IFRA Standards for cosmetics: what they are, why they are not law — and why that does not let you off the hook

• IFRA Standards are the fragrance industry's self-regulation — not EU law, but the whole supply chain enforces them through IFRA Certificates of Conformity. No certificate, no sale.
• They run ahead of the law: today's IFRA restriction is often tomorrow's Annex III allergen. IFRA, RIFM and the SCCS read the same science.
• 263 active Standards today across 12 product categories, a 52nd Amendment in public consultation, an EU allergen list that jumped from 24 to ~80, deadlines in 2026 and 2028 — the calendar alone is unmanageable by hand.

1. What is IFRA (and how a "voluntary" standard still pulls your product)

IFRA — the International Fragrance Association, founded in 1973 — is the global body of the fragrance industry. Its core output is the IFRA Standards: the rules that define how each individual fragrance ingredient may be used safely in a finished product. The science underneath comes from the Research Institute for Fragrance Materials (RIFM) and is reviewed by an Independent Expert Panel (IEP); IFRA turns that toxicological evidence into usage rules.

Here is the part that trips people up: IFRA Standards are self-regulation. They are not a Regulation, not a Directive, not a legal act published in the Official Journal. Compliance is mandatory only for IFRA members, bound by the IFRA Code of Practice. On paper, for everyone else, it is voluntary.

In practice, it is anything but. Every serious fragrance house issues an IFRA Certificate of Conformity with the materials it sells, stating which Standards apply and at what concentration per product type. Retailers, brand owners and contract manufacturers demand that certificate as a condition of purchase. So if your fragrance is not IFRA-compliant, you do not get fined by a regulator — you get dropped by the supply chain. The effect is the same as a ban; the mechanism is commercial rather than legal. That distinction is the single most misunderstood thing about IFRA, and we will come back to it.

2. What the IFRA Standards actually say: three types, twelve categories

Each Standard targets one fragrance material (identified by name and CAS number) and assigns it one of three types:

• Prohibition — the ingredient must not be used in fragrance compounds at all. Full stop.
• Restriction — the ingredient is allowed up to a maximum concentration in the finished product, and that maximum changes depending on the type of product.
• Specification — the ingredient is allowed only if it meets defined purity or composition criteria (for example, a cap on a problematic impurity, or a requirement to be antioxidant-stabilised).

The reason a Restriction is not a single number is the 12 product categories. A leave-on lip balm and a rinse-off shower gel expose the body very differently, so the safe limit is calculated per category:

Several of these are split further into sub-categories (5A–5D, 7A/7B, 10A/10B, 11A/11B) that refine the exposure model — your IFRA Certificate will reference the exact one.

Those limits are not plucked from the air. For skin sensitisers, they come from QRA2 (second-generation Quantitative Risk Assessment), developed through the International Dialogue on the Evaluation of Allergens (IDEA). A No Expected Sensitisation Induction Level (NESIL) is the starting point; it is divided by Sensitisation Assessment Factors (SAF) and weighed against the Consumer Exposure Level (CEL) for each category. That last step — real-world aggregate exposure, summed across every product a consumer uses in a day — is why the same material gets a different ceiling in a face cream than in a body wash.

So a single Standard record carries: the material, its CAS, the Standard type, the maximum concentration per category, and the amendment history. Multiply that by the 263 active Standards in the current 51st Amendment, and you can see why this is not a spreadsheet you eyeball once a year.

3. Is IFRA mandatory? IFRA Standards vs. the EU Cosmetics Regulation

This is the question that confuses the entire market, so let us be blunt about it. There are two separate systems, and they are not the same thing:

• IFRA Standards = voluntary industry self-regulation. Legally binding only on IFRA members through the Code of Practice; de-facto mandatory for everyone else because the supply chain demands certificates.
• Regulation (EC) No 1223/2009 (the EU Cosmetics Regulation) = the actual law. Binding on every cosmetic product placed on the EU market, full stop. Its Annex II lists prohibited substances; its Annex III lists restricted ones and the allergens you must declare on the label.

