TL;DR: Compliance documentation for security finishing is where most OEM projects stall — not at production, but at customs clearance and brand approval gates.
TL;DR: Across the three major markets we supply, the EU’s PPWR 2025 and REACH Article 33 triggers alone account for roughly 60% of the compliance queries we handle on security packaging projects.
Regulatory Frameworks That Govern Security Finishing Materials #
Security finishing on packaging is not a single-standard domain. The inks, coatings, adhesives, and substrates used in anti-counterfeiting applications fall under different regulatory regimes depending on what the package contains and where it is sold. A holographic laminate on a pharmaceutical folding carton sold in Germany carries a different compliance burden than the same laminate on a cosmetic box sold in the US.
The frameworks we work against most frequently:
- EU REACH (Regulation EC 1907/2006): Any substance present in a finished article above 0.1% w/w on the SVHC candidate list triggers Article 33 disclosure obligations. Security inks — especially UV-fluorescent formulations containing optical brighteners or certain photoinitiators — frequently flag in SVHC screening. We run all new security ink chemistries through our internal CHM-04 substance declaration workflow before approving them for production runs.
- EU PPWR (Packaging and Packaging Waste Regulation, 2025 recast): Replaces PPWD 94/62/EC. Security laminates on recyclable packaging must not impair recyclability above defined thresholds. Multi-layer holographic films laminated to paperboard require a RecyClass recyclability assessment before making recyclability claims.
- FDA 21 CFR (US): For food-contact and pharmaceutical packaging, inks and coatings applied to the inner surface or migrating through a substrate must comply with 21 CFR §175–178 indirect food additive regulations. Security features are not exempt. A covert IR-absorbing ink on a food-adjacent surface must have supplier SDS confirmation of 21 CFR compliance.
- GB/T 17934 and GB/T 19437 (China): These cover printing ink environmental requirements and food-contact printing. Pharmaceutical serialisation under China’s NMPA drug traceability system mandates specific barcode print contrast ratios and data matrix error correction levels — Grade C minimum per ISO/IEC 15415.
- ISO 22382:2018: The international standard for guidelines on the content, security, issuance and examination of excise duty stamps. Referenced frequently by our clients in the spirits and tobacco categories.
| Regulatory Area | EU Requirement | US Requirement | China Requirement |
|---|---|---|---|
| Ink / coating food safety | REACH SVHC <0.1% w/w; EuPIA GMP | FDA 21 CFR §175–178 | GB/T 19437; GB 9685 |
| Serialisation / data carrier | GS1 DataMatrix, ISO/IEC 16022 | FDA DSCSA (pharmaceuticals) | NMPA traceability system, GB/T 18284 |
| Recyclability disclosure | PPWR RecyClass or DIN SPEC 91446 | FTC Green Guides (advisory) | GB/T 16288 packaging mark |
| Tamper-evidence standard | EN 16679:2014 | ASTM D3951 / FDA 21 CFR §211 | GB 15834 (not always enforced) |
| Restricted substances | REACH Annex XVII + SVHC list | TSCA; Prop 65 (California) | GB/T 26572 (RoHS equivalent) |
The table above is a working comparison, not a complete compliance checklist. Pharmaceutical and medical device packaging carries additional layers — MDR (EU) 2017/745 and 21 CFR Part 820 (US) apply when the package is part of a regulated device system.
Where Projects Fail: Compliance Gaps in Security Finishing #
The most common failure point is not a wrong material choice. It is a documentation gap discovered late.
A brand submits a production brief for a covert UV fluorescent feature on a cosmetic outer carton. The feature specification is technically sound. Production is approved. Then the brand’s EU regulatory affairs team requests a full substance declaration for the UV ink. The ink supplier provides a generic SDS — adequate for workplace safety, useless for REACH Article 33. We then have to loop back to the ink supplier for a full substance composition letter, which can take 3–6 weeks depending on supplier responsiveness. That delay pushes the product launch. We now require a supplier-issued REACH declaration covering all intentionally added substances above 100 ppm as a prerequisite for ink approval under our CHM-04 workflow — not after production approval, before.
The second failure mode is recyclability misclassification. Holographic cold-foil applied over a full-bleed varnish creates a multi-material surface that fails fibre recyclability when foil coverage exceeds approximately 30% of total surface area (the threshold used by RecyClass for paper-based packaging). Several clients have come to us with design briefs requesting 60–80% foil coverage on a “recyclable” kraft outer. The foil coverage alone disqualifies the recyclability claim under current European assessment protocols. The consequence is either a packaging redesign or losing the on-pack recyclability claim — both of which the brand would have preferred to know at the brief stage.
