Q&As

Q&A info

Möchten Sie die jeweilige Frage und Antwort in Ihrer Sprache suchen? Ändern Sie die Sprache in der Auswahlliste oben.

Zurück

Zurück

Data Dissemination and Confidentiality

Confidentiality

A. Confidentiality, general

Which tools and manuals are available on confidentiality claim assessment and publication of registration data?
Information concerning the publication of registration data is available in the manual Dissemination and Confidentiality under the REACH Regulation.
 
We also developed a series of IUCLID tools to help you prepare your registration dossier. These tools are available within the IUCLID 6 software. Relevant tools concerning the publication of registration data are:
 
  • Validation assistant, which enables you to validate your registration dossier before submitting it, i.e. it performs a Business Rule check to ensure that you included a justification along your confidentiality claim;
  • Dissemination Preview tool, which simulates which information from your dossier will be published on the ECHA website;
  • Fee Calculator tool, which calculates the costs of your confidentiality claims and any other fees associated to your registration.
I made a confidentiality claim in accordance with Article 119(2) of REACH. Will ECHA send an official confirmation on the acceptance/rejection of my claim?

Indeed, we send the decision (acceptance/rejection) of a confidentiality claim via REACH-IT at the end of the assessment procedure.

If the justification is not sufficient, you will receive a communication detailing which information needs to be updated in order for your claim to be accepted. During the assessment of the confidentiality claim, the information claimed confidential is not published on the ECHA website.

After the assessment is concluded, the information found to be validly claimed confidential will not be made public. However, in case of rejected confidentiality claims, the information will be published on ECHA’s website.

For further information on the assessment procedure, see the Dissemination and Confidentiality under the REACH Regulation manual, section 3.8.

What type of information can I claim confidential?
The list of information you can claim confidential in accordance with REACH Article 119 (2) is available in the Dissemination and Confidentiality under the REACH Regulation manual.
Can my claim be accepted if the claimed information is in the public domain?

Please see our explanatory document on How to protect you confidential business information, section 1.

My confidentiality claim was accepted however the information is published. Why is it published?

ECHA combines data per substance from all regulatory activities, therefore the information may be made publicly available on the ECHA website if not claimed to be kept confidential in all submissions. I.e. if another company submits e.g. a C&L notification or a registration for the same substance without claiming confidentiality on the substance name, it is published on the ECHA website.

Also, the validity of a confidentiality claim may be limited in time. If the validity of a confidentiality claim has expired in any of the submissions, the corresponding information is published on the ECHA website.

If you are not sure why the information is published, you can contact us.

Do I need to justify my confidentiality claim and will ECHA assess its validity?

Each item falling under REACH Article 119(2) must be separately claimed in the dossier and the reason for confidentiality must be justified also separately for each of them. The validity of these confidentiality claims is assessed.

The justification for each confidentiality claim needs to include: (1) a declaration that the information is not in the public domain or general knowledge in the industry, (2) a demonstration of a commercial interest worthy of protection for non-disclosure of the information, and (3) a demonstration that disclosure of the information would cause potential harm to the commercial interest of the registrant or a third party.

To claim confidentiality and insert the justification template in IUCLID web interface, open the flag next to the item you wish to keep confidential and select the confidentiality flag; CBI, IP or no PA. The template for justifying a confidentiality claim can be directly inserted in the justification field by selecting ‘Insert existing templates’ on the top right corner of the justification text box. After inserting the template, you can start editing it.

For dossier updates, justifications previously attached to the dossier in pdf format can be maintained.

B. Confidentiality, Dossier creation

How can I successfully claim confidentiality?
You can follow the below steps before uploading your registration dossier to REACH-IT, to ensure that your confidentiality claim is successful:
 
  1. Ensure that the information claimed confidential is not already publicly available elsewhere.
  2. Add the CBI flag next to the information you wish to claim confidential and provide a valid justification.
  3. Run the Dissemination preview tool both in your IUCLID dataset and created dossier, to see which information from your registration dossier will be removed before publication and which information will be publicly available.
  4. Run the Fee calculator to see the applicable fees you need to pay.
Further information is available in the practical example How to protect your confidential business information.
I have just submitted a dossier but forgot to include the confidentiality claim(s). What do I do?