IFRA does not replace the Regulation, and the two can disagree. The cleanest example: Lilial (Butylphenyl Methylpropional, BMHCA, CAS 80-54-6) was classified CMR and banned outright in EU cosmetics via Annex II from 1 March 2022 — a legal ban that IFRA, as an industry body, does not itself impose worldwide. Being "IFRA-compliant" never exempts you from EU law, and clearing EU law does not mean your buyer's IFRA certificate is in order. You have to satisfy both.

One more practical point most teams get wrong: IFRA does not issue the Certificate of Conformity — the fragrance supplier (the company that formulated the compound) does. The finished-product maker consumes it. On that certificate, a category marked "Not Approved" means the compound cannot be used in that product type at all; a category with no limit means there is no restriction at the declared use level. And the certificate is not a substitute for your Cosmetic Product Safety Report (CPSR) or Product Information File (PIF) — it is one input to them.

4. Why it matters for cosmetics (even though it is "just" a fragrance standard)

Fair question: IFRA regulates fragrance materials, not cosmetics. Why should a Regulatory Affairs lead at a cosmetics company care? Four reasons.

4.1. Fragrance is in almost everything you make

Perfume, yes — but also creams, shampoos, deodorants, makeup, wipes. The vast majority of cosmetic products contain a fragrance compound, and that compound is governed by IFRA Standards. A change to a single restricted material can ripple across half your portfolio at once.

4.2. IFRA runs ahead of EU law — it is an early-warning signal

This is the one most people miss. IFRA, RIFM and the SCCS read the same toxicological science. When IFRA tightens or bans a material, the regulator is often looking at the same data. The clearest recent example: Regulation (EU) 2023/1545 extended the list of fragrance allergens that must be individually declared on cosmetic labels under Annex III of Regulation 1223/2009 — from 24 to around 80 substances (56 new ones), based on SCCS Opinion SCCS/1459/11. It was published 27 July 2023 and entered into force 16 August 2023. The new declarables include everyday materials like vanillin, menthol, camphor and linalyl acetate, plus natural essential oils such as lavender, rose and bergamot, with labelling triggered above 0.001% in leave-on and 0.01% in rinse-off products. Many were already on IFRA's radar. Watching IFRA buys you months to years of lead time before a restriction hardens into EU law.

4.3. Some materials are already out of the game — know which, and under which instrument

A handful of fragrance materials are no longer usable, and confusing who banned them is a classic compliance mistake. These are the ones to know:

Notice the split: the first three rows are EU law, the last two are IFRA. That is the whole point of Section 3 in one table — you have to track both lists, because neither one is a superset of the other.

4.4. Non-compliance is a commercial death sentence, not a fine

Because IFRA enforcement is contractual, the failure mode is brutal and fast: a buyer requests an updated Certificate of Conformity, your fragrance no longer qualifies under the current Amendment, and the order stops. No grace period, no negotiation. The cost of missing an IFRA change is not a penalty — it is lost shelf space.

5. The Amendments on the table right now: 51st and 52nd

IFRA does not update on a fixed annual cadence. It ships numbered Amendments, and right now two of them matter.

The 51st Amendment (in force). Notified on 30 June 2023, it brought 59 new and revised Standards, taking the active total to 263. The breakdown: 32 restrictions driven by skin sensitisation and systemic toxicity, 11 based on QRA2 dermal sensitisation, 2 on systemic toxicity / Threshold of Toxicological Concern, 1 on de-pigmenting potential, and a single new prohibition — 3-Acetyl-2,5-dimethylfuran, over a genotoxicity concern. Compliance for fragrance mixtures ran on the usual two clocks: new creations by 30 March 2024, existing creations by 30 October 2025.

The 52nd Amendment (in public consultation). The consultation opened 12 December 2025 and closes 12 June 2026, with formal notification expected by the end of 2026. As proposed, it adds 51 new Restriction Standards, revises 18, removes 8, and consolidates the furocoumarin policy into a single revised Standard — furocoumarins (found in natural citrus and other extracts) are the headline theme. These are consultation figures and may shift before notification, but the direction of travel is set. If you formulate with naturals, this one is going to land on you.

