Who regulates you, and when
Updated
A short map, because people arrive expecting a local inspector and the answer is federal.
One agency, two doors
FDA regulates both cosmetics and OTC drugs, through different centers and completely different requirements.
There is no license to obtain in either case and no inspection to pass before selling. The obligations are continuous rather than gated, which is why they are so easy to be unaware of.
On the cosmetic side
Labeling under the cosmetic rules and FPLA, with ingredients by INCI.
Facility registration and product listing under MoCRA, with small-business exemptions by revenue that some makers qualify for.
Safety substantiation, with no small-business exemption.
Adverse event reporting obligations, which arrived with MoCRA and which small makers most often do not know about.
On the drug side
Establishment registration, an NDC labeler code and drug listing, renewed annually between 1 October and 31 December.
Drug Facts labeling under 201.66, and the monograph conditions in 21 CFR 347 or, for sunscreen, OTC Monograph M020.
cGMP under 21 CFR Parts 210 and 211.
No small-business exemption anywhere in that list.
Everyone else
Your state and city for business registration, sales tax and any local license.
Your state again for cosmetic ingredient disclosure programs where they exist, which attach to selling into the state rather than to being based there.
Markets and retailers, who set their own conditions and in practice ask more questions than any regulator will.
And your insurer, whose exclusions are the fastest way to discover which side of the line your product is on.