Your Sunscreen Says 'Reef Safe.' Shoppers Still Don't Know What That Covers.
"Reef safe" is not an FDA-regulated claim, and no brand needs a single test result to print it on a bottle. The only legal teeth behind the phrase are two narrow local laws that ban the retail sale of products containing two specific chemicals — nothing more, and nothing that amounts to a certification. The flip side of that same story gets skipped just as often: no "chemical" UV filter sold in the United States has ever been found unsafe by the FDA either. What the agency has actually found, after more than seven years of an unfinished rulemaking, is that several of those filters are absorbed into the bloodstream above the level that triggers a request for more safety data — which is not the same thing as evidence of harm. Shoppers typing "mineral sunscreen vs chemical sunscreen" into Google are being sold two marketing categories, mineral-good and chemical-bad, while the actual federal safety record sits in a much less dramatic, much less finished middle.
That middle has gotten more interesting in the last few months, which is exactly why this is worth writing about now instead of repeating the 2019 headlines. In June 2026, the FDA finalized the addition of a genuinely new sunscreen active ingredient for the first time in years. In September 2026, it finalized the removal of two ingredients nobody uses anymore. Neither of those orders resolved the question shoppers are actually asking, and the active ingredients at the center of the "chemical sunscreen" scare — oxybenzone, avobenzone, octocrylene, homosalate, octinoxate, octisalate — are in exactly the same regulatory limbo they were in when the panic started. For a DTC skincare or sun-care brand, that limbo isn't an abstract policy footnote. It's printed directly on the back of every bottle in the "Active Ingredients" box, and it's one of the first things a comparison shopper, an ingredient-checking browser extension, or a skeptical Reddit thread will flag before checkout. Getting the claim language right — neither overclaiming "100% safe" nor passively repeating a stroke-scare framing that isn't supported by the agency's own findings — is a conversion problem as much as a compliance one.
What "Reef Safe" Actually Means (and Doesn't)
"Reef safe" and "reef friendly" are not legal terms in the United States. There is no FDA standard, no USDA-style certification body, and no independent testing requirement a brand must clear before printing either phrase on a label. The only enforceable restrictions that exist anywhere in the country are two narrow, local ones, both aimed at two specific chemicals rather than at "chemical sunscreen" as a category.
Hawaii was first. Governor David Ige signed a law on July 3, 2018 banning the retail sale — not the use, the sale — of sunscreens containing oxybenzone or octinoxate without a prescription, making Hawaii the first U.S. state to restrict a sunscreen ingredient on environmental grounds. The law took effect January 1, 2021. Key West, Florida followed with its own ordinance: the city commission voted 6-1 in early February 2019 to ban the sale or distribution of sunscreens containing oxybenzone or octinoxate, also effective January 1, 2021, enforced through warnings and civil citations with an exemption for medically prescribed products. Critics of both laws, at the time, pointed out that the underlying reef-toxicity research was thinner than the press coverage implied — a fair point that cuts against the loudest "chemical sunscreens are killing the reefs" framing without supporting the opposite claim that they're harmless to reefs either.
The research the bans leaned on is real, even if its limits are usually left out of the marketing copy that cites it. Marine biologist Craig Downs and co-authors published a study in the Archives of Environmental Contamination and Toxicology in October 2015 showing that oxybenzone was toxic to coral larvae and coral cells at concentrations comparable to levels the research team measured in seawater near heavily trafficked reefs. The documented effects included DNA damage in larvae, larval deformity severe enough that larvae became trapped inside their own skeletons and could no longer disperse with ocean currents, and coral bleaching. That is a real, specific, peer-reviewed finding about one ingredient, oxybenzone, in one ecological context. It is not a finding about "chemical sunscreen" as a 12-ingredient category, and it says nothing at all about human skin.
