SPF Testing at a Cosmetic Testing Lab: The OTC Drug Standards Most Sunscreen Brands Get Wrong

A brand came to us last year with a mineral sunscreen they’d been selling for 18 months. Good formula, clean ingredients, strong retail placement. They wanted to confirm their SPF 30 claim before a major retail expansion. When we ran the finished product testing, the product came back at SPF 19.

That’s not a rounding error. That’s a compliance crisis.

Sunscreen is one of the most rigorously regulated product categories in the US consumer market — but it doesn’t always get treated that way. Many brands approach SPF products as if they were standard cosmetics, run minimal testing at launch, and move on. And it works, until it doesn’t.

Sunscreen Is an OTC Drug — and That Changes Everything About Testing

This is the foundational fact most formulators understand but some brand operators genuinely don’t: in the United States, sunscreens are regulated as over-the-counter (OTC) drugs under FDA jurisdiction. Not cosmetics. Drugs.

That classification exists because sunscreens make a pharmacological claim — they affect the structure or function of the body by absorbing or reflecting ultraviolet radiation to reduce the risk of sunburn, skin cancer, and premature aging. Under the FD&C Act, any product making that kind of claim falls squarely under drug regulations.

The practical consequence is that sunscreen manufacturers must comply with OTC drug requirements, not just the cosmetic GMP standards in 21 CFR Part 700. They’re operating under the OTC Monograph system, which was fundamentally restructured by the Over-the-Counter Monograph Safety and Innovation Act (OMASMIA) of 2020 — legislation that gave FDA formal expedited rulemaking authority over OTC monographs and created a new pathway for ingredient safety reviews.

Under that framework, FDA has sorted sunscreen active ingredients into categories. As of 2026, only zinc oxide and titanium dioxide are considered GRASE (Generally Recognized as Safe and Effective). Para-aminobenzoic acid (PABA) and trolamine salicylate are explicitly not GRASE and cannot be used. The remaining 12 commonly used UV filters — avobenzone, oxybenzone, octinoxate, octocrylene, homosalate, and others — remain under additional safety review. That doesn’t prohibit their use in the interim, but it does mean FDA can compel manufacturers to provide additional safety data, and it complicates long-term formulation planning considerably.

What SPF Testing at a Cosmetic Testing Lab Actually Involves

Here’s where things get genuinely complex.

SPF — sun protection factor — is a ratio comparing the UV dose required to produce a minimal erythemal dose (MED) on protected skin versus unprotected skin. An SPF of 30 means it takes 30 times more UV energy to produce a minimal sunburn response on treated skin than on bare skin. It sounds simple. The test to establish it isn’t.

FDA’s accepted method for determining SPF is an in vivo human subject test, conducted per the protocol described in ISO 24444:2019. The test requires at minimum 10 human subjects per product, performed on the backs of panelists using a calibrated solar simulator. Subjects are selected based on Fitzpatrick skin type (typically types II or III), and untreated skin is exposed to determine baseline MED before the sunscreen is applied at a density of 2 mg/cm². It’s a careful, time-consuming procedure, and it’s the standard method for supporting a labeled SPF value.

This is where a lot of brands encounter an unexpected bottleneck. In vivo SPF testing requires specialized clinical or photobiology facilities — solar simulator equipment, dedicated testing rooms, trained clinical staff, and institutional protocols for involving human subjects. It’s not a test that most standard cosmetic testing laboratories can run in-house. When you’re evaluating a cosmetic testing lab for sunscreen work, asking whether they run in vivo SPF testing on-site or partner with a certified photobiology facility isn’t a gotcha question. It’s a necessary one.

What full-service cosmetic testing laboratories can run — and what forms an essential part of the compliance picture — is in vitro broad spectrum testing per ISO 24443. This method uses a spectrophotometer to measure the UV absorbance profile of a thin sunscreen film, determining both the UVA protection ratio and the critical wavelength. It’s a rigorous measurement, ISO 17025 scope-accreditable, and it’s required before any “broad spectrum” language can appear on a sunscreen label.

So when a brand asks a cosmetic testing laboratory to “test my sunscreen,” the honest answer is: some of that testing happens in-house, and some happens at a specialized photobiology facility. Knowing which is which — and sequencing the two correctly — is part of what competent sunscreen compliance support actually looks like.

Broad Spectrum Claims, Water Resistance, and the Violations That Keep Recurring

To make a broad spectrum claim under FDA’s 2011 Broad Spectrum Final Rule, a sunscreen must achieve a critical wavelength of at least 370 nm and meet the UVA/UVB ratio requirements established in the test protocol. Products that don’t meet this threshold can still be marketed with their SPF value, but they cannot state that the product reduces the risk of skin cancer and early skin aging. That’s a material regulatory and marketing difference — one that directly affects how the product can be positioned to health-conscious consumers.

