MoCRA Compliance:
Complete Guide to FDA Cosmetic Requirements

This is a comprehensive guide designed to help cosmetics companies understand and navigate the full scope of MoCRA compliance requirements in the United States. Because the Modernization of Cosmetics Regulation Act introduced the most significant expansion of FDA cosmetic oversight in decades, compliance now involves far more than a simple registration exercise.

This article is intentionally detailed and in depth. It covers the core legal obligations under MoCRA, including facility registration, cosmetic product listing, safety substantiation, serious adverse event reporting, labeling requirements, FDA records access, and the role of the U.S. agent for foreign manufacturers. Whether you are a brand owner, contract manufacturer, private label company, or international exporter, this guide provides a complete overview of the regulatory framework companies must now manage to maintain access to the U.S. cosmetics market.

Table of Content

MoCRA compliance refers to the set of legal obligations that now apply to many cosmetics marketed in the United States under the Modernization of Cosmetics Regulation Act of 2022. For cosmetics companies, MoCRA compliance is no longer a peripheral issue. It is now a core regulatory requirement that affects facility registration, product listing, safety substantiation, adverse event reporting, labeling, and FDA oversight. Because MoCRA significantly expanded FDA authority over cosmetics, companies placing products on the U.S. market need a structured compliance approach rather than a fragmented, product by product response.

What exactly is MoCRA?

The Modernization of Cosmetics Regulation Act of 2022, commonly called MoCRA, is the most significant expansion of FDA cosmetic authority since the original FD&C Act of 1938. It created a modern federal framework for cosmetic oversight by introducing mandatory facility registration, mandatory product listing, serious adverse event reporting, safety substantiation obligations, and new FDA records access and recall related powers. It also directed FDA to develop additional rules and standards, including cosmetic GMP requirements, fragrance allergen labeling requirements, and standardized asbestos testing methods for talc containing cosmetics.

In practical terms, MoCRA compliance means that cosmetic companies must now be able to demonstrate not only that their products are appropriately labeled and supported for safety, but also that they have the operational systems needed to interact with FDA in a timely and legally defensible way. That includes maintaining safety records, monitoring adverse events, understanding who the responsible person is, and ensuring required FDA submissions are made correctly and kept up to date.

Who Must Comply with MoCRA?

MoCRA compliance can apply to several actors across the cosmetics supply chain. At the facility level, every person that owns or operates a facility engaged in the manufacturing or processing of a cosmetic product for distribution in the United States must evaluate whether registration is required. At the product level, the responsible person, meaning the manufacturer, packer, or distributor whose name appears on the label, is central to product listing, safety substantiation, and serious adverse event reporting obligations.

This means MoCRA compliance may affect cosmetic manufacturers, processors, contract manufacturers, brand owners, private label companies, import related operations that meet the statutory definitions, and foreign manufacturers exporting cosmetics to the United States. Imported cosmetics must comply with the same U.S. legal requirements as domestically produced cosmetics, and foreign facilities distributing cosmetics in the U.S. must assess both registration obligations and the need to designate a U.S. agent.

Responsibilities differ depending on role. A facility owner or operator handles facility registration duties. The responsible person handles product listing and must ensure there is adequate safety substantiation for each marketed cosmetic product. The responsible person is also the party required to receive and report serious adverse events tied to the product.

Key MoCRA Compliance Requirements

MoCRA cosmetic compliance rests on several major pillars. The most important are FDA cosmetic facility registration, FDA cosmetic product listing, cosmetic safety substantiation, serious adverse event reporting, labeling compliance, and readiness for FDA records access and inspection related activity. Together, these requirements form the operational backbone of MoCRA compliance.

FDA Cosmetic Facility Registration

Under section 607 of the FD&C Act as implemented through MoCRA, facilities that manufacture or process cosmetic products for distribution in the United States generally must register with FDA. FDA guidance explains that facilities already operating on December 29, 2022 had to register by December 29, 2023, while facilities that first began such activity after that date must register within 60 days of first engaging in the activity. FDA later announced enforcement discretion for registration and listing until July 1, 2024, but the underlying statutory requirements remain in place.

 

Facility registrations must be updated within 60 days of changes to required registration information, and renewals are required biennially. FDA’s updated 2026 registration materials clarify that a cosmetic facility registration needs to be renewed every two years from the initial registration date, and FDA now provides renewal reminder functionality through Cosmetics Direct for relevant facility contacts, including the U.S. agent where applicable.

