FDA Now Has Mandatory Cosmetic Recall Authority

Before MoCRA, if the FDA thought your cosmetic product was dangerous, the strongest move available was to ask you nicely to recall it and hope you agreed. That's not a small distinction. MoCRA changed the FDA's cosmetic authority in a way that a lot of makers still haven't fully absorbed: the agency can now order a recall, not just request one.

What existed before and what changed

Historically, cosmetic recalls in the US were voluntary. A company decided, often after its own safety monitoring or an FDA conversation, that pulling a product made sense. The FDA could pressure and publicize, but it didn't have a direct legal lever to force the action for cosmetics the way it long has for food and certain drugs.

MoCRA, the Modernization of Cosmetics Regulation Act passed in 2022, changed that. Alongside facility registration, product listing, a named responsible person requirement, safety substantiation, and adverse event recordkeeping, it gave FDA mandatory recall authority specific to cosmetics.

What generally sets a mandatory recall process in motion

The core idea is straightforward even without getting into procedural specifics: if FDA determines there's a reasonable probability that a cosmetic is adulterated or misbranded in a way that could cause serious adverse health consequences, and the responsible party doesn't take adequate voluntary action, FDA can move to order removal from the market. The exact procedural steps, notice periods, and hearing rights are specific and worth confirming against FDA's own current guidance if you're ever in this position, since the details of due process matter a great deal in the moment.

The practical takeaway for a maker is simpler: the FDA no longer has to convince you. It can direct the outcome if the safety threshold is met and you haven't acted.

Why adverse event recordkeeping matters more now

MoCRA's recordkeeping requirement isn't a paperwork afterthought sitting next to the recall authority, it's connected to it. A pattern of adverse event reports, whether reported to you directly by consumers or picked up by FDA through its own channels, is one of the signals that can put a product on FDA's radar in the first place. If you're not tracking complaints and reactions in an organized way, you lose the ability to see a pattern developing before FDA does, which puts you in a reactive position instead of a proactive one.

Keeping adverse event records isn't just about compliance on paper. It's genuinely your early warning system.

What a responsible person should do if this comes up

• Respond promptly to any FDA inquiry. Silence or slow response looks like inaction, and inaction is exactly the condition that triggers mandatory authority.
• Have your safety substantiation file ready and current, not something you're assembling from scratch under time pressure.
• Know your own lot and batch traceability well enough to answer which units are actually affected, not your entire production history.
• Loop in a product liability or regulatory attorney early if a serious complaint pattern emerges, rather than after FDA has already escalated.
• Consider a voluntary recall before it becomes mandatory. Acting on your own initiative when a real safety issue exists is almost always better positioning than waiting to be ordered.

Where this fits with the rest of MoCRA

Facility registration and product listing tell FDA what exists and where it's made. The responsible person requirement gives FDA someone specific to hold accountable. Safety substantiation is your proof that you did your homework before the product went to market. Adverse event recordkeeping is your ongoing monitoring. Mandatory recall authority is the backstop when all of that still results in a product that's hurting people and the company won't act. Some small businesses are exempt from parts of MoCRA's registration and listing requirements, but that exemption is specific and worth confirming against FDA's current criteria rather than assumed.

None of this is meant to be alarming for a maker running a clean operation with real safety substantiation behind their formulas. It's meant to explain why the paperwork side of MoCRA, the registration, the listing, the recordkeeping, isn't busywork. It's the infrastructure that determines whether a safety concern gets caught and handled by you, or escalated and handled by FDA instead.

Cosmetic Comply is built around Canada's Cosmetic Notification System today, with US MoCRA support on the way, but the underlying discipline is the same everywhere: know exactly what's in your product, have it mapped to INCI and CAS correctly, and keep a clean record of what you filed and when. That habit is worth building regardless of which market's paperwork you're staring at this month.