In this article, learn about:
Why MoCRA's mandatory recall authority changed the stakes for cosmetics brands
The three pillars that determine whether a brand can respond quickly and effectively to a recall
The concrete signs that separate a brand that's actually ready for a recall from one that only has a plan
The majority of plans for product recalls present the wrong question, trying to predict whether a contamination event, a mislabeling error, or a supplier failure will happen in the first place. But the question that actually determines what happens next is narrower and far more urgent: If a recall does happen, can the brand act fast and precisely?
The moment a recall starts, response time becomes the only variable that matters. The clock starts the instant a safety signal appears, and every hour without an answer is an hour exposure keeps compounding. Everything else waits behind one question: Exactly which lots are affected, and where did they go?
Recall readiness is not a single document in a compliance folder. Instead, a brand’s data and operations capability determines whether they can trace a lot in hours instead of weeks.
The Regulatory Floor in Health, Beauty, and Wellness
For most of the history of the U.S. cosmetics industry, the FDA had almost no lever to pull. The rules, which dated back to 1938, gave the agency authority to act only after a product had already caused harm. There was no federal registration requirement, no mandatory listing of what was in a product, and no way for the FDA to order a company to pull something off shelves. Recalls happened, but they happened because a brand chose to cooperate, not because the FDA could compel it.
In 2022, the Modernization of Cosmetics Regulation Act (MoCRA) was passed, with its core provisions taking effect in December 2023. Due to MoCRA, the FDA can order a mandatory recall of a cosmetic product when it determines the product presents a reasonable probability of causing serious adverse health consequences or death. These are mandatory orders, usually with a public announcement attached.
Additionally, a responsible person (defined as the manufacturer, packer, or distributor whose name and address appear on a cosmetic product's label) now has to report a serious adverse event to the FDA within 15 business days of learning about it. The FDA requires the responsible parties to keep the underlying records for six years (three years for small-business distributors who don't manufacture or process the product themselves).
Drugs and supplements have lived with a version of this for years. Cosmetics haven't, which is why this is a bigger shift for health and beauty brands than it might look on paper. And for brands with a portfolio that spans categories, the compliance clock across the whole business now moves at the pace of its most strictly regulated category.
The Problem Is the Clock
A 15-business day deadline looks generous on paper but can be difficult for a brand to meet. A brand has to identify the affected lot, trace every location that lot shipped to, and get pull-back moving, all before the reporting deadline.
For example, consider two brands facing a recall after receiving back lab results. The first brand carries its lot number through every system downstream of the plant, and the other stops tracking it the moment the product leaves manufacturing.
The first brand can query its systems and get a lot number, a list of every retailer and distribution center that received it, and shipment dates, within the hour. By the end of day one, pull-back requests are sent to every affected location. By day three, the brand can tell the FDA and its retailers exactly how much product has been recovered and how much is still in transit.
The second brand starts the same morning with the same lab result and spends that first day just figuring out which system has the shipping records. Lot numbers were captured at the plant but never carried through to the warehouse management system (WMS). Distribution data lives in one format for direct accounts and another for distributor-fulfilled orders. By day three, this brand is still building the list the first brand had within the hour.
The gap between the two is in whether the operational and data groundwork existed before the clock started running.
The Three Pillars of Readiness
Recall readiness consists of three pillars, all of which are essential. Losing any one of them collapses the value of the other two.
Lot-Level Traceability
Nearly every manufacturer assigns lot numbers, because it's required for basic quality control. The harder requirement, and the one that actually determines recall speed, is carrying that lot number through every downstream transaction: the shipment out of the plant, the receipt at a distribution center, the sale into a retailer's system. A lot number that is only used at the manufacturing line is a quality record but doesn’t function as a traceability system.
Accurate Distribution Records
Knowing where a lot went means knowing it with confidence. A brand needs to know exactly which retailers, which distribution centers, and in some cases which individual stores received a given lot, down to the unit. An approximation built from total shipment volume gets the scale of a recall roughly right but gets the specifics wrong, and specifics are what a recall requires.
Reverse-Logistics Capability
Knowing where product is doesn't help to transport it back from the retailer. A brand also needs the operational rails already built: carrier relationships that can be activated same-day, retailer processes for accepting returned product, and a way to check that product has actually stopped moving.
Related Reading: How To Avoid Common Shipping Errors
What Happens if a Brand Isn’t Ready for a Recall
Recall readiness is a chain, and missing any of the three pillars above can cascade into a series of failures.
Every extra day spent figuring out which lots shipped where is a day the product stays on shelves and in homes. A longer window means more consumer exposure, which means more adverse events, more customer complaints, and in some cases more people affected by the same issue a faster brand would have already contained.
A wider exposure window also draws more scrutiny from the retailers carrying the product, since they're the ones fielding customer questions the brand hasn't answered yet.
That retailer scrutiny is the part brands often underestimate. A retailer watching a supplier struggle to figure out which lots are affected is updating its read on that supplier's reliability across the whole relationship. A slow recall response becomes evidence in a much broader conversation about whether this supplier can be trusted to handle other problems when they come up.
Related Reading: What Do I Do When My Product Has a Recall?
Readiness Is Earned, Not Declared
Recall readiness is a data condition, not a single planning document. It's the accumulated result of choices made long before any crisis. Readiness is built the same way traceability is: one accurate transaction at a time, over months of ordinary operations.
Signs a Brand Isn’t Ready for a Recall
The easiest way to test a brand’s recall capabilities is to check for the concrete signs of readiness, such as:
Nobody can name which retailers received a specific lot within an hour of being asked.
Distribution records live in disconnected systems that don't reconcile against each other.
No one has ever actually run a mock pull-back, only written a process for one.
Signs a Brand Is Prepared for a Recall
A brand that's actually ready for a recall can prove it, in specific and checkable ways:
Any team member can name every retailer and distribution center that received a specific lot within minutes, not hours.
Distribution records reconcile automatically across every channel, direct and distributor-fulfilled alike.
The brand has actually run a mock pull-back recently enough to know exactly where the process holds and where it doesn't.
Build Recall Readiness Into Every Shipment
The three pillars in this piece all depend on one thing: whether a lot number and its shipment data travel all the way to the retailer. That's the exact data flow SPS Fulfillment automates. Every ASN, PO, and invoice moves through one connected system, so lot and shipment details stay attached to the transaction instead of getting lost between the plant, the warehouse, and the receiving dock.
If a recall ever starts, that's the difference between tracing a lot in an hour and rebuilding the trail from scratch. See how SPS Commerce Fulfillment keeps order, shipment, and lot data connected across every retailer you work with.