Is Imported Henna Putting European Cosmetic Brands at Risk? What the 2026 EU Rules Really Mean
No, pure henna powder isn’t banned or newly restricted under the EU’s 2026 cosmetic rules. What changed is who carries the blame when something goes wrong. Regulation (EU) 2026/78, in force since May 1, tightened the EU’s list of banned carcinogenic and reproductive-toxic substances, a list built to catch synthetic hair-dye chemicals like PPD, not the Lawsonia inermis plant. The real exposure sits in the EU’s Responsible Person rule: when henna crosses the border from India, legal liability for contamination or an undeclared allergen lands on the EU brand that imported it, not the mill that ground it.
What Actually Changed in EU Cosmetics Law This Year
Cosmetics rules in the EU didn’t sit still in 2026. Three separate changes landed within a few months of each other, and none of them mention henna by name. That’s exactly why so much of the trade, including plenty of established henna manufacturers, missed them.
Regulation (EU) 2026/78 came first, published on 13 January and applying from 1 May. It updated Annexes II through V of the EU Cosmetics Regulation, adding roughly fifteen newly classified CMR (carcinogenic, mutagenic, or reproductive-toxic) substances to the outright ban list. None of them are Lawsonia inermis or its extracts. Most are industrial chemicals with no business near a henna cone. But the update signals where enforcement attention is heading. Hair-dye intermediates are already under review for the next round, known informally as Omnibus VIII, expected later this year.
Second, the fragrance allergen labelling deadline hit on 31 July. Products placed on the EU market now have to declare any of eighty individual allergens once concentration crosses a fraction of a percent, a threshold that catches natural extracts as easily as synthetic fragrance.
Third, and more narrowly, France banned PFAS in cosmetics from 1 January, ahead of any EU-wide rule. It’s a national law, not a bloc-wide one, but it shows individual member states are moving faster than Brussels on ingredient scrutiny. That matters if your henna sells into more than one EU country at once.
Where Henna Itself Stands, and Where the Real Risk Hides
Here’s a fact most compliance guides skip, and one most reputable henna manufacturers already know: the EU’s own scientific safety committee already looked at henna and cleared it. The Scientific Committee on Consumer Safety concluded that henna powder, mixed and applied as a hair dye, is safe for consumer use. That finding has stood for years, and nothing in the 2026 changes disturbs it.
What the committee never cleared is henna paste applied directly to skin for temporary tattoos, the body-art use rather than the hair-dye use. That gap is where black henna lives. Real henna stains orange-red and fades over one to three weeks. Black henna is usually henna cut with high, unregulated concentrations of para-phenylenediamine to force a fast, near-black stain. PPD is a well-documented skin sensitizer, and EU law already requires hair-dye labels to carry a specific black-henna allergy warning.
The scale of the contamination problem is bigger than most buyers assume. A 2026 metals-screening study that tested over a hundred cosmetic products across categories found chromium levels above 11,000 milligrams per kilogram in the worst black henna samples, among the highest readings of any product type tested, pigment-heavy makeup included. Older regional surveys found similar patterns with lead, cadmium, and nickel in henna that had been “elaborated” with additives to darken or speed up the stain. Pure, unadulterated henna consistently tests far cleaner than blended or pre-mixed product.
None of this is slowing demand. Ammonia-free, plant-based hair color keeps gaining share against oxidative dyes across European retail, which is exactly why this compliance gap matters commercially, not just legally.
Who’s Liable When Imported Henna Fails a Compliance Check
This is the question the title is really asking, and EU law answers it specifically. Every cosmetic product sold in the EU needs a designated Responsible Person: a company or individual based in the EU who accepts personal liability for that product meeting the Cosmetics Regulation before it reaches a shelf. Article 4 spells this out plainly and leaves little room for informal arrangements.
For a product manufactured outside the EU, the manufacturer can’t hold that role, since it isn’t established in the EU. By default, the importer becomes the Responsible Person unless someone formally assigns the role elsewhere, in writing. That importer keeps the Product Information File, files the CPNP notification, and is the first call any national market surveillance authority makes if a Safety Gate alert gets filed against the product. The EU’s broader General Product Safety Regulation layers similar traceability duties on top for any non-EU-made consumer good.
Translate that into henna terms: if a European hair-color brand sources raw material from henna manufacturers in India, packages it, and sells it under its own name, that brand is almost certainly its own Responsible Person by default. A supplier’s PPD-free certificate is useful evidence, but it doesn’t transfer legal responsibility. If a batch turns out to be adulterated, or the paperwork behind a “natural” claim doesn’t hold up, the recall notice and the fine land on the EU company’s desk, not on the manufacturer that shipped the sacks.
