MoCRA Compliance Checklist for US Importers: Facility Registration & Product Listing

TL;DR - The split everyone must understand: under MoCRA, facility registration is the manufacturer's job; product listing is the brand's (Responsible Person's) job. If your Chinese factory tells you "MoCRA is handled, no need to do anything," they are describing their obligation only — yours remains undone. - "MoCRA certified" is not a thing. There is no such certificate. There is an FDA facility registration number and, separately, product listings filed by the Responsible Person. Any supplier advertising a "MoCRA certificate" is either confused or selling you a document that proves nothing. - Two dates most articles still get wrong: product listings were due July 1, 2024 (not 2023), and facility registrations must be renewed biennially — registrations not renewed in the renewal window are treated as expired, which quietly de-registers factories that don't track FDA correspondence. - The small-business exemption is narrower than the internet says. Under $1M average annual cosmetics sales exempts you from registration and listing — but not if your products are in the excluded categories (eye-area products, injectables, internal use, long-wear >24h, OTC-drug-cosmetics), and it never exempts you from safety substantiation, adverse event reporting, or labeling.

This checklist is written for brand owners importing skincare, hair care, or body care from Chinese manufacturers. It reflects the rules as enforced in late 2026, including the parts that are still proposed rather than final. Where a supplier claim is commonly false, we say so explicitly — because MoCRA is the area where factory sales scripts are weakest.

What MoCRA changed, in one paragraph

The Modernization of Cosmetics Regulation Act (MoCRA, signed December 2022) was the first major overhaul of US cosmetics law since 1938. It replaced the voluntary regime with mandatory facility registration for manufacturers and processors, mandatory product listing for each marketed cosmetic, safety substantiation for every product, adverse event reporting with record-keeping duties, new labeling requirements (US address of the Responsible Person, fragrance allergen disclosure coming via a separate rule, professional-use labeling), and facility suspension powers for serious health hazards. It also directed FDA to establish GMP regulation for cosmetics — proposed, with finalization and enforcement still phasing in.

The checklist

Work through these eight blocks. Blocks 1–3 are your factory's obligations; blocks 4–8 are yours as the Responsible Person (RP). MoCRA defines the RP as the manufacturer, packer, or distributor whose name appears on the label — if your brand name is on the label and you're a US entity, you are the RP, regardless of where production happens.

1. Facility registration — verify, don't assume

Your factory (the facility that manufactures, packs, or holds cosmetics) must be registered with FDA.

• [ ] Factory holds a valid FDA facility registration (obtained via the FDA's Cosmetics Direct portal or a paper submission)
• [ ] Registration is current on the biennial renewal cycle — ask when they last renewed; a "we registered in 2023" answer without a 2025 renewal is a warning sign
• [ ] The registration lists your product categories among those manufactured there
• [ ] You have the FEI number / registration confirmation on file
• [ ] If your brand also has products packed or relabeled at a US facility, that facility is registered too

The date most articles get wrong #1: mandatory registration began December 29, 2023, and FDA exercised enforcement discretion until July 1, 2024. Many 2024–2025 blog posts still describe July 2024 as "when registration became required" — it's when enforcement became strict. The practical implication: any facility shipping to the US market today must be registered and must have kept the biennial renewal current.

2. Domestic agent & US facility questions (for foreign facilities)

Foreign facilities (yours, in China) must designate a US Agent for FDA communications. Ask your factory:

• [ ] Who is the designated US Agent, and is the contact current?
• [ ] Do they respond to FDA communications promptly? (A dead US Agent mailbox is how factories lose registrations without noticing.)

3. Production scope and records

• [ ] The factory's licensed scope (Chinese production license) covers your product category — skincare vs. color cosmetics vs. sun care are separate scopes
• [ ] Batch records, QC data, and stability documentation are retained and shareable — you will need them for safety substantiation (block 5)
• [ ] The factory supports MoCRA-ready documentation: full INCI lists, specifications, microbial/heavy metal test reports per batch or per lot

4. Product listing — your job, with a factory assist

The Responsible Person must list each marketed cosmetic product with FDA, annually, with updates within 120 days of significant changes.

Your listing includes: product name and category, the responsible person, the manufacturing facility's registration details, the ingredient list (INCI), the product type, and — for certain products — fragrance allergens once the allergen rule takes effect.