 

Not every establishment is required to register. FDA guidance explains, for example, that establishments solely performing storage are not required to register. MoCRA also includes exemptions for certain small businesses from facility registration and product listing, but that exemption does not apply if the business manufactures or processes certain higher risk categories such as products that regularly contact the eye’s mucous membrane, are injected, are intended for internal use, or are intended to alter appearance for more than 24 hours where removal by the consumer is not part of customary use. Facilities manufacturing only products that are both drugs and cosmetics are also outside section 607 registration unless they also handle non drug cosmetics.

FDA Cosmetic Product Listing

MoCRA requires the responsible person to submit a cosmetic product listing for each marketed cosmetic product, including product ingredients, and to keep that information updated. For products already marketed on December 29, 2022, listing was due by December 29, 2023. For products first marketed after that date, listing must generally occur within 120 days of marketing in interstate commerce, subject to FDA’s earlier enforcement discretion timeline.

Product listings must be updated annually, including when a product is discontinued. FDA also provides an abbreviated renewal approach where there has been no change since the prior listing. The responsible person is the manufacturer, packer, or distributor whose name appears on the label, so brand owners and private label structures need to determine that role carefully before making submissions.

FDA accepts cosmetic registration and listing submissions through Cosmetics Direct, and paper forms also remain available. There is no FDA fee for submitting a cosmetic facility registration or cosmetic product listing under section 607, which removes one barrier but does not reduce the importance of data accuracy and submission governance.

Safety Substantiation

MoCRA compliance requires that the responsible person ensure and maintain records supporting adequate safety substantiation for each cosmetic product. FDA explains that neither the law nor FDA regulations require specific tests for every product or ingredient, but the data used must come from scientifically robust methods. Animal testing is not required by MoCRA.

 

This is a critical point in MoCRA cosmetic compliance. The legal standard is not simply to possess technical files in a general sense. The responsible person must be able to support the safety of the cosmetic product with appropriate evidence and maintain those supporting records. In practice, this can include toxicological assessments, ingredient data, formula review, exposure based reasoning, stability and compatibility information where relevant, microbiological considerations where relevant, and documented safety conclusions proportionate to the product’s nature and use. The first two points are expressly grounded in FDA’s safety substantiation framework, while the latter examples reflect the kinds of scientific support companies typically assemble to meet that obligation.

Serious Adverse Event Reporting

MoCRA introduced mandatory serious adverse event reporting for cosmetics. FDA defines a serious adverse event as one that results in death, a life threatening experience, inpatient hospitalization, a persistent or significant disability or incapacity, a congenital anomaly or birth defect, an infection, or significant disfigurement, or that requires medical or surgical intervention to prevent one of those outcomes.

 

The responsible person must report a serious adverse event associated with the use of a cosmetic product in the United States to FDA within 15 business days. The report must include a copy of the label on or within the retail packaging. If the responsible person receives new and material medical or other information within one year of the initial report, that follow up information must also be submitted to FDA within 15 business days. FDA indicates that these reports can be submitted electronically through the Safety Reporting Portal, and responsible persons may also voluntarily submit non serious cosmetic adverse event reports through that portal.

 

MoCRA compliance also requires recordkeeping discipline around adverse events. FDA has specifically clarified in its 2026 draft records access guidance that adverse event related records may be reviewed during inspection, including communications, seriousness assessments, and reports submitted to the agency.

Cosmetic Labeling Requirements

MoCRA compliance includes several labeling implications. Each cosmetic product must bear a label that includes a domestic address, domestic phone number, or electronic contact information, which may be a website, through which the responsible person can receive adverse event reports. This requirement is operationally important because adverse event intake is not merely a customer service issue under MoCRA. It is part of the statutory compliance framework.

 

Companies must also continue to comply with broader FDA cosmetic labeling rules under the FD&C Act, the Fair Packaging and Labeling Act, and 21 CFR Part 701. Misbranding risks can arise from false or misleading information, missing required information, poor prominence or readability, and violations of required labeling elements.

 

Fragrance allergen disclosure is especially important to monitor. MoCRA required FDA to establish fragrance allergen labeling requirements by regulation. As of the FDA materials reviewed in March 2026, this remains an area of future rulemaking rather than a finalized stand alone obligation already fully implemented through a final rule, so companies should treat it as a coming compliance topic requiring regulatory monitoring rather than assume a completed final framework is already in force.

FDA Records Access and Inspections

MoCRA gave FDA new records access powers for cosmetics. Under section 605, FDA may access adverse event report records during inspections. Under section 610, FDA may access and copy certain records when it has a reasonable belief that a cosmetic product is likely adulterated and that use or exposure presents a threat of serious adverse health consequences or death.

