Toolkit · Healthcare

The FDA and Life Sciences Regulatory Toolkit

21 U.S.C. § 321

Type
Toolkit
Jurisdiction
National
Date
2024-10-07
Topic
Healthcare

A research and resource map for FDA regulatory practice across drugs, biologics, devices, food, supplements, and cosmetics. Ten pillars organize the field: the intended use doctrine that assigns products to categories, the adulteration and misbranding provisions every enforcement action runs through, the drug and biologic approval pathways with Hatch-Waxman and biosimilar exclusivity, the device pathways and their divergent preemption consequences, manufacturing quality systems and data integrity, the dietary supplement framework under DSHEA, food and cosmetics after FSMA and MoCRA, promotion including off-label speech and the FTC's parallel advertising regime, recalls and the enforcement ladder through consent decrees and individual criminal liability, and preemption across all categories. Each pillar states the doctrine, names the controlling authorities, flags the trap and its second-order consequence, and points deeper. An authority shelf collects the statutes, regulations, leading cases, and secondary sources. Two appendices supply a product-classification and pathway matrix and a regulatory diligence request list for life sciences transactions.

The FDA and Life Sciences Regulatory Toolkit

Healthcare > FDA and Life Sciences | Published 7 October 2024 - Updated 24 May 2026 | UpLaw - uplaw.us

In brief. Three questions run every FDA matter. What is it — decided by intended use, not composition. What did it need before sale — nothing, notify, clear, or approve. Is it adulterated or misbranded — which is what every enforcement action actually charges. Everything below fills in those three.

Keywords: intended use, adulteration, misbranding, NDA/ANDA/BLA, Hatch-Waxman, 510(k)/De Novo/PMA, cGMP, data integrity, DSHEA, MoCRA, FSMA, recalls, Park doctrine, preemption

How This Toolkit Is Organized

Ten pillars, each giving the doctrine, the anchors, the trap and its second order consequence, and where to go deeper. Then the authority shelf, then two appendices: a classification and pathway matrix and a transactional diligence request list.

The narrative entry point is Claims That Turn a Product Into a Drug. The doctrinal treatment is FDA Regulation of Food, Drugs, Devices, and Cosmetics: A Comprehensive Guide. The operational sequence is Bringing an FDA-Regulated Product to Market: A Practical Checklist.

Pillar 1 — Intended Use

Doctrine. A product's category is determined by what it is intended to do, shown by objective evidence — labeling, advertising, and oral or written statements by the firm or its representatives.

Anchors. 21 U.S.C. § 321 (definitions of drug, device, food, supplement, cosmetic). 21 C.F.R. § 201.128 and § 801.4 (intended use). 21 C.F.R. Part 3 (combination product assignment by primary mode of action).

Trap. Treating classification as a one-time legal opinion. It is a live status that changes whenever the claim changes, and marketing changes claims quarterly.

Trap, second order. The brand name. A name chosen for its marketing power — anything implying an organ, a condition, or a therapeutic effect — can by itself establish a disease intended use, converting a lawful supplement or cosmetic into an unapproved new drug. By the time regulatory sees it, the trademark is filed and the packaging is printed. Put classification at concept stage.

Go deeper: Guide Part I · Checklist Phase 1

Pillar 2 — Adulteration and Misbranding

Doctrine. Adulteration concerns the product's condition (including failure to conform to cGMP); misbranding concerns its representation (including false or misleading labeling and inadequate directions for use). Every enforcement action charges one or both.

Anchors. 21 U.S.C. § 331 (prohibited acts), § 333 (penalties), § 342 and § 351 (adulteration), § 343 and § 352 (misbranding).

Trap. Missing that "adequate directions for use" under § 502(f) is the technical basis for most unapproved-new-drug charges. A product intended to treat a disease cannot bear adequate directions for lay use, so it is misbranded — regardless of whether every word on the label is true.

Trap, second order. cGMP non-conformity is adulteration by itself, without any showing that a single unit was defective. A company with a clean product and a broken quality system is shipping adulterated goods as a matter of law, which is why inspection findings translate directly into seizure and injunction exposure.

Go deeper: Guide Part II

Pillar 3 — Drug and Biologic Pathways

Doctrine. NDAs require substantial evidence of effectiveness from adequate and well-controlled investigations; ANDAs require bioequivalence and sameness; BLAs require safety, purity, and potency; and the Hatch-Waxman and BPCIA frameworks allocate patent and exclusivity rights.