So when a label says "reef safe," what a shopper can actually infer is: this product probably doesn't contain oxybenzone or octinoxate, the two ingredients two jurisdictions have restricted. What they cannot infer is that the product was tested against any reef-safety standard, that a third party verified the claim, or that every other UV filter in the formula has been cleared of any environmental concern. A product can legally say "reef safe" while containing a newer filter with zero published reef-toxicity data one way or the other, and face no federal claim-substantiation requirement beyond the general FTC rule against deceptive advertising that applies to every product category. That gap between what the phrase implies and what it actually guarantees is the first piece of the trust tax DTC skincare brands are paying without necessarily realizing it — shoppers who've learned to distrust "clean," "natural," and "safe" as marketing words bring that skepticism to every claim on the page, including the ones that happen to be true.
The FDA's Real Position on "Chemical" Sunscreen Filters
Before 2019, the FDA's sunscreen monograph treated sixteen active ingredients as generally recognized as safe and effective, or GRASE, largely on the strength of decades of market use rather than the kind of modern systemic-absorption data the agency now expects for a new over-the-counter drug ingredient. In February 2019, the FDA published a proposed rule that would have reclassified those sixteen. Two, PABA and trolamine salicylate, would move to not-GRASE. Two, zinc oxide and titanium dioxide — the "mineral" filters — would be reaffirmed as GRASE, proposed at concentrations up to 25%. The remaining twelve — cinoxate, dioxybenzone, ensulizole, homosalate, meradimate, octinoxate, octisalate, octocrylene, padimate O, sulisobenzone, oxybenzone, and avobenzone — would be classified as "GRASE with insufficient data," meaning the FDA said it did not yet have the safety studies it needed to put them on either side of the line.
That distinction matters more than the marketing shorthand that followed it. "Insufficient data" is an evidentiary gap, not a safety verdict. The FDA has said this explicitly and repeatedly: needing more data is not a conclusion that an ingredient is unsafe, and a 2014 law called the Sunscreen Innovation Act had already set a November 26, 2019 deadline for the agency to finalize a monograph. The FDA missed it. At a public meeting on November 21, 2019, the director of the FDA's nonprescription drug division told industry advocates the agency would not meet the deadline, citing more than 20,000 public comments still under review. That miss became, in a lot of secondhand coverage, "the FDA couldn't confirm these ingredients are safe" — which inverts what actually happened. The agency hadn't run out of time to clear them. It had run out of time to finish deciding what data it would require before it could rule either way, for a category of ingredients that had already been on the market, lawfully, for decades.
Seven years later, that same group of twelve ingredients is still waiting. The FDA has made real, final decisions on pieces of the 2019-2021 proposal — just not on the pieces that generated the headlines. On June 10, 2026, the agency issued a final order adding bemotrizinol, a newer UV filter long used outside the U.S. and submitted for review with safety data from DSM Nutritional Products, as a GRASE sunscreen active ingredient; the proposed order had been published for comment in December 2025. On September 10, 2026, a separate final order formally removed PABA and trolamine salicylate from the monograph — a change the FDA itself noted doesn't affect any currently marketed U.S. sunscreen, since essentially nobody still formulates with either ingredient. Even after that order, the proposed reaffirmation of zinc oxide and titanium dioxide as GRASE remains just that: proposed, not finalized. And the twelve ingredients at the center of the "is chemical sunscreen safe" search queries — the ones most DTC sun-care and daily-SPF moisturizer brands actually use — have received no final GRASE determination in either direction since the question was first opened in February 2019.
The Study That Started the Panic, and What It Actually Found
The modern version of this worry traces to two FDA-sponsored studies published in JAMA, not to any outside watchdog report. The first, led by FDA researcher Murali Matta and colleagues in 2019, tested four active ingredients — avobenzone, oxybenzone, octocrylene, and ecamsule — in 24 healthy volunteers. A second study in 2020 expanded to 48 participants and six actives, adding homosalate, octisalate, and octinoxate, and measured skin concentrations alongside blood plasma. Both studies found that several of the tested ingredients showed up in blood plasma at concentrations above 0.5 nanograms per milliliter — the specific threshold the FDA's own 2019 proposed rule had set as the level above which it wants additional nonclinical safety data before it will call an ingredient safe by default.
