Question 1

What triggers an FDA 483 observation, and how is it different from a Warning Letter?

Accepted Answer

An FDA Form 483 (Inspectional Observations) is issued at the conclusion of an inspection when investigators observe conditions that, in their judgment, constitute violations of the Food, Drug, and Cosmetic Act or associated regulations. A 483 is not a final agency finding — it is an opportunity for the company to provide a written response, typically within 15 business days, proposing corrective actions. A Warning Letter is the next escalation level: it is issued when FDA determines that a company's response to a 483 was inadequate or when violations are serious enough to warrant formal notice without the intermediate 483 step. Warning Letters are published publicly on FDA's website and carry significant commercial consequences — including potential import alerts for foreign manufacturers and accelerated scrutiny in future inspections. Warning Letter violations frequently involve data integrity, batch record accuracy and laboratory out-of-specification (OOS) investigation adequacy.

Question 2

What is the difference between an NDA and an ANDA?

Accepted Answer

An NDA (New Drug Application, 21 CFR Part 314, Subpart B) is required for a drug product containing a new chemical entity or a new formulation that has not previously been approved by the FDA. The NDA must demonstrate safety and efficacy through the full suite of preclinical and clinical data, presented in eCTD format. An ANDA (Abbreviated New Drug Application, 21 CFR Part 314, Subpart C) is the pathway for generic drugs — products that are pharmaceutically equivalent and bioequivalent to an already-approved Reference Listed Drug. Rather than repeating the originator's clinical studies, an ANDA relies on bioequivalence data to demonstrate that the generic performs the same way in the body as the reference product. ANDAs are reviewed by CDER's Office of Generic Drugs and typically take 12–18 months for approval in the standard pathway, versus 10–12 months for an NDA under Priority Review.

Question 3

How does FDA regulate electronic records from foreign pharmaceutical manufacturers?

Accepted Answer

21 CFR Part 11 applies extraterritorially to any organization that creates, modifies, maintains, archives or retrieves electronic records used to support FDA-regulated activity — regardless of where that organization is located. A drug manufacturer in India, Belgium, or Ireland that exports to the United States, holds a US drug establishment registration or participates in an FDA-regulated clinical trial must ensure its electronic systems comply with Part 11 for records related to those activities. FDA conducts foreign drug inspections through its overseas offices and during pre-approval inspections. Foreign manufacturers are subject to the same inspection authority as domestic sites, and unresolved 21 CFR Part 11 data integrity findings can result in import alerts that effectively block product entry into the US market.

Question 4

What records does the DEA require for manufacturers of controlled substances?

Accepted Answer

DEA-registered manufacturers of controlled substances must maintain specific records under 21 CFR Part 1304, separate from cGMP batch records. These include: a biennial inventory of controlled substances on hand (21 CFR 1304.11); a complete and accurate record of each controlled substance manufactured, received, sold, delivered, or otherwise disposed of (21 CFR 1304.21); DEA Form 222 order forms for Schedule I and II substances; and all executed order forms received. Schedule II records must be maintained separately from all other records. Controlled substance records must be kept for a minimum of two years and must be available for inspection by DEA agents at any time during normal business hours. Discrepancies between DEA inventory records and production batch records are treated as potential diversion events and can trigger both DEA and FDA investigations.

Question 5

What are the most common cGMP documentation violations cited by FDA?

Accepted Answer

Based on FDA's published 483 data and Warning Letter trends, the most frequently cited documentation violations fall into five categories: (1) data integrity failures — overwriting data, deleting audit trail entries, backdating records or using shared login credentials; (2) incomplete batch records — missing operator signatures, blank fields for required steps or incomplete deviation investigations; (3) inadequate OOS investigation documentation — Phase I laboratory investigations that fail to rule out assignable laboratory error before concluding an OOS result is real, or Phase II investigations that lack adequate sampling and retesting protocols; (4) validation gaps — computerised systems used in GMP activities without formal validation or with outdated validation documentation that no longer reflects the current configuration; and (5) training record deficiencies — personnel performing critical operations without documented training on the current approved procedure version.

