A Member State, or ECHA on request of the European Commission, can propose restrictions.  The intention to prepare a proposal is published on the registry of intentions on the ECHA webpage.  Later on, the actual proposal is made public on the ECHA webpage and is open, to everyone, for comments.  The final restriction, as proposed by the EU commission and confirmed by the Member states and the European parliament, is published as an amendment to the REACH regulation.  Annex XVII was last amended in June 2017.
Source: ChemAdvisor, Inc. 

Did this answer your question?