Manufacturing Quality Systems and Inspections
A product can meet every specification and still be adulterated, because the statute reaches the process as well as the article itself. An inspection tests the system that produced a lot rather than testing the lot that came off the line.
The rule in short
A drug is adulterated under 21 U.S.C. 351 where the methods, facilities or controls used in its manufacture, processing, packing or holding do not conform to current good manufacturing practice. Devices are subject to the quality system requirements of 21 CFR Part 820, covering management responsibility, design controls, corrective action, complaint handling and records. Section 374 authorizes inspection of establishments.
The statute defines adulteration to include a process failure. A drug is adulterated if the methods used in, or the facilities or controls used for, its manufacture, processing, packing or holding do not conform to current good manufacturing practice. Nothing in that sentence requires anyone to show that a particular unit was defective. The system is the object of regulation.
What the quality requirements cover
For devices, Part 820 of Title 21 is the Quality Management System Regulation. Rather than spelling every requirement out itself, it incorporates the international quality management standard for medical devices by reference and requires a manufacturer to establish and maintain a quality management system that conforms to it, keeping only a few supplemental provisions — record control, and device labeling and packaging controls — in the text of the regulation. What a manufacturer must actually deliver is largely unchanged: a defined quality policy, assigned responsibility and authority, adequate resources, management review at planned intervals, and internal audits conducted by people without direct responsibility for what they audit. It is now found in the incorporated standard rather than in numbered subparts of the rule.
For drugs, the requirements are organized around the production itself: written procedures for each operation, qualified personnel, controlled facilities and equipment, testing of components and finished product against established specifications, investigation of any unexplained discrepancy or failure of a batch to meet specification, and batch records that reconstruct what was actually done. The two regimes differ in vocabulary and overlap heavily in substance, and firms making combination products have to satisfy both.
Design and development controls are the part that has no counterpart in older manufacturing rules. A manufacturer must plan the design and development, define inputs including intended use and user needs, produce outputs that can be evaluated against those inputs, conduct formal reviews, verify that outputs meet inputs, validate that the device conforms to defined user needs and intended uses under actual or simulated conditions, control transfer to production, and control design changes. The file holding that record is what an investigator asks for first.
Corrective action and complaint handling
Two requirements consume a disproportionate share of inspection time. Corrective and preventive action procedures must provide for analyzing processes, work operations, records, service records, complaints and returned product to identify existing and potential causes of nonconforming product, investigating those causes, identifying and implementing action, verifying that the action does not adversely affect the finished product, and reviewing the results.
Complaint handling sits next to it. Complaints must be received, reviewed and evaluated by a formally designated unit, maintained in a complaint file, and evaluated to determine whether an investigation is necessary and whether the event is one that must be reported. The evaluation of reportability is where complaint handling meets the duties described in adverse event and malfunction reporting, and where an inadequate procedure produces both a quality system finding and a reporting violation from the same file.
Data integrity findings escalate faster than almost anything else. Where an investigator finds uncontrolled spreadsheets, audit trails switched off, results reprocessed until they pass, or entries made after the fact, the conclusion is not that a particular batch was bad but that no result from that system can be relied upon. The electronic records requirements exist for this reason: validation, audit trails, limited system access and controlled electronic signatures are what make a record evidence rather than an assertion.
How an inspection proceeds
Section 374 authorizes inspection of any factory, warehouse or establishment in which drugs or devices are manufactured, processed, packed or held, at reasonable times, within reasonable limits and in a reasonable manner. Inspections may be routine, may be triggered by a signal such as a complaint pattern or a recall, or may be conducted in connection with a pending application, in which case the facility is being evaluated as part of the review described in the application and its review cycle.
Foreign establishments are inspected on the same standard, with the practical difference that the agency has no power to compel entry abroad. Its leverage is the border: a firm that delays, denies, limits or refuses an inspection produces adulterated products by that fact alone, and articles offered for import can be refused admission. For a foreign manufacturer, declining an inspection and losing market access are effectively the same decision.
The investigator examines procedures, records and operations against the applicable requirements, interviews personnel and observes production. At the conclusion, the investigator presents a written list of conditions observed that may constitute violations. A separate narrative report of the inspection is prepared internally. The firm's response to the observation list is a substantive document, and it is read.
| Instrument | What it is | Who issues it | What it requires of the firm |
|---|---|---|---|
| Observation list | Conditions observed that may constitute violations | The investigator, at the close of the inspection | A prompt written response with evidence of correction |
| Establishment inspection report | The narrative account of what was inspected and found | The investigator, internally | Nothing directly; it informs the agency's decision |
| Untitled letter | Notice of violations not meeting the threshold for a warning | The agency center | Correction and, usually, a written reply |
| Warning letter | Notice that violations may lead to enforcement without further notice | The agency | A response within a stated period and demonstrated correction |
| Seizure or injunction | Court action against goods or against the firm's operations | The Department of Justice on the agency's referral | Litigation, or settlement on court-supervised terms |
| Import alert | Detention of offered articles without physical examination | The agency | Evidence sufficient to obtain removal from the list |
What escalation looks like
Most inspections end with observations that are corrected and closed. Escalation follows a recognizable pattern when they are not: repeated findings across inspections, corrections that do not address the underlying system, or responses that the agency reads as evasive. A warning letter states that the violations may result in enforcement action without further notice and asks for a response.
