and its role in inspections.
Read →CPSR / Cosmetic Safety Assessment
The two parts of the product safety report and the qualifications required of the assessor.
Read →