Anchors. 21 U.S.C. § 355 (NDA, 505(b)(2), ANDA); 42 U.S.C. § 262 (BLA, 351(k) biosimilar). 21 C.F.R. Part 312 (IND), Part 314 (NDA/ANDA), Parts 50, 54, 56 (consent, financial disclosure, IRBs). Orange Book listing and Paragraph IV certification; 30-month stay; 180-day exclusivity; NCE, orphan, pediatric, and reference product exclusivities.

Trap. Treating exclusivity as a single clock. NCE, orphan, pediatric, and patent terms run independently and interact — and the first-filer 180-day exclusivity is forfeitable on grounds most sponsors never model.

Trap, second order. Accelerated approval confirmatory trials. Post-2023 amendments strengthened FDA's withdrawal procedures and its authority to require that confirmatory trials be underway at approval. A sponsor that treats the confirmatory trial as a future problem now risks the approval itself.

Go deeper: Guide Parts III–IV

Pillar 4 — Device Pathways

Doctrine. Class determines pathway: exempt, 510(k) substantial equivalence, De Novo classification, or PMA approval on valid scientific evidence.

Anchors. 21 U.S.C. § 360c (classification), § 360(k) (510(k)), § 360e (PMA), § 360c(f)(2) (De Novo). 21 C.F.R. Part 807 Subpart E, Part 814 (PMA), Part 812 (IDE). 21st Century Cures Act § 3060 (software exclusions, including clinical decision support). § 524B (device cybersecurity).

Trap. The predicate. A predicate with broader indications than the new device's data supports produces a not-substantially-equivalent determination; a recalled predicate invites a harder review; and labeling that describes indications broader than those cleared is misbranding and an admission that the 510(k) covered something else.

Trap, second order. Adaptive algorithms. A model that learns is a device that changes, and an unapproved change to a cleared device requires a new submission. The Predetermined Change Control Plan is the mechanism that makes continuous model improvement lawful — and a company that ships model updates without one has been distributing uncleared devices.

Go deeper: Guide Part VI

Pillar 5 — Manufacturing, Quality Systems, and Data Integrity

Doctrine. Product must be made under current good manufacturing practice appropriate to its category, with validated processes, specifications, investigations, and records that are attributable, contemporaneous, and accurate.

Anchors. 21 C.F.R. Parts 210–211 (drugs); Part 820 (device QSR, harmonizing to ISO 13485); Part 111 (supplements); Part 117 (food preventive controls); Part 4 (combination products). Inspection authority, 21 U.S.C. § 374.

Trap. CAPA. It is the most-cited device subsystem and the most-cited drug system, and the failure is almost always the same: investigations that identify a cause without identifying a root cause, and corrective actions that are never verified for effectiveness.

Trap, second order. Data integrity. Shared logins, disabled audit trails, uncontrolled spreadsheets, and "trial" injections that were never recorded convert a routine inspection into an Application Integrity Policy matter — under which FDA suspends substantive review of the company's pending applications until a validity assessment is complete. Remediation takes years. Prevention costs almost nothing.

Go deeper: Guide Part V · Checklist Phase 4

Pillar 6 — Dietary Supplements

Doctrine. DSHEA regulates supplements as food, with no premarket approval and the burden on FDA to prove a marketed product unsafe — in exchange for ingredient limits, NDI notification, GMP, adverse event reporting, and strict claim boundaries.

Anchors. 21 U.S.C. § 321(ff) (definition and the drug exclusion); § 350b (NDI notification); § 343(r)(6) (structure/function claims, notification, and disclaimer); 21 C.F.R. Part 111 (GMP). Pearson v. Shalala, 164 F.3d 650 (D.C. Cir. 1999); Whitaker v. Thompson, 353 F.3d 947 (D.C. Cir. 2004).

Trap. The drug exclusion, § 321(ff)(3)(B). An ingredient approved as a drug, or publicly investigated as one under an IND with substantial clinical investigations, cannot be a dietary supplement unless it was marketed as a food or supplement first. This is why CBD cannot lawfully be a supplement without new legislation, and the same logic reaches other ingredients as drug development programs advance.