That’s the actual 2026 risk. It was always true under the 2009 regulation. It just matters more now that enforcement has visibly sharpened.
What Real Compliance Documentation Actually Looks Like
Good documentation is the entire difference between a brand that sails through a spot-check and one that doesn’t. A proper Certificate of Analysis for a henna batch should cover more ground than most suppliers volunteer.
| Document | What It Should Actually Show | Why It Matters in 2026 |
| Certificate of Analysis | Lawsone content percentage, plus lab-tested absence of PPD, PTD, and resorcinol | Confirms the batch is genuinely unadulterated, not just labeled that way |
| Heavy metal panel | Lead, cadmium, chromium, and nickel against recognized limits | Catches the exact contamination pattern seen in tainted black henna |
| Origin and traceability record | Batch number linked to harvest region, ideally GI-tagged Sojat origin | Traces a problem batch back to a specific cluster, not just a country |
| Manufacturing certifications | ISO, GMP, and HALAL where relevant to your buyers | Documents a quality system behind the batch, not just a claim on paper |
The GI-tagged origin isn’t a marketing flourish. It narrows a contamination question down to a specific cooperative and harvest cycle instead of an entire country, which is exactly the kind of traceability EU market surveillance authorities look for after a Safety Gate alert. Established henna powder manufacturers with export experience already generate this paperwork routinely, because buyers in the US, UK, and Gulf markets have demanded it for years. The EU is simply catching up to standards other markets already set.
A Fast Way to Vet Henna Manufacturers Before You Sign
Buying henna powder wholesale for private-label bottling and vetting new henna suppliers for an in-house hair-color line both come down to the same five questions:
- Can you send a batch-specific Certificate of Analysis before I commit to the order, not after?
- Does the heavy metal panel include chromium and lead specifically, not just a generic purity statement?
- Is lawsone content documented as a number, or just described as “high”?
- Can you trace this batch to a specific harvest region, or only to India broadly?
- Who is your existing EU Responsible Person, if you already export there?
A supplier that answers all five without hesitation has usually been doing this seriously for years. One that gets vague after question two is telling you something, even without saying it directly.
One more thing worth clearing up: henna doesn’t need a Digital Product Passport. Cosmetics aren’t in the EU’s first Ecodesign working plan, which runs through 2030 and currently prioritizes categories like electronics and textiles instead. That’s a real regulatory direction, just not an imminent deadline. Don’t let a supplier or a consultant use it to rush you into anything.
The brands that get burned aren’t the ones buying from disreputable henna manufacturers. They’re the ones buying from decent manufacturers without ever asking for the paperwork that proves it.
Frequently Asked Questions
Q. Is henna banned in the EU?
A. No. The EU’s Scientific Committee on Consumer Safety concluded years ago that henna used as a hair dye is safe, and the 2026 CMR updates don’t touch Lawsonia inermis. What gets flagged and pulled from shelves is almost always black henna, meaning henna cut with unregulated PPD for skin application, not something reputable henna manufacturers sell as pure powder.
Q. If my henna shipment fails an EU compliance check, am I liable or is my supplier in India?
A. Under the EU Cosmetics Regulation, liability defaults to the Responsible Person, usually the EU-based importer or brand, not the overseas manufacturer. A supplier’s own claims don’t transfer that responsibility. Only a written mandate assigning the role elsewhere does.
Q. What’s the real difference between “PPD-free” and actually compliant?
A. “PPD-free” describes one substance. Compliant documentation covers a full heavy metal panel, a documented lawsone percentage, and traceability back to a specific batch, because manufacturers can swap PPD for related compounds like PTD without changing the label claim.
Q. Will henna need a Digital Product Passport?
A. Not yet. Cosmetics aren’t part of the EU’s first Ecodesign working plan, which runs through 2030 and currently prioritizes electronics, textiles, and a handful of other categories. Treat the Digital Product Passport as a future direction, not a 2026 requirement.
Q. Does the 2026 CMR update change anything for pure henna powder?
A. Not directly. Regulation (EU) 2026/78 added roughly fifteen substances to the EU’s prohibited list, none of them henna-related. The substances under closer review for the next round are synthetic hair-dye intermediates, the additives that show up in adulterated henna, not pure henna.