A New Inflection Point for Cosmetic Compliance
The Modernization of Cosmetics Regulation Act of 2022 (MoCRA) reshaped the regulatory landscape for cosmetic manufacturers, distributors, and private-label brand owners by imposing, for the first time, a federal safety substantiation mandate, mandatory adverse event reporting, and facility registration requirements. Among its less-discussed provisions, MoCRA directed the FDA to study and report on the scientific understanding of per- and polyfluoroalkyl substances (PFAS) in cosmetic products.
The resulting FDA report—issued in 2026 pursuant to that statutory mandate—represents the agency's most comprehensive public assessment to date of PFAS occurrence in cosmetics. For brand owners, the report is not merely an academic exercise. It is a regulatory signal that will inform enforcement priorities, shape safety substantiation expectations, and almost certainly influence the next wave of consumer and toxic-tort litigation.
The Statutory Mandate Behind FDA's PFAS Assessment
Congress included the PFAS study requirement in MoCRA in direct response to a series of independent academic studies and investigative reports finding PFAS compounds—used historically for water resistance and texture in products such as waterproof mascara, long-wear foundation, and certain lip products—present in a meaningful percentage of tested cosmetic items, often as unintentional contaminants rather than deliberately added ingredients.
The FDA's report synthesizes existing peer-reviewed literature, agency-commissioned testing, and industry-submitted data to assess:
- The prevalence of PFAS across cosmetic product categories;
- Whether PFAS presence is attributable to intentional formulation, raw material contamination, or packaging migration;
- The adequacy of current analytical testing methods for detecting PFAS at trace levels; and
- Whether existing safety data are sufficient to support conclusions about consumer exposure risk.
Critically, the report does not establish a blanket prohibition on PFAS in cosmetics, nor does it set binding exposure thresholds. Instead, it functions as a diagnostic document—one that identifies persistent data gaps and signals areas where FDA intends to focus future guidance and enforcement attention.
Why the Findings Matter for Safety Substantiation
MoCRA's safety substantiation requirement obligates the "responsible person" for a cosmetic product—typically the brand owner—to maintain adequate evidence that the product is safe for its intended use, supported by reasonably reliable scientific evidence. The FDA's PFAS findings directly bear on what counts as "reasonably reliable" in this context.
Several practical consequences follow:
- Raised evidentiary bar. If FDA has identified PFAS detection methodologies and exposure data as inconsistent or incomplete industry-wide, brand owners can no longer treat silence or the absence of adverse findings as sufficient substantiation. Affirmative testing and documentation are increasingly expected.
- Supply chain accountability. Because PFAS contamination frequently originates in raw materials or packaging rather than intentional formulation, safety files must now extend upstream—requiring supplier certifications, batch-level testing, and documented chain-of-custody records for key ingredients and components.
- Documentation of risk assessment methodology. Responsible persons should be prepared to show not just that testing occurred, but that the testing protocols reflect current best practices consistent with FDA's stated concerns about detection sensitivity and reproducibility.
Brand owners that rely on outdated safety files, generic industry assurances, or supplier representations without independent verification face a materially elevated risk that their substantiation will be deemed inadequate under MoCRA's statutory standard.
Product Liability Exposure in the Post-Report Landscape
Beyond regulatory compliance, the FDA's report has significant implications for civil liability exposure. Plaintiffs' counsel have increasingly looked to federal regulatory findings as a roadmap for state-law tort and consumer protection claims, including theories sounding in:
- Failure to warn, where PFAS presence was known or reasonably discoverable but not disclosed to consumers;
- Design defect, where safer alternative formulations were commercially available; and
- Consumer fraud and false advertising, particularly where products were marketed using "clean," "non-toxic," or similar unsubstantiated claims inconsistent with PFAS content.
The FDA report's acknowledgment of data gaps cuts both ways in litigation. Plaintiffs may argue that uncertainty itself demonstrates inadequate pre-market testing and a failure to exercise reasonable care. Defendants, conversely, may argue that the absence of established safety thresholds undermines causation and defeats claims that any particular formulation was unreasonably dangerous. Either way, brand owners should expect the report to be cited as persuasive—if not dispositive—authority in forthcoming litigation and demand letters.
Insurance considerations are equally pressing. Brand owners should review commercial general liability and product liability policies for PFAS-related exclusions, which insurers have increasingly incorporated into renewal terms in response to broader PFAS litigation trends across industries.
Practical Recommendations for Brand Owners
Given the convergence of regulatory and litigation risk, counsel should advise clients to take the following steps promptly:
- Audit existing safety substantiation files against the FDA report's stated testing and data-quality expectations.
- Conduct or commission independent PFAS testing for high-risk product categories, using validated analytical methods capable of detecting trace-level contamination.
- Revisit supplier agreements to incorporate PFAS-specific representations, warranties, and indemnification provisions.
- Scrutinize marketing claims, particularly "clean beauty" and "non-toxic" representations, for consistency with actual formulation data.
- Coordinate with insurance brokers to assess coverage adequacy and potential exclusionary language tied to PFAS exposure.
Looking Ahead
The FDA's 2026 PFAS report is best understood not as a final regulatory pronouncement but as an inflection point. It establishes a documented evidentiary baseline that will shape both the agency's future rulemaking under MoCRA and the private litigation that inevitably follows high-profile regulatory findings. Brand owners that treat the report as a compliance checklist item rather than a catalyst for substantive safety file enhancement do so at considerable legal and reputational risk.