Cosmetics Regulatory Compliance in the Middle East: SFDA, MOIAT, MoPH

On September 7, 2025, the Saudi Food and Drug Authority added 21 new substances, including 4-methylimidazole and dibutyltin oxide, to its prohibited cosmetic ingredients list. Five weeks earlier, on August 14, 2025, it had already tightened the concentration limits on Vitamin A derivatives, Retinol, Retinyl Acetate, and Retinyl Palmitate, banning production and import of non-compliant products from January 1, 2026 and giving the market until January 1, 2028 to clear existing stock. Neither change came with a transition grace period long enough to comfortably reformulate a full SKU range, and both landed on a market that in Israel had, in the same window, abolished its entire product-licensing system in favor of a notification model built on an Israel-based Responsible Person.

For cosmetics manufacturers, importers, and responsible persons selling into Saudi Arabia, the UAE, Qatar, and Israel, the defining feature of Middle East compliance is that four separate regulatory architectures, harmonized on paper through Gulf Standardization Organization technical regulations, still require a distinct notification, a distinct local agent, and a distinct enforcement rhythm in every single market. A single GSO-aligned formulation does not equal market access; it only earns the right to start the local paperwork.

Which regulators actually drive cosmetics enforcement in the Middle East?

Four authorities set the pace, and none of them defer fully to the others. In Saudi Arabia, the SFDA's Cosmetic Products Department runs licensing, product notification, and post-market surveillance through the unified GHAD electronic system, which absorbed the older eCosma platform for cosmetic-specific submissions in March 2023. In the UAE, the Ministry of Industry and Advanced Technology issues the Emirates Conformity Assessment Scheme certificate of conformity required for customs clearance nationwide, while Dubai layers its own Montaji product registration on top through Dubai Municipality, and the Ministry of Health and Prevention takes over entirely once a product carries a therapeutic claim, reclassifying it as a medicated cosmetic. Qatar's Ministry of Public Health registers cosmetics through its Pharmacy e-System with a typical 40 to 50 working day cycle. Israel's Ministry of Health, having discontinued its Cosmetic Product License track on December 31, 2024, now runs a pure notification system under the Pharmacists Ordinance, with a mandatory Israel-based Responsible Person standing behind every Product Information File.

All four anchor their substantive safety requirements to GSO 1943:2024, the Gulf Technical Regulation on cosmetic product safety, itself built on the structure of the EU Cosmetics Regulation (EC) No 1223/2009. But GSO 1943 explicitly permits national deviations, Saudi Arabia maintains its own prohibited and restricted ingredient lists on the SFDA website rather than relying solely on the GSO annexes, so a formulation cleared in Doha is not automatically clearable in Riyadh.

What changed in Saudi Arabia's cosmetics ingredient rules in 2025 and 2026?

Two separate SFDA circulars reshaped the compliant ingredient list within a single quarter. The August 14, 2025 circular set new Retinol Equivalent concentration limits, 0.05 percent for Retinol itself and 0.3 percent for Retinyl Acetate and Retinyl Palmitate, in both leave-on and rinse-off products, paired with a mandatory label statement warning consumers to consider their daily Vitamin A intake. Manufacturing and import of non-compliant formulations became prohibited on January 1, 2026, though products already in market channels can continue to sell through January 1, 2028. The September 7, 2025 circular then added 21 wholly new substances to the prohibited list, spanning organotin compounds and nitrosamine-related chemicals, with no comparable grace period for products still in the supply chain.

The GSO 1943:2024 revision itself made a structural change worth tracking independently of any single ingredient decision: it relocated the lists of prohibited substances, restricted substances, preservatives, colorants, and UV filters out of the regulation's fixed text and onto the SFDA's own website. That means future ingredient changes no longer require a full technical regulation amendment cycle through the GSO Ministerial Committee, they can now be issued as standalone SFDA circulars, exactly the mechanism used for both the Vitamin A and the 21-ingredient updates. Reformulation calendars built around periodic GSO revisions will now miss updates that arrive as unscheduled SFDA circulars instead.

How does the UAE's cosmetics pathway split between MOIAT, Dubai Municipality, and MOHAP?

A single UAE launch can require navigating three separate authorities depending on where the product is sold and what it claims to do. Every cosmetic entering the country needs an ECAS certificate of conformity from the Ministry of Industry and Advanced Technology, valid for one year and renewable annually, without which customs will not clear the shipment. For products specifically destined for the Dubai market, Dubai Municipality's Technical Guidelines for Cosmetics and Personal Care Products require a separate registration through the Montaji system before the product can be manufactured, imported, or sold in the emirate, standard processing runs four to six weeks. The moment a label makes a therapeutic claim, treats eczema, clinically proven to reduce hair loss, relieves skin inflammation, the product is reclassified as a medicated cosmetic and falls instead under the Ministry of Health and Prevention, which requires its own product classification letter before deciding whether full MOHAP registration is needed, a process that can run 30 to 60 days on top of whatever ECAS or Montaji work already happened.

