What is Adverse Event Reporting Under MoCRA?
The Modernization of Cosmetics Regulation Act (MoCRA) made reporting of serious adverse events mandatory for cosmetic products. Under 21 U.S.C. § 364a, the responsible person for a cosmetic product must report serious adverse events to the FDA within 15 business days.
Mandatory Requirement
This represents a significant change from pre-MoCRA requirements, when adverse event reporting for cosmetics was voluntary.
What is a Reportable Adverse Event?
Definition of Adverse Event
According to FDA adverse event guidance, an adverse event is any health-related event associated with the use of a cosmetic product. This includes:
- Skin reactions (rash, irritation, burns)
- Eye reactions (irritation, swelling, vision changes)
- Respiratory reactions (breathing difficulties, coughing)
- Allergic reactions (hives, anaphylaxis)
- Hair or scalp effects (hair loss, scalp irritation)
- Any other negative health effect
What Makes an Adverse Event "Serious"?
Under 21 U.S.C. § 364a, a serious adverse event is one that results in:
| Criterion | Description | Example |
|---|---|---|
| Death | Event results in death | Fatal allergic reaction |
| Life-threatening | Immediate risk of death | Anaphylactic shock |
| Hospitalization | Inpatient hospital admission | Severe chemical burns |
| Persistent disability | Lasting impairment | Permanent scarring |
| Congenital anomaly | Birth defect | Prenatal exposure effects |
| Medical intervention required | To prevent serious outcome | Emergency treatment for reaction |
Key Point
Who Must Report Adverse Events?
Per 21 U.S.C. § 364, the responsible person must report adverse events. This is typically:
- The manufacturer, packer, or distributor whose name appears on the product label
- For foreign products, the US Agent may assist but the responsible person remains accountable
| Entity | Reporting Duty | Notes |
|---|---|---|
| Responsible person (brand owner) | MUST report | Primary obligation |
| Contract manufacturer | Should notify RP | May receive reports from consumers |
| Retailer | Should notify RP | May receive consumer complaints |
| Healthcare provider | May report voluntarily | Reports to FDA or responsible person |
| Consumer | May report voluntarily | FDA accepts consumer reports |
Small Business Obligations
According to FDA Guidance for Industry (December 2024):
No Exemption from Reporting
However, small businesses DO receive these accommodations:
- Reduced record retention: 3 years (vs. 6 years for non-exempt businesses)
- Exempt from facility registration and product listing (unless manufacturing high-risk products)
- Exempt from GMP requirements (when finalized)
Small businesses must still:
- Report serious adverse events within 15 business days
- Maintain adverse event records (for 3 years)
- Include product label copy with reports
- Submit follow-up information within 15 business days if received within 1 year
Reporting Timeline
| Action | Deadline | Notes |
|---|---|---|
| Initial report of serious AE | 15 business days | From date of receiving information |
| Follow-up information | Within 1 year | If new information becomes available |
| Non-serious AE documentation | No FDA submission required | Maintain in internal records |
| Record retention | 6 years minimum | All adverse event records |
When Does the Clock Start?
The 15-business-day deadline begins when the responsible person receives information about a serious adverse event. This includes reports received through:
- Customer service contacts
- Email or phone complaints
- Social media mentions (if company monitors)
- Retailer notifications
- Healthcare provider communications
- Distributor reports
How to Submit Adverse Event Reports
Adverse Event Reporting Process
Receive and Document the Report
When you receive information about an adverse event, immediately document all details: date received, consumer information, product details, description of event, and any medical treatment sought.
Evaluate Seriousness
Determine if the adverse event meets the criteria for a 'serious' adverse event. If it results in death, hospitalization, disability, or requires medical intervention to prevent serious outcomes, it is reportable.
Gather Required Information
Collect all required information for the FDA report: product identification, description of the adverse event, patient/consumer information (if available), and any medical records or documentation.
Submit to FDA
Submit the report via FDA Form 3500A by email to CosmeticAERS@fda.hhs.gov (recommended) or by mail. Include a copy of the product label with your submission.
Maintain Records
Keep copies of all adverse event reports, supporting documentation, and FDA submissions. Records must be retained for 6 years.
Submit Follow-Up Information
If new information about the adverse event becomes available within 1 year of the initial report, submit follow-up information to the FDA.
Current Submission Methods (January 2026)
According to FDA guidance, reports should be submitted via:
Primary Method: FDA Form 3500A (MedWatch)
- Email: CosmeticAERS@fda.hhs.gov
- Mail: FDA CDER Mail Center, Attn: Cosmetics MedWatch reports, White Oak Campus, Building 22, G0207, 10903 New Hampshire Ave., Silver Spring, MD 20993
Important Updates (September 2025)
Required Information for Reports
Required Report Information
- Responsible person name and contact information
- Product name and identifying information
- Description of the adverse event
- Date the adverse event occurred
- Date the responsible person received the report
- Consumer/patient information (if available and consented)
- Whether medical treatment was sought
- Outcome of the adverse event
- Any known pre-existing conditions
- Other products used concurrently
Record Keeping Requirements
Under 21 U.S.C. § 364f, responsible persons must maintain adverse event records:
| Record Type | Standard Business | Small Business Exempt |
|---|---|---|
| Serious adverse event reports submitted to FDA | 6 years | 3 years |
| Non-serious adverse event documentation | 6 years | 3 years |
| Supporting documentation (medical records, etc.) | 6 years | 3 years |
| Internal investigation records | 6 years | 3 years |
| Consumer correspondence | 6 years | 3 years |
* Small business exempt entities (< $1M average annual sales, no high-risk products) retain records for 3 years per 21 U.S.C. § 364a(e)(1)
FDA Access
Labeling Requirements for Adverse Event Reporting
Under FDA labeling requirements:
Label Requirement
Setting Up an Adverse Event System
Establishing Adverse Event Procedures
Designate a Contact Person
Assign someone in your organization to receive and process adverse event reports. This person should understand the regulatory requirements and have authority to act quickly.
Create Intake Procedures
Establish clear procedures for receiving adverse event reports from all channels: phone, email, social media, retailers, and healthcare providers. Document every report.
Develop Evaluation Criteria
Create checklists and criteria for evaluating whether an adverse event is 'serious' under MoCRA. Train staff to identify reportable events.
Establish Reporting Workflow
Create a workflow that ensures serious adverse events are reported to FDA within 15 business days. Include escalation procedures and approval processes.
Implement Record Keeping
Set up a system to maintain adverse event records for the required 6 years. Include both serious and non-serious events, supporting documentation, and FDA submissions.
Train Your Team
Train customer service, quality, and management on adverse event recognition, documentation, and escalation. Regular refresher training is recommended.
Penalties for Non-Compliance
Enforcement
- Warning letters
- Product recalls (voluntary or mandatory)
- Import alerts (for foreign products)
- Injunctions
- Seizure of products
- Criminal prosecution in serious cases
Need Help Setting Up Adverse Event Reporting?
Our regulatory specialists can help you establish compliant adverse event procedures and ensure you're ready for MoCRA requirements.
Get Expert Help