That is the entire finding: absorption above a data-triggering threshold, in a study designed from the start to measure absorption, not harm. The studies did not test for, and did not find, any clinical health effect. The FDA's own public statement on the research says so directly: absorption does not equal risk, and the agency does not yet know which absorption levels, if any, actually matter for human safety — which is precisely why it asked for more studies rather than issuing either a clearance or a warning. For context on how long some of these ingredients have been used without a documented long-term harm signal: oxybenzone has been an approved U.S. sunscreen ingredient since 1978, and outside of occasional contact-dermatitis and allergic reactions — a real but minor and well-understood risk shared by many cosmetic ingredients — no large-scale, confirmed pattern of systemic harm from decades of use has been established in the medical literature.
None of this means the concern is manufactured. Absorption above a regulatory threshold is a legitimate reason for a regulator to ask for more data, and "we don't know yet" is a genuinely different answer than "we checked and it's fine." The honest version of this story — more interesting and more defensible than either extreme — is that the FDA opened a real scientific question in 2019, that question remains open for the twelve ingredients most sun-care brands rely on, and the uncertainty itself, not a confirmed hazard, is what's driving both the mineral-sunscreen sales boom and the skepticism a lot of DTC skincare brands now have to answer for on their own PDPs.
Which Sunscreen and Skincare Claims Are Actually Regulated
Shoppers treat label claims as if they all carry the same weight. They don't. Some phrases are tested against a specific FDA standard before a brand can use them; others are entirely self-applied, with no government body, accreditor, or industry standard checking the claim at all. The gap between those two categories is where most of the confusion — and most of the overclaiming, in both directions — actually lives.
| Claim / term | What it actually means | Who defines or tests it | What it does NOT confirm |
|---|---|---|---|
| "Broad Spectrum" | The product passed FDA's required critical-wavelength test showing it protects against both UVA and UVB rays | FDA (2011 final sunscreen labeling rule); required lab test, not self-reported | Nothing about a specific SPF number on its own, or about non-UV claims like "anti-aging" |
| SPF number | A multiplier for how long UVB-driven sunburn takes to start, measured in a standardized lab test | FDA-mandated test method, independently reproducible | UVA protection (that's what Broad Spectrum covers separately), water resistance, or "all-day" protection without reapplication |
| Zinc oxide / titanium dioxide ("mineral") | Proposed as GRASE at up to 25% concentration in a 2021 FDA order | FDA (proposed order, not yet finalized as of the most recent 2026 agency update) | A completed, final federal safety determination — the reaffirmation is still pending |
| "Reef Safe" / "Reef Friendly" | Typically signals the product avoids oxybenzone and/or octinoxate, the two chemicals restricted by Hawaii and Key West law | No one — self-applied by the brand, no federal or third-party verification | Testing against any reef-toxicity standard, or that every other ingredient in the formula is environmentally cleared |
| "Non-Comedogenic" | The brand's own testing suggests the formula is less likely to clog pores | No standardized method; each brand runs its own, often unpublished, protocol | A guarantee against breakouts for every user — pore-clogging potential varies by skin and by which specific ingredient is tested |
| "Clean" / "Chemical-Free" beauty | A marketing category with no legal definition in U.S. cosmetics law | No one — retailers and brands each set their own internal "clean" ingredient lists, which don't match each other | Anything about the product's actual safety profile; zinc oxide, water, and vitamin C are also chemicals |
The practical takeaway for a brand writing its own PDP copy: lead with the claims in the top two or three rows, because those are the ones a regulator has actually tested and that a competitor can't simply assert their way into matching. Treat the bottom three as marketing language that needs a sentence of honest context nearby, not as a substitute for substantiation.
Three Myths DTC Skincare Marketing Keeps Repeating
Three claims circulate constantly in sun-care and skincare marketing, repeated by brands on both sides of the mineral-versus-chemical argument, and all three collapse under the plain language of the FDA's own public statements.
