MoCRA Compliance in 2026: The Registration Deadline Just Passed — Here's What Comes Next

MoCRA biennial registration renewals for cosmetics facilities are now underway, with individualized deadlines based on each facility's original registration date — and all first renewals due by July 1, 2026. If you make, import, or distribute cosmetics in the United States and haven't yet registered your facility with the FDA, you're already out of compliance with a federal law that has been in effect since December 2022.

Here's what changed, what it means for your business, and what's coming next — including the new third-party certification standard the industry is rallying around to fill gaps the law itself left open.

---

What MoCRA Actually Requires (And What People Get Wrong)

The Modernization of Cosmetics Regulation Act of 2022 (MoCRA) is the most significant expansion of FDA authority over cosmetics in 84 years. It came into effect in 2022 but has been rolling out in phases, which has created confusion about when each obligation kicks in.

Here's a clean breakdown of what's already law versus what's still forthcoming:

• Facility registration — All domestic and foreign facilities that manufacture or process cosmetics sold in the U.S. must be registered with FDA. The initial registration deadline for existing companies was December 29, 2023. Biennial renewal cycles are now ongoing, with individualized renewal dates based on each facility's original registration — all first renewals due by July 1, 2026.
• Product listing — Companies must submit a listing for each cosmetic product they market.
• Adverse event reporting — Serious adverse events (hospitalization, disfigurement, disability) must be reported to FDA within 15 days.
• Safety substantiation — Companies must maintain records showing each product is "adequately substantiated for safety" — though FDA has not yet defined exactly what "adequate" means.
• Fragrance allergen disclosure — FDA published a proposed rule in 2023; final rule expected in 2026.

Still forthcoming:

• GMP regulations — FDA has not yet issued final cosmetic GMP rules. Draft guidance exists, but mandatory GMPs for cosmetics remain unpublished. Industry expects a final rule sometime in 2026 or 2027.
• Mandatory recalls — MoCRA gives FDA authority to order mandatory cosmetics recalls for the first time. No mandatory cosmetic recall has been issued yet, but the authority exists.

The gap between "what's required now" and "what's still being defined" is precisely why a new private standard has emerged.

---

The New Standard Filling the Gap: NSF/ANSI 527

In early March 2026 — as MoCRA renewal deadlines began rolling in — NSF International published NSF/ANSI 527, a nationally adopted standard providing an independent framework for evaluating finished cosmetic products against defined safety and quality criteria.

The timing is not coincidental.

"MoCRA expanded FDA authority and clarified that companies must adequately substantiate safety and maintain records, including analytical data and adverse event documentation," said Sarah Krol, VP Food and Nutrition at NSF. "However, it does not define in detail what constitutes adequate safety substantiation, and formal cosmetic GMP regulations are still forthcoming."

What NSF/ANSI 527 evaluates:

• Microbiological testing, including preservative challenge testing
• Heavy metal screening (with lower limits for baby and children's products)
• Ingredient review against international standards
• Label and claims substantiation
• GMP compliance verification
• Annual retesting requirements

The standard also covers topical OTC products, including SPF verification for sunscreens. For brands making "hypoallergenic," "clean beauty," or "sensitive skin" claims — categories that have historically relied on marketing language rather than documented testing — this represents the most credible third-party verification path currently available.

---

Why Microbial Contamination Is the Enforcement Risk Nobody Talks About

Cosmetics brands focused on ingredient compliance — clean formulas, no banned substances, proper labeling — often overlook what the data shows is actually driving enforcement actions: microbial contamination.

Combined FDA and EU RAPEX data from 2005 to 2025, cited by NSF in their launch of the new standard, show more than 400 cosmetic recalls due to bacteria over that 20-year period. Microbial contamination remains the leading cause of cosmetic recalls globally.

Our own database at Policy Canary tracks FDA actions across 7,500+ regulatory items. Looking at cosmetics-adjacent categories:

What's notable: 54% of beauty supplement FDA actions in our database are cross-referenced — meaning the same product or ingredient showed up in multiple enforcement contexts (warning letters, recalls, import alerts). That's a higher cross-reference rate than most food categories.

The practical takeaway: beauty supplements — products marketed for hair, skin, or nail health — sit at an uncomfortable intersection of cosmetics law (MoCRA), dietary supplement law (DSHEA), and food safety regulations. A single product can face scrutiny from multiple directions. Brands in this space need a compliance strategy that accounts for all three.

---

The Retail Pressure Is Already Here

Regulatory compliance in cosmetics doesn't only flow top-down from FDA. Retailers are asking harder questions about finished product safety, and the NSF/ANSI 527 launch is partly a response to that pressure.

"Retailers and practitioners are also asking more direct questions about finished product testing and independent verification," Krol told CosmeticsDesign. "Certification provides documented evaluation that can support brand protection, regulatory preparedness and retailer confidence."

For brands selling through Sephora, Target, Ulta, or any major retailer that has already begun clean-beauty or safety-substantiation vendor requirements, third-party certification is increasingly a commercial requirement — not just a regulatory one.

---

What to Do Right Now

If you haven't registered your facility with FDA: Do it today. The FDA Cosmetics Direct registration system is live. Registration is free. Operating without registration is a federal violation.

If you're registered but haven't reviewed your product listings: Product listings must be updated within 60 days of any reformulation or discontinuation. If your portfolio has changed since your last filing, update it.

If you make safety claims ("hypoallergenic," "dermatologist tested," "clean"): Document your substantiation. FDA does not require pre-market approval, but they can ask for your safety records at any time. If you don't have them, you're exposed.

If you manufacture or co-pack: Your contract manufacturer's GMP practices now create direct liability for your brand under MoCRA. Ask for documentation. Get it in writing.

If you sell cosmetics at retail (DTC or B2B): Prepare for retailers to start asking for NSF/ANSI 527 certification, GMP verification, and microbial test results. Companies that have this documentation ready will move faster through vendor qualification processes.

---

The Bottom Line

The cosmetics industry has operated for 84 years under a framework that gave FDA almost no enforcement teeth. MoCRA changed that. The renewal cycle now underway isn't the end of compliance season — it's the beginning of the enforcement era.

FDA now has mandatory recall authority, adverse event reporting requirements, and the ability to demand safety records from any cosmetics company at any time. The GMP rulemaking is still coming. The fragrance allergen rule is still coming.

The brands that treat MoCRA as a checkbox exercise will find the next wave of FDA attention — when it lands on cosmetics — genuinely disruptive. The brands building documented safety programs now won't need to scramble.

---

Policy Canary monitors FDA regulatory activity for your specific products — by name, by ingredient, by facility. Join the pilot program and know before your competitors do.