Why the Small Business Exemption Still Requires Reporting

I keep running into the same sentence from makers: "I'm exempt, so I don't have to do any of this." Usually said with relief, right before they stop thinking about MoCRA entirely. The exemption is real, but it's narrower than people assume, and the part that gets skipped over is the part that actually protects you.

What the exemption actually covers

MoCRA, the Modernization of Cosmetics Regulation Act passed in 2022, requires facility registration and product listing with the FDA. Some small businesses, based on manufacturing or processing size thresholds, are exempt from that registration and listing requirement. That's the whole exemption. It's about paperwork with the FDA that says "here's who we are and here's what we make."

It says nothing about whether your product needs to be safe, whether you need evidence that it's safe, or what you do when a customer tells you it hurt them.

What isn't exempted

Adverse event recordkeeping and reporting is a separate obligation, and the exemption doesn't touch it. If someone experiences a serious adverse event connected to your product, you're expected to have a process for capturing that report and, where it meets the threshold for seriousness, reporting it. That expectation runs regardless of whether you filed a facility registration.

Safety substantiation is the other piece that survives the exemption. MoCRA expects a responsible person to have adequate substantiation that a cosmetic product is safe before it goes to market. "I've been making this for years and nobody complained" is not substantiation. Substantiation means you can point to something concrete: ingredient safety data, a stability test, a preservative efficacy test, a formulation review, whatever is proportionate to your product and its risk profile.

Why this distinction matters practically

A small soap or lotion maker who reads "exempt" and stops there is often the one with the thinnest safety file, because they assumed the exemption meant the whole regulatory conversation was over. Meanwhile a maker who never qualified for the exemption, because they cross the size threshold, ends up doing both registration and the safety work, and often has better records as a result.

If you're exempt from registration and listing, your actual obligations look like this:

• Keep records of your formula and ingredient sourcing.
• Keep whatever safety substantiation is appropriate to your product type.
• Have a defined way to receive and log adverse event reports from customers.
• Escalate and report serious adverse events as required.
• Reassess if your production volume changes, since exemption status is tied to size and can change.

A responsible person still exists

MoCRA requires a named responsible person for a cosmetic product regardless of exemption status. That's usually the manufacturer, packer, or distributor whose name is on the label. That person is the one adverse event reports route to, and the one who needs to be able to answer for the product's safety if asked. Being a one-person soap business doesn't remove this role, it just means you're filling it yourself.

A short comparison

Requirement	Applies If Exempt From Registration?
Facility registration	No, if size-exempt
Product listing	No, if size-exempt
Named responsible person	Yes
Safety substantiation	Yes
Adverse event recordkeeping	Yes
Serious adverse event reporting	Yes

What to actually do with this

Don't treat "exempt" as a finish line. Treat it as "one specific filing step doesn't apply to me right now," and keep building the safety and recordkeeping habits anyway, because a customer complaint doesn't check your registration status before it becomes something you need to handle correctly. Thresholds for the exemption can also shift or be interpreted differently depending on your specific business structure, so it's worth confirming your status directly against current FDA guidance rather than assuming last year's read still applies.

Cosmetic Comply doesn't file MoCRA registrations today, since the US build is still coming, but if you're already tracking your formulas and INCI mapping for another market, it's a natural place to keep that groundwork organized before US filing opens up.