Myth 1: "Mineral" and "chemical" describe a safety difference, not a mechanism
Mineral and chemical filters work through genuinely different physical mechanisms — that part is accurate and worth explaining to shoppers rather than hiding behind a marketing label. Mineral filters, zinc oxide and titanium dioxide, sit on top of the skin and primarily reflect and scatter UV radiation away from it. Organic (so-called "chemical") filters absorb UV radiation and convert it to a small amount of heat that's released from the skin. But "chemical" in this context is a marketing category, not a chemistry one: zinc oxide is also, unambiguously, a chemical compound. The FDA has not found the organic filters used in U.S. sunscreens to be unsafe; it has found several of them absorbed into the bloodstream above a threshold that triggers a request for more data. Mechanism and safety are two separate facts, and the marketing framing fuses them into one so that "chemical" sounds like a verdict instead of a description of how the molecule works.
Myth 2: "Reef safe" means independently verified
Covered above, worth restating as its own myth because of how often it's treated as a certification rather than a self-applied phrase: no federal agency, accreditation body, or standardized test verifies a "reef safe" claim before a brand prints it. The two laws that exist restrict two specific chemicals in two specific jurisdictions. Everything else on the label is the brand's word.
Myth 3: No expiration date printed means the product lasts forever
FDA rules require an expiration date on a sunscreen only if the manufacturer's own stability testing shows the labeled SPF value drops below that number within three years of manufacture. If a company's testing doesn't show that drop, the company can legally omit an expiration date altogether — which is a disclosure choice tied to a specific test result, not proof that the formula is stable indefinitely. A bottle with no date printed on it has either passed a three-year stability test with no measured drop, or the brand simply hasn't run (or hasn't needed to run, for a non-SPF skincare product where expiration dating isn't mandated the same way) the test that would require one. Shoppers reasonably read "no date" as "doesn't expire." The more accurate reading is "the manufacturer either tested this and it held up, or wasn't required to test it at all."
What a Real Fix Looks Like for a DTC Skincare Brand
None of this is a reason to panic-reformulate or to stop using language shoppers are already searching for. It's a reason to write label and PDP copy that reflects what's actually been established versus what's still open, and to stop treating "reef safe" and "chemical-free" as free marketing wins with no downside. Five specific changes do most of the work.
Sub-fix 1: Separate tested claims from self-applied ones on the page itself
Most PDPs run every claim — Broad Spectrum, SPF 50, Reef Safe, Non-Comedogenic, Clean — in one undifferentiated row of badges. A shopper has no way to tell which ones a regulator actually checked. Splitting the claims into two visual tiers, "FDA-tested" and "brand-verified," with one line of plain-language explanation under each, does more for trust than adding a seventh badge to the row. This is a straightforward audit: pull every claim currently printed across the catalog, sort it against the table above, and have a claim-language pass rewrite the ones sitting in the wrong tier.
Sub-fix 2: Build one claims-substantiation page and link to it from every PDP
Rather than re-explaining "what does reef safe mean" in slightly different words on every product page, write it once, cite the actual Hawaii and Key West statutes and the Downs et al. research by name, and link every product page's claim badge to that single page. This also solves an SEO problem: it's a natural landing page for the exact long-tail questions — "is mineral sunscreen better," "what does reef safe mean," "is my sunscreen fda approved" — that a visibility audit will usually find a brand is losing to generic explainer content from sites with no product to sell.
Sub-fix 3: Match the FAQ to what's actually being asked, not what's comfortable to answer
A support ticket or a one-star review that says "why does this have oxybenzone in it, isn't that banned?" deserves a real, specific answer — not "we only use clean ingredients" and not silence. The honest answer, that it's restricted by name in two jurisdictions and under open FDA review everywhere else, with no finding of harm to date, is more reassuring than either dodge once a brand is willing to say it plainly. Mining existing reviews and support threads for the actual phrasing of these questions, rather than guessing at what customers want to know, is exactly the kind of gap a silent product page creates and never surfaces in a standard analytics dashboard — and it's the same raw material a drafted review-response workflow can turn into an answer instead of a one-star complaint.
Sub-fix 4: Hedge claims about open science the way the FDA itself hedges them
"No studies show harm" is a true and useful sentence. "Proven safe" and "100% safe" are not true sentences for any of the twelve ingredients still in regulatory limbo, and a brand that uses them is one screenshot away from a credibility problem when a shopper finds the FDA's own "insufficient data" language. The fix is matching the agency's own precision: say what's established, say what's still open, and don't round either one up.
