When a cosmetic manufacturer will not share the formula: disclosure, access, and ownership

Identify which problem “we cannot share the formula” describes

A manufacturer’s refusal can mean several things: the requested file contains proprietary know-how; the contact lacks authority to release it; a raw-material supplier owns some information; or the parties never agreed on a disclosure route. Those situations require different next steps. Before escalating, ask what is restricted, who controls it, and whether a narrower authorized recipient can receive the required information.

This guide proposes an operating method for coordinating that discussion. It is not an interpretation of your particular supply agreement. Keep the manufacturer’s exact explanation alongside the request, then involve the person who can resolve the relevant issue: the contract owner, regulatory lead, responsible person, or qualified assessor. A confidentiality question should not be silently converted into a conclusion that safety evidence does not exist.

Separate ownership, delivery, disclosure, and adequacy

WIPO distinguishes assignment of intellectual property from licensing: assignment transfers ownership, while licensing permits use under agreed conditions. Its guidance also treats confidentiality agreements as controls on disclosure and permitted use. These are different mechanisms. Technology transfer agreements.

For a product evidence request, ask four practical questions independently. Who owns the relevant information? What records must the supplier deliver or make available? Who may receive and use each record? Does the information satisfy the reviewer’s actual need? Avoid a single “we own it” answer that leaves the operational steps unspecified.

For example, a hypothetical brand could be allowed to sell a product while the manufacturer retains the formula. Another brand could own a developed formula but still need to obtain third-party ingredient data. A third could have inspection access without permission to download or forward a report. Treat these as possibilities to check against the signed documents, not assumptions about how a particular manufacturer operates.

For the contract discussion, distinguish the formula from the process instructions, ingredient supplier information, laboratory reports, and manufacturing records. Ask counsel to identify the relevant clauses and any conditions or exclusions for each. An answer about one document should not be copied across the entire product file.

Check what the confidentiality agreement actually enables

Do not rely on the existence of an NDA as evidence that a file will be delivered. Read the delivery obligations separately. WIPO’s explanation of licensing makes the ownership/use distinction clear; your parties still need a workable agreement about the information exchanged for the intended activity. IP assignment and licensing.

As a recommended preparation step, ask the contract owner to confirm the permitted recipients by name or role. An external safety assessor, a responsible person, a contract laboratory, and a retailer reviewer can each be a different recipient. “Our consultants may see it” may also need clarification when a consulting firm changes personnel or uses subcontractors.

Capture the permitted purpose, handling conditions, retention arrangements, and process for onward disclosure. Ask what happens if a regulator requests information, if the assessor leaves, or if the supplier relationship ends. These questions belong in the agreement discussion before documents move. An operations tracker can record the answer; it cannot create a missing right.

Understand the EU boundary before proposing assessor-only access

EU cosmetic safety-report requirements include qualitative and quantitative composition, with a specific treatment for perfume and aromatic compositions. Article 11 separately requires the responsible person to keep the product information file accessible to the competent authority. EU Cosmetics Regulation, Annex I and Article 11.

Do not generalize the fragrance provision into a blanket exception for the whole finished-product formula. Commission guidance says relevant regulated-substance information in fragrance compounds should reach the responsible person and assessor, and allows supplier safety assessment information for confidential fragrance compositions. European Commission safety-report guidance.

An assessor-only route should therefore be treated as a proposal for the parties to evaluate, not a standard legal workaround. Ask the responsible person and assessor which records they need to receive, reference, retain, and make accessible, then have the contractual route checked against those obligations. The brand’s preference not to hold a sensitive file does not decide what another accountable party must be able to obtain.

Keep jurisdiction labels explicit. These EU concepts should not be copied into a U.S. request as though the United States uses the same safety-report structure. For the U.S. recordkeeping discussion, start with our separate guide to MoCRA safety substantiation records and the needs of the appropriately qualified reviewer.

Treat fragrance evidence as a scoped part of the review

A fragrance supplier may provide several different records: an ingredient or allergen declaration, a statement for a specified use, or confidential information for a reviewer. Ask which question each document answers. A familiar supplier name or fragrance trade name does not establish that a record covers the same compound revision and use level in your current product.

IFRA states that its Standards conformity certificates are created by fragrance-mixture suppliers and do not replace a safety assessment. Use such a certificate within its stated scope rather than treating it as the final assessment of the finished cosmetic. Certification of IFRA Standards.

As an operational practice, connect the fragrance compound code and revision to the finished formula revision. Record the recipient and date for any confidential disclosure. Ask the reviewer to confirm whether sufficient information has arrived and what remains outstanding, without asking the reviewer to reveal information that your agreement does not permit you to receive.

Write an access plan before requesting a confidential upload

Prepare a short access plan the relevant parties can review. This is a proposed coordination document, not a substitute for legal terms or the scientific assessment. It should make clear who sends what to whom and how an unresolved access issue will be escalated.

Keep content status and access status separate. “The assessor received the data” does not mean “the assessment is complete.” “The brand cannot view the attachment” does not mean “nobody can retrieve it.” Use those statements precisely so commercial teams can understand the remaining dependency without being shown restricted content.

• Identify the product, formula revision, and specific confidential record or information requested.
• Name the disclosing organization and the authorized recipient or recipients.
• State the review purpose and the applicable agreement or written authorization.
• Record what the brand may receive: the underlying file, a permitted status confirmation, or another agreed output.
• Confirm the retrieval route for the responsible person, competent authority, or other legally entitled recipient as applicable.
• Define who confirms receipt, who assesses adequacy, and what triggers a new disclosure.

A hypothetical disclosure request that protects the distinction

Imagine a brand preparing an EU launch for lotion formula L-03. The manufacturer says it will not email the quantitative formula to the brand’s commercial team. Instead of asking for the same attachment again, the brand asks its responsible person and assessor to define the information and access they require for the review.

A useful proposed message is: “For lotion L-03, please identify which requested composition records are restricted and who can authorize disclosure. Our responsible person and named assessor will confirm their information requirements. We would like to agree a confidential delivery route that preserves their applicable access and record obligations. Please also confirm what receipt or status information may be shared with our operations team.”

The next step is not to declare the case complete when a confidential email is sent. Confirm the correct recipients received the intended revision, record any remaining question, and wait for the relevant review decision. If the manufacturer’s proposal prevents required access, escalate the proposed arrangement rather than concealing the conflict behind an NDA label.

Revisit the arrangement when the product or relationship changes

Include confidential records in change control. A new formula revision, fragrance compound, supplier, assessor, or responsible person may affect either the evidence needed or the permitted disclosure route. The original agreement and receipt confirmation remain useful history, but check whether they cover the new situation.

Before a supplier transition, ask the contract owner what can be transferred, what can be licensed, what must be recreated, and which third parties must authorize access. Keep this separate from a technical assessment of whether another manufacturer can reproduce the product. Access to a formula file is not the same task as completing a manufacturing transfer.

For the day-to-day follow-up mechanics, our manufacturer document-request guide explains how to preserve questions, corrections, and review decisions. BeautyAssured helps teams coordinate that evidence work. Discuss a pilot if a current request depends on records held behind unclear disclosure arrangements.