MoCRA Adverse Event Reporting: What Cosmetic Brands Must Do (2026)

By Vincent Cruz

A customer gets a severe rash from your moisturizer. Another reports hair loss after using your dye. Under MoCRA, these aren’t just customer-service problems — they’re regulatory events with a 15-business-day clock.

Before 2022, adverse event reporting for cosmetics was voluntary. MoCRA made it mandatory. Here’s exactly what the law requires.

Adverse event vs. serious adverse event

An adverse event is any health-related event associated with the use of your product that is adverse — a rash, redness, itching, headache, anything negative.

A serious adverse event is the subset that triggers mandatory FDA reporting:

• Death
• A life-threatening experience
• Inpatient hospitalization
• Persistent or significant disability or incapacity
• Congenital anomaly or birth defect
• Infection
• Significant disfigurement — including serious and persistent rashes, second- or third-degree burns, significant hair loss, or persistent alteration of appearance

That last category is MoCRA-specific and broader than the old drug standard. A bad chemical burn from a peel or major hair loss from a relaxer counts.

Who is responsible for reporting

The responsible person — the manufacturer, packer, or distributor whose name appears on the product label. If your brand name is on the label, it’s you, even if a contract manufacturer made the product.

Foreign brands: the responsible person can be located anywhere in the world, but someone has to receive the reports and file them. This is one more function your U.S. agent setup should account for — FDA correspondence about adverse events goes through your domestic contact.

The 15-business-day rule

When the responsible person receives information about a serious adverse event, they must report it to FDA within 15 business days. The report must include a copy of the product label.

The clock doesn’t stop at the first report:

• If you receive new medical or safety information about the event within 1 year of the initial report, you must submit that too — also within 15 business days.

Recordkeeping: 6 years

You must keep records of all adverse events — not just the serious ones — for 6 years (3 years for qualifying small businesses). FDA can access these records during inspections.

That means even the mild complaints matter for your files. A customer email about itching goes in the record system, even if it never becomes an FDA report.

How to report

Serious adverse events are reported to FDA on Form FDA 3500A (the mandatory reporting form), submitted electronically or on paper. FDA’s Safety Reporting Portal handles electronic submissions.

Your report needs: product information, a description of the event, the patient outcome, reporter information, and a copy of the label.

The label connection

This is why MoCRA changed labeling rules: every cosmetic label must now carry domestic contact information — a U.S. address, U.S. phone number, or electronic contact (like a website) — so consumers can reach the responsible person to report adverse events. The reporting system only works if customers can find you. See our full breakdown: MoCRA Labeling Changes: What’s New on Cosmetic Labels (2026)

What happens if you don’t report

Failure to report is a MoCRA violation. Combined with unregistered facilities or unlisted products, it builds the enforcement case FDA uses for import refusal, warning letters, and recalls. The full picture: MoCRA Non-Compliance Risks

Frequently asked questions

Does every customer complaint need an FDA report?

No. Only serious adverse events get reported to FDA. But all adverse events — including mild ones — must be recorded and kept for 6 years.

What counts as “15 business days”?

Business days exclude weekends and federal holidays. The clock starts when the responsible person first receives the information, not when the event occurred.

I’m a foreign brand. Who receives the adverse event reports?

Your responsible person — which may be you, if your name is on the label. Your labels must carry domestic contact information so U.S. consumers can reach someone. Many foreign brands route this through their U.S. agent.

Do I report through Cosmetics Direct?

No. Adverse event reports go through FDA’s Safety Reporting Portal (Form FDA 3500A), not Cosmetics Direct. Cosmetics Direct handles facility registration and product listings — see our FDA registry guide.

What if new information arrives months later?

You have a 1-year follow-up obligation. Any new medical or safety information received within a year of the initial report must be submitted to FDA within 15 business days.

This article is for educational purposes only and is not legal advice. US MoCRA Agent is a private service provider and is not affiliated with or endorsed by the FDA. Regulatory details are based on FDA’s published guidance and are current as of September 2026; always verify requirements against FDA’s official sources before acting.