The New Transparency Paradigm Under MoCRA
The Modernization of Cosmetics Regulation Act of 2022 (MoCRA) fundamentally altered the risk calculus for cosmetics companies by mandating serious adverse event (SAE) reporting to FDA and, critically, by feeding that data into the agency's public-facing FDA Adverse Event Reporting System (FAERS) dashboard. What was once an internal compliance obligation—tracking consumer complaints and adverse reactions—has become a matter of public record, searchable by plaintiffs' counsel, retailers, insurers, and competitors alike.
For Responsible Persons (RPs) under MoCRA, this shift is not merely administrative. It represents a structural change in litigation exposure. A single consumer complaint, once resolved quietly through customer service, can now become the seed of a putative class action once it appears in a government database with the company's name attached.
How FAERS Data Is Being Weaponized
Plaintiffs' firms have rapidly adapted their case-sourcing methodologies to incorporate FAERS cosmetic adverse event data. This is a predictable evolution—the same playbook has been used for years with FDA's drug and device adverse event databases. The mechanics are straightforward:
- Pattern mining: Plaintiffs' counsel scan FAERS for clusters of similar complaints against a single brand or product line, using volume as a proxy for defect or misrepresentation.
- Complaint drafting: FAERS entries are cited directly in class action complaints to satisfy Rule 9(b) particularity requirements or to bolster Article III standing arguments regarding a defendant's knowledge of a product risk.
- Pre-suit demand leverage: Some plaintiffs' firms now reference dashboard entries in pre-litigation demand letters, using the public nature of the data to signal that a favorable settlement is cheaper than public exposure at the motion-to-dismiss stage.
- Retailer risk screening: Major retailers, particularly those with private-label cosmetics programs or vendor compliance departments, have begun incorporating FAERS review into supplier due diligence, sometimes triggering delisting or renegotiated indemnification terms before litigation even arises.
The result is a feedback loop: adverse event reporting compliance, if handled reactively, generates public data that accelerates rather than deters litigation risk.
Why Traditional Compliance Postures Fall Short
Many cosmetics companies approached MoCRA's SAE reporting requirement as a checkbox exercise—collect complaints, forward qualifying events to FDA, and move on. This posture is increasingly untenable for several reasons.
First, the 15-business-day reporting window for serious adverse events leaves little room for the kind of careful internal investigation that historically shaped a company's litigation posture. Reports filed quickly, without full context, can create a public record that appears more alarming than the underlying facts warrant.
Second, FAERS entries lack causation analysis. The dashboard reflects what was reported, not what was substantiated. Yet plaintiffs' counsel and journalists alike often treat volume and recency as circumstantial evidence of a defect, shifting the narrative burden onto the company.
Third, the interaction between FAERS visibility and state consumer protection statutes—many of which permit private rights of action for unfair or deceptive practices—creates a hybrid exposure that did not exist before MoCRA's reporting mandate. A safety signal that would once have remained internal now intersects with consumer fraud theories premised on failure to warn or continued sale despite known risk.
Risk-Mitigation Strategies for Responsible Persons
Given this landscape, Responsible Persons should treat adverse event management as a litigation-readiness function, not merely a regulatory filing obligation. Practical measures include:
- Pre-reporting legal review protocols: Establish a rapid-response process, ideally involving counsel, to assess causation, product identification, and severity before an SAE report is finalized, without compromising the statutory reporting timeline.
- Narrative documentation discipline: Ensure internal investigation files, root-cause analyses, and corrective action records are contemporaneously created and preserved, so that a later public dashboard entry can be contextualized rather than left to speculation.
- Coordinated cross-functional monitoring: Regulatory affairs, quality, and legal teams should jointly monitor the company's own FAERS entries post-submission, watching for how third parties characterize the data.
- Retailer communication strategy: Proactively brief key retail partners on adverse event trends and corrective actions before those partners discover the data independently through their own compliance screening.
- Litigation hold triggers: Define internal thresholds—whether by complaint volume, severity, or media attention—that automatically trigger litigation hold notices and early counsel engagement.
- Insurance and indemnification review: Confirm that product liability and cyber/data exposure policies contemplate regulatory-database-driven claims, and revisit vendor indemnification language considering retailer delisting risk.
The Strategic Imperative
MoCRA's transparency mandate is not going away, and FDA has signaled continued investment in FAERS as a public health tool. Companies that treat SAE reporting as a purely regulatory exercise will find themselves perpetually reactive to plaintiffs' counsel and retail partners who have already built the data into their own risk models.
The more durable approach treats adverse event management as an integrated function spanning regulatory compliance, quality assurance, and litigation strategy. Responsible Persons who invest now in documentation discipline, rapid internal review protocols, and proactive retailer communication will be far better positioned to control the narrative when—not if—their brand appears on the FAERS dashboard.