What Is MoCRA and Why Does It Matter for My Makeup?
The Modernization of Cosmetics Regulation Act of 2022 represents the most significant expansion of FDA cosmetic authority since the Federal Food, Drug, and Cosmetic Act of 1938. Enacted in December 2022, MoCRA establishes mandatory requirements for facility registration, product listing, safety substantiation, and adverse event reporting that fundamentally change how cosmetics are manufactured and sold in the United States. For consumers, this means greater accountability for product safety. For beauty brands, it creates compliance obligations that influence how new technologies like on-demand manufacturing can be deployed. Understanding MoCRA helps explain why infrastructure platforms rather than device companies may drive the next wave of beauty innovation.
Key Takeaways
MoCRA, enacted December 2022, represents the most significant expansion of FDA cosmetic authority since 1938, transforming voluntary reporting into mandatory compliance obligations
The Responsible Person designation, defined as the manufacturer, packer, or distributor whose name appears on the label, carries legal accountability for facility registration, product listing, safety substantiation, and adverse event reporting within 15 business days
Mandatory facility registration with biennial renewal, product listing with annual updates, and forthcoming GMP regulations bring cosmetics closer to regulatory standards for drugs and medical devices
Infrastructure platforms that position as manufacturing partners rather than product manufacturers enable brands to adopt on-demand personalization while maintaining clear regulatory boundaries and Responsible Person status
MoCRA's structured compliance framework creates opportunities for technology providers that can support brand compliance through automated traceability, documentation, and safety substantiation systems
The Pre-MoCRA Landscape: 84 Years of Limited Oversight
Before MoCRA, cosmetic regulation in the United States operated under authority dating to 1938. According to the FDA, the Federal Food, Drug, and Cosmetic Act of 1938 established the foundation for cosmetic regulation, but the FDA had limited power to require pre-market approval or mandate recalls. As H2 Compliance explains, registration of manufacturing facilities, reporting of ingredients, and reporting of adverse reactions were voluntary components of this framework.
The FDA's authority over cosmetics was less comprehensive than for other regulated products such as food, drugs, and medical devices. Companies operated with significant autonomy regarding safety testing and ingredient disclosure. This light-touch approach enabled rapid innovation but created gaps in consumer protection and supply chain transparency that MoCRA was designed to address.
What MoCRA Requires: The New Compliance Framework
MoCRA introduces several mandatory obligations that cosmetics companies must now follow. According to the FDA, these include:
Facility Registration: Manufacturers and processors must register their facilities with FDA and renew their registration every two years. FDA has the authority to suspend a facility's registration if products have a reasonable probability of causing serious adverse health consequences.
Product Listing: A responsible person must list each marketed cosmetic product with FDA, including product ingredients, and provide updates annually. Registrar Corp notes that new products must be listed within 120 days of marketing in the U.S.
Safety Substantiation: Companies must maintain records supporting adequate safety substantiation of their cosmetic products. While no specific tests are required, firms must have scientific evidence supporting safety.
Adverse Event Reporting: According to FDA instructions, a responsible person must report serious adverse events associated with cosmetic products to FDA within 15 business days. J&J Compliance emphasizes that this represents a major shift from the previous voluntary system.
Good Manufacturing Practice: As Baker Botts reports, FDA is establishing mandatory GMP regulations for cosmetics, bringing the industry closer in line with requirements for drugs, medical devices, and food.
The Responsible Person Designation: Who Bears Legal Accountability
MoCRA defines "Responsible Person" as the manufacturer, packer, or distributor of a cosmetic product whose name appears on the label. According to Pharmadocx, this designation carries legal accountability for compliance with all MoCRA requirements including adverse event receiving, record keeping, and serious adverse event reporting.
The Responsible Person maintains records of all adverse events for six years and must ensure proper labeling for professional use products. This designation creates important structural questions for new manufacturing models. When infrastructure mixes components at retail, the regulatory boundaries require careful navigation to ensure compliance without assuming inappropriate liability.
The Responsible Person maintains records of all adverse events for six years and must ensure proper labeling for professional use products. This designation creates important structural questions for new manufacturing models. When infrastructure mixes components at retail, the regulatory boundaries require careful navigation to ensure compliance without assuming inappropriate liability.
Why MoCRA Enables Infrastructure Platforms
MoCRA's clarity creates opportunity for compliant on-demand manufacturing. By positioning as infrastructure provider rather than product manufacturer, platforms can enable brand partners to maintain Responsible Person status while benefiting from precision manufacturing capabilities. This architecture allows brands to offer on-demand personalization without converting their retail operations into manufacturing facilities subject to full GMP requirements.
The infrastructure model provides automated lot traceability, ingredient logging, and safety documentation that supports brand compliance. For beauty brands evaluating innovation partnerships, this regulatory positioning is critical. Infrastructure platforms that maintain clear boundaries enable adoption of new technologies while ensuring that liability remains with the brand whose name appears on the label.
This approach aligns with MoCRA's framework by ensuring that the entity named on the product label, the Responsible Person, maintains accountability for safety and compliance. The technology provider operates within defined parameters that support, rather than supplant, brand regulatory obligations.