Most beauty and personal care brands are tracking one part of this. Right now, at least six regulatory shifts are moving through UK, EU, US and Canadian rulebooks on overlapping timelines, and the ones that do the most damage are the ones nobody assigned to a single owner.
EU Omnibus VIII folds several cosmetic and chemical safety measures into one legislative package. Brands that still treat “the EU regulation” as a single document are already behind: it is now several, moving together.
The EU fragrance allergen list has expanded from 24 to more than 80 named allergens. Every fragrance-containing formulation needs re-screening against a list more than three times its previous size, and the labelling thresholds move with it.
The EU INCI glossary has been updated. That sounds administrative until a brand discovers an ingredient it has shipped for years under one INCI name now needs re-classifying under another.
US MoCRA enforcement is tightening. Facility registration, product listing and adverse event reporting are no longer a light-touch regime. Enforcement activity is the signal that the FDA intends to use the powers Congress gave it.
PFAS restrictions are landing on both sides of the Atlantic. Formulations that never intentionally contained PFAS are being caught by trace-level detection in packaging and raw materials, not just active ingredients.
The EU’s microplastics phase-out reaches further into rinse-off and leave-on formulations every year it runs, and Canada’s SOR/2024-63 moves in the same direction rather than standing apart from it.
No single one of these six is a five-alarm event for a well-run compliance function. Converging inside the same window, they are the reason “we will deal with it when the letter arrives” stops being a viable strategy.
Why mid-market brands are the most exposed
Large, multinational brands generally have regulatory affairs teams whose entire job is horizon scanning across exactly this kind of change. Very small, single-SKU brands often move fast enough, or stay narrow enough, to reformulate quickly when something shifts.
The brands genuinely exposed sit in between: natural and clean beauty formulators with broad, ingredient-led ranges, and textured haircare brands whose formulations lean on botanical actives and fragrance systems that are disproportionately represented on the expanded allergen list. These are brands with real product breadth, real retail listings on the line, and no dedicated regulatory function watching six rulebooks at once.
What to do about it now, not when the letter arrives
Three things are worth doing this quarter, regardless of which of the six shifts touches your specific formulations first.
First, get an actual inventory of exposure: which SKUs contain fragrance components on the expanded allergen list, which raw materials or packaging have any PFAS exposure pathway, and which claims rest on an INCI classification that has since moved. Most brands do not have this list written down anywhere.
Second, treat horizon scanning as a standing function, not a project. Regulatory change in this space is not going to slow down after 2026: this is a new baseline pace, not a one-off cliff edge.
Third, get evidence-backed ahead of the deadline rather than reactive to it. A reformulation or claims change made under enforcement pressure is more expensive and more disruptive than the same change made on your own timeline, with a weight-of-evidence dossier already in hand.
This is the exact gap HexisLab’s Regulatory Shield service is built to close: horizon scanning, phenotype-relevant data, and weight-of-evidence dossiers that hold up under UK and EU scrutiny, mapped against your actual ingredient list rather than a generic checklist.
If you want a clear-eyed read on where your own formulations sit against these six shifts, a free 30 minute R&D Diagnostic is the fastest way to find out. No pitch, just a working map of your actual exposure.
Book a free R&D Diagnostic: hexislab.com/rd-diagnostic
If you are tracking a seventh shift we have not covered here, or handling one of these six differently, say so in the comments or send a DM. This page exists to help the industry get ahead of this together, not just to describe the problem.