Hypochlorous Acid (HOCl) Disinfectant Classification: A US, EU and China Regulatory Decision Matrix for Medical-Device and Hygiene-Product Buyers

Is hypochlorous acid regulated as a medical device, a pesticide, a biocide or a disinfection product?

International medical device distributors, pharmaceutical buyers, and institutional procurement leads frequently assume that obtaining a single regulatory clearance or laboratory efficacy report for a hypochlorous acid (HOCl) formulation allows global commercial distribution.¹³ This assumption is the single most common cause of regulatory seizure and import rejection for hygiene and infection control products.¹

Hypochlorous acid (HOCl) is a weak acid naturally produced by human neutrophils during phagocytosis to neutralize pathogens.⁴⁵ When produced industrially through electrolysis of dilute sodium chloride solutions (electrolyzed water), HOCl exhibits rapid 99.99% germicidal efficacy against Staphylococcus aureus, Escherichia coli, Pseudomonas aeruginosa, and Candida albicans at low active chlorine concentrations (50 to 200 mg/L).⁵⁶

However, global regulatory bodies do not regulate chemical molecules in isolation; they regulate intended-use claims, target application surfaces, and risk profiles.¹³ Depending on how the label is written, an identical bottle of HOCl solution can fall under four entirely different legal frameworks across the US, EU, and China.

As illustrated in Table 1, buyers must align the product's primary intended-use claim with the corresponding target jurisdiction before placing purchase orders. As explored in our companion regulatory guide on wound-dressing classification by claim, a medical device wound wash follows the device pathway, whereas a surface/hand disinfectant relies on biocide or hygiene licensing.

How does the US split HOCl between FDA and EPA under PR Notice 98-2?

In the United States, jurisdiction over liquid antimicrobial chemicals was historically divided between the Environmental Protection Agency (EPA) under the Federal Insecticide, Fungicide, and Rodenticide Act (FIFRA) and the Food and Drug Administration (FDA) under the Federal Food, Drug, and Cosmetic Act (FD&C Act).¹²

To resolve overlapping jurisdiction, FDA and EPA executed a formal Memorandum of Understanding (MOU 225-93-4005), which EPA implemented via Pesticide Registration Notice (PRN) 98-2 (effective August 3, 1996).¹² PRN 98-2 established a clear division of authority:

• FDA Exclusive Jurisdiction: FDA exercises sole authority over liquid chemical sterilants and high-level disinfectants intended for use on critical (entering sterile tissue or vascular systems) or semi-critical (contacting intact mucous membranes) medical devices. These products require FDA 510(k) clearance. Under PRN 98-2, after October 1, 1998, FDA-regulated sterilants were prohibited from displaying EPA registration numbers on their labels.¹
• EPA Exclusive Jurisdiction: EPA retains sole authority under FIFRA over general disinfectants, hospital disinfectants, sanitizers, and fungicidal solutions intended for use on non-critical environmental surfaces (floors, bed rails, counter tops) and non-critical medical equipment surfaces.¹ An HOCl surface disinfectant must obtain an EPA Registration Number and EPA Establishment Number based on verified AOAC efficacy testing.

For OEM buyers looking to market HOCl products in the US, attempting to sell an EPA-registered surface disinfectant for wound irrigation or device sterilization—or vice versa—is a direct violation of US federal law.¹

What does EU BPR (Regulation 528/2012) require to place an HOCl biocidal product on the market?

In the European Union, non-device antimicrobial disinfectants are governed by the European Chemicals Agency (ECHA) under Regulation (EU) No 528/2012 (Biocidal Products Regulation — BPR).³ In force since September 1, 2013, the BPR replaces the older Biocidal Products Directive 98/8/EC and establishes a mandatory two-tier authorization framework.³

To place an HOCl disinfectant on the EU market under BPR, a manufacturer or importer must fulfill two sequential legal obligations:³

1. Article 95 Active Substance Listing: The active substance 'Active chlorine released from hypochlorous acid' (or active chlorine generated by electrolysis) must be formally approved by ECHA, and the supplier of the active substance or precursor generator must be listed on ECHA’s official Article 95 List for the relevant Product Type.³
2. Biocidal Product Authorization: The specific finished formulation must receive national or Union-wide Biocidal Product Authorization. Applicants must submit a comprehensive dossier detailing chemical stability, analytical methods, EN efficacy testing (EN 1276, EN 13697, EN 14476), and human/environmental risk assessments.³

Importers placing HOCl products into EU Member States must verify whether their active substance source appears on the active ECHA Article 95 list for the exact Product Type (such as PT1 or PT2) promised on the product label.³

How is HOCl regulated in China, and why is it a weixiaozheng disinfection product rather than an NMPA device?

