Safety Gate Alerts and Recalls: What a Retailer Must Do When a Cosmetic Is Flagged

23 May 2026 · The Glow Trade

Every Friday the European Commission publishes a list most retailers have never opened: the week's Safety Gate alerts, the EU's rapid warning system for dangerous non-food products. Cosmetics are a permanent resident. A Bulgarian inspection finds a banned preservative in a cream; a German authority flags a Korean sheet mask whose label lacks the Responsible Person; a hair product with an undeclared allergen appears with photos, batch numbers and the instruction to withdraw. The list is public, searchable and free. The retailers whose shelves appear in it usually find out from someone else.

A recall feels like a brand problem and a big-company problem. It is neither: it is a chain problem, and the cosmetics regulation gives every link, down to the smallest shop, a named role in it. Knowing the role before the letter arrives is the difference between an awkward week and an existential one.

The short version

The Safety Gate (formerly RAPEX) publishes weekly alerts for cosmetics found non-compliant or dangerous in any member state, with product photos, batch codes and the measures taken. Searching it costs nothing and belongs in the buying routine.
Under Article 6 of Regulation (EC) No 1223/2009 a distributor who learns a product may be non-compliant must not sell it, must cooperate with authorities, and must pass information down the chain. Under Article 7, every trader must be able to name who supplied them.
Your own recall procedure fits on one page: stop sale, identify stock by batch, notify supplier, document everything, tell customers where the product law requires it.

How a product ends up in the system

The path is inspection-led. A member state's market surveillance authority tests or checks a cosmetic, in a shop, at a border, or after a consumer complaint, and finds something the law does not allow: a banned substance, a microbiological failure, a serious labelling breach, a missing Responsible Person in a case where that matters. The authority orders a measure, withdrawal, recall, destruction, sales ban, and reports the product to the Safety Gate so every other member state can act on the same product.

Korean products appear in these alerts, not because Korean cosmetics are unsafe, but because a long, loosely controlled import tail exists: grey-market stock, Korean domestic versions sold as EU goods, counterfeit runs. The pattern that produces alerts is the same pattern described in spotting grey-market and counterfeit K-beauty, which is why the buying discipline and the recall procedure are the same document at two ends.

Your legal role as the shop

Article 6 hands the distributor three duties that matter here. First, act with due care: when you have information suggesting a product is not in conformity, do not make it available, full stop, no "selling the last few". Second, cooperate with the authorities: provide the documents and the tracing information you hold. Third, pass it on: inform the Responsible Person or your supplier and, where you supplied others, the customers down your chain, which for B2B sellers means their own retail customers.

Article 7 adds the traceability spine: every economic operator must be able to identify who supplied them, and the Responsible Person must be able to identify who they supplied. In practice this means your purchase invoices are not bookkeeping; they are the recall infrastructure. The document discipline in the supplier document checklist is what makes a recall an afternoon of work instead of a month.

The one-page procedure

PRODUCT ALERT / RECALL PROCEDURE

1. STOP: pull the product from shelf and online shop NOW.
   Note the date, time, and who acted. Quarantine the stock.
2. IDENTIFY: which batches do we hold? (batch code on pack
   vs. alert) Count units on shelf, in back room, in transit.
3. SOURCE: pull the purchase invoices for the product.
   You must be able to name the supplier (Art. 7).
4. NOTIFY: email the supplier/Responsible Person with the
   alert reference. If WE supplied others (B2B): notify them.
   If an authority contacts you: cooperate fully, in writing.
5. CUSTOMERS: follow the authority's or RP's instruction on
   consumer recall wording. Never improvise a recall notice.
6. DOCUMENT: keep the alert, your actions, dates, quantities,
   emails. One folder per incident. This folder IS your defence.
7. RESOLVE: return/quarantine/destroy per instruction, get
   credit or replacement agreed in writing, note the lesson:
   HOW did this product enter our assortment?

The habit that keeps you out of it

Two cheap routines cover nearly all of the risk. First, search the Safety Gate for your core brands and categories once a quarter; the database is public and the search takes ten minutes. Second, keep the batch discipline at goods-in that the batch-code article teaches: a receiving log with product, batch and supplier turns step two of the procedure from a warehouse excavation into a spreadsheet filter. The pharmacies among readers already live this way for medicines; cosmetics simply borrowed the muscle, and the pharmacy documentation standard is the strictest version of it.

Questions buyers ask

A product I sold for months appears in an alert. Am I liable?

Liability follows conduct. If the product was bought in good faith through a documented channel, you stopped sale when you learned of the issue, and you cooperated, the system's targets are the Responsible Person and whoever broke the rules upstream. Where retailers get hurt is continuing to sell after learning, being unable to show where stock came from, or ignoring an authority's request. The invoice trail and the incident folder are not bureaucracy; they are the difference between witness and defendant.

The supplier says the alert is "a mistake" and to keep selling. What then?

The alert is the authority's document, not the supplier's, and the duty to stop sale when you hold information suggesting non-conformity sits with you. A supplier disputing an alert can do so through the Responsible Person and the authorities, and until that resolves, your stock stays in quarantine. The supplier who pressures you to keep selling flagged goods has told you something about every future shipment; file that under the vetting signals in how to vet a wholesale supplier.

Do I have to tell my customers publicly?

Consumer-facing recall communication is normally led by the Responsible Person or required by the authority, with defined wording and channels. Your job is to execute it if instructed, and not to improvise: an over-broad panic post can create its own legal exposure, and silence where a recall was ordered is worse. If customers contact you first, the correct line is factual: the product, the batch, the action (return/refund per instruction), and where the official notice lives.