Taiwan finished a three-year cosmetics phase-in on 1 July — a product without a completed compliance file can no longer legally be sold, with one narrow exemption left standing

What actually changed on 1 July

Taiwan's 2018 amendment to the Cosmetic Hygiene and Safety Management Act (化粧品衛生安全管理法) introduced two linked obligations for the industry: a Product Information File (PIF) for every cosmetic product, and Good Manufacturing Practice (GMP) certification, modelled on ISO 22716, for every manufacturing site. Rather than apply both at once, Taiwan's Ministry of Health and Welfare and its Food and Drug Administration (TFDA) phased them in by product category over three years. Phase 1, from 1 July 2024, covered manufacturing sites for sunscreens, hair dyes, perming products, antiperspirants and deodorants, and home-use tooth-whitening products containing peroxide. Phase 2, from 1 July 2025, extended the requirement to baby and children's cosmetics, lip products, eye products, and non-medicated toothpaste and mouthwash. Phase 3, from 1 July 2026, brings in every remaining general cosmetics manufacturing site in Taiwan — with one exemption: solid handmade soap produced by manufacturers who are themselves exempt from Taiwan's factory-registration requirement. A commercially registered soap factory does not qualify for that carve-out; only genuinely small-scale, registration-exempt handmade-soap makers do.

The long tail lands last

Taiwanese wire and press reporting puts the scale of Phase 3 at nearly 1,000 additional cosmetics manufacturing sites brought under mandatory GMP as of 1 July 2026 — on top of the sites already captured in Phases 1 and 2. That is the structural detail the phasing obscures: the categories regulators tackled first (sunscreen, hair dye, children's and eye products) are the ones brands already treat as higher-risk and higher-scrutiny, with safety-assessment habits already in place. What arrives now is the opposite: ordinary skincare, body care, shampoo and everyday makeup — categories a brand may never have built a formal, signed safety assessment for, because until this phase, Taiwanese law never required one.

The real subject: a Product Information File is now an access credential, not an audit trail

A Taiwanese PIF is a structured, per-SKU dataset: product identification, the full ingredient list with concentrations, a description of the manufacturing process, toxicological data on the relevant ingredients, stability test reports, and a comprehensive safety assessment that a qualified safety assessor has to sign. Framed as paperwork, that sounds like documentation a brand assembles once a product exists. Framed correctly, it is the reverse: from 1 July 2026, that dataset has to be complete and current before a covered general cosmetic can be marketed, sold, or provided to a consumer at all. Local Taiwanese coverage put it more bluntly than the international compliance trade press: a cosmetic without a completed file is a product without an "ID card," and an ID-less product cannot be sold, full stop. For a brand that spent 2024 and 2025 building SKU-level compliance data for sunscreens and lip products, 1 July 2026 is the deadline where that same discipline has to reach the categories that were never asked for it before.

Why it matters for brands

This reaches any brand that manufactures cosmetics in Taiwan or sources general cosmetics — skincare, body care, shampoo, everyday makeup — from a Taiwanese contract manufacturer, a common OEM/ODM sourcing model for global retail and beauty brands. The obligation attaches to the manufacturing site as much as to the product: a brand's Taiwanese supplier now needs GMP certification for that site and a complete, signed PIF for every SKU made there, or the product cannot legally be sold. Brands that treated their Phase 1 and Phase 2 categories as the compliance-heavy ones risk assuming their broader catalogue is simpler by comparison — when in fact those "simple" general-cosmetics SKUs are exactly the ones least likely to already have a formal safety assessment on file, because until 1 July 2026, Taiwanese law never asked for one. The broader pattern is worth watching beyond Taiwan: a phased rollout that starts with visibly higher-risk categories and finishes with everything else tends to leave the largest compliance-data gap in the categories a brand was least worried about.

Two ways to read 1 July