Please contact us via our contact form, as soon as you notice that the information has not been flagged as confidential.

In the meantime, your latest successfully submitted dossier will be published and only the flagged confidential information will be removed from publication, pending confidentiality assessment.
 
You will be informed of the confidentiality assessment outcome via REACH-IT. In case of acceptance, the information you wish to not make publicly available will remain confidential. 
In case of rejection, you will be asked further information before the confidentiality assessment is finalised and before the information is published.

We have confidential information in the attached documents in IUCLID. How do we claim them confidential?

Under REACH, only information entered into a IUCLID field is published. Attachments are not published.

What can I do to hide my identity both from the public and also from the co-registrants?
It is possible to hide your identity both from the public and also from your co-registrants throughout the inquiry and registration processes.
 
If you don’t want your company name to be visible to your co-registrants, you may appoint a Third-Party Representative (TPR). The identity of your appointed TPR will be published in REACH-IT instead of your name.
 
Follow the bellow steps to assign a TPR:
 
When submitting your inquiry dossier in REACH-IT:
 
  1. Click on “Menu” in REACH-IT
  2. Select “inquiry” as the type of dossier upload
  3. Upload the IUCLID dossier in the dossier submission wizard
  4. Continue to “Additional details” 
  5. Click “Assign” next to “contact person”
  6. Click “Assign” next to the “Third party representative” field where you can assign an existing TPR or create a new one
  7. Continue to the “Confirmation” step of the wizard

Tasks for lead registrants

As a lead registrant, you can assign a TPR for the joint submission before submitting your registration dossier. Follow the below steps to assign a TPR for the joint submission:

  1. Click on “Menu” in REACH-IT
  2. Select “Create new” under the “Joint submission – registration” section
  3. At the “Contact details” step, click “Assign” next to the “Third party representative” field
  4. You can either:
    • search for the TPR’s identity using the party’s name or UUID or
    • select a TPR from the list of your previous TPRs in REACH-IT, after selecting, click “Assign”
  5. If you select “Yes” for the “Contact details publication acceptance”, then you give permission to ECHA to provide the identity of the assigned TPR (or the registrant if TPR is not appointed) to interested parties upon request. If you select “No”, then neither your, nor the TPR’s identity will be provided.

When submitting your registration dossier in REACH-IT:

  1. Click on “Menu” in REACH-IT
  2. Select “registration” as the type of dossier upload
  3. Upload the IUCLID dossier in the dossier submission wizard
  4. Continue to “Additional details”
  5. Click “Assign” next to “contact person”
  6. Click “Assign” next to the “Third party representative” field where you can assign an existing TPR or create a new one
  7. Continue to the “Confirmation” step of the wizard

Tasks for member registrants

As a member registrant if you don’t want your company name to be visible to your co-registrants, you must set a TPR when joining a joint submission and before submitting your registration dossier to ECHA.

Follow the below steps to assign a TPR when joining a joint submission:

  1. Click on “Menu” in REACH-IT
  2. Select “Join existing” joint submission
  3. Enter the joint submission name and security token
  4. Proceed to the ‘Contact details’ page. Here you have the option to create or assign an existing TPR
  5. Confirm your membership.

All the members of the joint submission will receive a notification in REACH-IT to inform them that a new member has joined the joint submission. 


 

If a TPR is appointed, the members will see the name of the TPR in the “Members of the joint submission” field of the joint submission page.

You need to assign the TPR once more when you submit your registration dossier in REACH-IT:

  1. Click on “Menu” in REACH-IT
  2. Select “registration” as the type of dossier upload
  3. Upload the IUCLID dossier in the dossier submission wizard
  4. Continue to “Additional details”
  5. Click “Assign” next to “contact person”
  6. Click “Assign” next to the “Third party representative” field where you can assign an existing TPR or create a new one
  7. Continue to the “Confirmation” step of the wizard
Where will the Third-Party Representative’s (TPR) identity be made visible?
If you have correctly assigned a TPR, you can verify its visibility on the following pages in REACH-IT. You will see the name of your TPR in the list of registrants, and under it your name in brackets. Other registrants will see only your TPR. 
 
