TL;DR: Compliance documentation for security finishing is where most OEM projects stall — not at production, but at customs clearance and brand approval gates.
TL;DR: Across the three major markets we supply, the EU’s PPWR 2025 and REACH Article 33 triggers alone account for roughly 60% of the compliance queries we handle on security packaging projects.
Regulatory Frameworks That Govern Security Finishing Materials #
Security finishing on packaging is not a single-standard domain. The inks, coatings, adhesives, and substrates used in anti-counterfeiting applications fall under different regulatory regimes depending on what the package contains and where it is sold. A holographic laminate on a pharmaceutical folding carton sold in Germany carries a different compliance burden than the same laminate on a cosmetic box sold in the US.
The frameworks we work against most frequently:
- EU REACH (Regulation EC 1907/2006): Any substance present in a finished article above 0.1% w/w on the SVHC candidate list triggers Article 33 disclosure obligations. Security inks — especially UV-fluorescent formulations containing optical brighteners or certain photoinitiators — frequently flag in SVHC screening. We run all new security ink chemistries through our internal CHM-04 substance declaration workflow before approving them for production runs.
- EU PPWR (Packaging and Packaging Waste Regulation, 2025 recast): Replaces PPWD 94/62/EC. Security laminates on recyclable packaging must not impair recyclability above defined thresholds. Multi-layer holographic films laminated to paperboard require a RecyClass recyclability assessment before making recyclability claims.
- FDA 21 CFR (US): For food-contact and pharmaceutical packaging, inks and coatings applied to the inner surface or migrating through a substrate must comply with 21 CFR §175–178 indirect food additive regulations. Security features are not exempt. A covert IR-absorbing ink on a food-adjacent surface must have supplier SDS confirmation of 21 CFR compliance.
- GB/T 17934 and GB/T 19437 (China): These cover printing ink environmental requirements and food-contact printing. Pharmaceutical serialisation under China’s NMPA drug traceability system mandates specific barcode print contrast ratios and data matrix error correction levels — Grade C minimum per ISO/IEC 15415.
- ISO 22382:2018: The international standard for guidelines on the content, security, issuance and examination of excise duty stamps. Referenced frequently by our clients in the spirits and tobacco categories.
| Regulatory Area | EU Requirement | US Requirement | China Requirement |
|---|---|---|---|
| Ink / coating food safety | REACH SVHC <0.1% w/w; EuPIA GMP | FDA 21 CFR §175–178 | GB/T 19437; GB 9685 |
| Serialisation / data carrier | GS1 DataMatrix, ISO/IEC 16022 | FDA DSCSA (pharmaceuticals) | NMPA traceability system, GB/T 18284 |
| Recyclability disclosure | PPWR RecyClass or DIN SPEC 91446 | FTC Green Guides (advisory) | GB/T 16288 packaging mark |
| Tamper-evidence standard | EN 16679:2014 | ASTM D3951 / FDA 21 CFR §211 | GB 15834 (not always enforced) |
| Restricted substances | REACH Annex XVII + SVHC list | TSCA; Prop 65 (California) | GB/T 26572 (RoHS equivalent) |
The table above is a working comparison, not a complete compliance checklist. Pharmaceutical and medical device packaging carries additional layers — MDR (EU) 2017/745 and 21 CFR Part 820 (US) apply when the package is part of a regulated device system.
Where Projects Fail: Compliance Gaps in Security Finishing #
The most common failure point is not a wrong material choice. It is a documentation gap discovered late.
A brand submits a production brief for a covert UV fluorescent feature on a cosmetic outer carton. The feature specification is technically sound. Production is approved. Then the brand’s EU regulatory affairs team requests a full substance declaration for the UV ink. The ink supplier provides a generic SDS — adequate for workplace safety, useless for REACH Article 33. We then have to loop back to the ink supplier for a full substance composition letter, which can take 3–6 weeks depending on supplier responsiveness. That delay pushes the product launch. We now require a supplier-issued REACH declaration covering all intentionally added substances above 100 ppm as a prerequisite for ink approval under our CHM-04 workflow — not after production approval, before.
The second failure mode is recyclability misclassification. Holographic cold-foil applied over a full-bleed varnish creates a multi-material surface that fails fibre recyclability when foil coverage exceeds approximately 30% of total surface area (the threshold used by RecyClass for paper-based packaging). Several clients have come to us with design briefs requesting 60–80% foil coverage on a “recyclable” kraft outer. The foil coverage alone disqualifies the recyclability claim under current European assessment protocols. The consequence is either a packaging redesign or losing the on-pack recyclability claim — both of which the brand would have preferred to know at the brief stage.