Trap, second order. The disclaimer's placement. A DSHEA disclaimer that is present but distant from the claim, in smaller type, or absent from the website where the claim actually appears does not qualify anything. FDA's supplement warning letters cite placement as often as they cite the claim itself.

Go deeper: Guide Part VII · Article Part II

Pillar 7 — Food and Cosmetics

Doctrine. FSMA shifted food regulation from response to prevention through hazard analysis and preventive controls; MoCRA gave cosmetics their first modern federal regime.

Anchors. FSMA implementing rules: 21 C.F.R. Part 117 (preventive controls), Part 112 (produce safety), Part 1 Subpart L (foreign supplier verification), plus intentional adulteration, sanitary transportation, and traceability rules. GRAS and food additive provisions, 21 U.S.C. § 348. Labeling, 21 C.F.R. Part 101; FALCPA allergens. MoCRA (2022): facility registration, product listing, safety substantiation, adverse event reporting, responsible person, fragrance allergens, GMP, mandatory recall, talc and PFAS provisions, and preemption with Proposition 65 and state-disclosure carve-outs.

Trap. Self-affirmed GRAS. It is lawful and it is the mechanism by which many ingredients enter the food supply without agency review — which makes it a standing target for litigation, state legislation, and NGO petitions. A company relying on self-affirmed GRAS should hold the expert panel record as though it will be produced, because it may be.

Trap, second order. MoCRA did not change the claims line. A cosmetic that claims to affect the structure or function of the body is a drug, and the entire anti-aging vocabulary — "stimulates collagen," "regenerates," "repairs" — sits on that line. Cosmetic warning letters are, overwhelmingly, claims letters.

Go deeper: Guide Parts VII–VIII

Pillar 8 — Promotion, Off-Label Speech, and the FTC

Doctrine. Promotion establishes intended use. Off-label promotion evidences a new intended use and misbrands the product — but truthful, non-misleading off-label speech has constitutional protection. Advertising is separately policed by the FTC on a substantiation standard.

Anchors. 21 C.F.R. § 202.1 (prescription drug advertising; fair balance). United States v. Caronia, 703 F.3d 149 (2d Cir. 2012); Amarin Pharma, Inc. v. FDA, 119 F. Supp. 3d 196 (S.D.N.Y. 2015). FDA guidance on communications consistent with labeling, scientific exchange, and payor communications; 21 U.S.C. § 352(a) as amended for health care economic information. FTC Act § 5; FTC Endorsement Guides; POM Wonderful, LLC v. FTC, 777 F.3d 478 (D.C. Cir. 2015) (RCT substantiation required; blanket two-RCT requirement struck).

Trap. Assuming FDA compliance ends the analysis. POM Wonderful LLC v. Coca-Cola Co., 573 U.S. 102 (2014), holds a Lanham Act competitor claim is not precluded by FDCA compliance — and the FTC's substantiation standard is frequently stricter than anything FDA enforces on the same claim.

Trap, second order. Off-label promotion is the leading predicate for False Claims Act litigation in the industry, and Caronia does not help there: the theory is not that the speech was criminal but that it caused false claims for non-covered uses. Separate medical affairs from commercial, document unsolicited requests, and keep reprint distribution within the guidance conditions.

Go deeper: Guide Part IV · The False Claims Act: A Comprehensive Guide

Pillar 9 — Recalls and Enforcement

Doctrine. Recalls are classified by health risk and executed under a strategy with defined depth, communications, and effectiveness checks. Enforcement escalates from untitled letter to warning letter to seizure, injunction, consent decree, and criminal prosecution.

Anchors. 21 C.F.R. Part 7 (recalls); Part 806 (device corrections and removals); the Reportable Food Registry. Enforcement: 21 U.S.C. § 332 (injunction), § 334 (seizure), § 333 (penalties), § 335a (debarment). United States v. Dotterweich, 320 U.S. 277 (1943); United States v. Park, 421 U.S. 658 (1975).

Trap. Treating the recall decision as a quality decision. It carries product liability, insurance, contractual, securities disclosure, and customer notification consequences simultaneously — and the health hazard evaluation must be documented contemporaneously, because it will be the central exhibit in every later proceeding.

