Selling cosmetics in both the US and the EU means complying with two separate regulatory systems. MoCRA vs EU cosmetics regulation is not just a paperwork comparison. It is a fundamental difference in how each market defines brand accountability.
The EU demands proof of safety before a product reaches shelves. The US, under MoCRA, requires registration, documentation, and reporting after a product is on the market. Both systems are enforceable. Both carry real consequences for non-compliance.
Understanding these differences is essential for avoiding compliance gaps, import delays, product recalls, and regulatory enforcement actions. Brands that get it right can streamline global expansion and reduce regulatory risk.
This guide covers:
- MoCRA and EU cosmetics regulation requirements
- CPSR, PIF, and safety substantiation requirements
- FDA facility registration and product listing obligations
- Responsible Person (RP) requirements and domestic contact details
- Ingredient restrictions, CMR substances, and colour additive rules
- Adverse event reporting and post-market surveillance
- GMP and manufacturing compliance requirements
- Sunscreens, nanomaterials, CBD, and other special product categories
- Product claims, labelling, and marketing requirements
- Import procedures, recalls, and online sales compliance
- Practical compliance strategies for brands selling in both the US and EU
What Is MoCRA?
The Modernisation of Cosmetics Regulation Act (MoCRA) became US law in December 2022. It was the most significant overhaul of FDA oversight of cosmetics in over 85 years.
Before MoCRA, the FDA had very little authority over cosmetics. Brands could formulate and sell without registering facilities, listing products, or providing any mandatory safety documentation.
MoCRA introduced five core obligations:
- Facility registration with the FDA for all manufacturers and processors
- Product listing with the FDA, including full ingredient disclosure
- Adverse event reporting, serious events reported to the FDA within 15 business days
- Adequate safety substantiation is maintained for every product
- GMP compliance under the FDA’s authority to issue federal manufacturing standards
MoCRA does not require pre-market approval, so products can still be launched before FDA review. However, compliance is now mandatory and enforceable under federal law.
What Is the EU Cosmetics Regulation?
The EU Cosmetics Regulation (EC No. 1223/2009) has governed the European market since 2013. Its core principle is simple: prove safety before you sell.
Before placing any product on the EU market, you need:
- A Cosmetic Product Safety Report (CPSR) signed by a qualified safety assessor
- A Product Information File (PIF) is assembled and held before the first sale
- CPNP notification completed before market placement
- A designated Responsible Person (RP) with an EU address, named on the label
Ingredient restrictions are managed through a strict annex system. Prohibited substances are in Annex II. Restricted substances with specific use conditions are in Annex III. Permitted colourants, preservatives, and UV filters are set out in Annexes IV to VI. CMR substances are banned unless the SCCS grants a specific exception.
MoCRA vs EU Cosmetics Regulation Comparison
| Area | EU (EC No. 1223/2009) | US (MoCRA / FDA) |
| Market access | Pre-market CPNP notification | Post-market FDA product listing |
| Safety documentation | Mandatory CPSR + PIF before launch | Adequate safety substantiation, no set format |
| Qualified safety assessor | Required by law | No equivalent role is mandated |
| Responsible Person | Named RP with EU address on label | Not applicable |
| Domestic contact on label | Not applicable | Required: address, phone, or website |
| Facility registration | Not required at the EU level | Required with FDA |
| Ingredient restrictions | Positive/negative annex lists; CMR ban | No federal positive list; colour additive rules + state bans |
| Adverse event reporting | Report SAEs to the national authority immediately | Report SAEs to the FDA within 15 business days |
| Record retention | PIF held 10 years post last sale | AER records 6 years (3 for small businesses) |
| GMP standard | ISO 22716 | FDA federal rules pending; ISO 22716 alignment expected |
| Animal testing | Banned ingredients and finished products | No federal ban; state-level bans vary |
| Nanomaterials | 6-month pre-market notification | No specific requirement |
| Sunscreens | Regulated as cosmetics | Regulated as OTC drugs |
| CMR substances | Banned under CLP unless SCCS exception | No cosmetics-specific prohibition |
| Product claims | Must be substantiated; 6 common criteria apply | Must be truthful and not misleading |
| Colour additives | Annex IV permitted list | FDA approval + batch certification required |
| Hair dyes | Annex III restrictions + warnings | No federal positive list |
| Children’s cosmetics | Specific safety considerations under CPSR | No separate regulatory category |
| CBD/hemp ingredients | Restricted, regulatory status varies by member state | Complex, FDA treats as a drug ingredient in many cases |
| Organic/natural claims | No harmonised EU definition | No federal definition; FTC guidelines apply |
| Shelf life labelling | PAO symbol or best before if ≤ 30 months | No mandatory PAO; expiry date if applicable |
| Online sales | Full EC No. 1223/2009 compliance applies | Full MoCRA compliance applies |
MoCRA vs EU Cosmetics Regulation Differences
1. Regulatory Philosophy: Pre-Market vs Post-Market
| EU | US (MoCRA) | |
| When safety is verified | Before launch | Ongoing, the brand’s responsibility post-launch |
| Submission to authority before sale | Yes, CPNP notification | No |
| Pre-market assessor sign-off | Yes, mandatory | No |
The EU requires a full safety dossier and CPNP notification before a single unit is sold. MoCRA allows products to launch first and accountability comes after, through registration, listing, documentation, and reporting.