In the People's Republic of China, disinfectant management differs substantially from Western device-centric models.⁶ Disinfectants used for environmental surfaces, hands, skin, and mucosal preparation are governed by the National Health Commission (NHC) and Provincial Health Commissions under the Regulations on the Administration of Disinfection Products.⁶

Rather than seeking a National Medical Products Administration (NMPA) Class I/II/III medical device registration, commercial disinfectants are filed under a Provincial Health Commission Sanitation License, commonly known as a Weixiaozheng (卫消证) Hygiene License.⁶

Because HOCl disinfectants in China carry a weixiaozheng filing rather than an NMPA medical device certificate, they operate outside the NMPA UDI tracking system.⁶ As explained in our guide on the UDI decision matrix for medical devices, recognizing this distinction saves international procurement leads from demanding irrelevant medical device UDI documentation when sourcing Chinese HOCl products.

What claim, concentration and evidence should a buyer put in an HOCl sourcing or OEM specification?

When establishing a contract manufacturing agreement or issuing a commercial RFQ for hypochlorous acid products, procurement leads should enforce strict technical specifications.⁵⁶ Because HOCl can degrade over time into chlorate and chloride ions when exposed to sunlight, heat, or organic contaminants, product stability and packaging integrity are paramount.⁵

• Active Chlorine Concentration: Specify effective available chlorine (FAC) between 50 mg/L and 100 mg/L (or 51–69 mg/L for food-grade formulations) with a certified pH range of 5.0 to 6.5, where over 95% of chlorine exists in the highly active HOCl form rather than hypochlorite (OCl^-).
• Germicidal Efficacy Certification: Require third-party CMA or GLP laboratory test reports proving ≥ 99.99% (4-log to 5-log) reduction of S. aureus, E. coli, C. albicans, and P. aeruginosa within 1 to 5 minutes contact time.
• Food-Grade & Non-Toxic Profile: Require oral toxicity, skin irritation, and inhalation safety documentation confirming the solution is non-irritating, food-grade safe, and contains no alcohol, perfume, or artificial colorants.
• Opaque UV-Blocking Packaging: Require high-density polyethylene (HDPE) or PET opaque bottles with induction-sealed caps to protect HOCl from photo-degradation during transit and storage.

Where VEMERIX fits—and where disinfectant regulatory due diligence still begins

VEMERIX carries a high-purity, food-grade Hypochlorous Acid (HOCl) Disinfectant within its perioperative care and hygiene portfolio.⁶ Formulated with 51 to 69 mg/L effective chlorine, VEMERIX HOCl disinfectant achieves certified 99.99% germicidal efficacy against common healthcare pathogens while remaining mild, non-irritating, and free from volatile chlorine gas or alcohol.⁶

Registered in China under Sanitation License Lu Wei Xiao Zheng (2020) No. 0905, VEMERIX HOCl disinfectant is available in multiple commercial packaging options (100 mL, 500 mL, 1000 mL, 3.8 L, 5 L, and 25 L bulk drums) for hospital hand hygiene, object surface sanitization, and ambient air disinfection.⁶ Full OEM/ODM private-label packaging and custom concentration formulations are available for international distribution partners.

However, international buyers must conduct localized regulatory due diligence to confirm whether their target market requires local FIFRA EPA registration (US), ECHA BPR PT1/PT2 authorization (EU), or a local health commission filing before launching commercial retail sales.¹³ To request VEMERIX HOCl laboratory test reports, MSDS dossiers, or bulk pricing, visit our HOCl Disinfectant Product Page or contact our global regulatory team.

Frequently asked questions regarding HOCl disinfectant regulatory compliance

Q1: Is hypochlorous acid 'FDA-approved' as a general disinfectant?
FDA does not issue blanket 'approvals' for general disinfectants.¹ Under PRN 98-2, hard-surface disinfectants fall under EPA jurisdiction, while FDA clears high-level liquid sterilants for critical medical instruments under 510(k) notifications. Claiming a surface HOCl product is 'FDA-approved' is a misbranding violation under US law.¹

Q2: Does an HOCl disinfectant require ECHA BPR authorization to be sold in the EU?
Yes. To place an HOCl disinfectant on the EU market for surface (PT2) or hand hygiene (PT1) use, the active chlorine source must be listed on ECHA's Article 95 list, and the finished product must hold national or Union BPR authorization under Regulation (EU) 528/2012.³

Q3: What is the shelf life of stabilized hypochlorous acid disinfectant?
While unbuffered electrolyzed water degrades within days, properly stabilized HOCl formulations packed in opaque, UV-blocking HDPE containers maintain full active chlorine potency (50–70 mg/L) and 99.99% germicidal efficacy for 12 to 24 months at ambient room temperature.⁵⁶