MoCRA for Small Businesses and Importers: Key Compliance Considerations

The enactment of the Modernization of Cosmetics Regulation Act (MoCRA) of 2022 represents the most significant expansion of the Food and Drug Administration’s (FDA) authority over the cosmetic industry since 1938. For boutique brands, indie manufacturers, and international importers, the transition from a largely self-policed industry to a rigorous, FDA-monitored regulatory environment requires immediate strategic adjustment.

While the administrative burden of these new mandates may seem daunting, the sophisticated operator will view MoCRA compliance not merely as a regulatory checkbox, but as a mechanism for enhancing brand equity and market stability. Anthony Girand Law advises clients to treat these requirements as a baseline for enterprise risk management.

The Illusion of the Small Business Exemption

Many boutique operators believe the "small business" provisions under MoCRA offer a broad safe harbor. A closer reading of the statute, however, reveals a regulatory trap. To qualify for an exemption from facility registration and product listing, an entity must satisfy a dual-pronged test:

• Financial Threshold: The entity’s average annual gross sales of cosmetic products in the United States during the previous three-year period must be less than $1,000,000.
• Geographic Limitation: The entity must not engage in the manufacturing or processing of products that are sold in any state other than the state in which the facility is located.

The fatal flaw for many modern brands is the geographic limitation. In an e-commerce-driven economy, the moment a product is sold through a website accessible to consumers outside the state of production—even if no physical storefront exists elsewhere—the facility is likely ineligible for the exemption. Consequently, most growing brands are legally obligated to register their facilities and list their products, regardless of their current revenue level.

Furthermore, even those who qualify for the registration and listing exemption remain fully subject to the core pillars of MoCRA: safety substantiation, adverse event reporting, and updated labeling requirements. There is no such thing as a "MoCRA-exempt" brand in terms of core product safety and consumer notification.

Navigating the Importer’s Burden

For domestic entities importing cosmetic products, MoCRA fundamentally alters the risk profile of the supply chain. Under the Act, the "Responsible Person"—typically the party whose name appears on the label—bears the weight of regulatory compliance. If you import a product, you are the face of that product in the U.S. market, and the FDA will look to you, not the foreign manufacturer, for accountability.

This shifts the burden of due diligence onto the importer. Key considerations for importers include:

• Foreign Facility Registration: While foreign facilities are required to register, the U.S. importer must verify this registration status. If a foreign manufacturer fails to comply, the importer’s inventory is effectively radioactive; it will be subject to refusal of admission at the U.S. border.
• Chain of Custody and Transparency: MoCRA mandates that the FDA has access to specific documentation regarding the composition and safety of the product. Importers must ensure that their foreign partners provide the necessary technical files to support these requirements.
• Contractual Indemnification: Standard supply agreements must be revisited. We recommend embedding rigorous MoCRA-specific representations and warranties into all import contracts, specifically regarding the maintenance of adverse event records and the legal responsibility for facility registration.

Clarifying Roles: The Brand vs. The CMO

In white-label and contract manufacturing relationships, ambiguity regarding the "Responsible Person" is a significant liability. MoCRA clarifies that the entity whose name appears on the label is the primary point of contact for the FDA.

However, the responsibilities are not mutually exclusive. While the brand may hold the liability for marketing the product, the Contract Manufacturing Organization (CMO) holds the keys to the facility and the production process. A well-structured compliance program allocates these duties through precise contractual language:

1. Facility Registration Responsibility: Determine which party manages the registration in the FDA's Cosmetics Direct portal. While the facility is the registrant, the brand must ensure that the registration is accurate and current.
2. Safety Substantiation Ownership: The law requires the Responsible Person to have "adequate substantiation" of safety. This necessitates a robust transfer of scientific data and clinical or toxicological reports from the manufacturer to the brand.
3. Adverse Event Workflow: A clear, written protocol must exist between the brand and the CMO to handle adverse event reporting. If a consumer reports a serious reaction to the brand, the brand must be contractually empowered to compel the CMO to provide the internal manufacturing data necessary to investigate the batch and fulfill the FDA reporting obligations.

Strategic Compliance: A Roadmap for Growth

For the small-to-mid-sized cosmetic enterprise, MoCRA is a catalyst for institutionalizing operations. The shift toward higher regulatory standards favors companies that are prepared, transparent, and legally diligent.

To operationalize your compliance, consider the following executive action items:

• Audit Your Sales Geography: Map your sales channels. If you are shipping across state lines, you have likely exceeded the geographical scope of the exemption.
• Centralize Documentation: Do not rely on loose emails or disconnected spreadsheets. Build a centralized compliance file for each SKU that includes, at minimum, safety substantiation evidence, batch records, and documentation of adverse event reporting processes.
• Formalize Supplier Agreements: Review your manufacturing and supply agreements. Are there clear provisions regarding who bears the cost of regulatory non-compliance? Do you have audit rights to verify your supplier’s safety practices?
• Prioritize Labeling Audits: The FDA has specific, updated requirements for contact information for adverse event reporting. Ensure your current packaging does not expose you to unnecessary enforcement actions.

At Anthony Girand Law, we assist our clients in bridging the gap between innovative product development and the rigorous demands of federal regulatory compliance. By building a defensible MoCRA program today, you mitigate the risk of import seizures, warning letters, and mandatory recalls, ultimately positioning your brand for sustainable, long-term scalability.