Key Takeaways
- MoCRA is fully in its 'enforcement era' in 2026: FDA now cross-checks the ~1,000,000 product listings against the live market.
- Serious adverse events must be reported to FDA within 15 business days; records kept for 6 years.
- FDA gained mandatory recall authority — it can order a recall when a brand refuses a voluntary one.
- Safety substantiation + GMP (ISO 22716 as the reference baseline) now apply universally; small-business MoCRA exemptions stay narrow.
From self-policing to enforcement
By mid-2026 the Modernization of Cosmetics Regulation Act (MoCRA) has fully transitioned from a legislative rollout into active enforcement. The FDA's database now reflects over 14,000 active facility registrations and nearly one million active product listings — meaning the agency knows exactly who is manufacturing what, and where. For the first time in 84 years, U.S. cosmetics are not a lightly-regulated category.
Three obligations that now bite
- Serious Adverse Event Reporting (SAER): when a responsible person (the manufacturer, packer or distributor named on the label) receives a report of a serious adverse event — death, life-threatening harm, inpatient hospitalization, significant disability, birth defect, or medical/surgical intervention to prevent harm — they have 15 business days to file with FDA. Records must be retained for at least six years.
- Mandatory recall authority: previously FDA could only 'suggest' a recall. Now, if a product presents an unreasonable risk of serious adverse health consequences or death and the company refuses to recall voluntarily, FDA can issue a mandatory recall order.
- Facility registration & product listing: registrations renew every two years; listings update annually. Incomplete or inaccurate listings now risk enforcement action and rejected shipments at the U.S. border.
What factories and brands must hold ready
Safety substantiation is universal — no brand, regardless of size, is exempt. Brands must be able to demonstrate a reasonable certainty that the finished formula is safe, typically through toxicological assessment and lab testing. FDA is also pressing on high-risk substances: a forthcoming fragrance-allergen labelling rule, plus tighter scrutiny of PFAS, formaldehyde and talc. GMP rules are being built on the ISO 22716 framework.
What it means for QuickOEM buyers
If you private-label or OEM into the U.S., confirm your contract manufacturer holds FDA facility registration, can produce safety-substantiation files, and has an adverse-event intake process. QuickOEM pre-screens partner factories for ISO 22716 / GMPC scope and U.S. market documentation so these obligations are handled upstream, not discovered at the border.
See a trend worth acting on? Turn it into your own brand.
Spot a hot ingredient, format or positioning on the board? QuickOEM matches you with 500+ certified Chinese factories at zero markup — low MOQ from 500 units, full NMPA / MoCRA / EU CPNP / GCC compliance support.
Get a Free Factory Match →