Product Recalls and Quality Complaints: A Response Plan for Health and Beauty Brands

Article type: Independent editorial • Scope: Health, beauty, personal care and supplement brands, with Malaysian regulatory examples • Written and researched by: Creaton Poh • Last reviewed: 31 July 2026

Quick answer: what should a brand owner do when a batch goes wrong?

When a quality problem appears, the brand owner should stop shipping the affected batch, quarantine remaining stock, and trace that batch through production and sales records before deciding whether the situation is an isolated complaint, a quality deviation, or a recall. In Malaysia, the legal responsibility sits with the notification or registration holder — usually the brand, not the contract manufacturer. Regulators expect to be consulted before a recall proceeds. The single most valuable piece of preparation is a traceability system that can answer, within hours, where every unit of a given batch went.

Key takeaways

• Complaints are normal; the failure is not having a written process for handling them.
• Regulatory responsibility follows the notification or registration holder, not the factory — even when the factory caused the defect.
• Batch traceability, not goodwill, determines whether a recall is narrow and survivable or broad and expensive.
• Serious adverse events carry reporting obligations that exist independently of whether the brand agrees the product was at fault.
• The response plan has to be written before the first complaint, because the useful window is measured in days.

Who this is for

This article is written for founders and brand owners of cosmetic, skincare, personal care, supplement and wellness products — particularly those manufacturing through an OEM (Original Equipment Manufacturer) or ODM (Original Design Manufacturer) partner rather than in their own facility. It is intended to help a brand owner build a response plan before a problem occurs. It is educational and general in nature, and does not replace regulatory or legal advice for a specific product or market.

What actually counts as a product quality problem?

A product quality problem is any deviation from the agreed specification, the approved sample, or the reasonable expectation a consumer forms from the label — and it ranges from cosmetic inconvenience to a genuine safety issue. Treating all of these the same way is one of the more common mistakes new brands make. A separated emulsion and a suspected skin reaction are not the same event and should not trigger the same response.

The distinction that matters in practice is between defects that affect appearance or experience, defects that affect function, and defects that affect safety or legality. Only the third category routinely escalates beyond the brand and its manufacturer.

Type of issue	Typical example	Usual first response
Cosmetic / appearance	Slight colour shift, label misaligned, cap scuffed	Log, replace the unit, review with the manufacturer at the next batch
Functional / stability	Separation, thickening, unexpected odour, pump failure	Quarantine the batch, retrieve retained samples, test before shipping more
Safety-related	Reported skin reaction, suspected contamination, foreign matter	Stop distribution, investigate formally, assess reporting obligations
Regulatory / labelling	Wrong ingredient list, missing mandatory particulars, unapproved claim	Stop distribution, assess corrective labelling or withdrawal

Original table. Categories are analytical, not regulatory definitions; a single incident can fall into more than one row.

Who is legally responsible when a batch fails — the brand or the factory?

In Malaysia, regulatory responsibility for a cosmetic product sits with the Cosmetic Notification Holder (CNH), which is normally the brand owner that submitted the notification — not the manufacturer that produced the goods. According to the National Pharmaceutical Regulatory Agency (NPRA), the notification holder is responsible for the product's compliance, for maintaining the Product Information File, for investigating complaints, for reporting serious adverse events, and for carrying out recalls when required.

This surprises many first-time founders, who assume that because the factory mixed, filled and sealed the product, the factory answers for it. Commercially, the manufacturer may well be liable to the brand under their supply agreement — that is exactly what the quality and liability clauses of a contract manufacturing agreement are for. But that is a private contractual matter. The regulator's counterparty remains the notification holder.

The practical implication is that a brand owner cannot outsource this obligation, and therefore should not outsource the capability. A brand that cannot itself explain which batch went where is dependent on its manufacturer's goodwill during precisely the week when both parties are under pressure.

Batch records created on the production line are what make a later investigation possible. Photo: Pexels.

What should the first 48 hours look like?