Serialisation data quality is the third failure scenario, and it causes problems specifically in pharmaceutical and premium spirits markets. A 2D DataMatrix printed at 300 dpi on a matte uncoated stock will typically achieve ISO/IEC 15416 scan grades of B or C — acceptable in some supply chains, but below the Grade A threshold required by some retail scanning systems and by China’s NMPA traceability portal. The mechanism: uncoated stock absorbs ink laterally (dot gain of 18–22% is typical at 300 dpi on uncoated 90 gsm), reducing print contrast ratio below the 70% minimum specified in ISO/IEC 15415. We verify all serialisation print targets using an in-line vision system calibrated to ISO/IEC 15416 — our internal pass threshold is Grade B minimum, with Grade A required for pharmaceutical clients.
Does Security Finishing Require Separate Product Registration? #
For most commercial packaging categories — cosmetics, consumer goods, retail FMCG — the security finishing itself does not require independent product registration. Compliance obligations attach to the ink and coating materials through the supply chain (SDS, REACH declarations, 21 CFR letters), not to the finished package as a standalone registered product.
The exception is pharmaceutical serialisation. Under the EU Falsified Medicines Directive (2011/62/EU) and its delegated regulation 2016/161, the unique identifier printed or applied to the package must meet specific data structure and quality requirements, and the pack is enrolled in a national medicines verification system. The package does not require registration, but the serialisation system does. Similarly under FDA DSCSA (Drug Supply Chain Security Act), the product identifier — including a GS1-compliant 2D barcode — must be capable of verification within the DSCSA electronic interoperability network by November 2024 enforcement date.
Specification Notes for Brand Partners #
When you brief us on a project involving anti-counterfeiting or security finishing, the most useful information you can provide upfront is: destination market, packaging substrate, and product category (food, cosmetic, pharmaceutical, general retail). Those three variables determine the entire compliance pathway before we select a single material.
The common brief gap that drives sample iterations is the absence of a recyclability intent statement. If your packaging carries or will carry an on-pack recyclability claim, tell us at brief stage. A security feature that is technically printable and visually correct may disqualify that claim depending on material type and area coverage. We can usually design around it — spot holographic register marks instead of flood foil, for example — but only if we know the constraint before development starts.
Our standard timeline for a security finishing sample with compliance documentation is 18–25 working days. This covers substrate qualification, ink system selection, trial printing, and assembly of the supplier declaration package (REACH letter, SDS, 21 CFR confirmation where applicable). Projects requiring new ink qualification outside our approved vendor list (AVL) add 10–15 working days for our AVL gate review process. Pharmaceutical projects requiring serialisation verification add a further 3–5 days for ISO/IEC 15416 grade confirmation.
Frequently Asked Questions #
Does REACH compliance for security ink need to be re-confirmed every time I reorder?
If the ink formulation has not changed and the supplier is on our approved vendor list with a current declaration on file, reconfirmation is not required per order. We audit AVL ink suppliers annually for formulation changes — any flagged change triggers a fresh CHM-04 review regardless of reorder frequency.
Our brand requires GS1-compliant serialisation. What print resolution do we need?
It depends on the substrate and the DataMatrix cell size specified. On coated SBS board (standard pharmaceutical carton stock), 300 dpi is workable for X-dimensions of 0.38mm and above, achieving ISO/IEC 15416 Grade B consistently in our trials. On uncoated kraft or textured board, we recommend 600 dpi minimum or a coated spot area under the DataMatrix to control dot gain — otherwise contrast ratio drops below 70% and scan reliability degrades in ambient retail lighting.
Can we use holographic foil on a packaging line that also runs FSC-certified products?
Yes, with conditions. The foil itself does not affect FSC chain of custody certification for the paperboard substrate, because the foil is a post-print finishing element, not a fibre input. The FSC claim applies to the board. The recyclability claim for the finished pack, though, must be assessed separately — the foil laminate may disqualify an “on-pack recyclable” statement depending on coverage area and EU market requirements under PPWR.
What documentation should we request from our packaging supplier before EU market entry?