6. The monitoring problem

IFRA publishes the Standards Overview as an Excel file on its website. It is public and free. The operational problem is everything around it:

• There is no push notification. A new Amendment ships, the file changes, and nothing lands in your inbox. You have to go and check.
• Amendments are irregular but consequential. They do not follow a fixed annual cadence, and a single one can touch dozens of materials.
• The diff is the hard part. Knowing that the file changed is useless on its own. You need to know which of the 263 Standards moved, in which direction, and whether any of them touches a material in your formulations.

Done by hand, this means someone re-downloads a spreadsheet on a schedule, eyeballs hundreds of rows against the previous version, and cross-references each restricted material against your ingredient list. What gets done by eyeball gets missed.

7. How BD-API handles it

Here is how we automate this, without rehashing the technical detail already on our Regulatory Watch page:

• Scheduled monitoring: BD-API checks the IFRA source every Monday at 07:00 UTC. It does not blindly re-download — it reads the file's ETag and Last-Modified first, and only pulls the full Excel when something actually changed.
• Snapshot + diff: we keep the previous version of all 263 Standards and compute the exact delta. Only real changes — a new restriction, a tightened limit, a removed Standard — generate an event. A bootstrap guard makes sure the first load seeds the baseline silently instead of firing 263 false alarms.
• Smart cross-referencing: every changed material is matched against the CosIng INCI inventory tied to your portfolio. If a moved Standard touches an ingredient you use, criticality is bumped automatically.
• AI enrichment: a source-specific analyser extracts the substance, CAS number, affected categories, new limits and proposed action — structured JSON, ready for your pipeline.
• Signed delivery: email plus webhook with HMAC-SHA256 signature. Your system gets the change ready to act on.
• Granular subscription: take IFRA on its own, or combine it with SCCS, DG SANTE, Safety Gate and EUR-Lex. No service restarts required.

The philosophy is the same as with every source we cover: BD-API delivers the structured data, your regulatory team decides what to do with it. We do not replace human judgement — we hand back the hours you currently spend re-reading a spreadsheet.

8. Frequently asked questions

Are IFRA Standards legally mandatory? Not in themselves. They are binding on IFRA members through the Code of Practice and de-facto mandatory for everyone else, because retailers and brand owners require an IFRA Certificate of Conformity to buy. EU law lives in Regulation 1223/2009, separately.

What is the difference between IFRA Standards and the EU Cosmetics Regulation? IFRA is voluntary industry self-regulation for fragrance ingredients; Regulation 1223/2009 is binding EU law for the whole cosmetic product. They overlap but can diverge — you must comply with both.

What is the current IFRA Amendment? The 51st (notified June 2023, 263 active Standards). The 52nd is in public consultation until 12 June 2026.

Who issues an IFRA Certificate of Conformity? The fragrance supplier that formulated the compound — not IFRA, and not the finished-product maker, who simply receives it.

Which fragrance ingredients are banned in the EU? Notable examples include Lilial/BMHCA, Lyral/HICC, and Atranol/Chloroatranol (the oakmoss and treemoss components), among others.

How many fragrance allergens must be labelled in the EU, and by when? Around 80 (up from 24) under Regulation 2023/1545. Non-compliant products may be placed on the market until 31 July 2026 and sold through until 31 July 2028.

Does an IFRA certificate replace a safety assessment? No. It is one input to your Cosmetic Product Safety Report (CPSR) and Product Information File (PIF), not a replacement for them.

9. Bottom line

IFRA is the source most cosmetics teams underrate because it is "not law." That is exactly why it is worth watching: it is the leading indicator of where fragrance regulation is heading, it gates your supply chain through certificates, and it runs on a calendar of overlapping deadlines — the 51st's October 2025 cutoff, the 52nd's June 2026 consultation, the EU allergen deadlines of 2026 and 2028 — that no one is going to remind you about.

The question is not whether IFRA Standards matter to a cosmetics company. It is how to track 263 Standards across two moving Amendments, cross-referenced against your own formulations, without turning it into someone's part-time job.