Direct Answer

U.S. market entry under MoCRA means three obligations completed before a private-label cosmetic ships: registering each manufacturing and processing facility with the FDA and renewing that registration, listing each marketed cosmetic with its ingredients, and holding adequate safety substantiation with an adverse event reporting process attached. There is no pre-market approval, so the compliance gate is the file rather than a licence, and the responsible person named on the label carries it. A brand that assumes its OEM's paperwork covers the launch discovers the gap when a retailer requests the facility registration number and the product listing reference.


Opening Hook

A private-label skincare brand placed its first U.S. order, printed the label with its own company name, and moved 20,000 units into a national retailer's warehouse. The retailer's onboarding portal then asked for two things no one had prepared: the manufacturing facility's MoCRA registration number and the product listing reference. The brand's OEM had not registered, and the label name made the brand itself the responsible person for a product it could not substantiate. Stock sat in the warehouse for five weeks while the paperwork was rebuilt. At ubitglow, we run the U.S. registration and listing sequence as part of production. The order of operations below is what keeps a launch on schedule.


What MoCRA Changed for Cosmetic Brands

The Modernization of Cosmetics Regulation Act updated a cosmetics framework that had changed little in decades, and it added obligations that turn a label study into a registration exercise. Four duties define the new baseline.

MoCRA ObligationWhat It RequiresWho Holds It
Facility registrationRegister each facility that manufactures or processes cosmetics for U.S. distributionThe facility owner or operator
Product listingList each marketed cosmetic with its ingredientsThe responsible person
Safety substantiationHold adequate evidence that the product is safeThe responsible person
Adverse event reportingRecord and report serious adverse events to the FDAThe responsible person

The critical shift for private-label brands is that the obligations attach to entities and products rather than to finished shipments. Registration follows the facility; listing follows the product; substantiation and event reporting follow the responsible person named on the label. Each can be satisfied by a different party, which is why the contracts matter as much as the forms.


Facility Registration and Product Listing Timelines

Registration and listing are related but distinct actions, and they run on different clocks. Confusing them is the most common source of surprise.

ActionWho FilesTriggerRenewal
Facility registrationFacility owner or operatorFacility is engaged in manufacturing or processingBiennial renewal
Product listingResponsible personCosmetic is marketed in the U.S.Updated with changes
Ingredient detail in listingResponsible personAt listingWith formulation changes
Safety substantiation fileResponsible personBefore marketingOn reformulation

Data: Under MoCRA, the FDA requires cosmetic manufacturing and processing facilities to register and cosmetic products to be listed, moving the U.S. from a voluntary reporting environment to a mandatory registration and listing regime for marketed cosmetics.

Judgment: Collect the facility registration number and the product listing reference as contract deliverables from your OEM before the purchase order closes; when a retailer or a customs broker asks for them, a brand that has the two numbers in the vendor file answers in minutes rather than stalling a shipment.

Source: U.S. FDA — Cosmetics Registration & Listing under MoCRA (2024)


The Responsible Person and Adverse Event Reporting

The responsible person is the manufacturer, packer, or distributor whose name appears on the label. For most private-label brands, printing the brand name on the label makes the brand the responsible person, whether or not the brand realised the role came with duties.

Responsible Person DutyPractical Deliverable
Safety substantiationA documented safety file for each product
Adverse event recordsA log of serious adverse events and investigations
FDA reportingReports filed within the statutory window for serious events
Label accuracyIngredient, identity, and warning statements on the pack
Response to FDACooperation on records requests and inspections

Adverse event reporting is the duty most often overlooked, because a small brand rarely expects to receive a serious event report. The requirement, however, is not that events occur but that a process exists to record, investigate, and report them. A simple controlled log with a named owner satisfies the process element; an unwritten intention does not.

Data: The U.S. Federal Trade Commission requires advertising claims to be truthful, non-deceptive, and substantiated by evidence held before the claim is made, an advertising standard that sits alongside MoCRA's product-safety requirements for the same label.

