MoCRA for Beauty Brands Selling on Amazon: 2026 Renewals, and How to Stay Compliant Across Your Catalog

2026 is the first year MoCRA facility registrations come due for their biennial renewal, and that deadline is already hitting brands with contract manufacturers who may not have their paperwork in order. On September 9, 2026, the FDA clarified that it does not issue certificates, verification letters, or any other documents confirming cosmetic facility registration or product listing. For brands selling beauty on Amazon, both developments matter right now: renewal lapses put listings at risk, and the absence of an official certificate changes how you respond to marketplace compliance requests. This article walks through what MoCRA requires, what the 2026 renewal cycle means in practice, and how to run compliance day to day across your catalog on Amazon.

What is MoCRA?

The Modernization of Cosmetics Regulation Act of 2022 (MoCRA) is the most significant expansion of FDA authority over cosmetics since the Federal Food, Drug, and Cosmetic Act of 1938. Before MoCRA, the FDA couldn't require registration, mandate safety testing, or order recalls for cosmetic products.

MoCRA changed that by adding five core requirements:

• Mandatory facility registration for manufacturers and processors
• Mandatory product listing with full ingredient disclosure
• Serious adverse event reporting within 15 business days
• Safety substantiation records kept by the responsible person
• New FDA enforcement powers, including mandatory recalls, records access, and the ability to suspend a facility's registration

As of January 6, 2026, the FDA's system reflects 14,299 unique, active facility registrations and 992,907 unique, active product listings. The agency now has near-complete visibility into the U.S. cosmetics catalog.

Who is responsible under MoCRA?

MoCRA uses a specific term: the responsible person. That is the manufacturer, packer, or distributor whose name appears on the product label. If your brand name is on the label, you are the responsible person, even when a contract manufacturer makes the product or a third-party partner fulfills it on Amazon.

This split matters operationally. Your contract manufacturer handles facility registration. You, as the brand, handle product listing, ingredient submissions, adverse event reporting, and safety substantiation. Assuming your manufacturer handles everything is one of the most common compliance gaps in mid-market beauty brands.

Certain small businesses are exempt from facility registration, product listing, and Good Manufacturing Practice requirements. Those exemptions disappear entirely if a brand makes even one product that contacts the mucous membrane of the eye (mascara, liquid eyeliner, eyelash adhesive), is injected, is for internal use, or alters appearance for more than 24 hours (permanent hair dye, gel or acrylic nails). The adverse event reporting requirement has no small business exemption at all.

What MoCRA requires from beauty brands

MoCRA's requirements break into five operational areas. Here is what each means for your team.

Facility registration

Manufacturers and processors must register each cosmetic manufacturing facility with the FDA and renew that registration every two years. Before registering, a facility needs an FDA Establishment Identifier (FEI) number. Registration is filed through the FDA's Cosmetics Direct portal; a paper Form FDA 5066 also exists for facilities that can't file electronically. If your manufacturer's facility isn't registered, your products are misbranded under MoCRA and subject to enforcement action.

Product listing

The responsible person must list every marketed cosmetic product with the FDA, including a full ingredient list submitted in SPL format, and update that listing annually. The paper alternative is Form FDA 5067. The listing must reference the manufacturing facility's FEI number. Missing or outdated listings can cause border holds and recall exposure, and the FDA has already used product listing data: it drew on newly submitted listing records to publish a PFAS safety review in December 2025.

Serious adverse event reporting

The responsible person must report serious adverse events to the FDA within 15 business days and include a copy of the product label with the report. If new medical information related to the same event comes in within one year of the original report, that information must also be submitted within 15 business days. Records of adverse event reports must be maintained for a minimum of six years. There is no small business exemption for this requirement.

Safety substantiation

The responsible person must maintain records demonstrating that each cosmetic product is safe. MoCRA doesn't specify which tests must be performed, and animal testing is not required. You need documented evidence of safety on file that is accessible if the FDA requests it.

Rules still pending: GMP and fragrance allergens

Two significant MoCRA rules are still in development. A final Good Manufacturing Practice rule was originally due December 29, 2025, but the FDA's latest Unified Agenda lists GMP as a "Long-Term Action" with no proposed date; only draft guidance exists today. On fragrance allergen labeling, the FDA is expected to issue a proposed rule in May 2026; if finalized, it would require individual disclosure of fragrance allergens on labels rather than the generic "fragrance" listing that is current practice. Brands should prepare now, particularly by auditing fragrance formulations and flagging products where allergen disclosure could require label changes.

2026 is the first renewal year

Facility registrations must be renewed two years from the initial registration date. Renewal timing is not uniform across the industry; it is anchored to when each facility first registered, not to a single calendar window. The FDA gives a straightforward example: a facility that registered on February 20, 2024 must renew by February 20, 2026.

