Compliance 12 min read

Setting Up a GMP Quality System for OTC Topicals

J

September 25, 2026

An OTC monograph topical product, a sunscreen, an antifungal cream, an acne wash, is a drug under federal law the moment it makes a drug claim. Drugs get inspected under 21 CFR Part 211 whether the company selling them thinks of itself as a pharmaceutical manufacturer or not. I have walked into facilities that spent years building a careful, well-intentioned quality program modeled on cosmetic industry practice, only to learn during their first FDA inspection that the standard they actually needed to meet was current good manufacturing practice for finished pharmaceuticals. That gap is where most OTC monograph companies get into trouble, and it is entirely avoidable if the quality system is built around the right regulation from the start.

This guide walks through what "OTC monograph" actually means, how it differs from the cosmetic and supplement frameworks many topical manufacturers came from, and what a compliant quality system needs to contain, piece by piece.

What "OTC Monograph" Actually Means

An OTC monograph is FDA's list of active ingredients, dosages, formulations, and labeling that the agency has determined are generally recognized as safe and effective for a specific therapeutic category, things like sunscreens, skin protectants, external analgesics, and antiperspirants. A product that conforms to the applicable monograph can be marketed without submitting a New Drug Application. That is the appeal of the monograph pathway: no premarket FDA review, no approval letter, no waiting years for clearance.

But conformance to a monograph is not the only condition. Under 21 CFR 330.1, an OTC drug is not generally recognized as safe and effective, and therefore is not eligible for monograph marketing, unless it is also manufactured in accordance with the current good manufacturing practice regulations in 21 CFR Parts 210 and 211. The monograph tells you what you can put in the bottle and what you can say on the label. Part 211 tells you how you have to run the plant that makes it. Skip the second half and the first half doesn't save you.

The monograph system itself changed in a meaningful way in 2020. The Coronavirus Aid, Relief, and Economic Security (CARES) Act, signed March 27, 2020, added Section 505G to the Food, Drug, and Cosmetic Act and replaced the old notice-and-comment rulemaking process, proposed rule, tentative final monograph, final monograph, with an administrative order system. FDA can now issue orders amending a monograph without running the full rulemaking gauntlet, which used to take decades for some categories. The same legislation created the OTC Monograph Drug User Fee Program (OMUFA), which requires an annual facility fee from establishments that manufacture OTC monograph drugs, generally due by June 1 of each fee year.

Here is the point I want to land before anything else: the monograph pathway is a self-certification system. Nobody at FDA reviews your specific formulation before it goes to market. That makes the manufacturer's internal quality system the only thing standing between a compliant product and a recall. There is no agency reviewer catching your mistake before launch. Your quality unit is the entire safety net.

How OTC Monograph Drugs Compare to Cosmetics and Supplements

A lot of topical manufacturers move between categories, a sunscreen brand adds a moisturizer, a supplement company launches a topical pain cream, and the regulatory ground shifts under their feet without anyone announcing it. The table below shows where the frameworks diverge.

Requirement OTC Monograph Topical Drug Cosmetic Dietary Supplement
Governing CGMP regulation 21 CFR Part 211 21 CFR Parts 700-740, with mandatory GMP rulemaking underway under MoCRA 21 CFR Part 111
Premarket clearance None required if conforms to monograph (FD&C Act Section 505G) None None (NDI notification only for new dietary ingredients)
Quality control unit required Yes, 21 CFR 211.22 Not explicitly mandated Yes, 21 CFR 111.103
Written batch production records Yes, 21 CFR 211.188 Not federally required Yes, 21 CFR 111.260
Formal stability program Yes, 21 CFR 211.166 Not required Not required
Mandatory complaint/adverse event file Yes, 21 CFR 211.198 Serious adverse event reporting required under MoCRA Yes, 21 CFR 111.553

If your facility makes products in more than one of these categories on shared equipment, the quality system has to be built to the strictest applicable standard for whatever runs on that line, not averaged across categories. For more on how the cosmetic side of this changed, see our breakdown of MoCRA GMP requirements for cosmetic manufacturers.

