The Rooted People

Most people operate with a reasonable assumption: if a product is on a store shelf, someone has reviewed it for safety. That assumption holds reasonably well for food and pharmaceuticals. For personal care products — shampoo, moisturizer, deodorant, toothpaste, and makeup — it largely doesn’t.

In the U.S., personal care product safety is not regulated the way most people expect. The system governing cosmetics is older, narrower, and more limited than it appears. Understanding how cosmetic regulation actually works changes how you read labels — and why third-party certifications and ingredient databases have become essential tools.

How the FDA Regulates Personal Care Products

Personal care products are regulated by the FDA under its cosmetics authority, primarily through the Federal Food, Drug, and Cosmetic Act. This law dates back to 1938 and remained largely unchanged for decades.

Under this framework, the FDA does not require pre-market approval for cosmetics. Cosmetic products and ingredients do not need to be reviewed or approved for safety before being sold. There is no standardized requirement to submit safety data, and companies are not required to receive FDA sign-off prior to bringing a product to market.

Instead, the FDA’s role is largely post-market enforcement. The agency can take action against products that are adulterated or misbranded, but typically only after they are already on store shelves. This means the responsibility for ensuring safety falls primarily on manufacturers, while the burden of identifying harm falls on regulators.

Ingredient restrictions reflect this same approach. The FDA has banned or restricted a relatively small number of cosmetic ingredients, while the European Union has restricted or banned over a thousand. This difference reflects two distinct regulatory philosophies: the U.S. generally requires evidence of harm before restricting an ingredient, while the EU applies a more precautionary standard.

What MoCRA Changed (and Didn’t Change)

The Modernization of Cosmetics Regulation Act (MoCRA), passed in 2022, is the most significant update to U.S. cosmetic regulation in over 80 years.

MoCRA introduced new requirements that improve transparency and oversight. Manufacturers must now register their facilities, list their products with the FDA, and maintain safety substantiation records. The law also expanded the FDA’s authority to mandate recalls for products that pose a safety risk and introduced new rules around fragrance allergen disclosure that are still being implemented.

However, MoCRA did not create a pre-market approval system for cosmetics. Products still do not need FDA review before being sold, and there is no universal safety approval process in place. While the law strengthens the system, it does not fundamentally change its reactive nature.

How the Personal Care Industry Self-Regulates

Because FDA oversight is limited before products reach the market, much of cosmetic safety evaluation happens within the industry itself.

The Cosmetic Ingredient Review (CIR), an industry-funded panel of scientific experts, plays a central role. Since 1976, it has evaluated thousands of ingredients and publishes safety assessments that are widely used by brands.

At the same time, the limitations of this model are structural. Because the system is industry-funded, it carries an inherent conflict of interest. Participation is not mandatory, and safety standards can vary between companies. In addition to CIR guidance, brands conduct their own internal safety assessments, which differ in rigor and are rarely verified unless a company pursues third-party certification.

As a result, there is no single, standardized definition of “safe” across the personal care industry.

How the U.S. Compares to Other Regulatory Frameworks

The European Union takes a more precautionary approach to cosmetic safety.

In the EU, products must undergo a documented safety assessment by a qualified professional before they can be placed on the market. The EU also maintains a list of over a thousand restricted or banned substances, reflecting both established risks and precautionary limits on emerging concerns.

In contrast, the U.S. system does not require pre-market approval and relies on post-market enforcement. This means products can be sold before comprehensive regulatory review, with action taken only if issues arise.

The result is that a product sold legally in the U.S. may contain ingredients restricted in the EU — not necessarily because they are proven harmful, but because the EU operates with a lower threshold for precaution.

Why Third-Party Certifications Matter

Because FDA cosmetic regulation does not include pre-market approval, additional systems have emerged to fill that gap.

Third-party certifications and ingredient databases provide a level of scrutiny and transparency that the regulatory system does not require. They often evaluate ingredient safety more conservatively, apply stricter standards, or make information more accessible to consumers.

These tools are not redundant — they exist because key parts of the safety evaluation process are not standardized, publicly disclosed, or independently verified at the federal level.

What This Means for You

This doesn’t mean personal care products are inherently unsafe. It means cosmetic regulation in the U.S. is more limited and decentralized than most people assume.

Safety depends on a mix of manufacturer responsibility, voluntary standards, third-party verification, and consumer awareness. Understanding that makes tools like ingredient research, certifications, and label reading more useful — not less.

Working Within the Current System

The regulatory framework is evolving. MoCRA has improved oversight, and states like California have introduced stricter ingredient laws. Still, the foundation remains the same: a largely reactive system without pre-market approval.

Knowing that changes how you approach products. Certifications carry more weight, ingredient databases become more useful, and labels become more meaningful.

The goal isn’t to approach every product with suspicion. It’s to understand the system — and make informed decisions within it.