Question 6

Does E-Verify replace Form I-9?

Accepted Answer

No. E-Verify is a supplement to, not a replacement for, Form I-9. Employers must complete Form I-9 first and then create an E-Verify case based on the I-9 data. Employers enrolled in E-Verify cannot exempt themselves from maintaining the underlying I-9 records.

Question 7

Can employers accept a Social Security card alone as work authorization?

Accepted Answer

A Social Security card is a List C document establishing work authorization only — it does not establish identity. The employer must also examine a List B identity document (e.g., state driver's license) or a single List A document (e.g., U.S. passport or EAD). A Social Security card alone is insufficient.

Question 8

What happens if an employee's work visa expires during employment?

Accepted Answer

The employer must re-verify the employee's continued work authorization before the document expires. If the employee presents a new, unexpired List A or List C document, the employer records it in Section 3 of the I-9. Continuing to employ someone after their work authorization has lapsed is a substantive I-9 violation.

Question 9

Are independent contractors exempt from I-9 requirements?

Accepted Answer

Yes, provided the contractor is genuinely self-employed and not treated as an employee under IRS or labor law standards. If the arrangement is characterized as independent contracting to avoid I-9 obligations but the worker is legally an employee, the employer remains fully liable.

Question 10

How long must employers retain completed I-9 forms?

Accepted Answer

Three years after the date of hire or one year after the date employment ends, whichever is later. Electronic I-9 records must include an audit trail showing who created, accessed, or modified the record, and must be retrievable and printable for ICE inspection on demand.

Industry

Pharmaceutical Compliance Documentation: FDA cGMP, 21 CFR and GxP Requirements

Work Visa Verification for US Employers: I-9 and E-Verify Guide 2026

Student Identity Verification in the US: Stopping Diploma Fraud

Payment Fraud Prevention: Document Verification for US Fintechs

Construction Compliance Software: Subcontractor Docs

Transport & logistics compliance: licenses, permits

Accountant Document Compliance: US Verification Guide

Auto dealership document compliance: title verification

Subcontractor compliance: W-9, OSHA & mandatory docs

Document Verification by Industry: A US Sector Guide

Automated KYC for Law Firms: Client Onboarding and AML Compliance

Public Sector: Automating Document Verification

KYC Software for US Banks: Comparison

Case study: an insurer reduces claims processing by 12 days with CheckFile

Document Verification for Real Estate Agents

Verify Bank Account Numbers: ABA Routing, ACH

Medical Credential Verification: GMC, NMC Registers and Healthcare Accreditations

AML Compliance Software for Accountants: Due Diligence

Accounting Firms: Automate Document Checks

Healthcare Credential Verification: NCQA, Joint

Identity Fraud Prevention: Detection Techniques for US

Rental Fraud: Detecting Fake Tenant Applications

Tenant Screening Document Verification Guide for US

How to Verify a Company Registration Certificate Online

HR Doc Verification in the US: Credential Checks, I-9

Proof of Address Verification in the US: Methods

Case study: a fintech cuts KYC onboarding time by 4x with CheckFile

Insurance Document Fraud Detection: Claims & Compliance

Insurance Claims: AI Cuts Resolution Time 80%

US Bank Customer Onboarding: Doc Verification and KYC

7 Document Errors That Get Leasing Files Rejected

KYC for US Lawyers: AML & Verification

Identity Verification in the US: Methods & Tech

Passport and ID Document Verification in the US

Notary Identity Verification: Digital Transformation

HR Verification Platform: Credentials, Right to Work and Accreditations

Real Estate Doc Verification: US Closing and Title

Law Firms: KYC & Attorney-Client Privilege

Federal Procurement Document Compliance: Contractor