Serialisation data quality is the third failure scenario, and it causes problems specifically in pharmaceutical and premium spirits markets. A 2D DataMatrix printed at 300 dpi on a matte uncoated stock will typically achieve ISO/IEC 15416 scan grades of B or C — acceptable in some supply chains, but below the Grade A threshold required by some retail scanning systems and by China’s NMPA traceability portal. The mechanism: uncoated stock absorbs ink laterally (dot gain of 18–22% is typical at 300 dpi on uncoated 90 gsm), reducing print contrast ratio below the 70% minimum specified in ISO/IEC 15415. We verify all serialisation print targets using an in-line vision system calibrated to ISO/IEC 15416 — our internal pass threshold is Grade B minimum, with Grade A required for pharmaceutical clients.
Does Security Finishing Require Separate Product Registration? #
For most commercial packaging categories — cosmetics, consumer goods, retail FMCG — the security finishing itself does not require independent product registration. Compliance obligations attach to the ink and coating materials through the supply chain (SDS, REACH declarations, 21 CFR letters), not to the finished package as a standalone registered product.
The exception is pharmaceutical serialisation. Under the EU Falsified Medicines Directive (2011/62/EU) and its delegated regulation 2016/161, the unique identifier printed or applied to the package must meet specific data structure and quality requirements, and the pack is enrolled in a national medicines verification system. The package does not require registration, but the serialisation system does. Similarly under FDA DSCSA (Drug Supply Chain Security Act), the product identifier — including a GS1-compliant 2D barcode — must be capable of verification within the DSCSA electronic interoperability network by November 2024 enforcement date.
Specification Notes for Brand Partners #
When you brief us on a project involving anti-counterfeiting or security finishing, the most useful information you can provide upfront is: destination market, packaging substrate, and product category (food, cosmetic, pharmaceutical, general retail). Those three variables determine the entire compliance pathway before we select a single material.
The common brief gap that drives sample iterations is the absence of a recyclability intent statement. If your packaging carries or will carry an on-pack recyclability claim, tell us at brief stage. A security feature that is technically printable and visually correct may disqualify that claim depending on material type and area coverage. We can usually design around it — spot holographic register marks instead of flood foil, for example — but only if we know the constraint before development starts.
Our standard timeline for a security finishing sample with compliance documentation is 18–25 working days. This covers substrate qualification, ink system selection, trial printing, and assembly of the supplier declaration package (REACH letter, SDS, 21 CFR confirmation where applicable). Projects requiring new ink qualification outside our approved vendor list (AVL) add 10–15 working days for our AVL gate review process. Pharmaceutical projects requiring serialisation verification add a further 3–5 days for ISO/IEC 15416 grade confirmation.
Frequently Asked Questions #
Does REACH compliance for security ink need to be re-confirmed every time I reorder?
If the ink formulation has not changed and the supplier is on our approved vendor list with a current declaration on file, reconfirmation is not required per order. We audit AVL ink suppliers annually for formulation changes — any flagged change triggers a fresh CHM-04 review regardless of reorder frequency.
Our brand requires GS1-compliant serialisation. What print resolution do we need?
It depends on the substrate and the DataMatrix cell size specified. On coated SBS board (standard pharmaceutical carton stock), 300 dpi is workable for X-dimensions of 0.38mm and above, achieving ISO/IEC 15416 Grade B consistently in our trials. On uncoated kraft or textured board, we recommend 600 dpi minimum or a coated spot area under the DataMatrix to control dot gain — otherwise contrast ratio drops below 70% and scan reliability degrades in ambient retail lighting.
Can we use holographic foil on a packaging line that also runs FSC-certified products?
Yes, with conditions. The foil itself does not affect FSC chain of custody certification for the paperboard substrate, because the foil is a post-print finishing element, not a fibre input. The FSC claim applies to the board. The recyclability claim for the finished pack, though, must be assessed separately — the foil laminate may disqualify an “on-pack recyclable” statement depending on coverage area and EU market requirements under PPWR.
What documentation should we request from our packaging supplier before EU market entry?
At minimum: a REACH Article 33 substance declaration for all security inks and coatings, SDS sheets for all applied materials, a RecyClass or equivalent recyclability assessment if a recyclability claim is planned, and — for pharmaceutical packs — confirmation of ISO/IEC 15416 scan grade and GS1 DataMatrix compliance. Requesting these before tooling approval is standard practice; requesting them after mass production is when delays become costly.
Planning a packaging project? Contact our team to request a complimentary specification review and sample quote.