  • In the Co-registrants page,
  • under the Potential registrants tab, if you included a TPR in a successful inquiry
  • under the Registrants tab, if you included a TPR in a successful registration dossier
  • In the Joint submission page
  • if you included a TPR during creation (lead registrant) or
  • if you included a TPR during confirmation (member registrant)
  • In the pre-SIEF, if included in a pre-registration.
For further information on how to assign a TPR, see Q&A 1768.
How can I claim confidentiality on the IUPAC name of my substance?
Regarding confidentiality claims on the IUPAC name we distinguish four scenarios:
 

Claim type

Substance is classified in accordance with REACH Art. 119(1)(a)

Phase in status

Dossier type

Published if claimed confidential

Fee required

IUPAC-f

non-phase-in

standard template, no INT/ sR&D or PPORD use

IUPAC-g

not relevant

INT template or standard template with only INT/ sR&D or PPORD use

Non-hazardous IUPAC claim

not relevant

not relevant

Inadmissible IUPAC claim

phase-in

standard template, no intermediate/ sR&D or PPORD use

 
You can claim the IUPAC name as confidential in accordance with Article 119(2)(f) or (g). We assess how you registered the substance and identify whether your IUPAC claim falls within the scope of an f- or g-claim.
 
  • Your claim is identified as an f-claim if you registered a non-phase-in substance which is classified in one of the hazard classes referred to in Article 119(1)(a). Your IUPAC name claim on such substances will be kept confidential for a period of 6 years.
  • Your claim is identified as a g-claim if you registered a substance which is classified in one of the hazard classes referred to in Article 119(1)(a) and is used ONLY as an intermediate (INT), in scientific research and development (R&D), in product and process orientated research and development (PPORD). Your IUPAC name claim on such substances will be kept confidential for an indefinite period.
To validate that the substance is used only the above way, we check (1) the dossier template and (2) the reported uses in section 3.5 of IUCLID.
 
If you need to register your substance with a full (standard) template and you use your substance ONLY as an INT, in scientific R&D, and in PPORD and it is relevant for your situation, you can record your use information the following way:
 
  • Uses at Industrial sites (S3.5.3)
  • Select the relevant status from the 'Registration/Notification status' picklist:
  • use as intermediate registered according to REACH Article 10; total tonnage manufactured/imported >=10 tonnes/year per registrant or;
  • use as intermediate registered according to REACH Article 10; total tonnage manufactured/imported <10 tonnes/year per registrant or;
  • use registered according to REACH Article 17/18.
  • If relevant, select the checkbox 'use In Scientific Research and Development' within 'Regulatory Status' field
  • Uses by Professional workers (S3.5.4)
  • If relevant, select the checkbox 'use in Scientific Research and Development' within 'Regulatory Status' field
  • Consumer Uses (3.5.5)
  • If relevant, select the checkbox 'use in Scientific Research and Development' within 'Regulatory Status' field
We may re-assess the validity of your claim, if we find at a later stage that the substance was incorrectly identified as an intermediate.
 
Inadmissible confidentiality claims on the IUPAC name:
Your confidentiality claim on the IUPAC name is considered inadmissible if it neither falls in the scope of Article 119(2)(f) or (g). E.g. if you registered a phase-in substance which is classified in one of the hazard classes listed in Article 119(1)(a), the conditions set out in Article 119(2)(f) are not met. Such confidentiality claims fall in the scope of Article 119(1)(a), therefore the IUPAC name must be published on the ECHA website.
 