Sub-fix 5: Track the monograph instead of assuming it's permanently stalled
The 2026 bemotrizinol and PABA orders are proof the rulemaking can move, even slowly, after sponsor-funded studies get submitted. A brand that formulates with any of the twelve open-status ingredients should treat the monograph as a live docket, not a dead one — a final GRASE determination in either direction, whenever it lands, will need a label and marketing-copy update on a deadline the FDA sets, not one the brand chooses.
Most of this work — auditing claim tiers across a catalog, mining reviews for the real questions being asked, and keeping a label current against a moving regulatory record — is exactly the kind of cross-catalog pattern that a one-time manual audit misses and that a standing revenue-leak diagnostic for skincare and sun-care brands is built to catch on an ongoing basis. It's also a different lens than either a review-management tool like Yotpo or a sales-analytics platform like Triple Whale was built to apply: both report what already happened on the storefront, not which specific claim on which specific PDP is quietly costing the brand a sale before checkout.
Bottom Line
"Reef safe" is a self-applied marketing phrase with no independent testing behind it, restricted in practice to two jurisdictions and two chemicals. "Chemical sunscreen is dangerous" overstates a real but narrower finding: several organic UV filters are absorbed into the bloodstream above a threshold that triggers more FDA testing, which is not the same as proof of harm, and even the "safe" mineral filters are still only proposed, not finalized, as GRASE under the agency's own 2021 order. Seven years into an unfinished rulemaking, with two small final orders issued in 2026 and the ingredients that actually matter to most sun-care formulas still unresolved, the honest label copy sits between the two marketing extremes: specific about what's tested, specific about what's still open, and never further ahead of the evidence than the FDA itself is willing to go. Brands that write to that standard, and show their receipts instead of a badge wall, are the ones a skeptical ingredient-checking shopper actually trusts enough to buy from twice.
FAQ
Is mineral sunscreen actually proven safer than chemical sunscreen? No single FDA order has made that comparison. Zinc oxide and titanium dioxide are proposed as GRASE at up to 25% concentration under a 2021 order that is still not finalized, and the organic filters most "chemical" sunscreens use have not been found unsafe — they're classified as needing more data. Neither side has a final, completed federal safety verdict.
What does "reef safe" mean on a sunscreen label? In practice, it usually signals the product doesn't contain oxybenzone or octinoxate, the two ingredients restricted by law in Hawaii and Key West. No federal agency or independent body verifies the claim before it's printed.
Why hasn't the FDA finished its sunscreen safety review after all this time? The agency proposed its current framework in February 2019 and missed a legally set November 2019 deadline while reviewing over 20,000 public comments. Since then it has issued two final orders — adding bemotrizinol in June 2026 and removing two unused ingredients in September 2026 — but the ingredients most sun-care brands actually use remain in the same "insufficient data" status they've held since 2019.
Does "non-comedogenic" mean a product won't cause breakouts? It means the brand ran its own testing and concluded the formula is less likely to clog pores. There's no standardized federal or industry test behind the term, and results can vary by skin type and by which specific ingredients were tested.
If a sunscreen doesn't list an expiration date, does that mean it never expires? Not necessarily. FDA rules require an expiration date only when a manufacturer's own stability testing shows the labeled SPF drops below its stated value within three years. No date can mean the product passed that test, or that the brand wasn't required to run it.
Should shoppers specifically avoid oxybenzone and octinoxate? That's a personal and, for some, an environmental choice rather than a question with one correct answer. Both ingredients are restricted by law in two U.S. jurisdictions over coral-reef concerns, and both remain under open FDA safety review for human use with no finding of harm to date. Shoppers who want to avoid them can choose mineral formulas or check the active-ingredients list; shoppers who don't are not using an ingredient the FDA has found unsafe.
Ontevo Research. Where this post carries figures, they come from Ontevo's own scan corpus or are modeled from scan patterns across the category. No figure is measured from a named customer.