FDA cosmetic facility registration: who has to file, what it needs and how often

The duty falls on the owner or operator of a facility that manufactures or processes cosmetic products distributed in the United States. It is not limited to US soil: a filling site in Italy or a bulk manufacturer in Korea supplying the US market is in scope on the same terms, and must additionally name a US agent.

• In scope. Sites that manufacture or process cosmetic product, including contract manufacturers, bulk manufacturers and fillers.
• Out of scope. Beauty shops and salons, retailers, hotels and other establishments providing cosmetics incidental to a service, trade shows, and facilities that only label, relabel, pack, repack, hold or distribute.
• Small business exemption. Businesses whose average gross annual US cosmetic sales for the previous three years are below the statutory threshold (USD 1,000,000, adjusted for inflation) are exempt from registration and listing. The exemption does not apply to products that come into contact with the mucus membrane of the eye under customary use, injectables, products for internal use, or products that alter appearance for more than 24 hours where removal is not part of normal use.
• Drug-cosmetic combinations. Facilities already registered as drug establishments for products regulated as both drug and cosmetic (a sunscreen, an anti-dandruff shampoo) are not required to register again under the cosmetics provisions for those products.

The record is short, but every field maps to something you have to be able to prove later. The FDA reconciles registrations against product listings, so a mismatch here surfaces there.

Registration is not a one-off. Three separate clocks run against every facility record, and only one of them is on a predictable date.

1. Initial registration. Within 60 days of first manufacturing or processing cosmetic product for the US market, for facilities coming into existence after the compliance date.
2. Biennial renewal. Every two years. Where nothing has changed, an abbreviated renewal is accepted, but it still has to be filed. Missing it does not generate a reminder that reaches the right person by default.
3. Material updates, within 60 days. A change of address, a change of owner or operator, a new brand name made at the site, a new product category, a change of US agent, or the facility ceasing to manufacture cosmetics. This is the clock that gets missed, because the trigger usually happens in operations or legal, not in regulatory.

Submissions go through Cosmetics Direct, the FDA's electronic portal, using Structured Product Labeling. A paper alternative (Form FDA 5066) exists for those granted a waiver from electronic submission, but the electronic route is the working assumption.

The single most common misreading is that the brand registers the site. It does not. The owner or operator of the facility registers. Where a brand uses a contract manufacturer, either the contract manufacturer registers the site (the normal case) or the brand may submit the registration on its behalf, but the facility is registered once, not once per brand.

• The registration must list every brand name made at that site. For a contract manufacturer, that means brand names belonging to clients, which is commercially sensitive and needs a controlled process for keeping current as clients come and go.
• Each brand still has to file its own product listings, and each listing must reference the facility registration number for every site where the product is manufactured or processed.
• That reference is the dependency that breaks first. If a brand moves production between two of your sites and nobody updates the listing, the listing points at the wrong registration number.

For a contract manufacturer running dozens of client brands across two or three sites, the only durable answer is holding the facility, the client, the brand and the product as connected records, so a production transfer automatically raises the listing updates it implies.

A European contract manufacturer with two filling sites in France and a bulk site in Poland supplies 40 client brands into the US.

• Three registrations, not forty. One per site, each with its own FEI number and registration number, each naming a US agent.
• Brand names. Each site registration lists the brand names produced there. When a client is won or lost, two records change: the brand name list on the site registration, and the client's product listings.
• Category codes. Adding a first eye-area product to the Polish site adds a product category to that registration, and removes any reliance on the small business exemption for the client concerned.
• Renewal. Three biennial clocks on three different dates, plus 60-day update clocks triggered by events nobody logs as regulatory events.
• What determines effort. Whether the site, brand, client and SKU records can be queried together. If they can, each change is a five-minute review. If they cannot, it is an annual reconstruction exercise carried out from memory and email.

The failure mode is never the first filing. It is the drift between what the FDA holds and what the business actually does eighteen months later: a decommissioned line, a brand that moved to another site, a US agent who left the company, a category added without anyone noticing.

MoCRA compliance software closes that gap by deriving the filing from live operational data rather than a spreadsheet. The facility is a record with products, brands and clients attached. When production moves, the affected listings surface. When the biennial clock comes round, the abbreviated renewal is pre-populated and the diff against last time is visible.

• Facility records with FEI, registration number and US agent held as data
• Brand and category lists derived from what is actually produced at each site
• Biennial renewal and 60-day update clocks tracked per facility
• Product listings linked to facility registration numbers, so transfers raise the right tasks
• Full audit trail of what was filed, when, and by whom