Since February 11, 2026, the Cosmetics Direct portal has displayed each facility's Registration Status and Renewal Date and sends automated email reminders. Facilities can renew early, and an abbreviated renewal is available if nothing about the facility has changed. The FDA recommends initiating renewal at least two weeks before the due date to account for portal delays.

For brand operators: confirm your contract manufacturer's renewal date now. A lapsed registration is a prohibited act under the FD&C Act and can trigger enforcement action. If your manufacturer's registration lapses, your products become noncompliant, which puts your Amazon listings at direct risk.

There is no "FDA registration certificate"

On September 9, 2026, the FDA formally clarified that it does not issue certificates, verification letters, or emails confirming cosmetic facility registration or product listing. It also does not issue documents stating that a company is exempt from registration. Cosmetic facility registration and product listing are not approval programs, and a registration number is not a mark of FDA approval.

This clarification came in response to rising inquiries from facility owners, responsible persons, and retailers, in many cases driven by ecommerce platforms requesting proof of registration. If you encounter a service offering to sell you an "FDA registration certificate" for cosmetics, that document does not exist in any official form.

Keep the confirmation and registration number that Cosmetics Direct generated when you registered. Pair it with a clear explanation of how MoCRA's framework works: registration is an administrative requirement, not an approval. Organized records of your FEI numbers, listing confirmations, and product data are what move compliance conversations forward.

How MoCRA shows up on Amazon

Amazon asks beauty sellers in many subcategories to provide evidence of compliance before listing or maintaining a product. Commonly requested items include FDA registration details or an FEI number, a GMP certificate from the manufacturing facility, and a Certificate of Analysis. Requirements vary by product category and change over time, so brands should check Seller Central for their specific ASINs and subcategories rather than relying on general guidance.

The most common failure is a mismatch: the documents on file don't match the live listing. If the FEI number you submitted refers to a facility that's now lapsed, or your product listing doesn't reflect a recent reformulation, you're exposed. Clean records that align across your FDA filings, Amazon listing content, and physical packaging are the practical goal.

Turning Amazon reviews into an adverse event process

Operational gaps here create the most regulatory risk for mid-market beauty brands. The FDA's adverse event reporting obligation is active now, it applies to all businesses, and the 15-business-day clock doesn't pause while a review sits unread in Seller Central.

What counts as a serious adverse event

The FDA defines a serious adverse event as one that results in death, a life-threatening experience, inpatient hospitalization, significant disability or impairment, congenital anomaly, or other serious injury requiring medical or surgical intervention. For beauty and personal care products specifically, the categories that appear most often include serious and persistent rashes, second- or third-degree burns, significant hair loss, significant change in appearance, infection, or any outcome that required a doctor visit, emergency care, or medical procedure. A customer complaint about irritation that resolved in a day is different from a complaint describing a burn that required a dermatologist visit. The distinction matters for your triage process.

Where these signals show up on Amazon

Product reviews, buyer messages, return reasons, and A-to-Z claims are all places where customers describe health-related experiences. None of these channels were designed for adverse event intake, and Amazon doesn't route them to your compliance team. A brand with hundreds of SKUs across multiple beauty subcategories can't rely on someone occasionally reading reviews and flagging problems.

A simple monitor, triage, escalate, report workflow

A workable four-step process for brands managing this on Amazon:

• Monitor (Owner: ecommerce or marketplace team, daily): Scan product reviews, buyer messages, and return reasons for health-related keywords: rash, burn, hair loss, reaction, hospitalized, doctor, allergic, infection, swelling. Keep a log of flagged items with date, ASIN, and the customer's exact language.
• Triage (Owner: ecommerce team or regulatory lead, same day): Compare each flagged item against the FDA's serious adverse event definition. If it clearly doesn't meet the threshold, document why and close. If it might, treat it as a possible serious event and escalate.
• Escalate (Owner: regulatory lead, same day as triage flag): The regulatory lead reviews possible serious events, collects the product label, lot number, and any additional customer information available, and determines whether the event meets the reporting threshold. Document the escalation date and decision.
• Report (Owner: regulatory lead): Submit the report to the FDA within 15 business days and file a copy of the product label with it. Record the submission date, FDA confirmation, and related lot information. Maintain this record for six years. Confirm with regulatory counsel when the 15-business-day clock starts for an adverse event first identified through a marketplace review.

Keep your FDA listing, Amazon listing, and packaging in sync

The FDA product listing is updated once a year, but Amazon detail pages, A+ content, and packaging images can change frequently. Every change creates a potential mismatch. The events that most commonly break sync are:

• A reformulation that changes the ingredient list
• The addition of a new SKU or variation
• A packaging refresh that changes the label
• A supplier change that moves manufacturing to a different facility

For each of these events, check: Has the FDA listing been updated to reflect the change? Does the Amazon detail page match the current label? Is the FEI on file still the correct facility? For brands managing more than a handful of SKUs, a single source of truth for ingredient lists and label copy, one system that feeds both the FDA submission and the Amazon content, is the only reliable way to stay in sync. Managing these separately creates drift that's hard to catch until a compliance request surfaces it.

