When the FDA issues a warning letter to an OTC finished pharmaceutical manufacturer for adulteration under CGMP regulations, the violations almost always trace back to the same root causes — not isolated mistakes, but systems that were never properly built in the first place.
In April 2026, the FDA issued a warning letter to JW Nutritional LLC, a manufacturer operating in the OTC finished pharmaceuticals space. The letter cited adulteration violations under 21 CFR Part 211, the current Good Manufacturing Practice regulations governing finished pharmaceuticals. The core issue, as is common in these cases, was the application of standards designed for dietary supplements and foods — not drugs — to a product regulated as a drug. That's a distinction FDA takes very seriously, and the enforcement record shows it.
I've worked with OTC manufacturers across enough of these situations to recognize the pattern. The company wasn't necessarily being careless. More often, the problem is that the quality system grew up around one regulatory framework and was never properly recalibrated when the product classification changed — or when the company expanded into a new product category without fully understanding what that expansion required.
This article is about what prevents those situations. Specifically, the CGMP controls, quality management structures, and organizational habits that keep an OTC drug manufacturer out of FDA's enforcement crosshairs.
Why OTC Drug CGMPs Are Not Interchangeable with Supplement Standards
This is where a lot of manufacturers get into trouble, and it's worth being direct about it.
Dietary supplements are regulated under 21 CFR Part 111. OTC finished pharmaceuticals are regulated under 21 CFR Part 211. These are not close cousins — they are meaningfully different frameworks with different requirements for testing, specifications, documentation, equipment qualification, and personnel.
Some of the critical differences:
| Area | 21 CFR Part 111 (Dietary Supplements) | 21 CFR Part 211 (OTC Finished Pharmaceuticals) |
|---|---|---|
| Identity testing | Required for each component | Required; also requires finished product testing |
| Finished product testing | Batch testing for identity/purity/strength | Full release testing per written specs before distribution |
| Reference standards | USP/NF standards recommended | USP/NF standards required where they exist |
| Stability testing | Required (ongoing program) | Required; must support labeled expiration date |
| Equipment qualification | Not explicitly required | IQ/OQ/PQ validation required |
| Laboratory controls | Component testing focus | Full analytical laboratory controls, OOS investigation required |
| Reserve samples | Required | Required with specific retention periods |
| Complaint handling | Basic documentation | Full investigation and trending required |
The JW Nutritional warning letter reflects exactly this gap — reference standards appropriate for foods and dietary supplements applied to a product that required drug-grade standards. Under 21 CFR §211.194(a)(2), laboratory records must include a description of reference standards used, and those standards for drug products must meet the compendia requirements where they exist. Applying supplement-grade or food-grade reference standards to an OTC drug test is not a technicality. It means your test results don't actually demonstrate what you think they demonstrate.
The practical implication: If your company has any product that is regulated or marketed as an OTC drug — even if your background is primarily in supplements or foods — your quality system must be audited against 21 CFR Part 211 in full, not partially.
The Five CGMP Systems That Most Often Fail in OTC Warning Letters
Looking across FDA's enforcement pattern in OTC finished pharmaceuticals, five system failures appear repeatedly. These aren't obscure requirements — they're the foundational infrastructure of a compliant quality system. When they're weak, FDA finds them.
1. Laboratory Controls and Reference Standards
Under 21 CFR §211.160(b), laboratory controls must include the establishment of scientifically sound and appropriate specifications, standards, sampling plans, and test procedures. For OTC drugs, that means:
- Reference standards must be USP/NF compendial where available, not food or supplement grade analogs
- Analytical methods must be validated (or verified for compendia methods) before use
- Out-of-specification (OOS) results must be investigated under a written procedure before any batch disposition decision
In my experience, this is one of the most common gaps I find when a supplement manufacturer is producing its first OTC drug product. The lab team is competent — they've been testing supplements for years — but the method validation files don't exist, the reference standards are the wrong grade, and there's no formal OOS procedure. Each of those is a standalone 483 observation waiting to happen.
