MoCRA and EU 1223/2009: The Formulation Record Behind a Cosmetic Product Safety Report
A safety assessor asking how much of an impurity is in a finished product should not need nine working days and three emails to a supplier to answer it. This white paper specifies what a cosmetic formulation record must contain, at what granularity, and under what version control, for a Cosmetic Product Safety Report (EU Regulation 1223/2009) or a MoCRA substantiation file to be produced by query rather than by investigation.
Who this is for
Written for the cosmetics regulatory or product-safety lead who has to produce and refresh a Cosmetic Product Safety Report for the European Union and hold adequate substantiation of safety for the United States, while depending on an R&D group that owns the underlying formulation data. The question this paper answers isn't which template to use. It's what the formulation record must contain, at what granularity, and under what version control.
What's inside
Each line below opens with the direct answer; the full mechanics, tables, and citations are in the report.
Why is a safety report really a report on the formulation record? Nothing in a Cosmetic Product Safety Report or a MoCRA substantiation file is created at the assessment stage. Every field it needs was either captured at the bench or becomes a question for a supplier.
What does Annex I Part A actually require R&D to capture? The report walks all ten Annex I Part A items field by field, including composition, stability, microbiological quality, impurities, exposure, and toxicological profile, and shows where each one typically goes wrong.
Why is composition the most common structural defect? Quantitative composition held at trade-name level cannot answer an impurities question or support substance-level exposure, because the substances a regulator asks about sit inside a supplier's blend, not in the recipe as recorded.
How is the margin of safety actually calculated, and what moves it? The margin of safety runs on a point of departure, an exposure dose, and a product-category default that can move the result by more than an order of magnitude. A body lotion and a shower gel are not assessed on the same terms, even with an identical formula.
Do MoCRA and EU 1223/2009 require the same documentation? No. The two regimes are compared side by side: what each requires, who's accountable, what must be retained, and for how long. One notable asymmetry: several US implementing rules, including fragrance allergen disclosure, remain unfinished.
Which changes reopen a safety assessment, and which don't? A trigger table maps nine change types, including a supplier grade change, a fragrance reformulation, and a packaging change, against exactly which obligation each one reopens, and the timeframe for updating it.
What's still unresolved on the US side? The report closes with five open questions the current rulemaking doesn't yet answer, including US GMP, fragrance allergen disclosure, and how "adequate substantiation" will be judged in practice.
Uncountable connects R&D, quality, product lifecycle, and project management on one structured data model, so a formulation record built for manufacturing can also serve as the source for a Cosmetic Product Safety Report or a MoCRA substantiation file, without being rebuilt for the assessor. Request a customized demo.
FAQs
A Cosmetic Product Safety Report is the specific, Annex I-structured safety assessment the EU requires before a cosmetic product is placed on the market. MoCRA, the US law, requires "adequate substantiation of safety" instead, an outcome standard without a prescribed report structure. Both draw on the same underlying formulation record.
EU Annex I Part A requires the chemical identity, CAS number, EC number, and intended function of every substance in a finished product. A trade-named raw material can itself be a blend of several substances, so a record that stops at the trade name can't answer impurity, exposure, or margin-of-safety questions the assessment needs.
A change to active concentration, preservative system, fragrance compound, supplier specification, packaging material, or a label claim can each reopen the safety assessment, the regulatory notification, or both, depending on what changed and which regime applies.
Not yet in full. MoCRA sets an outcome standard rather than a prescribed dossier structure, and as of this paper's publication several implementing rules, including fragrance allergen disclosure and cosmetic good manufacturing practice, are still proposed, undated, or withdrawn rather than final.
See the Platform Behind the Guide
