What is Safety Substantiation Under MoCRA?
Safety substantiation is the requirement that cosmetic products sold in the United States must have adequate evidence supporting their safety for intended use. Under 21 U.S.C. § 364d, the responsible person for a cosmetic product must ensure and maintain adequate substantiation of safety.
Key Concept
According to FDA's MoCRA guidance, safety substantiation has always been required — cosmetics cannot be "adulterated" — but MoCRA codifies the requirement and strengthens FDA's ability to access safety records.
Legal Basis: 21 U.S.C. § 364d
The statutory requirement for safety substantiation is found in 21 U.S.C. § 364d:
> "The responsible person for a cosmetic product shall ensure, and maintain records supporting, that there is adequate substantiation of safety for such cosmetic product."
This requirement applies to:
- All cosmetic products sold in the United States
- Every responsible person (typically the brand owner or manufacturer)
- Both finished products and individual ingredients
Records Requirement
What is "Adequate Substantiation"?
The FDA has not published a formal definition of "adequate substantiation" under MoCRA, but based on FDA safety testing guidance and historical enforcement, adequate substantiation generally includes:
Components of Safety Substantiation
| Data Type | Purpose | When Required |
|---|---|---|
| Ingredient toxicology data | Demonstrates safety of individual components | For all ingredients, especially new or less-studied ones |
| Finished product testing | Demonstrates safety of final formulation | Recommended for all products |
| Stability testing | Ensures product remains safe over shelf life | For all products with claimed shelf life |
| Microbiological testing | Ensures product is free from harmful microorganisms | For water-containing products and products at risk |
| Clinical/human testing | Demonstrates safety on human skin | For products with novel ingredients or high-risk use |
| Literature review | Documents existing safety knowledge | Supplements other data sources |
Acceptable Sources of Safety Data
According to FDA's CIR reference, acceptable safety data sources include:
Acceptable Safety Data Sources
- Cosmetic Ingredient Review (CIR) safety assessments
- Published peer-reviewed scientific literature
- Internal or contracted toxicological testing
- Supplier certificates of analysis with safety data
- RIFM (Research Institute for Fragrance Materials) monographs for fragrances
- IFRA standards and guidelines for fragrance ingredients
- Historical safe use data
- Read-across data from structurally similar ingredients
Documentation Requirements
What to Document
Safety substantiation documentation should include:
Building a Safety Substantiation File
Complete Ingredient List
Document all ingredients in the formulation with their INCI names, CAS numbers, and concentration ranges. Include all components, even those under 1%.
Ingredient Safety Data
For each ingredient, compile toxicological data including acute toxicity, skin irritation/sensitization, eye irritation, genotoxicity (where relevant), and any restrictions or limitations on use.
Finished Product Safety Assessment
Document the overall safety evaluation of the finished product considering ingredient interactions, product type, intended use, exposure routes, and target population.
Stability Data
Include stability testing results demonstrating the product remains safe and effective throughout its intended shelf life under normal storage conditions.
Microbiological Data
For products containing water or at risk of contamination, document challenge testing or preservative efficacy testing results.
Supporting Literature
Compile relevant scientific literature, CIR assessments, and other published safety evaluations supporting the safety conclusions.
Record Keeping Requirements
Under 21 U.S.C. § 364f, safety records must be:
Record Keeping Requirements
- Maintained for the period the product is marketed plus 3 years
- Available for FDA inspection upon request
- Kept in English or translated upon request
- Organized and accessible (no specific format required)
- Updated when significant new safety information becomes available
No Required Format
Testing Requirements
Types of Testing That May Be Needed
Based on FDA guidance, the following testing may be required depending on product type:
| Test Type | Purpose | When Recommended |
|---|---|---|
| Human Repeat Insult Patch Test (HRIPT/RIPT) | Assesses skin sensitization potential through repeated exposure cycles | Products with new ingredients, high allergen risk, or leave-on/facial applications |
| Eye irritation assessment | Evaluates eye safety | Eye-area products, products that may contact eyes |
| Preservative efficacy (challenge test) | Confirms adequate preservation | Water-containing products |
| Stability testing (accelerated & real-time) | Ensures product stability | All products |
| pH testing | Confirms appropriate pH for intended use | Products applied to skin or mucous membranes |
| Microbial limits testing | Confirms product is free from pathogens | All finished products |
* Testing requirements vary based on product type, ingredients, and intended use
* Animal testing is not required and is being phased out industry-wide
Alternative Testing Methods
The cosmetics industry has moved away from animal testing. Per FDA guidance, acceptable alternatives include:
- In vitro testing methods
- Computational modeling (QSAR)
- Human volunteer studies (ethically conducted)
- Read-across from similar ingredients
- Historical data and literature review
MoCRA vs. EU CPSR Requirements
For brands operating in multiple markets, it's helpful to compare MoCRA safety substantiation with EU requirements:
| Aspect | US (MoCRA) | EU (CPSR) |
|---|---|---|
| Required document | No specific format | Cosmetic Product Safety Report (CPSR) |
| Assessor qualification | Not specified | Qualified Safety Assessor required |
| Format | Flexible, must be accessible | Standardized two-part format |
| Pre-market requirement | Not reviewed by FDA | Must exist before market entry |
| Language | English (or translated on request) | EU official language of country |
| Record Type | US (MoCRA) | EU |
|---|---|---|
| Safety substantiation records | Ongoing (no specified end date) | 10 years after last batch |
| Adverse event records (standard) | 6 years | 10 years (per CPSR) |
| Adverse event records (small business) | 3 years | N/A |
Brands Selling in Both Markets
Common Mistakes
Avoid These Safety Substantiation Errors
Common Mistakes to Avoid
- No documentation — relying solely on 'the product has been sold safely for years'
- Incomplete ingredient data — missing toxicological information for some ingredients
- Outdated information — not updating records when new safety concerns emerge
- Poor organization — unable to locate records quickly during inspection
- Relying only on supplier data — not verifying supplier safety claims
- Ignoring CIR restrictions — using ingredients above CIR recommended limits
- No stability data — cannot demonstrate product remains safe over shelf life
- Missing micro testing — for water-containing products requiring preservation
Working with the Cosmetic Ingredient Review (CIR)
The Cosmetic Ingredient Review (CIR) is an industry-funded panel that evaluates ingredient safety. CIR assessments are valuable for safety substantiation because:
- CIR reviews are recognized by FDA
- Reviews are publicly available at cir-safety.org
- Conclusions include safe use conditions and concentrations
- Regular updates as new data becomes available
Using CIR Data
Fragrance Safety: RIFM and IFRA
For fragrance ingredients, additional safety resources include:
- RIFM (Research Institute for Fragrance Materials): Maintains safety data on fragrance materials, per RIFM
- IFRA Standards: IFRA publishes standards limiting fragrance ingredient use based on safety data
Compliance with IFRA standards provides strong evidence of fragrance safety.
Good Manufacturing Practices (GMP)
While not strictly "safety substantiation," following ISO 22716 Good Manufacturing Practices supports product safety by ensuring:
- Consistent, controlled manufacturing processes
- Proper ingredient handling and storage
- Contamination prevention
- Quality control testing
- Traceability of ingredients and products
FDA's GMP draft guidance recommends following ISO 22716 or equivalent standards.
Need Help with Safety Documentation?
Our regulatory specialists can help you build a comprehensive safety substantiation file that meets MoCRA requirements.
Get Expert Help