Unauthorized sellers are a MoCRA risk too

The responsible person is the entity whose name is on the label. That means old stock sold by an unauthorized seller, relabeled product, or counterfeit inventory circulating on Amazon is still the brand's regulatory exposure, even though the brand didn't authorize the sale. If a customer buys a counterfeit version of your product and reports a serious adverse event, your label is what the FDA sees.

Maintain a current map of who sells your products and through which channels. Use Amazon Brand Registry tools to monitor the buy box and flag unauthorized offers. Control distribution tightly enough that old or diverted inventory doesn't accumulate in third-party hands. This is both a brand protection issue and a compliance issue.

Cosmetic or drug? Check your claims

A product that treats a condition or affects the structure or function of the body is an over-the-counter drug under FDA rules, not a cosmetic. Products with SPF claims, anti-acne actives, anti-dandruff ingredients, or antiperspirant claims fall into this category and carry significantly stricter requirements, including OTC drug monograph compliance or an approved NDA.

On Amazon, the claims that matter aren't only the ones on your physical label. Review your Amazon title, bullet points, and A+ content for language that crosses from cosmetic to drug territory. "Reduces acne" is a drug claim. "Cleanses skin" is not. Auditing listing content for drug claims should be part of any MoCRA compliance review, and it's worth doing before Amazon flags it first.

MoCRA checklist for beauty brands on Amazon

1. Confirm who the responsible person is for each product in your catalog and document it.
2. Confirm that every manufacturing facility is registered with the FDA, and record each facility's FEI number and renewal date.
3. List every marketed product with the FDA, including a complete ingredient list in SPL format.
4. Schedule the annual product listing update and assign a named owner.
5. Set up daily monitoring of Amazon reviews, buyer messages, and return reasons for health-related keywords.
6. Keep safety substantiation records on file for every product: documented, accessible, and current.
7. Align your FDA product listing, Amazon detail page content, and physical packaging so all three reflect the same formulation and label.
8. Audit every Amazon listing title, bullets, and A+ content for drug claims and correct any that cross the line.
9. Map who sells your products on Amazon and eliminate unauthorized offers through distribution controls and Brand Registry.
10. Keep compliance records (FEI numbers, listing confirmations, adverse event reports, safety substantiation) organized and ready to share in response to marketplace or retailer requests.

How Pattern helps beauty brands on Amazon

Pattern manages marketplace listings and content, controls distribution and unauthorized sellers, and monitors reviews and customer feedback at scale so compliance signals don't get missed across a large catalog. Pattern does not provide legal or regulatory advice; brands should work with qualified regulatory counsel to confirm their MoCRA obligations and document their compliance decisions.

FAQ

What is MoCRA?

MoCRA stands for the Modernization of Cosmetics Regulation Act of 2022. It is the most significant expansion of FDA authority over cosmetics since 1938, adding mandatory facility registration, product listing, adverse event reporting, safety substantiation requirements, and new FDA enforcement powers including mandatory recalls.

Who is the responsible person for a brand selling on Amazon?

The responsible person is the manufacturer, packer, or distributor whose name appears on the product label. For a brand selling under its own label on Amazon, that is the brand, even when a contract manufacturer makes the product or a third-party seller fulfills it.

Do small beauty brands have to register?

Small businesses below the applicable sales threshold may be exempt from facility registration, product listing, and GMP requirements. Those exemptions disappear entirely if the brand makes any product that contacts the eye's mucous membrane, is injected, is for internal use, or alters appearance for more than 24 hours. Adverse event reporting has no small business exemption.

How often must a facility registration be renewed?

Facility registrations must be renewed every two years from the initial registration date. The renewal date is specific to each facility based on when it first registered. Since February 11, 2026, the FDA's Cosmetics Direct portal displays each facility's renewal date and sends automated reminders.

Does the FDA issue a registration certificate?

No. The FDA clarified on September 9, 2026 that it does not issue certificates, verification letters, or any documents confirming cosmetic facility registration or listing compliance. Cosmetic registration and listing are administrative requirements, not approval programs. A registration number is not a mark of FDA approval.

Can an Amazon review describe a serious adverse event?

Yes. Customers sometimes describe in product reviews experiences that meet the FDA's definition of a serious adverse event, including burns, infections, significant hair loss, or outcomes that required medical intervention. Brands are responsible for monitoring these channels and escalating potential serious events to their regulatory lead promptly, given the 15-business-day reporting requirement.

This article is general information, not legal advice; confirm requirements with the FDA or a regulatory professional. Facts current as of September 2026.