At minimum: a REACH Article 33 substance declaration for all security inks and coatings, SDS sheets for all applied materials, a RecyClass or equivalent recyclability assessment if a recyclability claim is planned, and — for pharmaceutical packs — confirmation of ISO/IEC 15416 scan grade and GS1 DataMatrix compliance. Requesting these before tooling approval is standard practice; requesting them after mass production is when delays become costly.
Planning a packaging project? Contact our team to request a complimentary specification review and sample quote.
Watch the SVHC photoinitiator issue especially if you’re running UV-cure security inks — ITX (isopropylthioxanthone) keeps reappearing on candidate list reviews and we’ve had two OEM runs held at DE customs because the ink supplier’s SDS was 18 months out of date.
The RecyClass assessment on holographic laminates is the part nobody budgets time for — we had one cold foil SKU on a folding carton sit in review for 11 weeks before getting a “conditional pass” that required us to drop below 4cm² foil coverage per panel anyway.
The SVHC screening point is accurate but understates the timeline hit — we had a UV-fluorescent ink flagged for a photoinitiator (ITX, CAS 5495-84-1) on a folding carton project for a fragrance client, and the reformulation and re-approval cycle ran 11 weeks before we could release to production.
The SVHC screening point is solid, but the 0.1% w/w threshold gets more complicated when you’re dealing with covert UV-fluorescent inks applied at very low coat weights — we’ve had formulations where the optical brightener component was well under threshold at finished article level but still triggered retailer RSL requirements (Tesco and Lidl both run their own lists that sit tighter than REACH Article 33). So passing the CHM-04 equivalent internally doesn’t always clear the full gate, especially on private label confectionery where the retailer compliance pack is a separate submission entirely.
The GB 9685 positive list issue caught us off guard on a mooncake tin project last year — our Shenzhen supplier had been running the same UV-varnish topcoat for years domestically but it hadn’t been assessed against the updated 2016 revision, and getting the full substance declaration through their ink sub-supplier took close to six weeks before we could confirm it for the EU export SKUs.
Ran into a nasty one with a tamper-evident heat-seal label on a premium chocolate gifting SKU — 70gsm glassine liner, BOPP facestock, and a cold-seal adhesive that had been qualified fine on regular ambient storage. First container of 18,000 units into Singapore (ambient hold, not chilled) came off the vessel with roughly 30% of the labels showing spontaneous partial release at the facestock/adhesive interface, which obviously killed the tamper-evidence function entirely. Took us three weeks to pin it down to a moisture vapour transmission rate mismatch between the facestock spec we’d validated in our UK facility versus what the OEM in Guangzhou had actually sourced — nominally the same BOPP grade but a different slip additive package that tanked surface energy under high humidity. The brand’s security team rejected the entire shipment on the grounds that compromised tamper evidence voided the chain-of-custody claim, which wasn’t wrong.
Minimum quiet zone on a GS1 DataMatrix at 10×10 modules is spec’d at 1 cell width, but on matte soft-touch laminate we couldn’t get reliable decode below a 3-cell quiet zone due to surface diffusion killing the contrast ratio at the scanner. Pushed back the structural dieline on two premium coffee tin SKUs to accommodate it, which knocked 4mm off the copy panel and caused a whole round of copy approval.
Cold transfer vs. hot stamped foil on paperboard is worth flagging in the context of that PPWR recyclability threshold — cold transfer typically leaves a thinner metallic deposit (around 0.8–1.2 microns vs. 2–4 microns for hot stamp), which we’ve found consistently scores better in RecyClass fibre-based assessments because the total metallic ink layer stays below the 1 cm²/cm² deink penalty zone. Hot stamp gives you better opacity and tactile definition on uncoated stocks, but if the SKU needs to carry a recyclability claim for the EU market, you’re adding that assessment cycle either way and cold transfer has been clearing it faster in our recent submissions.
Switching from a full holographic laminate to a registered spot hologram on our premium tea caddy range cut laminate material costs by around 34% per unit — the tooling origination for the spot die was about £4,200 upfront but we recovered that across the first 18k units, and it actually simplified the RecyClass filing because the metallic coverage fell below the threshold that triggers the full impairment assessment.
The CHM-04 substance declaration workflow mention is interesting because the documentation bottleneck for us has actually been downstream of that — our brand approval gate for a luxury watch client in Q3 last year required third-party lab validation of every security ink on the SDS, and that alone added 6 weeks to a project that was already in tooling.