The CGMP Backbone: 21 CFR Parts 210 and 211

Part 210 sets the general applicability of CGMP to drug manufacturing. Part 211 is where the substance lives, organized into subparts that map almost exactly onto the sections a quality system needs:

  • Subpart B (211.22-211.34): Organization and personnel, including the quality control unit
  • Subpart C (211.42-211.58): Buildings and facilities
  • Subpart D (211.63-211.72): Equipment
  • Subpart E (211.80-211.94): Control of components, containers, and closures
  • Subpart F (211.100-211.115): Production and process controls
  • Subpart G (211.122-211.137): Packaging and labeling
  • Subpart H (211.142-211.150): Holding and distribution
  • Subpart I (211.160-211.176): Laboratory controls
  • Subpart J (211.180-211.198): Records and reports
  • Subpart K (211.204, 211.208): Returned and salvaged product

I usually build a quality system in roughly this order, because each layer depends on the one before it.

Step 1: Establish the Quality Control Unit

21 CFR 211.22(a) requires a quality control unit with the authority to approve or reject all components, containers, closures, in-process materials, packaging, labeling, and finished drug products. This unit cannot report through manufacturing or sales. If the person who can hold a batch also has a production quota to hit, the independence requirement is already broken, and that is one of the first things an investigator will probe with pointed questions about reporting lines.

Step 2: Document Control and SOPs

21 CFR 211.100 requires written procedures for production and process control, designed to assure that drug products have the identity, strength, quality, and purity they purport to have. Every deviation from these procedures has to be recorded and justified. This is the section that turns "we usually do it this way" into a controlled, auditable system.

Step 3: Component and Raw Material Qualification

21 CFR 211.84 requires testing or appropriate examination of each lot of components before use, along with identity testing of at least one active ingredient container per lot unless a validated reduced testing program is in place. For topical formulations, this usually means identity, purity, and microbial limit testing on incoming actives and, depending on risk, on key excipients like water, emulsifiers, and preservatives.

Step 4: Facility and Equipment Controls

Subparts C and D require equipment that is appropriately designed, sized, and located to facilitate cleaning and maintenance, with written cleaning and maintenance schedules under 211.67. For topical manufacturers running mixing tanks, homogenizers, and filling lines, cleaning validation between product changeovers is usually the weakest link I find on audit, particularly where the same tank runs multiple SKUs with different actives.

Step 5: Production and Batch Records

21 CFR 211.188 requires a batch production and control record for every batch, including complete information on production and control of that batch. 21 CFR 211.192 requires that all such records be reviewed and approved by the quality control unit before a batch is released, and any unexplained discrepancy must be investigated.

Step 6: Microbial Control, the Topical-Specific Risk

This is where topicals diverge most sharply from oral solid dosage manufacturing. Creams, lotions, and gels are frequently water-based emulsions, and water supports microbial growth that a tablet simply doesn't. 21 CFR 211.113(b) requires written procedures designed to prevent objectionable microorganisms in drug products not required to be sterile. In practice, that means preservative efficacy testing consistent with USP <51> Antimicrobial Effectiveness Testing, and microbial limit testing consistent with USP <61> and <62>, built into both raw material release and finished product release specs. A topical manufacturer without a documented preservative challenge study is carrying a risk that most oral solid manufacturers never have to think about.

Step 7: Laboratory Controls and Stability

21 CFR 211.165 requires that each batch be tested or examined and meet its specifications before release for distribution. 21 CFR 211.166 requires a written stability testing program, including test methods and sample sizes based on statistical criteria, storage conditions, and testing frequency sufficient to support the expiration date on the label. For a topical product, stability testing also needs to track physical attributes, viscosity, color, odor, phase separation, that a purely chemical assay won't catch but a customer complaint definitely will.

Step 8: Packaging and Labeling Control

Subpart G governs the mechanics, line clearance, label reconciliation, control of printed materials. Layered on top of that, OTC monograph products carry monograph-specific labeling requirements, including the standardized Drug Facts panel format required under 21 CFR 201.66. Getting the CGMP labeling controls right and getting the monograph labeling content right are two separate checks, and I've seen facilities pass one while failing the other.

Step 9: Complaints, Deviations, and CAPA

21 CFR 211.198 requires a written procedure for handling complaints, including a system for reviewing complaints to determine whether an investigation is warranted, and a record of every complaint received. This file is one of the first things an investigator asks for, because it shows whether the company is actually listening to the market or just filing paperwork.

Step 10: Records Retention

21 CFR 211.180(a) sets the retention floor: at least one year past the expiration date of the last batch produced under a given record, or three years after distribution for products without an expiration date. Build your document retention schedule around this number, not around whatever your document management software defaults to.

