What makes a requirement binding here
The Federal Food, Drug, and Cosmetic Act, 21 U.S.C. §301 et seq. The hook that makes current good manufacturing practice binding is §501(a)(2)(B), which deems a drug adulterated where the methods, facilities or controls used in its manufacture, processing, packing or holding do not conform to current good manufacturing practice — a status that attaches to the process, so a batch that passes every finished-product specification is still adulterated if it was made outside cGMP. The regulations themselves sit at 21 CFR Parts 210 and 211 for finished pharmaceuticals and, for devices, at 21 CFR Part 820, retitled the Quality Management System Regulation and incorporating ISO 13485:2016 by reference with effect from 2 February 2026. Biological products are licensed under §351 of the Public Health Service Act, 42 U.S.C. §262 — a separate statute from the FD&C Act, which is why a BLA is not an NDA with different paperwork.
Through inspection and enforcement against a registered establishment, not through a site licence — and that is the structural difference from almost every other jurisdiction on this axis. Establishments register and list under §510 of the Act (21 CFR Part 207 for drugs, Part 807 for devices), FDA inspects under its §704 authority, and §501(j) deems a drug adulterated where an owner or operator delays, denies, limits or refuses inspection. What follows a finding is an escalating enforcement ladder rather than a licence action: Form FDA 483 observations, a Warning Letter, then import alert, seizure, injunction or a consent decree. Products reach the market by application — NDA under §505(b), ANDA under §505(j), BLA under PHS Act §351, and for devices 510(k), De Novo or PMA.