Key data
| Regulation | Commission Implementing Regulation (EU) 2026/2406 of 30 October 2026 |
|---|---|
| Publication | 3 November 2026 |
| Entry into force | Not specified in the regulation |
| Authorized biocide family | PAA based disinfectants - BPF2 (peracetic acid-based) |
| Legal basis | Regulation (EU) No 528/2012 of the European Parliament and of the Council |
| Scope of application | All Member States of the European Union |
| Affected parties | Manufacturers, distributors and professional users of peracetic acid-based biocidal disinfectants |
| Category | European Regulation |
Manufacturers and distributors of peracetic acid-based biocidal disinfectants have had a new unified regulatory framework since 3 November 2026 to operate across the EU. The Commission Implementing Regulation (EU) 2026/2406 grants Union authorization for the «PAA based disinfectants - BPF2» family, which simplifies access to the European market but imposes strict conditions that must be met to avoid product withdrawal and sanctions.
Until now, marketing these products in different EU countries required obtaining national authorizations in each Member State, with the associated administrative costs and timelines. This Union authorization changes that logic: a single title enables marketing throughout the internal market, but in exchange for complying with the conditions established in the authorization uniformly across all countries.
What does this regulation establish?
The regulation grants a Union authorization for the biocide family called «PAA based disinfectants - BPF2», whose main active substance is peracetic acid. This authorization is granted under the Regulation (EU) No 528/2012, which regulates the marketing and use of biocides in the European Union.
The key elements established by the regulation are:
- Single pan-European authorization: Holders can market BPF2 family products in all Member States without filing additional national authorizations.
- Applications regulated by product type: Authorized uses are limited to specific disinfection applications regulated by the corresponding product type, according to the classification in Regulation (EU) 528/2012.
- Labeling obligations: Products must be labeled in accordance with the conditions established in the authorization, with no room for unilateral adaptations by manufacturers or distributors.
- Use restrictions: There are use restrictions that must be respected throughout the chain: manufacturer, distributor, and end professional user.
- Risk management measures: The authorization includes specific risk management measures that must be implemented to maintain the validity of the authorization.
- Consequences of non-compliance: Failure to comply with any of these conditions may result in market withdrawal of affected products and the imposition of administrative sanctions.
Economic and operational impact
This authorization has a dual impact for companies in the sector:
Efficiency opportunity: The single authorization eliminates the need to file and maintain national authorizations in each Member State where the company wants to operate. For companies already distributing in several EU countries, this means a direct reduction in administrative and legal costs, as well as a simplification of regulatory management.
Adaptation cost: In exchange, companies must review and adapt their processes to comply uniformly with the authorization conditions across all markets. This particularly affects:
- Review and updating of labeling for all BPF2 family products.
- Updating of internal procedures to respect authorized use restrictions.
- Implementation of required risk management measures.
- Training of sales teams and professional users on the new conditions.
Non-compliance risk: The regulation is explicit: non-compliance may result in market withdrawal of products and administrative sanctions. For companies with significant sales volume in this segment, the economic impact of market withdrawal can be very significant.
Who does it affect?
- Manufacturers of peracetic acid-based biocidal disinfectants that market or intend to market products from the «PAA based disinfectants - BPF2» family in the EU.
- Distributors of these products in any Member State of the European Union.
- Professional users who use these biocides in their processes (food industry, healthcare, agriculture, water treatment, etc.).
- Regulatory and compliance officers (Regulatory Affairs) of companies in the chemical and industrial hygiene sectors.
- Legal advisors and consultants who assist companies in complying with Regulation (EU) 528/2012.
Practical example
Imagine a Spanish company manufacturing industrial disinfectants that markets peracetic acid-based products in Spain, France, Germany, and Italy. Until now, it had to maintain four separate national authorizations, with their respective renewal processes, country-specific labeling adaptations, and differentiated regulatory costs.
With the Union authorization for «PAA based disinfectants - BPF2», this company can operate with a single title in all four markets. However, it must act immediately: verify that the labeling of all its BPF2 family products complies exactly with the conditions of the new authorization, verify that the uses it promotes align with the applications authorized for the corresponding product type, and implement the required risk management measures. If it markets products outside the authorized conditions, it risks market withdrawal in all Member States simultaneously, not just one.
What should companies do now?
- Identify if your products belong to the BPF2 family: Verify whether the peracetic acid-based disinfectants you manufacture or distribute are covered by the «PAA based disinfectants - BPF2» authorization of Regulation (EU) 2026/2406.
- Review current labeling: Compare the current labeling of your products with the conditions established in the Union authorization and identify any deviations that need to be corrected.
- Audit use restrictions: Review that the uses for which you market and promote these products strictly comply with the applications authorized for the corresponding product type.
- Implement risk management measures: Ensure that internal procedures and technical documentation reflect the risk management measures required in the authorization.
- Inform professional users: Communicate the authorized use conditions to your professional customers to prevent non-compliant uses that could generate liability in the distribution chain.
- Consult a biocides specialist: If you have doubts about the scope of the authorization or specific obligations, seek advice from an expert in biocides regulation under Regulation (EU) 528/2012 before any inspection or claim occurs.
Frequently asked questions
What is Union authorization for biocides and what advantage does it have over national authorizations?
Union authorization, regulated by Regulation (EU) No 528/2012, allows marketing a biocidal product in all Member States with a single title, without the need to file individual national authorizations in each country. For the «PAA based disinfectants - BPF2» family, this means that the holder can operate throughout the European internal market under the same labeling conditions, use restrictions, and risk management measures.
What happens if my company does not adapt the labeling to the conditions of the new authorization?
Commission Implementing Regulation (EU) 2026/2406 expressly establishes that non-compliance with the authorization conditions—including labeling—may result in market withdrawal of affected products and the imposition of administrative sanctions. Since it is a Union authorization, the risk of withdrawal applies simultaneously in all Member States where the product is marketed.
What specific uses is the «PAA based disinfectants - BPF2» authorization limited to?
According to Regulation (EU) 2026/2406, authorized products may be used in specific disinfection applications regulated by the corresponding product type, in accordance with the classification in Regulation (EU) 528/2012. The specific uses are defined in the full text of the authorization, available in the Official Journal of the EU.
When does this authorization enter into force and from when must I comply with its conditions?
Commission Implementing Regulation (EU) 2026/2406 was published on 3 November 2026. The entry into force date is not specified in the available data of the regulation. It is recommended to consult the full text in the Official Journal of the EU to verify the exact date of application and any transitional periods, if applicable.
Who can be the holder of the Union authorization for «PAA based disinfectants - BPF2»?
The Union authorization is granted to the holder who applied for the authorization in accordance with the procedure under Regulation (EU) 528/2012. Manufacturers and distributors who wish to market products from this family under the authorization must verify whether they are included as holders or whether they need to obtain an authorization by reference or a parallel trade permit, as appropriate to their situation.
Official source
Consult complete regulation at official source
Disclaimer: This article is for informational purposes only and does not constitute legal advice. For specific decisions, consult a qualified professional. Source: https://eur-lex.europa.eu/./legal-content/AUTO/?uri=OJ:L_202602406