MoCRA readiness guide for cosmetics manufacturers
A practical operating guide for manufacturers and CMOs getting ready for MoCRA across facility registration, product listing, adverse event reporting, safety substantiation, labels, GMP preparation, and pending FDA rulemakings.
Treat MoCRA as a live compliance system
The strongest cosmetics teams can answer three questions quickly: which obligations apply, which records support the answer, and who approved the decision. Valent turns those answers into a living review file instead of a deadline-driven document hunt.
MoCRA readiness is no longer a one-time registration project. The durable work is keeping facility records, product listings, labels, safety files, supplier evidence, complaints, and review decisions connected as rules, products, and customers change.
MoCRA readiness map
Domestic and foreign establishments that manufacture or process cosmetics for U.S. distribution need facility registration unless an exclusion or small-business exemption applies.
The Responsible Person named on the label lists each cosmetic product and keeps listing data tied to formula, ingredient, category, and facility evidence.
Facility registration, product listing, serious adverse event reporting, safety substantiation, professional-use labeling, and adverse-event contact labeling are already enforceable.
GMP, fragrance allergens, talc/asbestos testing, PFAS state restrictions, and formaldehyde hair-smoothing rules should be handled as change-management work now.
Dates teams should have on the calendar
Serious adverse event reporting, safety substantiation, and professional-use labeling requirements took effect.
FDA began enforcing Section 607 facility registration and product listing after extending the original deadline.
Cosmetic labels needed a U.S. address, U.S. phone number, or electronic contact for adverse event reports.
Facilities renew every two years from initial registration. Cosmetics Direct now supports renewal status and renewal reminders.
GMP, fragrance allergens, talc/asbestos testing, PFAS-related state activity, and formaldehyde hair-smoothing rules should stay on the compliance watchlist.
Manufacturer action plan
Use this sequence to turn MoCRA from a regulatory topic into work your manufacturing, QA, regulatory, operations, and customer-care teams can actually run.
Build the facility file
Create one controlled record for each manufacturing or processing site. For foreign sites, include the U.S. Agent details and make sure the contact path is usable during FDA communications.
Create the product listing file
For each marketed cosmetic, connect the listing to the label name, product category, full ingredient declaration, formula version, and every facility FEI used to manufacture or process it.
Set update triggers
Treat MoCRA updates like controlled change management. A brand change, facility move, new contract manufacturer, reformulation, fragrance change, new product, or discontinued SKU should create a review task.
Stand up complaint and SAE operations
Customer-care and QA need a clear path for intake, seriousness assessment, escalation, FDA reporting, and retention. The 15-business-day clock starts when the Responsible Person receives a serious adverse event report.
Make safety substantiation inspection-ready
Maintain a product-specific dossier that shows why the product is safe under labeled and customary use. Refresh it when formula, supplier, exposure, claims, or manufacturing conditions change.
Prepare GMP controls now
Even while FDA's cosmetic GMP rule is delayed, manufacturers should close obvious gaps against ISO 22716-style controls so the final rule does not become a last-minute rebuild.
Confirm scope and ownership
Start by deciding which obligations apply to each entity, product, and manufacturing site. The Responsible Person owns many of the product-level duties, while facility owners and operators carry the registration obligation.
Keep Section 607 current
Registration and listing work depends on details that change constantly: brands, formulations, facilities, categories, ingredients, and product names. Those fields need owners, evidence, and update triggers.
Operationalize adverse events
Since December 29, 2023, serious adverse events must be reported to FDA within 15 business days. The workflow needs to begin before legal or regulatory review sees the case.
Substantiate product safety
MoCRA requires adequate substantiation of safety for each marketed cosmetic. FDA has not defined a single required file format, so teams should build product-specific dossiers that can survive inspection.
Prepare for GMP before the rule lands
FDA has missed the statutory GMP rulemaking deadlines, but the expected direction remains clear: documented, risk-based manufacturing controls aligned with recognized cosmetic GMP standards such as ISO 22716.
Track labels and pending rulemakings
Labels now need adverse-event contact information, and professional-use products need full retail-style labeling plus a licensed-professional statement. Fragrance allergens, talc/asbestos methods, PFAS pressure, and formaldehyde rules should be monitored as change-management work.
Build the MoCRA file before the request arrives
Use these checks to keep the evidence trail current before FDA, a customer, a retailer, or an internal reviewer asks for it.
Map each product, brand, facility, FEI, Responsible Person, and contract manufacturer.
Confirm whether the facility is registered, excluded, or small-business exempt.
Create a compliance calendar for renewals, annual listing updates, new-product listings, and 60-day registration changes.
Tie each listing field to source evidence: label name, category, full ingredient list, facility FEIs, and Responsible Person contact data.
Put adverse-event intake, triage, reporting, follow-up, and retention into a trained workflow.
Build a safety substantiation dossier for every marketed cosmetic and refresh it after changes.
Audit labels for adverse-event contact information, professional-use requirements, ingredient declarations, warnings, and country-of-origin needs.
Compare manufacturing controls against ISO 22716-style GMP expectations while the final GMP rule remains pending.
Collect fragrance allergen, talc, PFAS, formaldehyde, supplier COA, microbiology, and stability evidence before pressure creates a scramble.
Preserve reviewer identity, decision rationale, approval timestamp, exceptions, and released packet history.
Prepare for the audit before it becomes urgent
See how Valent turns supplier evidence into a live Trust Grid, review queue, and customer-ready bundle.