MoCRA Compliance Checklist for Cosmetic Brands

Before MoCRA, FDA oversight of cosmetics was largely post-market and limited compared with drugs or dietary supplements. The Modernization of Cosmetics Regulation Act changed that framework. Cosmetic brands now face registration, listing, recordkeeping, and reporting obligations that marketing and legal teams must coordinate with operations and quality teams.

What is MoCRA and who does it apply to?

MoCRA amended the Federal Food, Drug, and Cosmetic Act to give FDA explicit authority over cosmetic facility registration, product listing, good manufacturing practice standards, safety substantiation, and serious adverse event reporting. The law applies to facilities that manufacture or process cosmetic products for U.S. distribution, including contract manufacturers and brands that use third-party labs. FDA MoCRA overview explains which facilities must register and which products must be listed.

The "responsible person" — typically the brand owner or distributor named on the label — carries specific MoCRA obligations even when manufacturing is outsourced. Contract manufacturing agreements should spell out who registers facilities, who submits product listings, who maintains safety substantiation files, and who receives adverse event reports. Ambiguity between brand and co-manufacturer is a recurring gap in FDA correspondence.

MoCRA compliance checklist: facility registration and product listing

• Confirm whether your company or contract manufacturer must register each manufacturing/processing facility with FDA.
• Renew facility registration every two years (biennial renewal).
• List each marketed cosmetic product with FDA, including responsible person contact information.
• Update listings when formulations change materially or when products are discontinued.
• Maintain records linking each SKU to its listed product file and responsible person.

Product listing is not a one-and-done task at launch. FDA expects listings to reflect products as currently marketed, including material formulation changes, new shades or sizes that alter identity, and discontinuations. Brands selling through DTC, Sephora, Amazon, and international distributors should confirm that every U.S.-marketed SKU has a corresponding listing record and that internal SKU codes map cleanly to FDA listing identifiers for audit purposes.

What safety substantiation does MoCRA require?

MoCRA requires that cosmetic products have adequate safety substantiation before marketing. FDA has stated that safety substantiation may rely on tests, studies, or other evidence appropriate to the product and its ingredients. The records must be maintained and available to FDA upon request. This is separate from — but related to — how you describe product benefits in advertising. FDA MoCRA fact sheet summarizes registration, listing, and safety substantiation expectations for responsible persons.

Safety substantiation under MoCRA is a product-level obligation, not an ingredient marketing exercise. A file might include toxicological assessments, stability data, patch testing, microbiological testing, and supplier documentation for each ingredient at use levels in the finished formula. When brands reformulate — even to swap a fragrance or preservative — they should reassess whether existing safety support still covers the new version before shipping updated inventory.

How MoCRA connects to labeling and advertising

A product can satisfy MoCRA listing requirements yet still create FDA or FTC exposure through claims. MoCRA does not authorize disease claims on cosmetics, and the FTC still evaluates whether advertising is truthful and substantiated. Natascia Taken, Esq. recommends that brands review label copy, website claims, and influencer scripts alongside MoCRA compliance files so messaging stays consistent with how the product is categorized.

MoCRA also intersects with longstanding cosmetic labeling rules. Principal display panel requirements, INCI ingredient declarations, net quantity statements, and responsible person contact information remain mandatory regardless of listing status. See our cosmetic labeling requirements checklist for PDP and ingredient basics. If marketing copy crosses from appearance benefits into disease treatment language, FDA may view the product as an unapproved drug — a separate issue from MoCRA registration. See our guide on cosmetic vs. drug claims for that classification framework.

What MoCRA GMP requirements should brands prepare for?

MoCRA directs FDA to establish good manufacturing practice regulations for cosmetics. While rulemaking continues, brands should expect GMP expectations aligned with documented procedures for sanitation, equipment maintenance, batch records, and complaint handling. Contract manufacturers should provide GMP-related documentation in quality agreements, and brands should verify — not assume — that third-party facilities maintain records FDA could request during inspection.

What are MoCRA adverse event reporting requirements?

Responsible persons must report serious adverse events associated with cosmetic use to FDA within 15 business days of receipt, with follow-up information within one year if requested. A "serious adverse event" includes outcomes such as death, hospitalization, significant disability, or medical intervention. Brands should train customer service and social teams to escalate reports that may trigger reporting obligations.

Adverse event systems should capture reports from every channel: email, chat, phone, retailer returns, social media comments, and beauty professional feedback. Even if a report does not meet the "serious" threshold for FDA submission, documenting non-serious complaints helps identify trends before they escalate. Natascia Taken, Esq. advises brands to maintain a written SOP defining who triages reports, what questions to ask consumers, and how medical information is preserved for potential FDA follow-up.

What labeling issues still matter under MoCRA?

MoCRA did not replace existing cosmetic labeling rules. Principal display panels, ingredient declarations (INCI), net quantity, and responsible person contact information remain essential. Fragrance allergen labeling requirements are being phased in under FDA rulemaking. See the existing cosmetic labeling checklist on this site for PDP and ingredient basics, and treat MoCRA as the operational layer on top of those requirements.

Common MoCRA compliance mistakes cosmetic brands make

• Assuming contract manufacturers handle all MoCRA obligations without a written agreement defining roles.
• Listing products once at launch but failing to update listings after reformulations.
• Treating safety substantiation as a marketing task rather than a documented technical file.
• Ignoring adverse event signals from reviews, social media, or customer service tickets.
• Marketing products with drug-like claims while listing them as conventional cosmetics.

What should cosmetic brands do now?

Start with a gap assessment: registration status, listing completeness, safety files, adverse event procedures, and GMP readiness. Assign an internal owner for FDA correspondence and calendar biennial renewals. If you use multiple contract manufacturers, map which facility manufactures which SKU. This article provides general educational information about MoCRA — not legal advice for your specific product line.