Confidentiality claims made on non-hazardous substances:
If you claim confidentiality on a substance which is not classified in one of the hazard classes referred to in Article 119(1)(a) and not listed in EINECS, the IUPAC name is kept as confidential. These claims do not incur a fee and do not require a detailed justification.
How can I hide my identity from the public?
To hide the company’s identity from the public, you need to claim it by setting the confidentiality flag in Section 1.1 of the IUCLID registration dossier:
 
  • In IUCLID’s web interface, set the flag next to the field ‘Legal entity’ or
  • In IUCLID’s classic interface, set the flag above the field ‘Legal entity’. 
Such confidentiality claims are invoiced and assessed in accordance with REACH Article 119(2)(d). If the confidentiality claim is accepted, the company name will not be published on the ECHA website and will be indicated as [confidential] in the Registered substance fact sheet.
 
Note, however, that your identity will still be visible for your co-registrants in REACH-IT. Further information on how to hide your identity also from your co-registrants, is available in Q&A 1768.
I have a registration. How can I update my Third Party Representative in REACH-IT?

If you would like to update the assigned Third Party Representative (TPR) in REACH-IT, you need to make changes in two places, on the reference number and the joint submission pages. Follow the below steps to update the TPR.

To update the TPR displayed on the reference number page, follow the steps below, this change will be visible also on the co-registrants page:

  1. Click on “Substances” in REACH-IT
  2. Search for the specific registration and click on the reference number to access the reference number page
  3. Here update your TPR under the “Third party representative” label within the contact information section 

 
To update the TPR displayed in the joint submission page:

  1. If you are a member of a joint submission, click “View Joint Submission"
  2. Update your TPR in the “Joint submission contact” box under the title “Third party representative”


 

How can I claim my registration number as confidential?

You can claim confidentiality on the registration number by ticking the box ‘Confidentiality claim on registration number’ in the IUCLID dossier header.



 Alternatively, you can fill in a claim in section 1.3. Identifiers.

C. Confidentiality, Study summaries

In our read-across data, if we would like to claim the source endpoint(s) confidential, do we also need to place a CBI on the target endpoint?
You may claim the source endpoint(s) confidential without claiming the target substance confidential, but take note that:
 
  • the type of information and study results from the target and source records are always published. The IUCLID fields referring to results contain information e.g. indication of endpoint addressed, year and report date, test guideline, test results, remarks on results, etc.
  • in the study document record, only the information contained in the field 'Specific details on test material used for the study' is not published when you claim a study record confidential
  • inside the Test Material entity, only the information contained in the field ‘Details on test material’ is not published when you claim a study record confidential
  • ECHA publishes the study result type (read-across, experimental result, etc.), as part of the results of the study, in accordance with article 119(1)(d) and (e) of REACH. However, the substance you read-across from, listed in the test material section, will not be published if the study summary is claimed confidential.
How do I know whether the test material reference substance is flagged confidential?
Check that the flag appears in any of the following locations:
 
a. There is a confidentiality flag on the IUPAC name in section 1.1 or 1.2 for the linked reference substance in the test material
b. There is a confidentiality flag on the reference substance linked inside the Test Material entity
c. There is a confidentiality flag on the study record.
What information is published as part of the test material?

From the study document

Contents of the field

Dissemination rule

'Test material information'

the link itself is published to enable viewing of the Test material form’ information inside the TM entity

 

'Specific details on test material used for the study'

not published if study record is flagged

Specific details on test material used for the study (confidential)

not published

 

From the Test Material entity

Contents of the field

Dissemination rule

Test material name

not published

Type

published

Concentration and remarks

not published

Composition/purity

not published

Test material form

published

Details on test material

not published if study record is flagged

Confidential details on test material

not published

D. Confidentiality, SDS

What is considered as safety data sheet information and is it published by ECHA?
In accordance with Article 119(2)(d) of the REACH Regulation, we must publish the information which is contained in the safety data sheet, and which is not already published under other articles of REACH, unless it is successfully claimed confidential. Since a copy of the safety data sheet as such is not part of the data submitted to ECHA, it was determined which information has to be listed in both the safety data sheet (as set out in Annex II of REACH) and the registration dossier (as set out in Article 10 and Annexes I and VI of REACH). Information meeting both criteria that is not already published for other reasons (in accordance with Article 119 of REACH) is considered to be ‘safety data sheet information’.
 
