MoCRA Deadlines and When FDA Starts Enforcing

We keep hearing the same worried question from small US brands: is it too late to register? The honest answer depends entirely on which obligation you're asking about, because MoCRA bundled several distinct requirements together under one law, and they don't all sit on the same clock.

What MoCRA actually requires

The Modernization of Cosmetics Regulation Act, passed in 2022, reshaped how the FDA oversees cosmetics in the United States. At its core, it requires:

• Facility registration with the FDA for facilities that manufacture or process cosmetic products for the US market.
• Product listing for each cosmetic product, tying it to a registered facility.
• A named responsible person, an identifiable party accountable for the product's compliance.
• Safety substantiation, meaning the responsible person needs to be able to support that the product is safe under labeled or customary conditions of use.
• Adverse event recordkeeping, tracking and maintaining records of reported adverse events tied to the product.

This is a meaningfully different structure from Canada's Cosmetic Notification Form, which is a single per-product notification. MoCRA layers facility-level registration, product-level listing, a named accountable person, and an ongoing safety and recordkeeping obligation, four distinct pieces rather than one filing.

Not everyone has to register and list

One detail that gets lost in the anxiety around MoCRA is that some small businesses are exempt from the registration and listing requirements. The exemption criteria relate to business size, and the specifics of who qualifies and under what thresholds are exactly the kind of detail that can be updated or clarified by the FDA over time, so this is worth confirming directly against current FDA guidance rather than relying on secondhand summaries, including this one, for the precise cutoffs.

What doesn't disappear even for smaller businesses is the general expectation around safety and the responsible person concept, exemptions in these frameworks tend to apply to specific procedural requirements like registration and listing, not to the underlying principle that someone is accountable for the product's safety.

Why "deadline" and "enforcement" are two different questions

This is the part that causes the most confusion. A requirement being legally in effect and the FDA actively pursuing enforcement action against noncompliance are not the same thing. Regulatory agencies frequently build in periods of enforcement discretion after a law's requirements technically start, giving industry time to come into compliance without immediately facing penalties for a good-faith gap.

That means a maker asking "is it too late" is really asking two separate questions:

1. Has the underlying legal requirement already taken effect? For registration and listing, yes, this is not a future obligation, it is a current one.
2. Is the FDA actively enforcing against non-compliant facilities and products right now, or is there still a discretion period in effect? This is the part that shifts over time and is worth checking directly against current FDA statements, since enforcement posture is exactly the kind of thing that gets updated as an agency's priorities and resources shift.

Treating "I haven't heard of anyone getting penalized" as equivalent to "this doesn't apply to me" is a mistake. Enforcement discretion is a temporary posture, not a repeal of the requirement.

A practical way to think about your own timeline

Question to ask yourself	Why it matters
Does my business meet the small business exemption criteria for registration/listing?	Determines whether these specific obligations even apply to you, check current FDA thresholds directly
Have I identified my responsible person?	This role exists regardless of your registration/listing status
Can I substantiate the safety of my product if asked?	This is a substantive obligation, not a paperwork formality
Am I keeping any record of adverse events reported by customers?	Recordkeeping expectations don't wait for an active complaint to matter
Is sunscreen, anti-acne, anti-dandruff, or another drug-type claim involved?	These are typically regulated as OTC drugs, not cosmetics, and follow an entirely different framework

The sunscreen and drug-claim trap

Worth flagging separately: if any of your products make claims that push them into drug territory, sunscreen, anti-acne, anti-dandruff, antiperspirant, that product isn't a MoCRA cosmetic listing question at all. Sunscreen specifically is regulated as an OTC drug in the US, not a cosmetic, and that's a different regulatory pathway with its own requirements entirely. Confusing "this needs a cosmetic listing" with "this needs an OTC drug monograph compliance" is a common and costly mix-up.

Where this leaves a small US brand today

If you haven't looked at MoCRA yet, the practical move is to figure out your exemption status first, since that determines whether registration and listing apply to you at all, and to identify your responsible person regardless. From there, safety substantiation and adverse event recordkeeping are ongoing practices, not one-time filings, so there's no single deadline to panic about missing, it's more a matter of building the habit now rather than later.

Cosmetic Comply's Canada notification workflow, mapping ingredients to INCI names and CAS numbers, screening against restricted lists, and filing with a real reviewer in the loop, is built on the same underlying philosophy MoCRA reflects: know exactly what's in your product and be able to stand behind it. The US pathway is on its way onto the platform, built on that same foundation.