FDA Recall Duty Falls on Brands, Not Your Private Label Maker
FDA published the final version of its mandatory cosmetics recall guidance on October 23, 2026, and for anyone choosing a private label manufacturer it answers a question most supply agreements leave vague. The recall obligation falls on the responsible person — the manufacturer, packer or distributor whose name appears on the product label. In a typical private label program, that is the brand, not the factory. The guidance, announced in the Federal Register at 91 FR 66851, explains how FDA intends to use the recall authority MoCRA added as section 611 of the Federal Food, Drug, and Cosmetic Act.
What FDA finalized this week
The document is “Questions and Answers Regarding Mandatory Cosmetics Recalls: Guidance for Industry”, Docket No. FDA-2025-D-2246, from FDA’s Office of Inspections and Investigations. It finalizes a draft of the same title published on December 18, 2025. FDA says it received seven comments, broadly supportive, and published the guidance as drafted with no substantive changes.
Guidance is not a regulation. It is FDA’s current thinking on the criteria, process and expectations around mandatory recalls. The authority behind it is narrow but serious: where FDA determines there is a reasonable probability that a cosmetic is adulterated or misbranded and that use or exposure will cause serious adverse health consequences or death, it can order a recall if the responsible person refuses to conduct one voluntarily.
Why “responsible person” is the term to read twice
Under MoCRA, the responsible person is defined by the label, not by who owns the mixing tank. If your brand name is on the jar, a set of obligations is yours regardless of who made the contents: listing each marketed product with FDA including its ingredients and updating that annually; maintaining records that adequately substantiate the product’s safety; and reporting serious adverse events within 15 business days, with a copy of the retail label. Those records are kept six years, or three for certain small businesses.
This is the gap we see most often in first conversations with founders: the assumption that the factory holds the safety file and would handle a recall because the factory made the product. The statute does not read that way. A manufacturer can hold formulation data, stability results, batch records and supplier documentation, and a good one will give you copies, but the duty to have adequate substantiation on hand sits with the name on the label.
The part that does sit with the factory
Facility obligations are separate and they are the manufacturer’s. Facilities that manufacture or process cosmetics distributed in the United States must register with FDA and renew every two years. FDA can suspend a registration where it determines a product from that facility has a reasonable probability of causing serious adverse health consequences or death, and has reason to believe other products from the facility may be similarly affected. While a registration is suspended, distributing or selling that facility’s cosmetic products in the US is a prohibited act.
So your supplier’s registration status is your commercial risk even though the legal duty is theirs: a suspension does not transfer liability to you, it stops your product moving.
What to ask a private label manufacturer before you sign
- Ask for the facility’s FDA registration status and when it was last renewed. Registration is not approval — FDA does not approve cosmetic products or facilities — and anyone describing it as approval is a signal in itself.
- Ask what safety substantiation documentation you receive, in what format, and whether you keep it if you leave. FDA mandates no specific tests but expects data from scientifically robust methods.
- Agree in writing who drafts, pays for and executes a recall, and who notifies FDA. The regulator looks to the responsible person; your contract decides who does the work.
- Confirm which legal entity appears on the label, because that choice is what creates the responsible person.
- Ask who holds batch and lot traceability records, and how fast they can identify every unit from a batch. A recall you cannot scope is a recall of everything.
Three rules are still pending, and two are due next month
The 2026 Unified Agenda has FDA’s proposed rule on fragrance allergen labeling (RIN 0910-AI90) timetabled for November 2026, and a proposed rule on formaldehyde in hair smoothing and straightening products (RIN 0910-AI83) in the same month. Cosmetic good manufacturing practice (RIN 0910-AJ00) has moved to the agenda’s long-term actions list, with a proposed rule now timetabled for November 2027; FDA’s GMP guidance for cosmetics remains a draft.
The practical read for a brand owner: label artwork and fragrance disclosure decisions made in the next few months will probably be revisited, which is an argument for a first production run in a size you can afford to reprint. Moe’s Group’s minimums are 200 units for a ready-to-go white label formula and 1,000 units for a custom private label formulation, with capacity up to one million units per month.
Moe’s Group is an FDA registered contract manufacturer in Chatsworth, California, making skincare, hair care and body care for other brands, with formulation, filling and labeling in the same facility, so the records behind a product are not scattered across three vendors. Current certificates are downloadable at moesgroup.com/certifications. If you want to see what documentation comes with a program before you commit to artwork, send us the brief.
Moe’s Group Newsroom
