An Ohio manufacturer of over-the-counter topical drugs was inspected in February 2026. Investigators found components going into product without identity testing, processes never validated, and a quality unit without written procedures. The firm answered inside the window, and answered constructively: it would test, validate, and write the procedures.
FDA rejected all three answers, in near-identical words. A corrective action with a completion date leaves two stretches of time unaccounted for: the months between the response and the fix, and everything already shipped under the control that failed.
Earlier issues examined what a response says about the finding. This one is about the two periods it forgets to mention.
The first observation is a materials-control failure of an ordinary kind. The firm “failed to perform adequate identity testing on each shipment of each lot of incoming components (e.g., glycerin, propylene glycol, ethanol),” and “used nonpharmaceutical-grade propylene glycol to manufacture your drug products.”
These are the components FDA watches hardest, because the USP identity test for glycerin and propylene glycol is also the limit test for diethylene glycol and ethylene glycol. Skipping it does not merely leave the material unconfirmed; it skips a check that exists because DEG and EG contamination has killed people. Ethanol ran the same way — untested for methanol.
Two further findings follow: no process performance qualification studies, no cleaning validation on non-dedicated equipment, and a quality unit without written responsibilities, laboratory controls, release testing, a stability programme or complete batch records.
Five months separate response from letter — five months in which the plant kept running.
This is the response most firms write, and on its own terms it is not a bad one. The firm did not argue. It tested what it still had, said plainly what it could not, and committed to the right control.
“In your response, you state that you tested retain samples of nine propylene glycol lots for DEG/EG contamination and that samples of three lots were not available. You also state that in the future, you will conduct all USP identity and impurity tests for propylene glycol and glycerin.” FDA’s summary of the firm’s 483 response, Warning Letter 320-26-107
The other two answers take the same shape: cleaning validation on shared equipment, process validation on three batches per formulation, QU procedures to be implemented. Three commitments, each naming the right remedy.
FDA’s objection appears twice, for validation and for the quality unit: “you failed to provide your interim plans until your corrective actions are completed.” PPQ on three batches of every formulation takes months; a working QU procedure set takes longer. What governs release meanwhile goes unanswered.
“Your response is inadequate because you failed to provide your interim plans until your corrective actions are completed. You also did not conduct a risk assessment to evaluate the impact of manufacturing with unvalidated processes, nor did you provide an action plan to address any drug product quality or safety risk for batches already distributed to the U.S. market.” FDA, Warning Letter 320-26-107
Nine lots tested, three unavailable. Answering for the retains that exist answers for the retains, not for the product. FDA’s requested actions point at the finished-product side: testing retains “of all implicated finished drug product batches in which a retain of a high-risk drug component lot is unavailable.” The three missing lots most needed an answer; the response is silent about them.
On components, FDA is precise: “you do not provide procedural controls to demonstrate adequate identification testing of your components.” An undertaking to test in future is intent. A procedure — sampling plan, specification, document number — is a control. Only one survives the next inspection.
The most instructive thing about this letter is its repetition. Three unrelated findings, and each rejection names the same missing pair: no interim plan, no assessment of distributed product. That is not three coincidences. It is one drafting habit.
A 483 response is a document about time, and most are written in one tense. The commitments section is future: the right controls, with dates. What goes missing runs backwards and sideways from there — product already sold under the failed control, and the plant running tomorrow while the fix is built.
The fifteen-day window makes this worse rather than better. You cannot have finished the validation, so the response is naturally about intentions. FDA is not asking you to have finished. It is asking what holds the line meanwhile, and what you propose to do about product already in commerce.
A defensible response would have kept all three commitments and added a paragraph to each: the interim testing regime in force since the inspection, with its start date; the distributed lots made with untested components, with expiry and status; and DEG and EG results from finished-product retains where the component retains were gone.
A corrective action answers for the plant you will have. A response has to answer for the one you are running.
Veritas Quality Consultants works with pharmaceutical, medical device, and biologics manufacturers on Form 483 responses, root cause analysis, and CAPA development — built to FDA expectations inside the 15-day window.
Request a consultation