Trap, second order. The responsible corporate officer doctrine. An officer with responsibility and authority to prevent or correct a violation can be convicted of the misdemeanor without proof of knowledge or intent; the defense is objective impossibility, not good faith. That is why quality and regulatory escalation paths have to reach an officer who can actually act — and why a documented escalation that was ignored is the worst possible record.

Go deeper: Guide Parts IX–X · Checklist Phases 10–11

Pillar 10 — Preemption

Doctrine. Whether an injured plaintiff has a state law remedy depends on the product's regulatory pathway — a distinction with no relationship to the injury.

Anchors. Wyeth v. Levine, 555 U.S. 555 (2009) (brand drugs; "clear evidence"); Merck Sharp & Dohme Corp. v. Albrecht, 587 U.S. 299 (2019) (question of law for the judge); PLIVA, Inc. v. Mensing, 564 U.S. 604 (2011) (generic failure to warn preempted); Mutual Pharmaceutical Co. v. Bartlett, 570 U.S. 472 (2013) (generic design defect preempted); Riegel v. Medtronic, Inc., 552 U.S. 312 (2008) (PMA devices expressly preempted); Medtronic, Inc. v. Lohr, 518 U.S. 470 (1996) (510(k) not preempted); Buckman Co. v. Plaintiffs' Legal Committee, 531 U.S. 341 (2001) (fraud-on-FDA impliedly preempted). Express food labeling preemption, 21 U.S.C. § 343-1.

Trap. Pleading a device case without identifying the pathway. A PMA device and a 510(k) device with identical failure modes produce opposite preemption results, and the pathway is public information available before the complaint is drafted.

Trap, second order. The parallel claim lane. A claim premised on conduct violating a federal requirement that would also breach a traditional state duty survives both Riegel and Buckman — but only if pleaded with specificity as to which federal requirement was violated and how. Generic allegations get dismissed in the space between the two doctrines.

Go deeper: Guide Part XI

The Authority Shelf

Statutes

  • Federal Food, Drug, and Cosmetic Act, 21 U.S.C. §§ 301 et seq. — definitions § 321; prohibited acts § 331; penalties § 333; seizure § 334; injunction § 332; inspection § 374; food adulteration § 342 and misbranding § 343; drug adulteration § 351 and misbranding § 352; new drugs § 355; devices § 360c–360k; supplements § 350b
  • Public Health Service Act § 351, 42 U.S.C. § 262 (biologics and biosimilars)
  • Dietary Supplement Health and Education Act of 1994; Food Safety Modernization Act; Modernization of Cosmetics Regulation Act of 2022; 21st Century Cures Act; Drug Supply Chain Security Act; CREATES Act; OTC Monograph Reform

Regulations

Leading cases

  • United States v. Dotterweich, 320 U.S. 277 (1943) · United States v. An Article of Drug... Bacto-Unidisk, 394 U.S. 784 (1969) · United States v. Park, 421 U.S. 658 (1975) · Medtronic, Inc. v. Lohr, 518 U.S. 470 (1996) · Pearson v. Shalala, 164 F.3d 650 (D.C. Cir. 1999) · Buckman Co. v. Plaintiffs' Legal Comm., 531 U.S. 341 (2001) · Whitaker v. Thompson, 353 F.3d 947 (D.C. Cir. 2004) · Riegel v. Medtronic, Inc., 552 U.S. 312 (2008) · Wyeth v. Levine, 555 U.S. 555 (2009) · PLIVA, Inc. v. Mensing, 564 U.S. 604 (2011) · United States v. Caronia, 703 F.3d 149 (2d Cir. 2012) · Mutual Pharmaceutical Co. v. Bartlett, 570 U.S. 472 (2013) · POM Wonderful LLC v. Coca-Cola Co., 573 U.S. 102 (2014) · POM Wonderful, LLC v. FTC, 777 F.3d 478 (D.C. Cir. 2015) · Amarin Pharma, Inc. v. FDA, 119 F. Supp. 3d 196 (S.D.N.Y. 2015) · Merck Sharp & Dohme Corp. v. Albrecht, 587 U.S. 299 (2019)