This layering means a brand cannot assume that ECAS clearance covers Dubai retail, or that a Montaji-registered SKU can carry a wellness claim without triggering MOHAP review. Marketing copy decided after the regulatory filing is submitted is one of the most common causes of shipment holds reported by compliance consultancies operating in the market.

What does Qatar require that Saudi Arabia and the UAE do not?

Qatar's Ministry of Public Health registers cosmetics through the Pharmacy e-System with a published 40 to 50 working day timeline, longer than the comparable UAE Montaji cycle, and requires a registered local agent plus a registered marketing company before an application can even be submitted, foreign manufacturers cannot interact with MoPH directly. Qatar also applies strict Halal certification expectations to cosmetic ingredient sourcing, an additional documentary layer that Saudi Arabia and the UAE do not uniformly enforce at the same intensity. Registrations, once granted, are typically valid for two years and must be renewed before expiry, a shorter validity window than the UAE's five-year Dubai Municipality registration certificate.

Because Qatar shares the GSO 1943:2024 and GSO 2528:2024 technical base with Saudi Arabia and the UAE, a formulation and label package built for Gulf-wide compliance will satisfy most of MoPH's substantive review, but the agent, timeline, and Halal documentation requirements mean the Qatari filing still has to be built and tracked as its own workstream rather than a copy-paste of the Saudi or Emirati file.

Why did Israel abolish its cosmetics licensing system, and what replaced it?

Under the What's Good for Europe is Good for Israel reform, Israel's Ministry of Health discontinued the traditional Cosmetic Product License track entirely on December 31, 2024, replacing it with a digital notification system aligned to the EU Cosmetics Regulation (EC) No 1223/2009. Every product now requires an Israel-based Responsible Person who is personally accountable for the Product Information File, covering the safety assessment, GMP evidence, and laboratory test results, and who must keep that file available for Ministry audit rather than submitting it upfront for pre-approval. Marketing can begin as soon as the digital notification is confirmed in the system, a materially faster path to market than Saudi Arabia's GHAD listing or Qatar's 40 to 50 day MoPH cycle, but it shifts the compliance risk from a pre-market gatekeeper to a post-market audit exposure that sits entirely on the Responsible Person.

The reform carves out four product categories that cannot use the streamlined European-alignment route regardless of EU compliance status: products containing nano ingredients, and products labeled for infants and children up to age 12, for pregnant or breastfeeding women, or for hair straightening, or for sun protection. Those categories still require the fuller documentary submission under the standard notification track, so a brand assuming blanket EU-equivalence coverage across its entire Israeli catalogue will find several of its highest-liability product lines excluded from the fast lane.

What should a Middle East cosmetics compliance team do next?

The practical reality across all four markets is that GSO 1943:2024 harmonization narrows differences at the ingredient-safety level without eliminating the four separate filing systems, four separate local-representative requirements, and four separate enforcement calendars sitting on top of it. Saudi Arabia's shift to issuing ingredient updates as standalone SFDA circulars rather than full GSO revisions means those changes can arrive with less advance notice than a reformulation cycle can absorb. The UAE's three-way split between MOIAT, Dubai Municipality, and MOHAP means the same physical product can need three different filings depending on distribution channel and label claim. Qatar's agent and Halal documentation requirements, and Israel's Responsible Person liability model, each add a distinct compliance surface that a Gulf-wide launch plan has to account for individually.

Obsidian tracks each of these threads at the source, SFDA circulars and the GHAD notification requirements, GSO 1943 and 2528 revisions, MOIAT and Dubai Municipality technical guidelines, Qatar's MoPH registration rules, and Israel's Ministry of Health notification framework, so a compliance team does not have to monitor four regulator websites in three languages to catch the next ingredient ban or filing change. Per-jurisdiction monitoring flags an SFDA circular or a MOHAP classification update the moment it publishes, rather than at the next industry newsletter cycle. The AI companion can answer a direct question about a specific Gulf jurisdiction's current ingredient limit or filing timeline straight from Obsidian's verified regulatory database, and teams running their own compliance tooling can pull the same underlying data through the MCP integration. Given how often Saudi Arabia alone has amended its prohibited and restricted lists within a single year, treating any one Gulf market's rules as static, or assuming GSO harmonization means one filing clears all four, is the fastest way to end up with a shipment held at customs.