What MoCRA is
MoCRA, the Modernization of Cosmetics Regulation Act of 2022, is the most significant change to U.S. cosmetics law since the Federal Food, Drug, and Cosmetic Act of 1938. It was signed into law in December 2022 and expanded FDA's authority over cosmetics in several important ways.
Before MoCRA, cosmetics brands in the U.S. faced relatively light federal requirements. There was no mandatory registration, no mandatory product listing and no general requirement to report adverse events to FDA. MoCRA changed that, introducing obligations that touch how brands document products, handle complaints and manage recalls.
This guide focuses on the parts of MoCRA most relevant to supply chain and fulfillment teams. It is not legal advice, and brands should work with regulatory counsel to confirm their specific obligations.
The responsible person
MoCRA centers many obligations on the responsible person. This is the manufacturer, packer or distributor of a cosmetic product whose name appears on the label. For most beauty brands, that is the brand owner.
The responsible person's duties include:
- Listing each marketed cosmetic product with FDA, including ingredients, and updating listings
- Ensuring and maintaining records supporting adequate substantiation of product safety
- Receiving and recording adverse event reports, and reporting serious adverse events to FDA within 15 business days
- Including contact information on the label so consumers can report adverse events
MoCRA also called for fragrance allergen labeling and good manufacturing practice regulations, with FDA rulemaking on those topics following the law. Brands should monitor FDA's final rules as they are issued.
Facility registration and who it covers
MoCRA requires facilities that manufacture or process cosmetic products distributed in the U.S. to register with FDA and renew registration every two years. FDA set July 1, 2024 as the date from which it would enforce registration and listing requirements, after providing additional time beyond the statutory deadline.
Importantly, the law's definition of a facility excludes establishments that solely perform labeling, relabeling, packaging, repackaging, holding or distribution of cosmetics. In general, that means a warehouse or 3PL that only stores and ships finished cosmetics does not need to register as a cosmetic facility under MoCRA.
However, if a provider performs activities that could be considered manufacturing or processing, the analysis may differ. Brands outsourcing complex work should discuss it with counsel and their partners.
Adverse events and records
Under MoCRA, a serious adverse event associated with a cosmetic must be reported to FDA by the responsible person within 15 business days of receiving the report. Serious adverse events include outcomes such as death, life-threatening experiences, hospitalization, persistent or significant disability, birth defects, significant disfigurement, or certain infections, among others defined in the law.
Responsible persons must keep records of adverse events for six years, with a shorter period for qualifying small businesses. These records must be available to FDA on request.
This is where fulfillment data becomes valuable. When a consumer reports a reaction, knowing which lot they received allows the brand to assess whether other customers received the same batch, and whether the issue may be isolated or batch-related.
Mandatory recall authority
Before MoCRA, cosmetic recalls in the U.S. were voluntary. MoCRA gave FDA authority to order a mandatory recall when there is a reasonable probability that a cosmetic is adulterated or misbranded and that its use or exposure will cause serious adverse health consequences or death, and the responsible person refuses to voluntarily recall.
In practice, most recalls remain voluntary, but the possibility of mandatory action increases the importance of preparation. The speed and precision of a recall depend on the brand's ability to identify affected lots and locate every unit shipped from those lots.
A brand that can produce a lot-to-customer report quickly can limit a recall to affected batches. A brand that cannot may have to recall an entire product line.
The role of your 3PL
Your 3PL is not the responsible person, but it holds much of the data needed to meet MoCRA obligations efficiently. Specifically, a beauty 3PL should:
- Capture lot and expiration data at receipt and carry it through every pick
- Record which lots shipped on each order and retail shipment
- Place immediate holds on affected lots across all locations
- Produce lot-to-order and lot-to-PO reports on request
- Document returns, destructions and dispositions with lot detail
- Preserve returned units tied to complaints when you request it
These capabilities help you act quickly when an adverse event or quality concern arises. They also demonstrate to retail partners that your supply chain is disciplined.
Samples, GWP and kits under MoCRA
Promotional items are easy to overlook in MoCRA planning. Samples, minis, gift-with-purchase items and products inside holiday sets are still cosmetic products, and they still carry lots that may need to be traced.
If a sample-size version of a product shares a batch with the full-size version, an issue with that batch affects both. If a holiday set contains a component from an affected lot, every finished set containing that component is affected as well. Fulfillment systems that track samples as loose supplies, or that do not record component lots inside kits, leave gaps in traceability.
Ask your 3PL whether promotional inventory is lot-tracked like any other SKU, and whether kit builds record the lots of each component. If either answer is no, the gap should be closed before your next major promotion or holiday program, not after a quality concern appears.
Practical next steps
Review your current fulfillment setup against MoCRA's practical demands. Ask whether lot data is captured for every receipt and every shipment. Request a sample recall report from your 3PL and time how long it takes. Check whether returned units can be held for investigation and how destruction is documented.
Next, align your internal processes. Customer service should know how to capture lot information from consumers reporting reactions. Quality and regulatory teams should know how to request holds and reports. Marketing should understand that samples and GWP items also carry lots and need to be traceable.
Finally, consider a mock recall. Choose a lot, ask your 3PL to report everywhere it shipped and place a hold, and evaluate the results. The exercise reveals gaps while there is still time to fix them.
Frequently asked questions
Does MoCRA apply to my 3PL?
MoCRA facility registration generally does not apply to establishments that solely hold or distribute cosmetics, but your 3PL's lot data supports your obligations as the responsible person.
How long do I have to report a serious adverse event under MoCRA?
The responsible person must report a serious adverse event to FDA within 15 business days of receiving the report.
Can FDA force a cosmetics recall?
Yes. MoCRA gave FDA mandatory recall authority over cosmetics when certain safety conditions are met and the responsible person declines to recall voluntarily.