• [ ] Every SKU marketed in the US has an active product listing
• [ ] Listings were filed or updated within the last 12 months (listing is not one-and-done)
• [ ] Ingredient lists on listings match the label exactly
• [ ] New formulations or label changes trigger an update within 120 days

The claim that is not true #1: "We've listed your products with FDA for you." A factory cannot file your product listing as your RP unless you have formally designated them, and no factory does this as a service — the listing is tied to the Responsible Person named on the label. If they "did it," ask to see the listing confirmation showing you (your brand entity) as RP. You'll usually find nothing.

5. Safety substantiation — the underrated one

Since December 29, 2024, every product must have a record establishing safety: tests, studies, or other evidence adequate to support safety, plus a rationale if you rely on established safety of ingredients.

• [ ] Each product has a safety substantiation file: formulation, ingredient safety references, stability data, challenge test (for preservative systems where relevant), batch microbial results
• [ ] The file is ** retrievable on request** — FDA can request it, and "the factory has it somewhere" is not retrievable
• [ ] For products relying on "safe as used" arguments, the concentration rationale is documented

Practical note for importers: this is where buying from a licensed GMPC/ISO 22716 factory pays for itself. Sub-licensed workshops cannot produce coherent per-batch documentation, and reconstructing it after the fact is far more expensive than generating it correctly at production time.

6. Adverse event reporting — the duty nobody plans for until it happens

Since December 29, 2024, RPs must report serious adverse events to FDA within 15 business days, keep records of all adverse events for 6 years (3 years for qualifying small businesses), and put US contact information on the label for receiving reports.

• [ ] A US address or contact appears on your label (this is also the MoCRA labeling requirement for the RP's US business address — a PO box alone does not satisfy it)
• [ ] You have a documented intake process (email/phone/webform) and a template for the FDA MedWatch-format report
• [ ] You know the trigger list for "serious": death, life-threatening, hospitalization, disability, congenital anomaly, or medical intervention to prevent the foregoing

7. Labeling — the block that generates the most customs/Amazon friction

• [ ] Responsible Person name and US business address on the label
• [ ] Ingredient declaration in descending order of predominance, INCI nomenclature
• [ ] Net contents declaration
• [ ] Warnings and directions where required (e.g., "for external use only" conventions for certain categories)
• [ ] Professional-use products correctly labeled if applicable
• [ ] Fragrance allergens: the allergen disclosure rule is in final rulemaking with an expected compliance date of December 29, 2026 — plan labels now if you sell fragranced products; your factory should be able to supply allergen declarations from their fragrance houses
• [ ] Talc: the proposed talc testing method rule carries an expected compliance date of December 29, 2026 — if you're in powder products, get ahead of it

The date most articles get wrong #2: plenty of summaries still say "fragrance allergen labeling starts 2024" — that was the statutory deadline for FDA to propose rules in that area, not an industry compliance date. Labeling to the proposed allergen list now is good engineering; asserting it's already "required" is wrong.

8. The small-business exemption, precisely

The exemption from facility registration and product listing applies if the business averaged less than $1,000,000 per year in cosmetic sales over the trailing three years (adjusted for inflation). It does not apply if your products are:

• Eye-area preparations, injectables, internal-use products, or products intended to alter appearance for more than 24 hours
• Drugs (OTC monograph products like dandruff shampoos, acne treatments with benzoyl peroxide or salicylic acid as drugs, sunscreens) — these are regulated as OTC drugs under a different regime entirely

And critically, the exemption never covers: safety substantiation, adverse event reporting and record-keeping, labeling requirements, or the GMP rule once it's enforced. "I'm small, so MoCRA doesn't apply to me" is the single most expensive sentence in this article.

Who does what: the responsibility split, tabulated

The supplier claims that are not true

Three sentences that appear in Chinese factory quotations with alarming regularity — and what each actually means:

1. "We are MoCRA certified."
2. There is no MoCRA certification. What they (probably) mean: the facility is registered with FDA. Ask for the registration confirmation and the renewal date. If they send a PDF that says "certificate," it's self-made — registration confirmations from FDA don't look like gift certificates, and a self-made certificate proves nothing either way.
3. "MoCRA compliance is included / we handle everything."
4. They handle facility registration — that's it. Product listing, safety substantiation, adverse event handling, and labeling decisions are all yours. Budget 1–2 weeks of setup for your first US-bound SKU to get these systems running.
5. "Our products are FDA approved."
6. Cosmetics in the US are not FDA-approved — period. FDA registers facilities and accepts listings; it does not approve cosmetics. A supplier using this phrase is either ignorant or loose with language; both are QC signals worth noting.