Beyond that lie the judicial remedies. Seizure removes specific goods from commerce. An injunction reaches the firm's operations and is commonly resolved by a consent decree with independent expert certification and multi-year oversight. For foreign establishments, an import alert can stop shipments at the border, which functions as a market exclusion without any court involvement at all.
Quality problems also drive product action in the field, and the two tracks run together: an inspection that finds an inadequate process often accompanies the removal described in recalls, corrections and removals. For devices, the design and production requirements examined during an inspection are the same requirements that supported the premarket submission described in premarket notification compared with premarket approval, which is why a finding about design controls can put a clearance or approval in question rather than only a batch.
Points to carry away
- Conformity of the process, not only the product, is required by the statute.
- Device quality systems must include design controls with verification and validation.
- Corrective and preventive action procedures are examined in nearly every inspection.
- Complaint files must be maintained and evaluated against the reporting criteria.
- An inspection ends with a written list of observations, which is not a final agency finding.
- Delaying, denying or limiting an inspection can itself render products adulterated.
Questions readers ask
Does an observation list mean the agency has decided something?
No. The list records what the investigator observed and considers may constitute violations. It is the investigator's document, not a final determination by the agency, and firms routinely explain, correct or contest items on it. The written response matters, because a timely and substantive response is considered before the agency decides whether further action is warranted. Responses that promise a plan without evidence of execution, or that dispute observations without addressing the underlying system, tend to accelerate rather than avert escalation.
Can an investigator take photographs and copy records?
Practice varies by product area and the legal position on photography has been contested for a long time, with firms sometimes objecting and the agency asserting the authority as part of a reasonable inspection. Records access is on firmer ground and is broad for device and drug establishments, though the statute carves out certain categories in some contexts. Refusing access carries a serious consequence: delaying, denying, limiting or refusing an inspection is a ground for treating the products involved as adulterated, which is a worse outcome than any document could have produced.
What is a consent decree in this context?
It is a court-entered agreement resolving an enforcement action, typically an injunction suit, on terms the firm accepts. Decrees commonly require the firm to stop manufacturing until independent experts certify remediation, to submit to audits over a period of years, to obtain agency approval before resuming distribution, and to pay stipulated amounts for future violations. They are the most intrusive routine outcome in this area, because compliance is supervised by a court rather than by an agency, and modifying the terms later requires going back to that court.
Sources
- Cornell Legal Information Institute — 21 U.S.C. 351, Adulterated Drugs and DevicesThe provision making nonconforming methods, facilities and controls a basis for adulteration.
- Cornell Legal Information Institute — 21 U.S.C. 374, InspectionThe authority to enter and inspect and the written report of observations.
- eCFR — 21 CFR Part 820, Quality Management System RegulationThe device quality management system requirement and the standard it incorporates.
- eCFR — 21 CFR 820.10, Requirements for a Quality Management SystemThe obligation to establish and maintain a conforming quality management system.
- eCFR — 21 CFR 820.7, Incorporation by ReferenceThe quality management standard the regulation incorporates, and where it may be inspected.
- eCFR — 21 CFR 820.35, Control of RecordsThe record controls the regulation keeps in its own text rather than the standard.
- eCFR — 21 CFR Part 11, Electronic Records; Electronic SignaturesValidation, audit trails, access limits and signature controls for electronic records.
Liberty Law Library is a publication, not a law firm. This article states general rules and cites its sources; it is not advice about any particular case, and the law differs by state and changes over time.
More in Drug & Device Regulation
Premarket Notification Compared With Premarket Approval
Premarket notification under 21 U.S.C. 360(k) asks whether a device is substantially equivalent to a legally marketed predicate, meaning the same intended use and either the same technological characteristics or different ones raising no different questions of safety and effectiveness. Premarket approval under 21 U.S.C. 360e asks whether valid scientific evidence provides reasonable assurance of safety and effectiveness.
Review Board Oversight and Informed Consent Documents
Under 21 CFR Part 56 a clinical investigation may not begin until an institutional review board has approved it, applying the criteria in 56.111 covering minimized risk, favorable risk-benefit balance, equitable subject selection, informed consent, data monitoring, privacy and safeguards for vulnerable subjects. Part 50 governs consent: 50.20 sets general conditions, 50.25 lists the required elements, and 50.27 requires a signed document.
Labeling: Required Content, Format and Changes
Labeling under 21 U.S.C. 321(m) includes all written, printed or graphic matter on an article, its containers or wrappers, or accompanying it. A product is misbranded under 21 U.S.C. 352 where its labeling is false or misleading in any particular. Prescription labeling follows 21 CFR 201.56 and 201.57, over-the-counter labeling follows 201.66, and changes are made through the supplement categories in 21 CFR 314.70.