skininsider

What the skincare industry knows and does not tell you

Dispatch 6 August 2026Published by Northbank MediaNo affiliate links here
Manufacture

Inside a cosmetic factory: what good manufacturing practice actually means

Cosmetic good manufacturing practice is a documented system covering people, premises, equipment, materials and records. What it requires, what it does not, and why batch records matter to you.

SectionManufacture
Reading8 min
Reviewed6 August 2026
EditorNorthbank Media
The short answer

Good manufacturing practice for cosmetics is a system of documented control covering personnel, premises, equipment, raw materials, production, finished product release, records and handling of complaints and recalls. The internationally recognised reference is ISO 22716. It is about consistency and traceability rather than about the quality of a formula. A product made under strict GMP can be an unremarkable formulation, and the system's real value to a shopper is that any given unit can be traced back to a batch record if something goes wrong.

Cosmetic good manufacturing practice is a documented system covering people, premises, equipment, materials an
Cosmetic good manufacturing practice is a documented system covering people, premises, equipment, materials an

Good manufacturing practice sounds like a quality badge. It is better understood as an accountability system. It does not ask whether a product is good. It asks whether you can prove, months later, exactly what was made, from what, by whom, on what equipment, and whether it met specification before it left the building.

What the system actually covers

Cosmetic manufacture in the UK must be carried out in accordance with good manufacturing practice, and compliance with the harmonised standard is the recognised route to demonstrating it. The internationally used reference is ISO 22716, published by the International Organization for Standardization. The scope is broader than most people expect.

The domains a cosmetic GMP system has to cover
DomainWhat is controlledWhat it prevents
PersonnelTraining records, hygiene, defined responsibilities, access controlUndocumented decisions and untrained people performing critical steps
PremisesLayout, surfaces, air handling, pest control, segregation of activitiesCross contamination between products and ingress of contaminants
EquipmentCleaning validation, calibration, maintenance, change controlCarryover between batches and drift in weighing and measuring
Raw materialsApproved suppliers, incoming checks, quarantine, identification, storageThe wrong material, or a degraded one, entering a batch
ProductionWritten manufacturing instructions, in process checks, reconciliationDeviation from the approved process going unrecorded
Finished productSpecification, release testing, authorised release by a named personOut of specification product reaching the market
RecordsBatch documentation retained for a defined periodInability to investigate a problem after the fact
Complaints and recallsA written procedure for investigating and, if needed, withdrawing productA slow or partial response when something does go wrong

The batch record, and why the code on your pack matters

Every production run generates a batch record: what was weighed, by whom, from which material lots, on which equipment, with which in process results, and who authorised release. That record is retained, and the batch number printed on your pack is the key to it.

This is the most directly useful part of the whole system for a consumer. If a product causes a reaction, or looks wrong, the batch code allows the responsible person to identify precisely which run it came from and to check whether anything else has been reported against it. Reporting a problem without the batch code makes that investigation considerably harder. The subject is covered in period after opening, batch codes and dates.

What GMP does not do

It does not assess whether a formula is well designed, whether the actives are present at useful levels, or whether the product does what the advertising says. Those are separate questions handled by formulation, by claim substantiation and by the advertising rules.

It also does not, by itself, make a product safe. Safety is established by the safety assessment and the product information file. GMP makes sure the thing that was assessed is the thing that was actually made.

TranslationAbout pages, FAQ sections, marketplace listings
Made in a GMP certified facility
Permitted to mean

That the manufacturing site operates a good manufacturing practice system, generally against ISO 22716, and in many cases that this has been audited by a third party. For cosmetics made for the UK market, manufacturing to GMP is a requirement rather than a distinction.

Does not mean

It does not mean the product is superior, better formulated or more effective. It does not mean the formula was tested for efficacy. It does not mean the ingredients are of a higher grade than a competitor's. It does not mean the brand owns or operates the facility, and it does not tell you which facility it is.

What would have to be true

To be a point of difference rather than a statement of compliance, a brand would have to say something beyond the baseline: the certification body and scope, the audit frequency, or additional standards held. Otherwise the claim is describing the floor of the market as though it were the ceiling.

