Cosmetics Regulatory Compliance in Africa in 2026

In November 2025, at the 66th National Council on Health in Calabar, Nigeria approved its first ever National Policy on Cosmetics Safety and Health, a framework the Federal Ministry of Health had attempted and shelved for nearly two decades. NAFDAC's Deputy Director for Cosmetics and Household Products, Princewill Nsofor, told the launch audience that cosmetic products are "more dangerous, if not properly handled, than pharmaceutical products we put so much energy into regulating." Enforcement started within weeks, targeting a market the government now values at more than 7.8 billion US dollars.

That single policy launch captures where cosmetics regulation across Africa stood entering 2026: fragmented, unevenly enforced and, in Nigeria's case, finally catching up to the size of the market it governs. A brand selling an identical formula in Lagos, Johannesburg, Nairobi and Cairo answers to four different legal regimes, four different registration systems and four different enforcement postures, layered on top of the Minamata Convention's global mercury rules that every one of these jurisdictions has signed.

Which regulators actually govern cosmetics compliance across Africa?

There is no continental cosmetics authority, so compliance runs entirely through national agencies with different legal bases. Nigeria concentrates authority in the National Agency for Food and Drug Administration and Control (NAFDAC) under the NAFDAC Act CAP N1 LFN 2004, which now works alongside the Federal Competition and Consumer Protection Commission and a new National Cosmetics Safety Management Technical Working Group created by the 2025 policy. South Africa relies on the National Department of Health under the Foodstuffs, Cosmetics and Disinfectants Act 54 of 1972, with the National Regulator for Compulsory Specifications (NRCS) playing only a narrow role limited to chemical disinfectants, not general cosmetics. Kenya works through the Kenya Bureau of Standards (KEBS) and East African Community harmonized standards. Egypt channels cosmetics through the Egyptian Drug Authority's Central Administration for Pharmaceutical Preparations. None of these four systems share a registration database, a common ingredient list or a synchronized timeline, so a compliance calendar built for one market rarely transfers cleanly to the next.

Is Nigeria's new cosmetics policy a real change or another shelved document?

NAFDAC says enforcement is already underway, and the structure behind the policy suggests it is more than symbolic. The National Policy on Cosmetics Safety and Health, running from 2026 to 2030 across all 36 states and the Federal Capital Territory, builds three concrete mechanisms: a unified registration and oversight system, a national early warning system for detecting harmful products, and a value chain program aligned with African Continental Free Trade Area rules. Every cosmetic product, imported or locally made, still requires registration through the NAFDAC Automated Product Administration and Monitoring System (NAPAMS) portal before it can be manufactured, imported, advertised or sold, with a Certificate of Product Registration valid for up to five years and a published processing timeline of 120 working days for imported products. Mercury, corticosteroids in body creams and hydroquinone above 2 percent remain banned under the 2019 Cosmetic Products (Prohibition of Bleaching Agents) Regulations, the rule the new policy is designed to actually enforce rather than replace. For companies exporting into Nigeria, the practical shift is less about new paperwork and more about the certainty that NAFDAC's warehouse raids and NAPAMS queries will now happen inside a coordinated national system instead of an ad hoc one.

Why is South Africa, the continent's largest cosmetics market, still running on a 1972 law?

Because the modernization attempt has been stuck in draft form since before most current compliance officers started their careers. The Foodstuffs, Cosmetics and Disinfectants Act 54 of 1972 remains the only binding cosmetics legislation, and the National Department of Health's proposed Regulations Relating to the Labelling, Advertising and Composition of Cosmetics, first published for comment in August 2016 and revised in December 2017 under Government Notice 1469, is still awaiting promulgation in 2026. In the meantime, the industry operates on self-regulation guided by the Cosmetic, Toiletry and Fragrance Association's compendium of codes of practice. The NRCS compulsory specification VC 8054 covers chemical disinfectants only, so general cosmetics fall outside compulsory pre-market certification, and even SANS 1557, the sunscreen efficacy and labelling standard, remains voluntary. South Africa was the first African jurisdiction to ban hydroquinone as a skin lightener, back in 1990, which shows the regulatory intent has long existed. What has not materialized is the modern statutory framework to match a market this size, and a company assuming South Africa runs a EU style pre-market regime because of its scale would be wrong.

How are Kenya and the East African Community harmonizing cosmetics standards in 2026?