For brands launching in the EU first, your safety infrastructure carries over well to MoCRA. The reverse is harder. US-style documentation often lacks the structure a CPSR demands.
2. Safety Documentation: CPSR vs Adequate Safety Substantiation
| EU | US (MoCRA) | |
| Document required | CPSR, structured format under Annex I | No defined format |
| Signed by a qualified assessor? | Yes, mandatory | No equivalent role |
| Submitted to authority? | No, held in PIF | No |
| Required before sale? | Yes | No |
The EU CPSR has a defined structure and it must include a safety profile, exposure assessment, toxicological assessment, MoS calculations, and the assessor’s conclusions.
MoCRA requires “adequate safety substantiation.” The FDA has not yet defined what that means. No document needs to be submitted before selling.
Build to CPSR standards for both markets, as it meets EU requirements and is likely to exceed FDA expectations for safety compliance.
3. Responsible Person vs Facility Registration
| EU | US (MoCRA) | |
| Accountability role | Responsible Person (RP) | No direct RP equivalent |
| On-label requirement | RP name + EU address | Domestic contact details |
| Pre-sale obligation | CPNP notification | FDA facility registration + product listing |
The EU designates one Responsible Person who holds full legal accountability for every product. Non-EU brands must appoint an EU-based RP service.
MoCRA spreads responsibility across several parties: the manufacturing facility must be registered, each product must be listed with the FDA, and a domestic contact must appear on the label, but unlike the EU system, there is no single Responsible Person carrying full legal accountability.
4. Ingredient Restrictions
| EU | US (MoCRA) | |
|---|---|---|
| Prohibited substances | Annex II, 1,600+ entries | Limited federal prohibited list |
| Restricted substances | Annex III, conditions and limits | No equivalent annex |
| Permitted colorants | Annex IV only | FDA colour additive approval required |
| Permitted preservatives | Annex V only | No positive list |
| Permitted UV filters | Annex VI only | OTC drug monograph (sunscreens) |
| CMR ban | Yes, under CLP unless SCCS exception | No cosmetics-specific CMR ban |
| State-level restrictions | Not applicable | California, New York, Virginia, others |
The EU is far more restrictive. An ingredient not on the permitted lists for colourants, preservatives, or UV filters cannot be used for those functions, regardless of safety data.
In the US, brands are responsible for managing ingredient safety themselves, so it is recommended to first audit EU Annexes, since complying with EU restrictions also provides a strong foundation for US substantiation.
5. CMR Substances
| EU | US (MoCRA) | |
| Prohibition basis | CLP Regulation classification (categories 1A, 1B, 2) | No cosmetics-specific CMR prohibition |
| Exceptions possible? | Yes, SCCS safety opinion required | N/A |
| Practical impact | Significantly, many common ingredients affected | Brand manages safety on an ingredient-by-ingredient basis |
The EU bans substances classified as CMR under the CLP Regulation. Category 1A and 1B substances are prohibited unless the concentration is negligible or the SCCS issues a specific safety opinion.
The US has no equivalent framework in cosmetics law. If you formulate globally on a single formula, EU CMR rules will govern your formulation decisions by default.
6. Adverse Event Reporting
| EU | US (MoCRA) | |
| Who receives reports | National competent authority | FDA |
| Deadline for SAEs | Immediately | 15 business days |
| Record retention | Per PIF obligations | 6 years (3 for small businesses) |
| Consumer contact on label for AER | Not specifically required | Required |
MoCRA is more prescriptive on timelines. The 15-business-day deadline is a hard requirement. The EU’s “immediately” standard is less defined but equally enforceable.
For dual-market brands, build one unified AER intake system. Capture all consumer contacts globally. Flag SAEs using consistent criteria. Route to the correct authority within the applicable deadline for each market.
