Who Counts as the Responsible Person Under MoCRA?

Ask three people in a small cosmetics brand who the "responsible person" is and you'll sometimes get three different answers. The brand owner assumes it's them because it's their name on the label. The contract manufacturer assumes it's the brand, since they just make what they're told to make. The distributor assumes it's someone upstream. MoCRA actually has a specific answer, and it's worth pinning down before you assume.

What the term means

Under MoCRA, the responsible person is the party who takes on the compliance obligations tied to a specific cosmetic product: primarily ensuring safety substantiation exists for that product and maintaining adverse event recordkeeping. It's a defined role with defined duties, not just an honorary title for whoever's most senior in the room.

The responsible person is generally the manufacturer, packer, or distributor whose name appears on the product label. That's the anchor point. Whoever's name and address the consumer sees on the package is the presumptive responsible person, unless the arrangement between parties says otherwise.

The three common setups

You make and sell under your own name

If you formulate the product yourself and it goes out under your own brand name, you're the responsible person. There's no ambiguity here. You're the manufacturer and the label owner, so the safety substantiation and recordkeeping obligations sit with you.

You use a contract manufacturer, but it's your brand

This is the setup that confuses people most. Say you design a lip balm formula, a contract manufacturer produces it in their facility, and it ships out under your brand name with your company listed on the label. In this arrangement, you are typically the responsible person, because the label identifies you, not the contract manufacturer. The contract manufacturer's obligations run more to facility registration and manufacturing practice, while your obligations as the label owner include the product-level responsibilities: safety substantiation, adverse event recordkeeping, and product listing.

This means if you're a small indie brand working with a co-packer, you can't assume the co-packer is quietly handling MoCRA compliance for you just because they're the ones with the manufacturing facility. Confirm this explicitly in your agreement with them, because assumptions here are exactly where gaps happen.

A distributor private-labels a product under their own name

If a distributor takes an existing formula, private-labels it, and sells it under their own brand name, the distributor becomes the responsible person for that labeled product, since their name is what's on the package the consumer sees. The original formulator or manufacturer still has obligations tied to the facility and the formula itself, but the label owner carries the product-level responsibility.

A quick reference

Scenario	Label shows	Likely responsible person
You formulate and sell under your own name	Your brand	You
Contract manufacturer makes it, your brand ships it	Your brand	You
Distributor private-labels an existing formula	Distributor's brand	The distributor
Foreign manufacturer, US distributor imports and relabels	US distributor's brand	The US distributor

This table reflects the general pattern; specific contractual arrangements between parties can shift obligations, so treat this as a starting framework rather than a final answer for your particular contract.

What the responsible person actually has to do

Once you know you're the responsible person for a product, the obligations under MoCRA generally include:

• Ensuring adequate safety substantiation exists to support that the product is safe for its intended use
• Maintaining records of adverse events reported by consumers
• Reporting serious adverse events to FDA within the required timeframe
• Cooperating with product listing requirements

This isn't a one-time task done at launch. Safety substantiation and adverse event recordkeeping are ongoing obligations tied to the life of the product on the market.

Don't confuse this with the US agent role

If your facility is overseas, you'll also encounter the US agent requirement, which is a separate role tied to facility registration rather than the product itself. A foreign facility needs a US-based agent to serve as FDA's point of contact. That's not the same job as the responsible person, though in a small operation the same company sometimes fills both roles. Keep them conceptually separate even if one person happens to be doing both jobs in practice.

If you're still not sure

When contract arrangements get layered, private label plus a co-packer plus a separate ingredient supplier, it's worth writing down explicitly, in the contracts themselves, who is taking on the responsible person role for each product. Silence on this point is exactly what creates disputes later, usually at the worst possible time, like during an adverse event investigation.

Cosmetic Comply is currently built around Canada's Cosmetic Notification Form process, where a similar question comes up: who is the notifier filing on the product's behalf. US MoCRA support, including product listing workflows, is on the roadmap, and the underlying discipline, knowing exactly who owns which compliance obligation before you need the answer, is the same regardless of market.