Through a wave of new technical standards rather than a single new law. In January 2026, the Kenya Bureau of Standards adopted 11 new harmonized East African Standards covering products from aftershave lotions and baby oils to deodorants, lip balms, lipsticks and shea butter, each specifying raw material requirements, heavy metal thresholds and microbiological limits under the EAS 377 series. Kenya's own KS 2937:2021 sets the underlying heavy metal ceiling still referenced by these standards: lead at a maximum of 20 milligrams per kilogram, arsenic and mercury each at 2 milligrams per kilogram, with the combined total of the three not exceeding 20 milligrams per kilogram, tested to KS EAS 847-16. The colorant, preservative and UV filter lists under EAS 377 Part 3 explicitly track Annexes IV, V and VI of EU Regulation (EC) No 1223/2009, meaning a formulation cleared for the EU market has a real head start on East African compliance. For manufacturers, the practical effect is that a product certified only to Kenyan national standards can now fail regional scrutiny in Tanzania or Uganda unless it also meets the harmonized EAS specification, which is precisely the kind of standard-by-standard tracking that Obsidian's regulatory monitoring is built to surface as each new EAS part is gazetted.

What does Egypt's new ISO 22716 manufacturing rule mean for producers?

It converts an international quality benchmark into a binding license condition. Egypt already runs cosmetics market access through the Egyptian Drug Authority's EgyCosm notification system rather than a full registration, issuing a notification number within 10 working days on the standard track or 3 working days on the fast track, valid for 10 years. What changed in 2026 is upstream of that: under Ministerial Decision No. 114 of 2026, signed by Minister of Industry Khaled Hashem, cosmetics manufacturing facilities must now hold an industrial license that references ISO 22716, the international Good Manufacturing Practice standard for cosmetics, with a one year grace period running from 16 April 2026 to 16 April 2027. The Industrial Development Authority is providing technical support during the transition, but any facility that has not closed the gap by the deadline risks losing its manufacturing license regardless of whether its individual products still hold valid EDA notifications. Producers exporting from Egypt should treat the notification and the manufacturing license as two separate compliance tracks that now both carry real deadlines.

Where does mercury and skin lightening enforcement stand after the Minamata Convention's sixth meeting?

Further tightened on paper, still weak on the ground. The Conference of the Parties to the Minamata Convention met in Geneva from 3 to 7 November 2025 and formally adopted its sixth meeting decisions on 24 November 2025, including Decision MC-6/4 on advancing work related to mercury-added cosmetics. The decision acknowledges that cosmetics banned under the Convention are still finding their way into global commerce, encourages parties without national legislation to inform the secretariat, and directs the secretariat to work with INTERPOL and the World Customs Organization on the illegal trade dimension. At least ten African countries, including South Africa, Kenya, Ghana, Nigeria, Rwanda, Uganda and Tanzania, already restrict mercury or hydroquinone in cosmetics, yet studies cited by Nigeria's own Ministry of Health continue to find both substances in bestselling skin lightening products across the region. The gap is not the law, it is the customs checkpoint and the informal market, which is exactly why Obsidian's AI companion is built as a regulatory companion that can trace a single Minamata Convention decision through to each signatory country's domestic implementing notice, rather than treating a Geneva outcome as automatically enforced everywhere at once.

What should compliance teams do next?

Build a separate calendar entry for each jurisdiction rather than assuming one African market's rulebook extends to the next. The dates that matter in the second half of 2026 are concrete: Egypt's ISO 22716 manufacturing grace period closing 16 April 2027, the ongoing gap between South Africa's decade old draft cosmetics regulations and its 1972 statute, and the steady stream of new EAS 377 parts KEBS is gazetting for East African trade. None of these sit in one place. They are scattered across Nigerian federal gazettes, South African government notices, Kenyan standards bulletins and Egyptian ministerial decisions, in different languages and formats, updated on no common schedule. Obsidian tracks tier-0 official sources per jurisdiction and turns that scattered patchwork into a single monitored timeline, with alerts the moment a new NAFDAC directive, EDA decision or EAS standard is gazetted, and an MCP connector that lets a compliance team's existing AI assistant query that timeline directly. For teams weighing the cost of a missed registration deadline against the cost of continuous jurisdiction level monitoring, the pricing page lays out what that coverage actually costs.