The following information can be claimed confidential in accordance with Article 119(2)(d):
 
  1. legal entity;
  2. registration number;
  3. life cycle description and uses advised against;
  4. characterisation parameters of nanoforms;
  5. result of the PBT (Persistent, Bioaccumulative and Toxic chemicals) and vPvB (very Persistent and very Bioaccumulative) assessment;
  6. indication of whether a chemical safety assessment (CSA) was performed;
  7. article service life and article service life advised against;
  8. exposure scenario elements.
When Annex II of REACH is updated, the above list is reviewed and updated accordingly.
Under what conditions does ECHA publish the safety data sheet information from my dossier

Safety data sheet information is published from all registration dossiers, whether the substance requires a safety data sheet or not, unless claimed confidential. Confidentiality needs to be claimed separately for each item, using the confidentiality flags in IUCLID. For substances, which do not require a safety data sheet, it is considered that the registrant ‘volunteers’ the safety data sheet information entered into IUCLID for publication, if the information is not claimed confidential.

Further information is available in Q&A 0412.

Can I claim confidentiality on the Chemical Safety Report (CSR)?

We currently do not publish the CSR itself.

A confidentiality claim in section 13, where the CSR is attached does not cover the CSR itself. This claim covers the fact whether a Chemical Safety Assessment was performed on the substance, as this information is present in the safety data sheet. Information that is part of the safety data sheet can be claimed as confidential in accordance with REACH Article 119(2)(d) Other information in the Safety Data Sheet.

E. Confidentiality, Invoicing

When do I need to pay for a confidentiality claim on safety data sheet information?

Confidentiality claims on safety data sheet (SDS) information are only invoiced if the substance requires a safety data sheet. The fee for confidentiality claims on safety data sheet information is detailed in Annex IV of the Fee regulation. 

If the substance requires a safety data sheet

The fee is charged only once per registration, regardless of the number of confidentiality claims on some or all of the specific items of SDS information. If the fee has been charged once, subsequently placed confidentiality claims on safety data sheet information will not be charged anymore. However, a specific justification for each of the types of information claimed confidential is still required.

It should be noted that confidentiality claims on the PBT assessment (section 2.3), on exposure scenarios and local assessment (section 3.5), and on whether a Chemical Safety Assessment (CSA) was performed (section 13) are invoiced if the substance requires a safety data sheet and the registrant submits a CSR. 

Example:

If in a joint submission the lead registrant provides the Chemical Safety Report (CSR) on behalf of the members, only the lead will be invoiced for the before mentioned specific sections (i.e. provided that in the member dossier it is indicated that the CSR is submitted by the lead on behalf of the member). If a member individually submits the CSR, they will be charged for all potential SDS confidentiality claims (including sections 2.3, 3.5 and 13) as described above.

If the substance does not require a safety data sheet

It is deemed that the confidentiality claim indicates that the registrant does not volunteer the publication of the information, and no fee is charged for keeping this information confidential. Registrants can verify whether they will be charged for a confidentiality claim on safety data sheet information using the Fee Calculator in IUCLID. 

Confidentiality claim on safety data sheet information for monomers 

In accordance with the REACH Regulation, polymers are exempted from registration. However, monomer substances have to be registered under certain circumstances. A safety data sheet is needed for the monomer substance if it meets the relevant hazard criteria and it is placed on the European market. A safety data sheet for monomer substances is not required in the following situations:

  1. When the monomer is only imported as part of a polymer (as such or in a mixture).
  2. When the monomer is synthesized into the polymer directly by the manufacturer.

Consequently, a fee does not apply in these cases even if the safety data sheet related information is claimed confidential. In all other cases, a safety data sheet would be required for the monomer, as it will be made available from the manufacturer to a third party, and a fee would apply if the confidentiality on the safety data sheet is claimed.

