What Is MoCRA and Why Does It Matter?
The Modernization of Cosmetics Regulation Act (MoCRA), signed into law in December 2022, fundamentally reshapes how the FDA regulates cosmetics and personal care products sold in the United States. For the first time in decades, cosmetic brands face mandatory federal requirements that carry real enforcement weight — including facility registration, product listing, serious adverse event reporting, and safety substantiation documentation.
For brand founders, contract manufacturers, and R&D teams, MoCRA is not merely a compliance checkbox. It represents a structural shift in how beauty and personal care products must be developed, documented, and brought to market. Brands that proactively align their operations with MoCRA requirements gain a measurable competitive advantage — while those who delay risk FDA warning letters, import alerts, and product seizures.
Key MoCRA Requirements at a Glance
MoCRA introduces five major compliance pillars that every cosmetic company operating in the U.S. must understand:
- Facility Registration: All facilities that manufacture or process cosmetic products must register with the FDA biennially. Registration opened December 29, 2023.
- Product Listing: Each distinct cosmetic product must be listed with the FDA, including the product name, ingredient list, and responsible person information. Initial listings were due by December 29, 2023.
- Serious Adverse Event Reporting (SAER): Responsible persons must report serious adverse events to the FDA within 15 business days of receiving a consumer complaint. Records must be maintained for six years.
- Safety Substantiation: Every cosmetic product must have adequate substantiation of safety before it is marketed. This includes ingredient safety assessments and product-level testing data.
- Labeling Requirements: MoCRA introduces new labeling mandates including fragrance allergen disclosure and professional-use product requirements.
Facility Registration: Who Must Register and How
Under MoCRA, any facility — domestic or foreign — that manufactures or processes cosmetic products for distribution in the United States must register with the FDA. This includes contract manufacturers, toll manufacturers, and private label producers. Registration must be renewed every two years.
Small businesses (defined as those with annual gross sales of cosmetic products under $1,000,000, excluding sales of products not primarily intended for retail sale) may qualify for certain exemptions, but they are not exempt from all MoCRA requirements. Responsible persons for small businesses must still submit product listings, maintain safety substantiation, and comply with adverse event reporting requirements.
The registration process is conducted through the FDA Cosmetics Direct electronic system. Facilities must provide: the facility name and address, the parent company name (if applicable), the facility registration number (if previously issued), and the product categories manufactured at the facility.
Product Listing Requirements
Product listing is distinct from facility registration. Where registration covers the physical location of manufacturing, product listing covers each individual cosmetic product. The responsible person — typically the brand owner or U.S. importer — must submit a listing for each product, or a representative form of each product (e.g., a product line with the same formulation but different shades).
Required listing information includes: the product name, the cosmetic category, all ingredients including fragrances (in the order required by existing FDA regulations), the responsible person's name and contact information, and the facility registration numbers of facilities that manufacture or process the product.
Product listings must be updated annually. When a product is discontinued, the responsible person must notify the FDA within 120 days.
Serious Adverse Event Reporting
One of the most operationally significant MoCRA requirements is the mandatory reporting of serious adverse events. A serious adverse event is defined as one that results in death, a life-threatening experience, inpatient hospitalization, a persistent or significant disability or incapacity, a congenital anomaly or birth defect, or medical or surgical intervention to prevent such outcomes.
Responsible persons must report such events within 15 business days of first receiving the complaint. All adverse event records — serious or not — must be maintained for six years and must be made available to the FDA upon request.
Building a robust adverse event intake and documentation system is essential. Brands should establish a clear internal process for receiving, triaging, and documenting consumer complaints, and should have a procedure in place for escalating reports that meet the "serious" threshold.
Safety Substantiation: What Evidence Is Required?
MoCRA codifies what many responsible formulators have always practiced: every cosmetic product must have adequate substantiation of safety before it reaches consumers. However, the law does not prescribe a specific list of required tests — it requires that safety be substantiated based on the relevant facts and circumstances, including the formulation, intended use, and potential for harm.
In practice, a robust MoCRA safety substantiation file should include:
- Ingredient safety assessments for all active and functional components
- Finished product safety assessment conducted by a qualified safety assessor
- Stability testing data (minimum 12-month accelerated testing is industry standard)
- Microbial challenge testing (preservative efficacy testing)
- Human repeat insult patch test (HRIPT) data, where applicable
- Documentation of finished product compatibility with packaging
- Toxicological review of any novel or high-use-rate ingredients
MoCRA Compliance Timeline
The following dates mark the key MoCRA enforcement milestones:
- December 29, 2023: Facility registration and initial product listing opened.
- July 1, 2024: Mandatory fragrance allergen labeling requirements take effect for products manufactured after this date.
- December 29, 2024: Small businesses (qualifying criteria apply) must complete facility registration and product listing by this date.
- Ongoing: Adverse event reporting obligations and recordkeeping are ongoing from the effective date of MoCRA.
How Volkano Labs Supports MoCRA Compliance
At Volkano Labs, MoCRA compliance is embedded directly into our product development and contract manufacturing workflows. Every formulation we develop includes comprehensive safety documentation, and our regulatory affairs team supports clients with facility registration, product listing submissions, and adverse event management protocols.
Our team of experienced cosmetic scientists and regulatory specialists works alongside brand founders to ensure that safety substantiation files are complete, defensible, and ready for FDA inspection at any time. From new product launches to reformulations and label updates, we guide brands through every compliance requirement with precision and speed.
If your brand needs support navigating MoCRA, contact the Volkano Labs team today. Our regulatory consulting practice is built specifically for the challenges facing modern cosmetic brands.