MoCRA Safety Substantiation: Complete Guide

What Is Adequate Safety Substantiation?

"Adequate substantiation of safety" means that the available evidence — including tests, studies, published literature, and historical use data — is sufficient to demonstrate that a cosmetic product is safe under its labeled or customary conditions of use. This concept existed before MoCRA under FDA's existing authority, but MoCRA codified and strengthened it.

Importantly, MoCRA does not require pre-market approval of cosmetics. There is no FDA review or approval process before a cosmetic product goes to market. The burden is on the responsible person to ensure adequate safety substantiation exists before marketing the product.

What "Safe" Means Under MoCRA

• Under intended conditions of use: Safety is evaluated for how consumers will actually use the product (application method, frequency, body area, duration of exposure)
• Under customary conditions of use: Includes reasonably foreseeable misuse patterns (e.g., a lipstick being ingested in small amounts)
• For the intended population: Considers the target user base, including vulnerable populations like children or pregnant individuals when applicable

MoCRA's Safety Substantiation Requirements

MoCRA strengthened FDA's existing authority regarding cosmetic safety. Key provisions include:

• Mandatory record-keeping: Responsible persons must maintain safety substantiation records and make them available to FDA upon request
• FDA access authority: FDA can request and review safety data for any cosmetic product. Failure to provide adequate records can trigger enforcement action
• Misbranding consequences: A product without adequate safety substantiation (and without the required warning statement) is considered misbranded
• No animal testing mandate: MoCRA does not require or prohibit animal testing. FDA accepts non-animal alternatives when they provide adequate safety data

The Warning Label Alternative

Products that lack adequate safety substantiation may still be marketed if they bear the conspicuous label statement: "Warning: The safety of this product has not been determined." However, this statement is commercially damaging and should be a last resort, not a compliance strategy. Most retailers will not stock products bearing this warning.

Testing Methods for Cosmetic Safety

While MoCRA does not prescribe specific testing methods, industry standards and FDA guidance suggest a tiered approach to safety assessment:

Documentation and Record-Keeping

MoCRA requires responsible persons to maintain records supporting the safety of their cosmetic products. FDA may request these records at any time, so they must be organized and readily accessible.

Essential Safety Documentation

• Product safety assessment: A comprehensive document summarizing all safety data for the finished product, including ingredient-level evaluations and any product-level testing
• Ingredient safety profiles: Individual ingredient assessments referencing CIR monographs, SCCS opinions, published toxicological studies, and exposure calculations
• Test reports: Full study reports for any testing conducted (patch tests, in-vitro assays, stability studies, microbial testing)
• Formulation records: Complete ingredient list with concentrations, INCI names, and supplier specifications
• Exposure assessment: Calculations showing the level of consumer exposure to each ingredient under intended use conditions
• Risk assessment rationale: Documentation of the risk assessment methodology used and any professional judgments made

Retention Period

While MoCRA does not specify a retention period for safety substantiation records specifically (the 6-year requirement applies to adverse event records), best practice is to retain safety documentation for the commercial life of the product plus at least 3 years.

Ingredient-Level vs. Finished-Product Testing

A common question for cosmetic companies is whether safety substantiation requires testing the finished product or whether ingredient-level data is sufficient. The answer depends on the product:

In general, finished-product testing (at minimum a human patch test) provides the strongest safety substantiation for leave-on products. For rinse-off products with well-established ingredients at typical use levels, ingredient-level data from authoritative sources may be adequate.

Building a Safety Substantiation Program

A systematic approach to safety substantiation saves time, reduces cost, and ensures consistency across your product portfolio:

• Create ingredient master files: Build a library of ingredient-level safety data that can be referenced across multiple products. Update when new CIR reviews or safety data become available.
• Standardize safety assessment format: Develop a template for product safety assessments that covers all required elements. This ensures nothing is missed and facilitates FDA review.
• Establish testing tiers: Define which testing is required for different product categories (rinse-off, leave-on, eye area, lip, baby) to optimize testing spend.
• Engage qualified assessors: Safety assessments should be reviewed by a qualified toxicologist, dermatologist, or safety assessor with relevant expertise.
• Integrate with product development: Begin safety substantiation during formulation development, not after the product is ready for launch. Early identification of safety concerns saves reformulation costs.
• Monitor regulatory updates: Stay current on new ingredient restrictions, CIR safety reviews, and FDA enforcement trends that may affect your existing safety substantiation.

For MoCRA adverse event reporting requirements, see our MoCRA Adverse Event Reporting Guide. For facility registration and product listing, visit our Cosmetic Registration Guide.