2. Written Procedures and Batch Records
21 CFR §211.100 requires that written procedures be established and followed for production and process controls. This means the procedure must actually govern practice — not just sit in a binder.
Batch records under §211.188 must include complete information for each batch, including identification of equipment, processing steps, in-process test results, and yields. A common failure mode: batch records that were designed for supplement production, with open fields and minimal controls, carried over into drug production without redesign. FDA investigators walk through a batch record during an inspection. If they find steps that weren't documented, deviations that weren't investigated, or yields that weren't calculated, the finding goes into the 483.
3. Quality Control Unit Independence
This one is structural, and it matters more than most manufacturers realize. Under 21 CFR §211.22, the quality control unit must have the authority and responsibility to approve or reject all components, drug product containers, closures, in-process materials, packaging materials, labeling, and the drug product itself.
In small OTC manufacturers — and in supplement companies that have moved into OTC — the QC function is often under-resourced or organizationally subordinated to operations. That means production pressure can move product that QC hasn't cleared, or QC review is treated as a sign-off step rather than a substantive review. FDA will probe this directly during an inspection, asking how QC is staffed, what authority they exercise, and what actually happens when QC and production disagree.
4. Equipment Qualification and Cleaning Validation
21 CFR §211.68 and §211.67 require that equipment be of appropriate design, adequate size, and suitably located, and be cleaned and maintained at appropriate intervals. For drug manufacturers, "appropriate intervals" is not a judgment call made informally — it requires written procedures, validated cleaning methods (for products where cross-contamination is a concern), and documented execution.
Equipment qualification (IQ/OQ/PQ) is not required under Part 111 in the same way it is under Part 211. Manufacturers transitioning from supplement to drug production frequently have equipment that has never been formally qualified. That gap will surface in an FDA inspection.
5. Stability Testing Program
Under 21 CFR §211.137, expiration dates on drug products must be supported by appropriate stability testing. The stability program must include written protocols, storage conditions that reflect actual or accelerated conditions, and a commitment to ongoing (long-term) stability testing for each product.
The phrase "appropriate stability testing" has a specific meaning in FDA's world — it does not mean "we've kept samples on a shelf." It means a designed study, at ICH-aligned conditions where applicable, with documented results, conducted under a written protocol approved by the quality unit. For OTC drugs, stability data is also the basis for your labeled expiration date. If your stability data doesn't support the date on the label, that's an adulteration issue under 21 CFR §501 as well as a CGMP failure.
What "Adulteration" Actually Means in This Context
The word sounds more alarming than it sometimes is in enforcement letters, but it carries specific legal weight. Under 21 U.S.C. §351(a)(2)(B), a drug is adulterated if the methods used in, or the facilities or controls used for, its manufacture, processing, packing, or holding do not conform to or are not operated or administered in conformity with CGMP regulations.
In plain terms: if your CGMP system is inadequate, the product itself is legally adulterated — regardless of whether any individual batch has a safety problem. This is why FDA can issue a warning letter and seek a consent decree based on system-level failures, not just individual product defects. The adulteration finding follows from the CGMP failure.
According to FDA's published enforcement data, warning letters to drug manufacturers citing 21 CFR Part 211 violations have remained among the most common pharmaceutical enforcement actions year over year, with finished pharmaceutical manufacturers consistently representing a significant portion of CGMP-related citations. A single warning letter can trigger an import alert, a consent decree, or mandatory product recalls — the downstream consequences extend well beyond the letter itself.
How to Audit Your Own System Before FDA Does
The most useful thing I can tell any OTC manufacturer reading this is that an FDA inspection is not the first time you should find your gaps. Your internal audit program — and ideally a gap assessment conducted by someone who knows what FDA investigators actually look for — should find them first.
