FDA Compliance for Skincare Brands

Selling Body Lotion in the US Starts With the FDA

Selling body lotion in the US requires following FDA cosmetic regulations and proper labeling. Since the Modernization of Cosmetics Regulation Act (MoCRA) took effect, the rules are no longer optional background reading—they are active obligations with enforcement behind them. This guide is written for brand owners who manufacture overseas and import, so it focuses on what you, the responsible person, must actually do to stay compliant and keep your shipments moving across the border.

MoCRA in Context

MoCRA, passed in 2022, is the most significant change to US cosmetic law since 1938. It did not overturn the long-standing principle that cosmetics do not need pre-market approval, but it created registration, listing, safety substantiation and adverse-event reporting duties that simply did not exist before. For an importer, the practical effect is that your overseas factory and your US entity are now both on the FDA’s radar, and a missing registration can stall a container at the border for weeks while you lose a launch window.

MoCRA Facility Registration

Under MoCRA, every facility that manufactures or processes cosmetics distributed in the US must be registered with the FDA. This includes your overseas body lotion manufacturer. Registration is done through the FDA’s Cosmetics Direct portal and must be renewed every two years. Key points:

• Both the US responsible person and the foreign facility need FDA accounts.
• Registration requires the facility’s physical address, parent company and product categories.
• Changes (new ownership, new site) trigger updates within 60 days.
• There is no “registration number” printed on packaging; it is an administrative record.
• Small businesses below certain thresholds may be exempt from some provisions, but most importers exceed them.

If your factory is not yet registered, your shipment can be detained. Confirm registration status in writing before you sign a contract—our manufacturer selection guide includes this as a non-negotiable check, alongside proof of GMP and a recent third-party audit.

Product Listing

Each unique cosmetic product formula must be listed with the FDA, including its ingredients and the responsible person. Listings are tied to the facility registration and must be updated annually for any formulation or labeling change. Practical implications:

1. Every SKU (scent, claims variant, size) that changes the formula is a separate listing.
2. Ingredients must be listed by INCI name with concentrations or ranges.
3. If you later tweak the preservative system, the listing must be amended.
4. Listings are free but require accurate, current data—sloppy records become liabilities.

Plan your SKU architecture carefully: every formula variant is a separate regulatory object. Tightening your range also protects your budget on OEM minimum order quantities, because fewer variants means larger, cheaper runs per item and fewer listing amendments to maintain.

Labeling Rules You Cannot Ignore

Cosmetic labeling is governed by the FDA’s cosmetic labeling regulations (21 CFR 701). For body lotion, the mandatory elements are:

• Identity statement—the common or descriptive name (“Body Lotion”).
• Net quantity of contents—in both English and metric, accurate to the fill.
• Material facts—warnings, such as “For external use only.”
• Name and place of business—the US responsible person’s domestic address.
• Distributor statement—if not manufactured by the named entity, “Distributed by…” or “Manufactured for…”.
• INCI ingredient list—descending order of predominance, on an information panel.
• Warning and caution statements—required if the product presents a hazard.

A common failure is the responsible-person address: FDA expects a US location you can be reached at, not just the factory in China. Set up a US entity or agent before launch, and remember that drug-like claims (“treats eczema”) cross you into FDA drug territory, which is a different and far heavier regime requiring pre-market approval.

Safety Substantiation and Records

MoCRA requires that each product be substantiated for safety by the responsible person, with supporting records retained and available to the FDA on request. This means a safety assessment—often a toxicological review of the formula by a qualified professional—plus stability and preservative efficacy testing. Facilities must also keep records of adverse events and report serious ones to the FDA within 15 business days. Build a simple adverse-event log from day one; retrofitting one during an audit is painful and can expose gaps you cannot close quickly.

GMP and How ISO 22716 Fits

MoCRA gives the FDA authority to establish Good Manufacturing Practice rules for cosmetics (expected to reference ISO 22716). Even before those final rules land, operating to ISO 22716 standards is the strongest evidence you can offer that your products are consistently safe. Ask your factory for its certification and audit history, and keep copies of its most recent audit report in your compliance file alongside the formula and test records.

Import and Customs Considerations

FDA oversight overlaps with CBP at the border. Ensure your commercial invoice and entry documents reference the responsible person and that the factory’s registration is active. Misalignment between the listed manufacturer and the physical shipper is a frequent cause of holds. A customs broker familiar with cosmetics saves more than they cost, and a pre-alert to your broker with the FDA registration numbers smooths the entry.

State-Level Rules You Should Know

Beyond the FDA, California’s Prop 65 requires warnings for listed chemicals above safe-harbor levels, and several states are copying MoCRA-style labeling and transparency laws. If you sell nationally, design labels that satisfy the strictest state to avoid maintaining regional variants. This is another reason to keep your INCI data clean and complete from the first batch.

The Responsible Person Role

MoCRA places legal obligations on the “responsible person”—the US-based entity whose name appears on the label. That entity owns registration, listing, safety substantiation and adverse-event reporting. If you are a small brand, you can be your own responsible person with a US address, or appoint a qualified US agent. Either way, the role is accountable, so choose someone who will actually maintain the records rather than a mailbox that nobody checks, because FDA correspondence goes to that entity.

Building Your Compliance Folder

Regulators and retailers ask for the same documents, so assemble one folder and reuse it. At minimum keep: the facility registration confirmation, every product listing receipt, the INCI and concentration data, the safety substantiation report, stability and challenge test results, the adverse-event log, and the factory’s GMP or ISO 22716 audit. Store it in the cloud so any team member can produce it within hours. A missing document during an FDA request is treated as a gap, not an oversight, so completeness is the goal from batch one.

Enforcement and Penalties

Non-compliance can trigger FDA warning letters, product detention, mandatory recall authority and civil penalties that scale with the violation. The reputational cost of a recalled lotion—especially one marketed as “clean”—often exceeds the fine. Treat compliance as brand insurance, not paperwork, and build the budget for it into the product cost from day one.

Common Mistakes Importers Make

• Listing the factory’s address instead of a US responsible person on the label.
• Forgetting to amend listings after a formula or preservative change.
• Treating registration as one-time instead of a biennial renewal.
• Using drug claims that pull the product into a heavier regulatory lane.

Compliance Launch Checklist

1. Register the foreign facility and the US responsible person (renew every 2 years).
2. List every product formula with INCI and concentrations (update annually).
3. Build a US-address label with all mandatory elements and a correct distributor statement.
4. Complete safety substantiation, stability and challenge testing.
5. Establish an adverse-event log and 15-day reporting process.
6. Confirm the factory’s GMP/ISO 22716 status and keep the audit on file.

Navigating MoCRA is manageable with the right partner. Qianlan is a GMP-certified body lotion manufacturer with FDA facility registration, full INCI documentation and ISO 22716 practices. Contact our compliance team to de-risk your US launch from formula to filing.