What "Adequate" Actually Means: How US Law Puts Cosmetic Safety on the Company, Not the FDA

A face cream, shampoo, or lipstick sold in the United States carries no FDA seal of approval. Under the Modernization of Cosmetics Regulation Act of 2022, the federal government shifted the burden of proof squarely onto the people selling the product: manufacturers, packers, and distributors must possess documented evidence that what they sell is safe, but they need not show it to anyone before stocking the shelves. The phrase "FDA approved" on a cosmetic package is not merely inaccurate—it is a signal that the company either misunderstands the law or hopes you do.

Safety is self-substantiated

The responsible person for a cosmetic product must ensure and maintain records supporting adequate substantiation of safety, according to FDA guidance. This person is generally the manufacturer, packer, or distributor whose name appears on the label. The agency does not review these files before products enter the market. It does not issue certificates. It does not maintain a registry of approved formulations.

This arrangement differs sharply from how the FDA handles drugs and medical devices, where premarket submission and agency clearance are typically mandatory. Cosmetics occupy a lighter regulatory tier. The FDA's authority kicks in after a product is already for sale—through inspections, adverse event reports, and enforcement actions against adulterated or misbranded goods. The safety obligation, however, precedes the first transaction.

What counts as substantiation

FDA guidance describes adequate substantiation as "tests or studies, research, analyses, or other evidence or information" that qualified experts would find sufficient to support a "reasonable certainty" that the product is safe. The agency deliberately avoids prescribing a fixed checklist. There is no mandated battery of studies for every lotion or lip gloss.

Companies may rely on toxicological data for individual ingredients and for similar products already on the market, supplemented by additional testing appropriate to whatever gaps remain. The FDA notes that even when every ingredient has established safety data, manufacturers usually need at least some toxicological evaluation of the final formulated product. Interaction effects, concentration levels, and delivery methods can alter risk profiles in ways ingredient-level studies do not capture.

This flexibility cuts both ways. A startup with limited resources can build a safety file from published literature and existing ingredient dossiers rather than commissioning original clinical trials. Conversely, the absence of a required test list means companies must judge for themselves what evidence meets the "reasonable certainty" standard—a judgment that exposes them to liability if the FDA later disagrees.

What FDA does not require in advance

MoCRA explicitly states that the law does not require specific tests to demonstrate the safety of individual cosmetic products or ingredients. Animal testing is not required. Stability testing, preservative efficacy testing, and human panel studies—while common industry practice—are not statutory mandates. The FDA has not published a required test list.

The agency also lacks legal authority to approve cosmetic products and ingredients before they go on the market, with one narrow exception: color additives. A cosmetic's labeling is not subject to premarket approval either. This is why the FDA's own guidance documents repeat, in italicized emphasis, that the agency does not approve cosmetics.

Why "FDA approved" is a red flag

Federal law requires cosmetics to be safe under labeled or customary conditions of use and properly labeled. Because the FDA does not preapprove products, any claim of agency endorsement on packaging violates the basic structure of the statute. Such language suggests either ignorance or deliberate deception.

The deception works because consumers intuitively associate "FDA approved" with rigorous pre-market review—the kind that drugs and high-risk devices undergo. Cosmetics do not receive this. A label bearing the phrase may indicate a company importing medical-device standards into a category where they do not apply, or worse, a company fabricating regulatory credibility.

The FDA's public-facing guidance addresses this confusion. The distinction matters legally because misbranding can trigger enforcement, and practically because consumers making purchasing decisions deserve accurate information about what scrutiny a product has actually faced.

Who must have the file and what the buyer can actually see

The named manufacturer, packer, or distributor must maintain the substantiation records, not submit them. These files must be available to the FDA upon request, but they are not public documents. A consumer examining a package sees ingredient lists, directions for use, and any warnings or claims the company chooses to make. The safety dossier remains invisible.

This opacity is structural, not accidental. Congress designed a system that trusts industry to self-police, with federal oversight operating mainly through post-market surveillance and occasional inspection. The buyer's primary signal is the label itself—its accuracy, its plausibility, and the reputation of the named responsible party.

The responsible person must possess support on file. The label offers no proof of FDA approval because no such approval exists.