The first 48 hours should be spent containing the problem and gathering facts — not issuing public statements or assigning blame. A disciplined sequence generally runs as follows.

• Contain. Identify the batch number from the complaint, then hold all remaining stock of that batch at the warehouse, at distributors, and in transit. Holding is reversible; shipping is not.
• Record. Capture what the customer actually reported, in their words, with dates, photographs, the batch code and where the unit was purchased. Vague complaint records are the reason many investigations end inconclusively.
• Retrieve. Ask for the affected unit back where possible, and pull the manufacturer's retained sample from the same batch. Comparing the two separates a batch-wide defect from damage in storage or transport.
• Trace. Reconstruct the batch: how much was produced, when, from which raw material lots, and which customers received it.
• Assess. Only now decide the category of the issue, whether a reporting obligation is triggered, and whether the product should be withdrawn.

Speed matters here for an unglamorous reason: stock keeps moving. A batch that could have been held in one warehouse on Monday may be sitting in forty retail outlets by Friday.

When does a complaint become a recall?

A complaint becomes a recall when the evidence suggests the defect affects the batch rather than the individual unit, and when the defect presents a risk to the user or a breach of regulatory requirements. NPRA's guidance indicates that recalls arise where a potential risk to the user exists, that the notification holder bears responsibility for carrying out the recall, that a recall may be initiated voluntarily by the company or directed by the Director of Pharmaceutical Services, and that the agency should be consulted before a recall proceeds.

That last point is worth emphasising, because instinct pushes in the opposite direction. A founder who has just discovered a problem often wants to move immediately and visibly. Consulting the regulator first is not a delay tactic; it aligns the scope, the wording and the public communication so that the brand does not have to revise its own announcement days later.

It is also worth separating two things that are often confused. A withdrawal removes product from the distribution chain before it reaches consumers. A recall reaches back to consumers who already hold the product. The second is far more disruptive, which is why containment speed in the first 48 hours has such a large effect on cost.

How does traceability decide whether a recall is survivable?

Traceability decides the scope of a recall, and scope decides the cost. A brand that can prove a defect is confined to one batch made from one raw material lot recalls that batch. A brand that cannot demonstrate which units came from which batch may end up withdrawing everything on the market, because there is no defensible basis for a narrower boundary.

ISO 22716, the international standard for Good Manufacturing Practices for cosmetics, is built around this logic: unique batch identification, documented records from raw material receipt through to distribution, and documented procedures for handling complaints and recalls. The same principle underlies GMP systems generally.

For a brand owner working with an external manufacturer, three records carry most of the weight: the batch manufacturing record held by the factory, the Certificate of Analysis for that batch, and the brand's own distribution record showing which batch went to which customer. Many small brands maintain the first two and neglect the third — and it is the third that determines how far a recall has to reach.

Decisions about scope should be made from records, not impressions. Photo: Pexels.

What has to be reported to the authorities?

Serious adverse events must be reported to the regulator, regardless of how the brand first heard about them. NPRA's post-market surveillance guidance places this duty on the notification holder and applies it to serious adverse events and to high incidences of adverse events, irrespective of the source of the report. Non-serious events are generally not subject to mandatory reporting, though reporting is expected where there is reasonable suspicion that the product caused the reaction.

Two aspects of this are frequently misread. First, the obligation is not conditional on the brand accepting fault — reporting an event is not an admission that the product caused it. Second, the notification holder may be asked to supply product samples for independent testing, and NPRA's guidance sets out the minimum quantities that must be available. A brand that has already sold its entire batch and kept nothing back is poorly placed to respond.

Registered products such as health supplements and traditional medicines sit under a different NPRA pathway from notified cosmetics, with their own reporting channels. Brand owners operating across both categories should confirm the correct route for each product rather than assuming one process covers everything.

Practical guidance: what a prepared brand has in place

Preparation is inexpensive; improvisation is not. Before launch, a brand owner can reasonably expect to have the following ready.