7. GMP Standards
| EU | US (MoCRA) | |
| Standard | ISO 22716 | FDA federal GMP rules, not yet finalised |
| Legally mandated | Yes | Yes, MoCRA grants the FDA authority |
| Current status | Established and enforced | Pending finalisation as of mid-2026 |
The EU has enforced ISO 22716 for years but MoCRA gives the FDA authority to issue its own federal GMP regulations. The final rules are expected to align with ISO 22716 but have not yet been published.
Brands certified to ISO 22716 are well positioned. Monitor FDA rulemaking to catch any deviations as final rules are issued.
8. Sunscreens and Borderline Products
| EU | US (MoCRA) | |
| Sunscreens | Regulated as cosmetics | Regulated as OTC drugs |
| Anti-dandruff products | Cosmetics (if cosmetic function) | Often OTC drugs |
| Anti-acne | Cosmetics (if cosmetic function) | Often OTC drugs |
| Compliance pathway | CPSR + PIF + CPNP | OTC drug monograph + drug facility registration |
A sunscreen sold in both markets needs two entirely separate compliance pathways.
- EU: CPSR, PIF, CPNP, Annex VI UV filter compliance.
- US: OTC drug monograph, drug facility registration, drug labelling requirements.
Always confirm product classification in each jurisdiction before compliance work begins.
9. Animal Testing
| EU | US (MoCRA) | |
| Finished product testing | Banned | No federal ban |
| Ingredient testing (cosmetics use) | Banned | No federal ban |
| Third-country testing | Data cannot be used in the EU | No restriction |
| State-level bans | Not applicable | California, New York, Virginia, others |
The EU ban is comprehensive and it applies to testing conducted anywhere in the world if the data is used for EU cosmetics safety assessments.
Building safety substantiation on non-animal methods satisfies both markets. It also future-proofs your formulations against growing state-level bans in the US.
10. Nanomaterials
| EU | US (MoCRA) | |
| Pre-market notification | Yes, 6 months before launch | Not required |
| Who is notified | European Commission | Not applicable |
| Nano-specific safety data | Required | General substantiation only |
If your formulations include nano zinc oxide, nano titanium dioxide, or other engineered nanomaterials, the EU’s 6-month notification window must be built into your launch timeline.
MoCRA does not have a specific nano-ingredient framework; instead, nano ingredient safety is assessed under general product safety and substantiation requirements.
11. Colour Additives
| EU | US (MoCRA) | |
| Permitted list | Annex IV | FDA-approved colour additive list |
| Batch certification required | No | Yes, for certain synthetic dyes |
| Unlisted colour additives | Prohibited | Prohibited |
Both markets operate positive lists for colour additives. Only listed additives can be used for colouring cosmetics. In the US, certain synthetic dyes must be batch-certified by the FDA before use. The EU does not require batch certification but restricts some colourants to specific product types or body areas.
12. Product Claims
| EU | US (MoCRA) | |
| Legal basis | EC No. 655/2013, 6 common criteria | FTC Act, truthful, not misleading |
| Claims must be substantiated | Yes, evidence required | Yes, reasonable basis required |
| “Hypoallergenic” definition | No harmonised EU definition | No federal definition |
| “Dermatologist tested” | Must reflect genuine testing | Must not be misleading |
| Prohibited claims | Drug-like claims (e.g. “cures”, “treats”) | Drug-like claims |
Both markets prohibit drug-like claims on cosmetics. The EU’s six common criteria under EC No. 655/2013 require claims to be legal, truthful, evidenced, honest, fair, and informed. The FTC governs US claims under a “truthful and not misleading” standard.
Claims like “clinically proven,” “dermatologist tested,” and “hypoallergenic” carry substantiation obligations in both markets. Neither market has a harmonised legal definition for “hypoallergenic.”
13. Hair Dyes
| EU | US (MoCRA) | |
| Positive list | Annex III, restricted hair dye substances | No federal positive list |
| Warning statements | Mandatory on label for certain dyes | Voluntary/recommended |
| Skin sensitisation focus | High, SCCS regularly reviews hair dyes | Brand-managed safety |
The EU treats hair dye ingredients with particular scrutiny. Many are restricted in Annex III with maximum concentrations and mandatory warning statements. The SCCS regularly reviews hair dye substances and issues updated opinions.
The US has no federal positive list for hair dyes. Brands self-manage sensitisation risk. The safety substantiation obligation under MoCRA applies, but there is no specific regulatory framework for hair dyes.