 

FDA’s January 2026 draft guidance explains that, in appropriate circumstances, this records access can include manufacturing records, raw material receipt records, product distribution records, analytical results, recall records, customer distribution lists, complaint records, and safety substantiation records. For companies, this means MoCRA compliance is not limited to filings. It also requires a retrievable, inspection ready documentation system.

The Role of the MoCRA US Agent for Foreign Cosmetic Facilities

Foreign cosmetic facilities that must register with FDA are required to designate a U.S. agent for registration purposes. FDA guidance explains that the U.S. agent must reside in the United States or maintain a U.S. place of business and be physically present in the United States. A mailbox or answering service alone is not sufficient.

 

The MoCRA US Agent serves as a practical regulatory liaison between FDA and the foreign establishment. FDA states that the U.S. agent’s responsibilities generally include assisting FDA in communications with the foreign establishment, responding to questions concerning imported products, assisting with the scheduling of inspections, and receiving information or documents from FDA when the agency cannot contact the foreign facility directly or expeditiously. From a compliance perspective, this makes the MoCRA US Agent an important operational function, especially for foreign manufacturers that need reliable communication management with U.S. regulators.

How Companies Can Achieve MoCRA Compliance

A sound MoCRA compliance program usually starts with regulatory scoping. A company should first determine whether its products are cosmetics under U.S. law, whether any products are also drugs, who the responsible person is for each marketed product, and which facilities are manufacturing or processing products for U.S. distribution. This initial mapping is essential because the registration, listing, safety, and reporting duties do not always sit with the same entity.

 

The next step is submission readiness. Facilities that must register need an FEI and accurate registration data. Responsible persons need listing workflows, ingredient and product category data, and an annual update process. Foreign facilities also need a properly designated MoCRA US Agent.

 

After that, companies need documentation readiness. That includes maintaining adequate safety substantiation records, labeling review files, complaint handling procedures, serious adverse event escalation processes, and an internal method to assess whether new information triggers FDA reporting deadlines. Because FDA now has defined records access authorities, document organization is part of compliance, not an administrative afterthought.

 

Finally, MoCRA compliance requires ongoing monitoring. Registration renewals occur every two years, product listings require annual updates, labeling obligations can evolve through future FDA rulemaking, and enforcement expectations may continue to develop through guidance and practice. Companies that treat MoCRA as a one time project risk falling out of compliance quickly.

Common MoCRA Compliance Challenges

One common challenge is determining who holds which legal responsibility. In contract manufacturing and private label structures, the entity operating the facility may not be the same as the responsible person named on the product label. That can create confusion around who registers, who lists, who maintains safety substantiation, and who reports serious adverse events. The statutory framework makes those distinctions important.

 

A second challenge is safety data assembly. FDA does not prescribe one mandatory testing package for all cosmetics, but it does require adequate safety substantiation supported by scientifically robust methods. That flexibility can be helpful, but it also means companies must exercise scientific judgment and maintain records that would withstand regulatory scrutiny.

 

A third challenge is submission governance. Facility registration, biennial renewal, annual product listing updates, and 15 business day serious adverse event reporting timelines require consistent internal coordination. This is particularly demanding for global supply chains, multi brand portfolios, and foreign manufacturers that must coordinate with a U.S. agent and U.S. market responsible person structures. Those operational difficulties are a direct inference from the FDA framework and timelines.

How Regulatory Experts Can Support MoCRA Compliance

Specialized regulatory consultancies can support MoCRA compliance by helping companies determine applicability, identify the correct responsible person and facility obligations, prepare or review FDA registration and product listing submissions, evaluate safety substantiation records, and build adverse event and labeling procedures aligned with the current FDA framework. These support activities map directly onto the obligations FDA has described.

 

For foreign manufacturers, external experts can also serve as or coordinate with the MoCRA US Agent, streamline communications with FDA, and reduce the risk of errors caused by unclear role allocation. This is often especially valuable when companies are entering the U.S. market for the first time or when one group entity manufactures products and another appears on label as the responsible person.

Conclusion

MoCRA compliance is now a central requirement for companies marketing cosmetics in the United States. It covers far more than one registration step. It includes FDA cosmetic facility registration, FDA cosmetic product listing, cosmetic safety substantiation, serious adverse event reporting, labeling obligations, and preparedness for FDA records access and oversight. Companies that understand these obligations early and build an integrated compliance system are in a far stronger position to manage regulatory risk and support continued access to the U.S. market.

Author

Get in Touch

Need a piece of advice, a quotation or answers to your questions?

Fill in this form or contact us directly: info@biorius.com – We will answer as soon as possible!

As specialists in cosmetic Regulations for more than 15 years, Biorius offers a reliable turnkey solution for placing cosmetic products in various markets: