FDA Inspections: Readiness and Conduct
FDA publishes the manual its investigators work from — the Investigations Operations Manual — so a firm does not have to guess how an inspection will run. Chapter 5 sets out how an investigator opens an inspection, what they may ask for, how they handle records, data and photographs, how often they discuss findings, and how the written observations are issued at close-out. Readiness means having a matching procedure for every one of those steps, and people who know it, before the investigator arrives.
What an explainer is not
A topic explainer is SPEQ’s synthesis of what a practice involves, cited to the standards that govern it. It does not reproduce their text, and it does not determine which of them apply to your product or process.
Authority, Purpose and the Kinds of Inspection
Section 704(a)(1) of the FD&C Act lets duly designated FDA officers enter and inspect regulated establishments at reasonable times, within reasonable limits and in a reasonable manner. The IOM groups inspections into three kinds: surveillance (routine) inspections that monitor compliance; pre-approval, pre-market or pre-license inspections conducted as part of reviewing an application; and for-cause inspections, prompted when FDA has reason to believe there are serious manufacturing problems or needs to investigate a specific complaint. It also lists common triggers — recall follow-up, consumer and whistleblower complaints, and follow-up to a compliance action such as a warning letter.
Scope is set by the compliance program, the assignment and the investigator’s supervisor, not by the firm. For drug manufacturing, the IOM summarises the systems-based approach of Compliance Program 7356.002: six systems (Quality, Facilities and Equipment, Materials, Production, Packaging and Labeling, Laboratory Control), at least four of them covered in a full inspection and at least two in an abbreviated one, with the Quality System always among them. Before arriving, investigators review the firm’s history — previous inspection reports, complaints, registrations and listings, recalls — so the firm should know that history at least as well.
Announced or Unannounced
For drugs, the FD&C Act does not require FDA to announce an inspection, and FDA’s June 2024 guidance on delaying, denying, limiting or refusing inspections says it usually does not pre-announce for-cause and routine surveillance inspections of drug facilities, while it generally does contact the firm first for pre-approval and pre-license inspections and most foreign inspections. For devices, section 704(h) requires FDA to announce inspections other than for-cause inspections within a reasonable time beforehand, with the type and nature of the inspection, an estimate of its length and, where feasible, advance notice of some records.
The IOM says domestic pre-announcement should generally be no less than five calendar days ahead, that its purpose is to make sure the right records and people are available, and that it is not an appointment and does not limit the investigator’s authority. For drug facilities, refusing a proposed start date or asking for a later one without a reasonable explanation may count as delaying the inspection under section 501(j), which makes the products adulterated.
Opening the Inspection
The investigator shows credentials to the most responsible individual on site and issues the Form FDA 482, Notice of Inspection (not required for foreign inspections). Management may examine the credentials and record their number but may not photocopy them. The investigator explains the purpose and should accept an offer of a firm representative to accompany them, and normally conducts a walk-through as early as possible to plan the inspection. On a multi-day inspection, management is told at the end of each day when the investigator will return.
Some firm expectations do not apply to an investigator. The IOM tells them not to sign non-FDA documents — liability waivers, confidentiality letters, a gowning training acknowledgement — although they sign in and out and follow site security. They follow the firm’s gowning and hygiene practices, and in general do not enter sterile rooms except in extraordinary circumstances. FDA’s 2024 guidance treats requiring an investigator to follow documented gowning procedures before entering an aseptic area as a reasonable explanation, not a delay.
Records, Electronic Data and Photographs
FDA may inspect most records, including trade-secret and confidential ones. Section 704(a)(1) excludes financial data, sales data other than shipment data, pricing data, personnel data other than the qualifications of technical and professional staff, and research data other than data required to be kept under the regulations. Marking a document confidential helps FDA decide what may be disclosed under FOIA, but by itself creates no obligation to withhold it (21 CFR 20.27). For drugs and devices, section 704(a)(4) also lets FDA request records in advance of or in lieu of an inspection, with a description of what is wanted and why.
The IOM tells investigators not to log into a firm’s systems themselves, except in defined bioresearch-monitoring and biologics situations. Firm staff run the queries; the investigator asks for the query parameters and assumes the query logic is not validated. FDA’s 2024 guidance gives examples of limiting an inspection: removing columns, exporting a record without all its fields, locking a worksheet so it cannot be sorted, unreasonable redaction, and slow production of records without a reasonable explanation. Translation, records in use on a running operation, large volumes and off-site storage are given as reasonable explanations. Investigators do not ask permission to photograph, because photography is part of the inspection authority.
Daily Discussion and the Close-Out
The IOM expects at least one meeting a day with management to discuss findings likely to become written observations, so nothing at close-out should be a surprise. Investigators are told not to give advice or act as consultants, not to recommend products or services, and not to show a draft of the Form FDA 483. At close-out they issue the signed 483 to the most responsible individual, explain each observation and relate it to the law, discuss items that will not be written but will be recorded in the inspection report and may be followed up next time, and ask management what it intends to correct and by when.
Investigators also tell management that an adequate response received within 15 business days of the end of the inspection may affect FDA’s decision on further action, and that significant deviations may lead to sanctions — for a domestic firm, seizure, injunction, civil money penalties and prosecution; for a foreign firm, detention and refusal of its products at the border. A Form FDA 484 is issued for any physical samples taken, normally at the end, because issuing it closes the inspection. After the inspection, the investigator refers contact from the firm to their supervisor and does not comment on whether a response is adequate.
Readiness as a Standing State
SPEQ synthesis: most of what goes wrong in an inspection is retrieval and communication, not the underlying compliance. A working model separates a front room, where the investigator is hosted by a small number of trained people who answer only what is asked, from a back room that retrieves, checks and logs every document before it goes out. Time the retrieval of the records an investigator is most likely to ask for — batch records, deviations, OOS investigations, complaints, change controls — and treat a slow retrieval as a finding in its own right, because unexplained delay in producing records is itself one of FDA’s examples of limiting an inspection.
Build the hosting procedure by reading IOM Chapter 5 alongside it: for every step the investigator takes, there should be a step in yours. Track every commitment made in the room in a log the response team owns. The inspection report records management’s answer to each observation, so what is said at close-out is already part of the record a compliance officer will read.
FREQUENTLY ASKED
Can a firm refuse to let an FDA investigator in?
Refusing entry or inspection authorised by section 704 is a prohibited act under section 301(f) of the FD&C Act, and refusing access to or copying of required records is prohibited under 301(e). For drugs and devices, delaying, denying, limiting or refusing an inspection also makes the products adulterated under section 501(j). FDA can obtain an inspection warrant.
Will the investigator sign our visitor confidentiality agreement or gowning training form?
No. The IOM tells investigators they are not authorised to sign non-FDA documents such as waivers, confidentiality letters or training acknowledgements, and to record the request in their report. They will sign in and out and follow site security and gowning procedures.
Can we see a draft of the Form FDA 483 before close-out?
No. The IOM tells investigators not to show a draft, unsigned or on-screen version, and to issue only the signed form at the close-out discussion. Daily discussion of findings is meant to remove surprises before then.
What are the FDA 482, 483 and 484?
The 482 is the Notice of Inspection, issued when the inspection opens. The 483, Inspectional Observations, lists significant objectionable conditions and is issued at close-out before the investigator leaves. The 484, Receipt for Samples, is issued for any physical samples taken.
Can we record the inspection?
The IOM tells investigators that if a firm records or photographs an inspection, they may make their own recording in parallel, and that the firm is responsible for protecting non-public information its invitees observe. For device inspections, section 704(h) provides for regular status communications that either party may record with advance notice and mutual consent.
The inspection-readiness playbook for this topic
PUT THIS PLAYBOOK TO WORK
- HOW-TO GUIDEHow to Prepare for an FDA Inspection →Walk into an inspection ready — data, documents, people, and front room all aligned.
- TEMPLATEInspection Readiness Plan →
- HOW-TO GUIDEHow to Host an FDA Inspection →Run an FDA inspection from the investigator’s arrival to close-out without losing control of the record.
- TEMPLATEInspection Readiness Plan →
A free account keeps what you save, remembers where you are across devices, and can send you the weekly regulatory briefing. Create a free account