Agency materials — the operative practice sources

  • FDA guidance documents (search by center and topic; note draft versus final status)
  • Warning letter database — the fastest available read on current enforcement priorities in any product category
  • Form 483 database and Establishment Inspection Reports (FOIA-obtainable — see Filing a FOIA Request and Appealing a Denial)
  • Orange Book (drug patents and exclusivity); Purple Book (biologics)
  • Device classification database, 510(k) and PMA databases, GUDID, MAUDE (adverse events), and the recall database
  • Enforcement Report (weekly recall classifications)
  • FTC health products compliance guidance and Endorsement Guides

Secondary sources

  • Food and Drug Law and Regulation (FDLI) — the standard treatise
  • Peter Barton Hutt, Richard A. Merrill & Lewis A. Grossman, Food and Drug Law: Cases and Materials — the canonical casebook
  • Food and Drug Law Journal (FDLI)
  • Congressional Research Service reports on FDA user fee reauthorization, accelerated approval, and LDT regulation
  • Government Accountability Office and HHS OIG reports on FDA oversight — the best independent account of where the system actually fails

Appendix A — Classification and Pathway Matrix

If the product… It is a… And it needs…
Claims to treat, cure, mitigate, prevent, or diagnose a disease Drug (or device, if no chemical action) NDA, ANDA, 505(b)(2), BLA, or OTC monograph conformity
Affects structure or function and is not food Drug Approved application
Affects structure or function and is a dietary supplement Supplement NDI notification if new; 30-day claim notification; disclaimer
Is applied to the body only to cleanse, beautify, or alter appearance Cosmetic MoCRA registration, listing, safety substantiation, adverse event reporting
Achieves its purpose without chemical action or metabolism Device Exempt, 510(k), De Novo, or PMA
Is software that lets the clinician independently review its basis Likely not a device Confirm all four Cures Act CDS conditions
Is software providing time-critical or unreviewable direction Device Pathway per risk; PCCP for adaptive models
Is a virus, vaccine, blood component, protein, or analogous product Biologic BLA or 351(k)
Combines a drug and a device Combination product Primary mode of action determines lead center; RFD if unclear
Is a new substance added to food Food additive or GRAS Approval petition or GRAS determination
Contains an ingredient approved or publicly investigated as a drug Not a supplement Drug exclusion, § 321(ff)(3)(B)

Appendix B — Regulatory Diligence Request List

For any acquisition, license, or investment in an FDA-regulated business:

Approvals and status

  1. All approvals, clearances, De Novo grants, notifications, and registrations, with underlying submissions and correspondence.
  2. Orange Book / Purple Book listings; exclusivity positions; Paragraph IV notices and related litigation.
  3. Any pending applications and their review status.

Inspection and enforcement 4. Five years of Form 483s, Establishment Inspection Reports, responses, warning or untitled letters, and close-out letters — for the company and its contract manufacturers. 5. Any consent decree, import alert, or Application Integrity Policy correspondence. 6. Debarment and exclusion certifications for the company, officers, and key contractors.

Quality 7. Quality manual and procedure index; internal and third-party audit reports. 8. CAPA log with aging, and the last twenty closed CAPAs with effectiveness verification. 9. Complaint files and the linkage between complaints, MDRs, and CAPA. 10. Deviation and OOS investigation logs; data integrity assessments. 11. Validation status for processes, methods, and computerized systems. 12. Supplier qualification files and quality agreements with every contract manufacturer.

Safety and post-market 13. Adverse event and MDR/MedWatch history with trending analyses. 14. Recall and Part 806 correction and removal history. 15. Post-approval commitments, postmarket surveillance orders, and confirmatory trial status. 16. Stability data supporting labeled shelf life; field alert reports.

Clinical 17. IRB approvals, consent form versions, ClinicalTrials.gov postings, investigator financial disclosures, and monitoring reports. 18. Bioresearch monitoring inspection history.

Commercial and claims 19. Promotional review files, Form 2253 submissions, and OPDP correspondence. 20. Substantiation files for every current claim, with dates of first dissemination. 21. Influencer and affiliate agreements and the compliance controls over them. 22. State licenses — manufacturing, wholesale distribution, pharmacy — and renewal status. 23. Government pricing and program obligations (Medicaid rebate, 340B, ASP) and any reported errors.

The three that decide deals: the CAPA log with aging, the quality agreements, and the substantiation files. Each is a five-minute read that tells you whether the compliance function is real.

Related Documents

Articles

Guides

Checklists

Toolkits