14. Organic and Natural Claims
| EU | US (MoCRA) | |
| Harmonised legal definition | None, voluntary standards only (COSMOS, Natrue) | None, FTC guidelines apply |
| Regulatory oversight | Claims must meet EC No. 655/2013 criteria | FTC Act, not misleading |
| “Natural” on label | No legal definition | No federal definition |
Neither market has a legal definition for “natural” or “organic” in cosmetics. In the EU, voluntary certification schemes like COSMOS and Natrue set private standards. In the US, the FTC’s Green Guides provide non-binding guidance on environmental claims, including “natural.”
Claims must still be substantiated. A product cannot be called “100% natural” if it contains synthetic ingredients.
15. Children’s Cosmetics
| EU | US (MoCRA) | |
| Separate regulatory category | No, but CPSR must address children’s exposure | No separate category |
| Assessor obligations | Higher scrutiny, lower acceptable MoS | Higher scrutiny is expected under adequate substantiation |
| Specific ingredient restrictions | Some Annex III limits are lower for children’s products | Brand-managed |
Neither market creates a completely separate category for children’s cosmetics. But in the EU, the CPSR safety assessor must specifically address exposure scenarios for children where relevant. Some Annex III restricted substances have lower maximum concentrations when used in products intended for children.
Under MoCRA, adequate safety substantiation for children’s products is expected to reflect the target population’s greater vulnerability.
16. CBD and Hemp-Derived Ingredients
| EU | US (MoCRA) | |
| Regulatory status | Varies by member state; CBD may be a novel ingredient | FDA historically treated CBD as a drug ingredient |
| Use in cosmetics | Not uniformly permitted across the EU | Legal status remains complex at the federal level |
| Risk for brands | Label claims can trigger drug classification | Label claims can trigger drug classification |
CBD is one of the most complex areas in both markets. In the EU, CBD’s status varies by member state. Some treat it as a cosmetic ingredient; others apply novel food or drug rules. In the US, the FDA has historically taken the position that CBD is a drug ingredient and cannot be freely used in cosmetics or food.
Both markets have this in common: claims matter enormously. Claims suggesting CBD treats, cures, or affects a body condition will trigger drug classification in either market.
17. Shelf Life and PAO Labelling
| EU | US (MoCRA) | |
| PAO symbol required | Yes, if shelf life is more than 30 months | Not required |
| “Best before” is required | Yes, if shelf life is 30 months or less | Not required |
| Stability testing | Required to support shelf life claims | Required under adequate substantiation |
The EU requires a Period After Opening (PAO) symbol for products with a shelf life of more than 30 months. Products with a shelf life of 30 months or less must carry a “best before” date.
The US does not require a mandatory PAO, and instead uses expiry dates only where they are relevant. Stability data is still expected as part of adequate safety substantiation, but it does not need to be presented in a specific on-label format.
18. Labelling Requirements
| Label Element | EU | US (MoCRA) |
| Responsible Person | Name and EU address, mandatory | Not applicable |
| Domestic contact | Not applicable | US address, phone, or website, mandatory |
| Language | Language(s) of member state(s) where sold | English; bilingual in some states |
| PAO / expiry | PAO symbol or best before if ≤ 30 months | No mandatory PAO |
| Country of origin | Required if manufactured outside EU | Required |
| Warning statements | Per Annex III conditions | Per FDA requirements and OTC monographs |
| INCI ingredient list | Required | Required |
| Net content | Required | Required |
| Batch reference | Required | Required |
Most dual-market brands maintain two separate label versions. A label that satisfies both markets simultaneously is possible but requires careful design work from the outset.
19. Product Recall and Market Withdrawal
| EU | US (MoCRA) | |
| Who initiates the recall | Responsible Person or competent authority | FDA or brand |
| FDA recall authority | Not applicable | MoCRA gives the FDA mandatory recall authority |
| Notification required | Yes, competent authorities notified | Yes, the FDA notified |
MoCRA gave the FDA mandatory recall authority for the first time. Before MoCRA, FDA recalls of cosmetics were voluntary. Now the FDA can order a recall if it determines a product poses a safety risk.
In the EU, the Responsible Person initiates corrective action. Competent authorities can also order withdrawal. The RP is legally accountable for the corrective action taken.
20. Import Procedures
| EU | US (MoCRA) | |
| Pre-import requirement | RP must be established before import | The facility must be registered before import |
| Documentation at the border | Not routinely required but available on request | FDA may review during import inspection |
| Labelling check | The product must carry a compliant EU label | Product must carry a compliant US label |
Importing into the EU requires a designated RP before the first shipment. The RP is legally responsible for the product from the point of import.
Importing into the US under MoCRA requires the manufacturing facility to be registered. Products may be detained at the US border if the facility is not registered or the product is not listed.