The rule behind it. Cosmetics placed on the UK market must be manufactured in compliance with good manufacturing practice under the retained cosmetics regulation, with compliance with the relevant harmonised standard treated as presumption of conformity.

Who checks, and how often

There are three layers of checking and they do quite different things. Internal audit is the factory checking itself against its own procedures. Customer audit is a brand, or a retailer, auditing the factory as a condition of doing business. Third party certification is an accredited body auditing against the standard and issuing a certificate.

Alongside these sits enforcement. Market surveillance in the UK is carried out by the Office for Product Safety and Standards and by local authority Trading Standards services, who can require access to the product information file, take samples and act on unsafe products. That is a different kind of check: it is not routine inspection of every factory, it is intervention when something is wrong.

Who profits

Certification as a market signal

Certification is expensive and it produces a document that can be shown to retailers and customers. That document reduces the buyer's risk, which is a genuine service. It also raises the cost of entry to the supply chain, and the value of a certificate rises as fewer suppliers hold it.

The effect is that quality systems become both a real safeguard and a commercial moat at the same time. Neither cancels the other out.

  • Certification bodies. Sell an audit that the market increasingly treats as compulsory
  • Larger manufacturers. Hold certifications that smaller competitors struggle to fund
  • Retailers. Transfer diligence cost onto suppliers and gain a defensible position if something fails
  • Consumers. Get genuinely better traceability, and a smaller field of suppliers

Both outcomes are true simultaneously. Naming the commercial effect is not an argument against quality systems.

What actually goes wrong in practice

Failures in cosmetic manufacture are rarely dramatic. The recurring themes across product safety enforcement in the sector are mundane: microbiological contamination, incorrect labelling, prohibited or restricted substances present above permitted levels, and inadequate documentation. Recalls and alerts are published by the Office for Product Safety and Standards, and reading a few of them is the fastest cure for romanticism about the industry in either direction.

Notice what those failure modes have in common. Every one of them is a documentation and control problem before it is a chemistry problem. That is exactly what GMP exists to catch, and it is why the system is built around records rather than around inspection of the finished product.

What to take from this at the shelf

Not much as a purchase signal, and that is the point worth making. GMP is a baseline, so a brand advertising it is advertising compliance. What changes is what you do when something goes wrong: keep the pack, note the batch code, contact the responsible person named on the label, and if you get nowhere, escalate to Trading Standards. That route works because the batch record exists at the other end of it.

Questions people actually ask

Is GMP compulsory for cosmetics sold in the UK?

Yes. Cosmetics placed on the UK market must be manufactured in accordance with good manufacturing practice, and compliance with the relevant harmonised standard is the recognised route to demonstrating that.

Does GMP mean the product is tested for effectiveness?

No. GMP concerns consistency, control and traceability of manufacture. Efficacy testing is separate and is not required for a cosmetic to be legally sold.

What should I do if a product seems faulty?

Stop using it, keep the pack and the batch code, and contact the responsible person named on the label. If the response is unsatisfactory, report it to Trading Standards, who can require access to the product information file.

Does a certificate on a website prove anything?

It indicates that a site was audited against a standard within a scope and period. It says nothing about the specific product, its formulation or its performance.

Primary sources

Cited because they are public, stable and checkable. Read them rather than taking our word for any of this.

This is journalism about an industry. It is not medical, legal or regulatory advice. For a skin condition, see a clinician.

This article contains no commercial links. No affiliate links, no sponsored placements and no paid mentions appear anywhere on this site. No brand, manufacturer, retailer or agency is named in our editorial, and no company that pays us can appear in it. Published by Northbank Media.

The dispatch

One email a fortnight. A new translation, a mechanism explained, and what changed in the rules. No product recommendations, because we do not make any. No affiliate links, because we do not take commission. Unsubscribe in one click.

We use your address to send the dispatch and nothing else. See privacy. Sponsorship rates and limits are published on the newsletter page.