Common Topical OTC Monograph Categories

Knowing which monograph applies, and which CFR part governs it, is the starting point for every specification you write. The main topical categories look like this:

Category CFR Citation Example Active Ingredients
Sunscreen 21 CFR Part 352 Zinc oxide, titanium dioxide, avobenzone
Skin protectant 21 CFR Part 347 Zinc oxide, petrolatum, dimethicone
External analgesic 21 CFR Part 348 Menthol, methyl salicylate, capsaicin
Antiperspirant 21 CFR Part 350 Aluminum zirconium compounds
Topical antimicrobial/antiseptic 21 CFR Part 333, Subparts B-E Alcohol, benzalkonium chloride
Acne treatment 21 CFR Part 333, Subpart D Benzoyl peroxide, salicylic acid

Registration, Listing, and OMUFA

Beyond CGMP, an OTC monograph manufacturer has a separate set of administrative obligations. Facilities must register with FDA under 21 CFR Part 207 and list every drug product they manufacture. Under Section 505G, OTC monograph drug facilities and the entities that own the marketed products are also subject to OMUFA facility fees, assessed annually. Missing a registration deadline or a fee payment doesn't just create an administrative headache, it can affect whether your product is considered properly marketed at all.

Common Gaps I See When I Audit OTC Monograph Topical Manufacturers

The single most common failure I see is a quality unit that exists on an org chart but doesn't actually hold batch-disposition authority in practice. The second is a stability program that was written once at product launch and never updated when the formula, supplier, or packaging changed. The third is treating the Drug Facts label as a marketing deliverable instead of a regulated document that needs the same change-control rigor as a batch record.

None of these are exotic problems. They are the ordinary result of a company that started in cosmetics or supplements, added a monograph drug claim to move product, and never rebuilt the quality system underneath it. In my view, the fix is not complicated, but it does require going back to Part 211 as the foundation rather than treating it as an overlay on top of whatever system already exists.

If you're starting from scratch or rebuilding after an inspection finding, our guide on structuring your first 90 days of GMP work walks through the sequencing question, what to fix first, what can wait, and how to prioritize when the whole system needs attention at once.

FAQ

Do OTC monograph topical drugs need FDA approval before they can be sold?

No premarket approval like a New Drug Application is required if the product conforms to an applicable OTC monograph under Section 505G of the FD&C Act. The manufacturer self-certifies conformance and remains fully subject to FDA enforcement, including inspection under 21 CFR Part 211.

What CGMP regulations apply to OTC monograph topical products?

The same finished pharmaceutical CGMP regulations apply as for any other drug: 21 CFR Parts 210 and 211. On top of that, the specific monograph in 21 CFR Parts 330-358 governs allowable active ingredients, concentrations, and labeling for the product's category.

Can one facility make cosmetics and OTC drugs on the same production line?

Yes, but it requires documented controls to prevent cross-contamination, including validated cleaning procedures under 21 CFR 211.67 and clear line-clearance documentation between product changeovers. The line needs to be run to the drug standard whenever a monograph product is on it.

Is a quality control unit legally required for OTC monograph manufacturers?

Yes. 21 CFR 211.22 requires a quality control unit with the authority to approve or reject components, materials, packaging, labeling, and finished product, and that unit cannot report through a production or sales chain of command.

How long do batch records need to be kept?

21 CFR 211.180(a) requires retention of at least one year past the expiration date of the last batch produced under those records, or three years after distribution if the product carries no expiration date.

Last updated: 2026-09-25

J

Jared Clark

GMP Compliance Consultant, Certify Consulting

Jared Clark is a GMP compliance consultant and founder of Certify Consulting, specializing in FDA GMP requirements for pharmaceuticals, dietary supplements, cosmetics, and food manufacturing.

Stay Informed on GMP & FDA Compliance

Get expert GMP consulting insights, FDA regulatory updates, and compliance tips delivered directly to your inbox. No spam, just actionable guidance for manufacturers.

Newsletter coming soon. Follow us on LinkedIn in the meantime.

Need GMP Consulting? Talk to an Expert

Schedule a free consultation with Jared Clark, JD, MBA, PMP, CMQ-OE, CQA, CPGP, RAC. We'll assess your compliance status and build a clear roadmap to audit readiness.

Free Download

Get the GMP Audit Preparation Guide

The 90-day, week-by-week plan that takes your facility from “we think we're compliant” to inspection-ready — document inventory, gap assessment, mock inspections, and an inspection-day quick reference.

Download the Free Guide