The Intersection of MoCRA and Data Privacy
The Modernization of Cosmetics Regulation Act (MoCRA) and data privacy law are intersecting in ways that affect how cosmetics companies collect, use, and protect consumer information. The overlap creates compliance considerations for businesses operating under both regulatory frameworks.
Why this matters: Cosmetics companies collect a lot of personal data. Skin concerns, health conditions, photos, purchase habits. MoCRA gave the FDA new authority over cosmetics safety, but it also means companies are gathering more detailed consumer information to meet reporting and labeling requirements. When health-adjacent data meets weak privacy rules, consumers can end up exposed in ways they did not expect. If you buy skincare products, the data trail is longer than you think.
Who should care: General readers · Privacy officers · Policy
This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.