The Compliance Iceberg: What the FDA — and 21 States — Actually Require from Beauty Brands

Most beauty brand founders have heard of the FDA. Fewer understand what compliance with the FDA actually requires in 2026 — and almost none have mapped what individual US states are layering on top of it. The result is a compliance iceberg: brands see the tip, but the mass underneath has the potential to sink them.

Here is what you need to know.

MoCRA Changed the Rules

In December 2022, the Modernization of Cosmetics Regulation Act (MoCRA) became law — the first significant update to US cosmetics regulation since 1938. For the first time, the FDA now requires beauty brands to:

•       Register every manufacturing and processing facility

•       List every product with the FDA

•       Report serious adverse events within 15 business days

•       Maintain substantiation of product safety

•       Follow Good Manufacturing Practice (GMP) guidelines

•       Disclose fragrance allergens on labels

These are not optional. They are not suggestions. And they apply to brands of every size — from a single-SKU indie founder to a multi-line enterprise distributor.

The registration deadlines have passed. If you have not yet registered your facility and listed your products with the FDA, you are operating out of compliance right now.

The State Layer Nobody Talks About

Here is where it gets more complex. The US is not a single regulatory market. It is 50 markets with a federal floor — and 21 states have now enacted or are actively pursuing their own cosmetics laws that go beyond MoCRA.

California alone has two separate regulatory regimes that matter enormously:

•       The California Safe Cosmetics Program (CDPH) requires manufacturers and distributors to report any ingredient on specified hazardous substances lists. Failure to report creates independent legal exposure.

•       Proposition 65 allows private citizens — and, in practice, specialized plaintiff law firms — to sue companies without government involvement if a product contains a listed chemical above threshold without an appropriate warning. It is one of the most active sources of beauty industry litigation in the United States.

Beyond California, Washington requires chemical reporting for priority substances. Colorado has an active safer products program. Hawaii has banned specific sunscreen ingredients outright. New York, Illinois, Maryland, and New Jersey all have active cosmetics legislation in progress.

"The practical reality: California compliance is not optional if you sell anywhere in the United States. Prop 65 plaintiff firms monitor the market actively. A single non-compliant SKU can generate litigation with settlements typically running $25,000 to $150,000 — plus legal fees."

What This Means for Your Brand

For any brand operating in the US market, the compliance baseline today is MoCRA plus California plus an active monitoring program for state-level developments. That is not a one-time project. It is an ongoing operational requirement.

The good news: brands that get this right build a genuine competitive advantage. Retail buyers, marketplace platforms, and increasingly consumers themselves are asking harder questions about compliance. Being ahead of it is no longer just risk management — it is brand positioning.

SuperLuxe Global works with brands at every stage of building compliance infrastructure, from initial FDA registration through state-level ingredient audits and ongoing monitoring programs. If you are not sure where your brand stands, that is the first conversation worth having.