• A written complaint procedure naming who receives complaints, how they are logged, and the maximum time to first response.
• A batch-to-customer distribution record that can be filtered by batch number — a maintained spreadsheet is sufficient for a small brand.
• A retained-sample arrangement confirmed in writing with the manufacturer, including how long samples are held and how to request them.
• Named contacts at the manufacturer for quality issues, with an escalation path that does not depend on one salesperson's mobile phone.
• Clear batch coding that is legible on the pack after normal handling — see product labelling requirements.
• Draft holding statements for customers and retailers, written calmly in advance rather than under pressure.

Red flags worth noticing early: a manufacturer that cannot produce a batch record on request; batch codes that rub off the pack; a distribution system that records sales by month but not by batch; a supply agreement with no clause on defective goods; and complaints handled informally through chat messages that nobody consolidates.

Frequently asked questions

Does one complaint mean the whole batch is defective?

No. A single complaint most often reflects an individual unit, mishandling in transit or storage, or individual sensitivity rather than a batch-wide defect. The purpose of retrieving the unit and comparing it against the manufacturer's retained sample is precisely to establish which of these applies. A batch-wide problem is indicated when several complaints share the same batch code, the same symptom, or the same raw material lot.

If the factory caused the defect, can the brand refer complaints to it?

Not for regulatory purposes. The notification or registration holder remains the party the regulator deals with, and remains responsible for investigating complaints and executing any recall. The brand may have a contractual claim against the manufacturer for the cost, but that is settled separately and afterwards. Practically, the two should investigate jointly.

How long should product samples and records be kept?

This varies by product category, jurisdiction and the agreement with the manufacturer, so a universal figure would be misleading. The common industry principle is to retain samples and batch records for at least the product's shelf life plus a margin, so that a complaint arriving near the end of shelf life can still be investigated. The correct period should be confirmed with the manufacturer and against the applicable guidelines in each market.

Is a voluntary recall better than waiting for a directed one?

Where a genuine risk has been identified, acting voluntarily generally allows more control over timing, scope and communication. It is not a way of avoiding regulatory involvement, since the agency should be consulted before the recall proceeds. The decision should follow the evidence gathered in the investigation rather than a public-relations calculation.

Does reporting an adverse event mean admitting the product is unsafe?

No. Reporting records that an event occurred and that the product was in use; it does not establish causation. Reporting obligations are deliberately set so that regulators can detect patterns across many sources that no single brand could see on its own. Withholding a reportable event is a compliance failure regardless of the eventual finding.

What is the most common preparation gap in small brands?

The distribution record. Most brands can obtain a batch record and a Certificate of Analysis from their manufacturer, because the manufacturer produces both. Far fewer maintain their own record of which batch was shipped to which customer or retailer — and without it, the boundary of any recall cannot be narrowed with confidence.

Sources and further reading

• National Pharmaceutical Regulatory Agency (NPRA), Guidelines for Control of Cosmetic Products in Malaysia
• NPRA, Post-Market Surveillance Programme
• NPRA, Regulatory Action
• NPRA, Guide Manual for Adverse Event Reporting
• International Organization for Standardization, ISO 22716: Cosmetics — Good Manufacturing Practices

Limitations

This article summarises publicly available regulatory guidance current at the time of writing and general industry practice. Requirements differ between cosmetics, health supplements, traditional medicines and medical devices, and between markets; guidance documents are also revised periodically. Nothing here should be treated as legal or regulatory advice for a specific product. Brand owners should verify current requirements with the relevant authority and their own advisers before acting.

---

Disclosure: Creaton Poh is the pen name of Poh Tze Kheng, founder of the ORIZI Group, a Malaysian OEM/ODM manufacturer. This article is educational and independent, and is not promotional.

Written by Creaton Poh
Industry Researcher • Author • Vlogger • Manufacturing Strategist
Turning ideas into products. Turning experience into knowledge.

Connect with Poh Tze Kheng on LinkedIn.