A worked example from our own production

Our manufacturing partner's Guangzhou facility is FDA-registered, and we treat our own registration as the reference case for clients. What the process looked like in practice: the registration itself took days; the part that actually required engineering was maintaining it — assigning an owner for the biennial renewal, keeping the US Agent contact alive, and mapping every product category the site produces into the registration so client listings reference a correctly scoped facility.

When a client's product listing is filed, the data flow is: factory supplies the exact INCI list from the batch formula (not the marketing version), the licensed scope confirmation for that category, and per-batch QC data for the substantiation file. Clients who insist on this data flow from day one file their listings without friction; clients who discover at listing time that their factory's INCI list doesn't match the label go back to square one — usually two weeks before a launch.

The lesson: MoCRA is not hard. It's hard to do retroactively, and suppliers' sales scripts actively encourage the retroactive path by claiming to "handle everything."

Sunscreen and OTC products: a different regime entirely

If your product line includes sunscreens, acne treatments (with drug actives), antidandruff shampoos, or antiperspirants, you are outside the cosmetics framework: these are OTC drugs requiring monograph compliance, drug facility registration, drug listing (NDC), and GMP that is already enforced (21 CFR 210/211), not the still-phasing cosmetics GMP. Some Guangzhou manufacturers run separate OTC-registered lines; skincare-only lines generally do not. Know which regime your SKU is in before you brief suppliers — it changes the factory shortlist completely.

The GMP rule that hasn't fully arrived

MoCRA required FDA to establish cosmetics GMP regulation. As of late 2026, the rule-making is still phasing in, and FDA has signaled inspection-based enforcement will follow the final rule. Practical guidance: build to ISO 22716 / GMPC now. Every licensed factory we work with is audited against ISO 22716 — when the US GMP rule lands, factories with mature ISO 22716 systems will absorb it as a documentation exercise, while unlicensed workshops will discover that MoCRA's quietest requirement is the one that ends them.

FAQ

Q: My factory is FDA-registered. Do I still need to do anything? A: Yes. Their registration covers their obligation. You own product listing, safety substantiation, adverse event systems, and labeling. The factory registration number feeds into your listing; it doesn't replace it.

Q: Where exactly do I file the product listing? A: Through FDA's electronic systems (Cosmetics Direct or the paper form). If you use a regulatory consultant, the filing is straightforward — the data preparation (exact INCI, category, facility linkage) is where the work is.

Q: What happens if I sell without a listing? A: It's prohibited under MoCRA and — practically — increasingly checked at retail platforms and during FDA record reviews. The exposure compounds: an unlisted product also signals you likely lack substantiation and AE systems, which is how small compliance gaps become account-level problems on marketplaces.

Q: Do I need to renew my product listing? A: Listings must be reviewed annually and updated within 120 days of significant changes. Mark the anniversary when you file.

Q: Is a PO box acceptable as the US address on my label? A: No — MoCRA requires a US business address for the Responsible Person, and a PO box alone doesn't satisfy the intent. Use your actual business address or your registered agent's street address consistent with FDA guidance.

Q: How do I get fragrance allergen data from my factory? A: The factory sources it from their fragrance supplier's IFRA/declarations package. Ask for the allergen declaration per fragrance — if a factory can't produce one, their fragrance house is informal, which is itself a QC signal.

Q: We're under $1M in sales. What must we still do? A: Safety substantiation, adverse event reporting and record-keeping, correct labeling (RP name and US address), and — unless your products are in excluded categories — you're exempt from registration and listing only. Check the excluded categories list before relying on the exemption.

Get a compliance-ready quote

Our network manufacturers are FDA facility-registered and audited to ISO 22716/GMPC, and every project ships with the documentation your listing and substantiation files need — INCI from the batch formula, per-batch QC, allergen declarations. Request a quote and tell us your target market; we'll confirm the compliance path with the quote.

• What to write in a cosmetics RFQ to get a real quote in 24 hours
• Private label vs OEM vs ODM: cost, MOQ, timeline compared

About China Cosmetics Labs

China Cosmetics Labs is a Guangzhou-based cosmetics manufacturer running five production bases totalling 56,487 m² of workshop floor, with 405 staff and 191 units of production equipment. We hold our own Chinese cosmetics production licences for skincare, masks, sun care (SPF), hair care, body care, colour cosmetics and personal care, work to ISO 22716 + GMPC, and are registered with the US FDA under MoCRA.

Request a quote → · Manufacturing services → · WhatsApp wa.me/8618027666258