MoCRA Compliance for Private Label Skincare FAQ

Does MoCRA require FDA approval before a cosmetic is sold?

No pre-market approval is required, but MoCRA introduces mandatory facility registration and product listing. Cosmetic manufacturing and processing facilities must register with the FDA and renew biennially, and each marketed cosmetic must be listed with its ingredients. Selling an unregistered or unlisted product is a violation a retailer can check, so collect the registration number and listing reference from your OEM as contract deliverables before the purchase order closes.

Who is the responsible person under MoCRA?

The responsible person is the manufacturer, packer, or distributor whose name appears on the label of a cosmetic marketed in the United States. That entity holds the safety substantiation records and files adverse event reports with the FDA within the statutory window. For most private-label brands, printing the brand name on the pack makes the brand the responsible person, whether or not the role was intended.

What does safety substantiation actually require?

Each cosmetic must have adequate substantiation of safety held before the product is marketed. In practice that means a documented file: ingredient-level safety reviews, a formula-level evaluation covering concentrations and exposure, stability data for the declared shelf life, microbiological and preservative efficacy evidence for water-containing formulas, packaging compatibility data, and evidence for each claim printed on the label. A supplier email asserting the product is safe does not satisfy the requirement.

How does adverse event reporting work for a small brand?

The requirement is not that events occur but that a process exists to record, investigate, and report serious adverse events to the FDA within the statutory window. A controlled log with a named owner and a defined escalation path satisfies the process element. An unwritten intention to handle complaints does not, and an investigator reviewing records looks for the log rather than the intention.

What are the registration and renewal timelines?

Facility registration is filed by the facility owner or operator and renewed biennially. Product listing is filed by the responsible person when a cosmetic is marketed and updated when the formulation changes. Ingredient detail is captured in the listing at that point. Because registration follows the facility, one registered factory can support several brands, while listing and substantiation stay with each product and its responsible person.

What do the talc and PFAS mandates change for sourcing?

MoCRA sets specific testing and reporting mandates for particular ingredient categories, including testing of cosmetic talc-containing products for asbestos and reporting on intentional PFAS use. For a skincare brand the practical effect is a sourcing question asked earlier: does any raw material or process aid introduce a covered substance, and can the supplier document it? Supplier declarations collected at qualification cost far less than a retroactive test campaign.

How does the U.S. file relate to EU and other markets?

Treat the U.S. submission as one extract from a master product file containing the formula, ingredient safety evidence, GMP proof, stability and microbiology data, and label text. The FDA register-and-list model parallels the EU CPNP notification and Product Information File, and both expect good manufacturing practice evidence such as ISO 22716. Building the master file once lets a brand submit to the U.S., the EU, and ASEAN in sequence. Sources: U.S. FDA cosmetics registration under MoCRA, U.S. FTC truth in advertising, CIR ingredient safety assessments, ISO 22716.