Short answer: by 2026 MoCRA is no longer a project but an operating system — registration renewals, annual listing updates and adverse-event reporting run on the calendar — while its three most consequential rulemakings (GMP, fragrance allergens, talc testing) are still pending, and each affects OEM buyers differently.
The first wave of MoCRA deadlines (2023–2024) is history. What brands and manufacturers face now is a two-track reality: recurring obligations that are fully in force, and three regulatory files whose shape is not final. Planning around the wrong track — treating pending rules as law, or ignoring recurring duties because the big rules are late — is where 2026 compliance effort gets wasted. Here is the map.
Track one: what is fully in force and runs on the calendar
| Obligation | Cadence | Notes |
|---|---|---|
| Facility registration renewal | Every two years | Facilities that registered by the first 2024 deadline hit their first renewal cycle in 2026 |
| Product listing updates | Annually | Including ingredient information — the data FDA now uses for its own safety assessments |
| Serious adverse event reporting | Within 15 business days | Requires a working intake-and-escalation process, not a policy document |
| Adverse event contact on label | In force since end of 2024 | A US address, phone number or electronic contact on every label |
| Safety substantiation records | Ongoing | Hold records that support the product as actually formulated, labelled and used |
| Mandatory recall, records access | FDA authority | The agency's enforcement toolkit is now formal |
Two things distinguish the mature phase from the scramble phase. First, registration and listing are recurring, not one-off — and the renewal calendar is exactly the kind of item that silently lapses. Second, the listing data has become genuinely useful to the regulator: FDA has reported that the mandatory system surfaces vastly more ingredient information than the old voluntary program, which is how its PFAS assessment and future ingredient reviews get their raw material.
Track two: the three pending rulemakings
- Cosmetic GMP regulation. The rule MoCRA directed FDA to write — with consideration for business size and simplified paths for smaller companies — has not even reached proposal form, though the statutory deadlines for it have passed. The practical consequence: quality expectations are real but not yet codified. Operating to a recognised GMP standard such as audited GMPC/ISO 22716 systems positions a manufacturer for whatever the rule finally requires, at zero wasted effort.
- Fragrance allergen labelling. Congress told FDA to set the US allergen disclosure list with reference to international requirements — read: the EU's expanded list. The proposed rule is still in development. Brands with EU-bound SKUs are effectively getting a preview; when the US rule lands, much of the analysis will already exist.
- Talc and asbestos testing. A proposed rule from late 2024 was withdrawn in late 2025 for further assessment, with a re-proposal expected. Talc-containing products — powders, some colour cosmetics — should keep records ready for standardised testing requirements rather than assume the issue disappeared.
What this means for OEM buyers specifically
The division of labour under MoCRA is stable: facility registration, production records and batch-level traceability sit with the manufacturer; responsible-person duties, listings and substantiation sit with the brand. For a brand using an overseas OEM, three questions matter in 2026:
- Is the manufacturing facility registered, and on the renewal calendar? A registration lapse mid-cycle is a shipment-freeze risk. Our own certifications and registrations are maintained on that calendar as a matter of routine.
- Does the document pack feed your listing and substantiation directly? The batch set — CoA, stability summary, microbiological report — is the raw material of both, as covered in our batch documents guide.
- Is anyone watching the pending rules? The GMP rule, when it lands, will reach into factory floors — batch records, water systems, contamination controls. Choosing a manufacturer already running audited GMP is how you make that rule a formality instead of a retrofit.
The recurring-obligation checklist
- Registration renewal dates per facility, in the calendar with reminders — biennial, and the first cycle is hitting 2026 registrations.
- Annual listing update per product, including ingredient declarations that still match the shipped formula.
- A tested adverse-event path: intake, seriousness triage, 15-business-day reporting, records retention.
- Label audit for the adverse-event contact and full US labelling compliance.
- Substantiation file per product that matches the formula as sold — not the version from two reformulations ago.
- A watchlist for the three pending rules, with a pre-decided owner for each when they land.
Small-business exemptions exist for some registration and listing duties — but they are excluded for higher-risk product categories (eye-area mucous membrane contact, injectables, internal use, long-wear appearance alteration), and they never exempt adverse-event reporting or substantiation. Check the category before assuming an exemption applies.
FAQ
Q: Is the MoCRA GMP rule in effect in 2026? A: No. The statutory deadlines for the proposed and final GMP rules have passed without a proposal being published. Until the rule lands, operating to audited GMPC/ISO 22716 standards is the practical way to be ready — those systems cover most of what the eventual rule is expected to require.
Q: What MoCRA obligations repeat every year? A: Product listing updates, including ingredient information, are annual; facility registration renews every two years; adverse-event reporting runs continuously with a 15-business-day deadline for serious events; and substantiation records must stay current with the product as actually sold.
Q: What happened to the talc testing rule? A: The proposed standardized asbestos-testing rule was withdrawn in late 2025 for further assessment, with a re-proposal expected. Talc-containing products should keep testing records and formulation documentation organized so the eventual requirement can be met without a scramble.
Q: Do small businesses get MoCRA exemptions? A: Some — for facility registration and product listing, subject to a sales threshold. The exemptions do not apply to higher-risk categories such as eye-area, injectable, internal-use and certain long-wear products, and they never lift the adverse-event reporting and safety substantiation duties, which apply to everyone.