If you receive an invoice for a confidentiality claim on safety data sheet information for a monomer which is covered by the conditions described above, please contact us via our contact form to explain your situation. We will analyse your case and provide you with instructions on how to proceed. The same applies for other substance(s) in the form of monomeric units and chemically bound substance(s).

I registered a NONS and I have a confidentiality claim in my dossier that was accepted under Directive 67/548/EEC. Will my claim remain valid under REACH? Do I need to pay again for the same claim under REACH?

Confidentiality claims accepted under Directive 67/548/EEC remain valid under REACH, as far as the information has not become available in the public domain. ECHA will assess the confidentiality claim and will – if the information is found to be publicly available – request further information before rejecting the claim. 

You do not need to pay for claims that were already made under Directive 67/548/EEC. For more information, see How to update your previously notified substance (NONS), point 8. Updating your confidentiality requests.

I claimed confidentiality but did not receive an invoice? What is the reason for it?
If confidentiality is claimed on information covered by REACH Article 119(2), normally a fee is levied to cover the work done on the assessment of the claim. The fee is detailed in Annex IV of the Fee regulation. You can verify whether you will be charged for a confidentiality claim by using the IUCLID Fee Calculator tool. If you are unsure why you have not received an invoice, below we explain in what conditions an invoice is sent:
 
  • Degree of purity and the identity of dangerous impurities or additives:
  1. the confidentiality claim is made on the legal entity composition and;
  2. you reported at least one impurity or additive and you selected the tickbox 'this impurity/additive is considered relevant for the classification and labelling of the substance'.
  • Tonnage band: you registered a substance with full (standard) dossier template.
  • Robust study summaries and study summaries: you claimed confidentiality on a (robust) study summary record

 

  • Safety Data Sheet (SDS) information: there are three main criteria to consider, (i) the registration type, (ii) whether a SDS is required for the substance and (iii) whether a Chemical Safety Report (CSR) is required.

The List of Safety Data Sheet claims with their respective rules (below the table you find the detailed description of the three main criteria):

 

Safety Data Sheet claim type

Not only OSII tonnage

SDS required

CSR required

Legal entity

 

Registration number

 

Use / Life cycle description and Use advised against

 

Characterisation parameters of nanoforms

 

Result of the PBT and vPvB assessment

Indication of whether a CSA was performed

Article service life and article service life advised against

 

Exposure scenario endpoint study record

 

1. You registered a substance with a full (standard) or transported isolated intermediate (TII) dossier template or their combination. Or you registered an onsite isolated intermediate (OSII) dossiers in combination of a full (standard) and/or TII tonnage. (Claims are not invoiced in only OSII dossiers.)
2. If a SDS is required for your substance:
 
  • The substance is hazardous as per own Classification & Labelling (C&L) in S2.1 GHS. (If you are a member of a Joint submission, we check the lead’s GHS section);
  • In S2.3 PBT assessment, the Substance is PBT/vPvB. (If you are a member of a Joint submission and you have not recorded a PBT assessment endpoint summary, we check the lead’s PBT assessment);
  • The substance is listed on the candidate list of substances of very high concern for Authorisation .
3. If a CSR is required for your substance:
 
  • a CSR is required, if your standard tonnage band is above 10 tonnes/year.
  • Trade name: you selected 'trade name' as identifier in the 'Other identifiers' table.
  • IUPAC name: you registered a substance that is classified in accordance with Article 119(1)(a) and is non-phase-in or used ONLY as an intermediate (INT), in scientific research and development (R&D) or in product and process orientated research and development (PPORD). For further information on how to encode a IUPAC name claim in IUCLID, see Q&A 1771.
If the confidentiality claim is on information which does not fulfil the above, it is not assessed and invoiced.
 
If you believe you should have received an invoice, contact us via our contact form.
I do not wish to keep my confidentiality claim anymore, can I get a refund from ECHA of the fee I paid for the claim?

The fee paid for the confidentiality claim is to cover our work assessing your claim. If you decide to withdraw the claim, we are not able to refund the fee.