21. Post-Market Surveillance
| EU | US (MoCRA) | |
| Responsibility | Responsible Person | Brand/manufacturer |
| Ongoing monitoring required | Yes, safety monitoring is part of RP obligations | Yes, part of adequate substantiation obligations |
| Reporting to the authority | SAEs to the national authority immediately | SAEs to FDA within 15 business days |
Both markets require ongoing post-market safety monitoring. In the EU, the RP must track consumer complaints, adverse events, and safety signals. In the US, MoCRA’s AER obligations create the same ongoing monitoring expectation.
Post-market surveillance is not optional in either market. Build it into your quality system from day one.
22. Online Sales
| EU | US (MoCRA) | |
| The same rules apply as physical retail | Yes, full EC No. 1223/2009 compliance | Yes, full MoCRA compliance |
| Labelling | Must comply with labelling requirements | Must comply with labelling requirements |
| Responsible Person / domestic contact | Must be identified | Must be identified |
Neither market has a separate rulebook for e-commerce. Selling online does not reduce your compliance obligations. If a product is shipped to an EU consumer, EU rules apply. If it is shipped to a US consumer, MoCRA applies.
Cross-border e-commerce is an area of increasing regulatory attention in both markets.
What Dual-Market Brands Should Do
Managing compliance across both markets is not just about meeting the stricter standard on each point. The frameworks differ in structure. Here is a practical checklist.
Safety documentation:
- Build your safety dossier to the CPSR standard
- Include toxicological profiles, MoS calculations, exposure assessment, and assessor sign-off
- This satisfies the EU requirement and exceeds MoCRA’s adequacy threshold
Registration and listing:
- Register all manufacturing facilities with the FDA
- List all products with the FDA, including ingredient information
- Update both when formulations or facilities change
Responsible Person and domestic contact:
- Appoint an EU-based RP for EU-market products
- Ensure a domestic US contact appears on US-market labels
- These are separate legal designations; do not conflate them
Adverse event reporting:
- Implement one unified global AER intake system
- Apply consistent SAE criteria across all markets
- Route EU reports to the relevant national authority immediately
- Route US reports to the FDA within 15 business days
- Retain records for 6 years (US) and per PIF obligations (EU)
Ingredient review:
- Audit every ingredient against EU Annexes, SCCS opinions, and CLP classifications
- Check separately for FDA colour additive approval and applicable state-level bans
- Do not assume clearance in one market means clearance in the other
Product classification:
- Confirm regulatory classification in each jurisdiction before compliance work begins
- Sunscreens, anti-dandruff, anti-acne, and fluoride products may be drugs in the US and cosmetics in the EU
Claims review:
- Check all claims against both the EU common criteria and the FTC standards
- Remove any claims that imply drug-like action in either market
- Substantiate every efficacy claim with documented evidence
Final Takeaway:
MoCRA vs EU cosmetics regulation comes down to one core difference: when safety must be proven and who is accountable for proving it.
The EU says Prove it before you sell it. Build the dossier, appoint the RP, notify via CPNP. Only then can the product go to market.
The US, under MoCRA, requires registration, listing, documentation, and reporting. Products can launch without pre-market review. But accountability is real and enforceable.
For brands in both markets, the approach is clear. Build documentation to EU standards. Layer MoCRA-specific obligations on top. Treat labelling as two separate exercises. Classify every product correctly in every jurisdiction. And never assume that compliance in one market means compliance in the other. While MoCRA and the EU Cosmetics Regulation share similar goals, their requirements are structured differently. Brands that understand and comply with both are better positioned to expand internationally without facing delays, enforcement action, or import issues.
FAQs:
Does MoCRA require a CPSR equivalent?
MoCRA requires “adequate safety substantiation” but does not mandate a specific document format or a qualified safety assessor. Building to the CPSR standard is the most defensible approach for dual-market brands.
Can the same label be used in the EU and the US?
The EU requires the RP name and EU address. The US requires a domestic contact. PAO conventions, language requirements, and warning statements also differ.
How does the EU CMR ban affect US formulations?
The EU prohibits CMR substances classified under the CLP Regulation. The US has no equivalent ban. If you maintain a single global formula, EU CMR rules will govern your formulation decisions by default.
Does the EU ban on animal testing apply to testing done outside the EU?
The ban applies regardless of where testing was conducted. If animal test data was generated anywhere in the world and is intended for use in EU cosmetics safety assessments, it cannot be used.
What happens if a facility is not registered under MoCRA?
Products from unregistered facilities may be refused entry at the US border or subject to FDA enforcement action. Registration is a legal requirement, not a voluntary step.