Here's a practical framework for a CGMP gap assessment in an OTC finished pharmaceutical context:
Phase 1 — Regulatory Classification Review Confirm the regulatory status of every product you manufacture. If any product meets the definition of a drug under the FD&C Act (intended to treat, mitigate, cure, or prevent a disease, or to affect the structure or function of the body in a drug-claim context), 21 CFR Part 211 applies in full. Do not rely on how you have historically characterized the product — rely on what the label claims and what FDA's classification guidance says.
Phase 2 — Quality System Gap Assessment Against 21 CFR Part 211 Walk through each subpart of Part 211 against your actual documented practices. Not what you think you do — what your SOPs say and what your batch records show. The gaps between these two are your highest-risk observations.
Phase 3 — Laboratory Controls Deep Dive Pull your reference standard documentation. Confirm method validation or verification files exist for all methods used for OTC drug release testing. Review your last ten OOS investigations — or confirm the procedure exists and has been used.
Phase 4 — Stability Program Review Confirm that every OTC drug product has an ongoing stability study, that the conditions are appropriate, and that the data actually supports the expiration date on your label. This is a common gap and a significant one.
Phase 5 — Quality Unit Structure Assessment Map your QC unit's organizational reporting structure, staffing, and documented authorities. If QC doesn't have documented, exercised authority to hold and reject product, that's a structural fix — not a documentation fix.
At Certify Consulting, I've conducted this type of gap assessment for OTC manufacturers at various stages of readiness — some preparing for their first FDA inspection, others responding to 483 observations. In every case, finding the gaps internally is cheaper, faster, and far less disruptive than finding them through enforcement.
The Role of Product Classification Decisions
One thread that runs through a lot of OTC warning letters — including the JW Nutritional enforcement action — is the question of product classification. What framework governs this product?
This matters practically because a company that has historically operated under 21 CFR Part 111 for dietary supplements may, at some point, start producing a product that is legally a drug. That transition is not just a labeling change. It requires a full infrastructure assessment: Do our SOPs cover Part 211 requirements? Do our lab controls meet drug standards? Does our stability program support drug expiration dating? Has our equipment been qualified?
These are answerable questions, but they require someone to ask them deliberately. The failure mode I see most often is that the classification question was resolved ("yes, this is an OTC drug") without a corresponding infrastructure assessment. The product gets labeled and manufactured, and the CGMP gaps exist from day one.
FDA does not grade on intent. The regulatory standard is what your system actually does, not what you intended to build.
Connecting CGMP Compliance to Business Continuity
A warning letter is not just a compliance problem — it's a business continuity problem. FDA's response options after a warning letter include:
- Import alerts that halt product entry into US commerce
- Injunctions that can shut down manufacturing operations
- Mandatory recalls that remove product from the market
- Consent decrees that impose third-party oversight, sometimes for years
For a small OTC manufacturer, any one of these can be existential. The economic case for investing in a robust CGMP system before an inspection is not hard to make.
The 100% first-time audit pass rate I've maintained across 200+ clients at Certify Consulting isn't because those clients had perfect systems from day one. It's because we found the gaps, fixed them, and documented the fixes before FDA walked in the door. That's the work. It's not complicated, but it requires someone to do it methodically.
If you're an OTC drug manufacturer and you haven't done a formal CGMP gap assessment in the last twelve months — or if you've recently added a product that might meet the drug definition — this is a good time to start. The enforcement environment is active, and FDA has shown no indication of slowing its inspection cadence for finished pharmaceutical manufacturers.
For a confidential CGMP gap assessment or pre-inspection readiness review, contact Certify Consulting at certify.consulting.
Source: FDA Warning Letter to JW Nutritional LLC, issued April 15, 2026. Available at FDA.gov.
Last updated: 2026-05-26
Jared Clark
GMP Compliance Consultant, Certify Consulting
Jared Clark is a GMP compliance consultant and founder of Certify Consulting, specializing in FDA GMP requirements for pharmaceuticals, dietary supplements, cosmetics, and food manufacturing.