Judgment: Hold the evidence for each label claim, such as clinically tested or hypoallergenic, in the same archive as the safety file; MoCRA regulates product safety while the FTC regulates the words on the pack, and a private-label brand needs both files before a claim ships.

Source: U.S. FTC — Truth in Advertising and Claim Substantiation (2024)


Safety Substantiation and What a Real File Looks Like

Adequate substantiation is a documented conclusion, not an assurance. The file should let a reviewer trace the product's safety from ingredients through the finished formula.

  1. Ingredient-level reviews for each raw material, including published safety assessments where available.
  2. A formula-level safety evaluation that considers concentrations, exposure, and the product's use.
  3. Stability data confirming the product holds through shelf life under the declared storage conditions.
  4. Microbiological testing and preservative efficacy evidence for water-containing formulas.
  5. Packaging compatibility data where the pack contacts the formula.
  6. Claim evidence for each printed statement that implies a safety or performance benefit.

The private-label structure changes who compiles the file but not what it contains. The brand owns the substantiation, so the OEM's data has to be transferred into the brand's archive rather than left in the factory's drawer.

Data: Independently published ingredient safety assessments, such as those produced by the Cosmetic Ingredient Review, consolidate toxicological evidence for individual cosmetic ingredients and give a brand a traceable basis for ingredient-level safety conclusions inside its substantiation file.

Judgment: Request consolidated safety reviews from your OEM for each active or novel ingredient at formulation stage and file them by ingredient; when a reviewer asks how a concentration was judged safe, an indexed review answers the question directly, while an unsupported assertion invites a deeper request.

Source: Cosmetic Ingredient Review (CIR) — CIR Ingredient Safety Assessments (2024)


Talc, PFAS, and the Ingredient Mandates to Watch

MoCRA also introduced specific testing and reporting mandates for particular ingredient categories, and these shape sourcing decisions for skincare brands that touch powders or performance coatings.

MandateScopeWhat It Means for Sourcing
Talc testingCosmetic talc-containing productsTest for asbestos under the prescribed method
PFAS reportingCosmetic products intentionally added with PFASReport per- and polyfluoroalkyl substances use
Ingredient disclosureProduct listingDeclare ingredients as required in the listing
Allergen sensitivityFragrance and sensitizersPrepare for tighter fragrance disclosure expectations

For a skincare brand, the practical effect is a sourcing question asked earlier than before: does any raw material or process aid introduce a covered substance, and can the supplier document it? A supplier declaration collected at qualification is far cheaper than a retroactive test campaign. Because the pairing of formula and pack also matters for substantiation, the packaging material selection guide covers compatibility evidence, and the microbiology testing guide shows the preservative data a substantiation file expects.

Brands entering multiple markets should treat the U.S. file as one extract from a master file. Our EU CPNP entry guide covers the parallel notification model, the Canada entry guide shows how notification attaches to an importer, and the shelf life and expiry dating guide explains the durability data that supports stability and labelling claims.

Data: ISO 22716 gives the manufacturing-practice documentation that substantiates how a cosmetic batch was produced, which supplies the process evidence a safety file and a regulator's records request both expect.

Judgment: Confirm current ISO 22716 certification for the manufacturing site before committing to a U.S. launch and archive the certificate beside the facility registration number; substantiation rests on the safety conclusion, but the manufacturing record is what shows the conclusion was met in production.

Source: ISO — ISO 22716 Cosmetics Good Manufacturing Practices (2024)


The Bottom Line

U.S. entry under MoCRA is a registration-and-file discipline completed before shipping: register the manufacturing facility and renew biennially, list each product with its ingredients, hold documented safety substantiation for every formula, and keep an adverse event reporting process with a named owner. The responsible person named on the label carries the file, so a private-label brand that prints its own name should collect the registration number, the listing reference, and the substantiation data from its OEM as contract deliverables. No pre-market approval exists to wait for, which means the paperwork you assemble is the entire gate.

At ubitglow, the U.S. registration and listing sequence runs alongside production — facility registration, product listing, and substantiation transfer are confirmed before bulk release, not after the retailer asks.