Three other compliance failure modes come up repeatedly in finished product reviews:

Water resistance claims. FDA prohibited “waterproof” and “sweatproof” sunscreen claims in 2012. Fourteen years later, brands still lose marketplace listings over this language. The only permitted claims are “water resistant (40 minutes)” or “water resistant (80 minutes),” and each claim must be supported by specific testing: subjects wearing the product engage in water immersion activity for the stated duration, and SPF is measured afterward. If you haven’t run that test, you cannot make that claim.

SPF label accuracy over time. FDA’s labeling rules require that the labeled SPF value be supported by in vivo testing, with values in the SPF 15–50 range rounded down to the nearest multiple of 5. A product that originally tested at SPF 32 and was correctly labeled SPF 30 — but now tests at SPF 19 after formula drift or supplier changes — has a real labeling problem. Formula changes, ingredient supplier switches, fill weight variation, and storage temperature all affect SPF performance. A lot of brands test once at launch and assume the number is permanent. Formula changes, supplier qualification gaps, and manufacturing variability mean it’s not.

Drug Facts panel format. Sunscreen labels require a Drug Facts panel — not a standard INCI ingredient list. The Drug Facts box must include active ingredients with their percentages, labeled uses, warnings, and directions in FDA’s prescribed format. Missing or malformed Drug Facts panels are among the most consistently cited violations in FDA warning letters to sunscreen marketers. The label design is a regulatory affairs issue rather than a testing issue per se, but any quality review at a cosmetic testing laboratory should flag it before a retailer or Amazon review catches it first.

What to Ask When Evaluating a Cosmetic Testing Lab for Sunscreen Work

Not every ISO 17025 accredited cosmetic testing laboratory is equipped for the full scope of sunscreen compliance. When you’re evaluating a lab partner, here’s what to press on:

• Is in vitro broad spectrum testing under ISO 24443 within your accredited scope? Accreditation to the specific method matters. It’s the documentation chain that confirms your broad spectrum result is traceable, reproducible, and defensible to a retailer, a retailer’s compliance team, or an FDA investigator.
• Do you coordinate with clinical partners for in vivo SPF testing? A lab that keeps everything in-house without acknowledging this boundary is either misinformed or overstating capabilities. In vivo SPF testing requires human subjects and a clinical infrastructure that’s simply not part of a standard chemistry or microbiology lab.
• Can you support product stability testing for SPF claims? OTC drug products require shelf-life data. SPF can degrade through UV exposure, elevated storage temperature, and oxidation of active UV filters — particularly organic filters like avobenzone. If you’re not testing at real-time and accelerated stability conditions, you don’t actually know what your product will perform like at month 24.
• Are you current on OMASMIA and the evolving GRASE ingredient landscape? The regulatory context around sunscreen actives is actively shifting. A lab partner who understands that landscape can flag formulation risks early, before they become expensive reformulation or relabeling projects.

At Qalitex, our cosmetic testing scope includes ISO 17025 accredited in vitro broad spectrum testing under ISO 24443, finished product stability programs, and independent label claim review. For in vivo SPF testing, we coordinate with certified clinical photobiology partners to complete OTC drug compliance packages. We’re explicit about where our scope ends and where a clinical facility begins — because that ambiguity, left unaddressed, is exactly where compliance gaps develop.

Before Your Next Production Run

Pull your most recent SPF test data. Check two numbers: your measured SPF value against your label claim, and your critical wavelength against 370 nm.

If you’re in a solid position on both — and nothing in your formula, your supplier base, or your manufacturing process has changed since your last test — you’re probably fine. But if either number is trending toward a threshold, or if you’re expanding distribution to retailers with their own compliance review processes, run finished product testing before committing to the next production cycle.

Mineral SPF products have seen consistent category growth as consumers shift toward zinc oxide and titanium dioxide formulas. That growth brings regulatory scrutiny along with the revenue. The brands that stay on shelf through the scrutiny are the ones treating their sunscreen as what it actually is: an OTC drug with clinical-grade testing requirements attached.

---

Written by Nour Abochama, Vice President of Operations, Qalitex Laboratories. Learn more about our team

Talk to our team about your testing needs. Contact us

Related from our network

• FDA OTC Drug Pathways and Regulatory Strategy for US Market Entry — Aurora TIC provides FDA regulatory consulting for OTC drug submissions, 510(k)s, and consumer health product compliance strategy.
• USP and Ph.Eur. Monograph Testing for Sunscreen Raw Materials — Ayah Labs offers global B2B raw material testing and supplier qualification, including zinc oxide and titanium dioxide cosmetic actives.