21 CFR 211.192: Investigations, Records, and Enforcement

Under 21 CFR 211.192, a drug manufacturer’s quality control unit must review and approve every batch production and control record before the batch is released for distribution, and must conduct a thorough written investigation of any unexplained discrepancy or any failure of a batch or its components to meet specifications, whether or not the batch has already been distributed. The rule sits inside the Current Good Manufacturing Practice framework for finished pharmaceuticals and functions as the last documentary checkpoint before product reaches patients.¹

What the Quality Control Unit Must Review

Before any batch leaves the facility, the quality control unit reviews and approves all production and control records for that batch, including packaging and labeling records. The point of the review is to confirm the batch was actually made and controlled the way the written procedures require. If the paperwork shows the process was not followed, the batch cannot be released.¹

The quality control unit’s authority to do this comes from 21 CFR 211.22, which gives it the power to approve or reject components, in-process materials, packaging, labeling, and finished drug products, and to review records to make sure errors have been fully investigated.² If this unit misses something, the consequences land on the whole company.

What Triggers a Mandatory Investigation

Section 211.192 requires a thorough investigation in two situations. The first is any unexplained discrepancy in the production record. The regulation calls out yield discrepancies specifically: if the actual percentage of theoretical yield falls outside the maximum or minimum limits set in the master production record, that gap must be investigated.¹ A yield that is too low can point to product loss or degradation. A yield that is too high can signal contamination from a previous batch or a weighing error in raw materials.

The second trigger is any failure of a batch, or any of its components, to meet its established specifications. That includes failed laboratory tests for potency, purity, dissolution, and any other quality attribute the specification covers. Distribution does not close the file. The obligation to investigate applies whether the batch is still in the warehouse or already sitting on pharmacy shelves.¹

How an Out-of-Specification Investigation Runs

When a laboratory test returns a result outside a specification, FDA’s 2022 OOS guidance describes a two-phase structure that inspectors treat as the baseline expectation.

Phase one is a laboratory investigation. A supervisor evaluates whether the OOS result came from an error in the testing process itself: confirming the analyst followed the correct procedure, examining raw data such as chromatograms for anomalies, verifying calculations, checking instrument performance, and evaluating the reference standards and reagents used. Each step of that assessment is documented.³

If phase one does not identify a testing error, the investigation moves into a full-scale review of the manufacturing process. Phase two pulls in production records, equipment logs, environmental monitoring data, and any other information that could show where the process went wrong. It can also include additional laboratory work: retesting the original sample or resampling from the batch. The number of allowable retests has to be defined in a written procedure in advance, not chosen after the fact to chase a passing result.³

The Investigation Cannot Stop at One Batch

Section 211.192 requires the investigation to extend to other batches of the same drug product and to other drug products that may have been associated with the specific failure.¹ A defective raw material lot means every batch that used that lot needs evaluation. A malfunctioning piece of equipment means every product processed on it during the affected window is potentially in scope.

This is where investigations get expensive, and where manufacturers face the strongest temptation to define the problem narrowly. A faulty heating element in a drying oven can affect dozens of batches across multiple product lines. The rule does not allow a company to look only at the batch that failed testing and ignore everything else that ran on the same equipment. FDA inspectors routinely check whether investigation scope was clipped.

The Written Record and Follow-Up

Every investigation under 211.192 has to produce a written record that includes the conclusions reached and the follow-up.¹ The regulation is deliberately broad about what follow-up means, but inspectors expect corrective actions that address the root cause and preventive measures designed to keep the problem from happening again. A conclusion that just restates the discrepancy without identifying a cause is a common Form 483 observation.

Investigation records become part of the batch record and fall under the retention requirements in 21 CFR 211.180. Production records tied to a specific batch have to be kept for at least one year after the batch’s expiration date, or three years after distribution for certain over-the-counter products that lack expiration dating. Records must be readily available for FDA inspection throughout that period.⁴

Separately, 21 CFR 211.180(e) requires manufacturers to review 211.192 investigations as part of an annual product quality evaluation. Old investigations feed into a yearly assessment of whether a product’s specifications or manufacturing procedures need to change.

If the Records Are Electronic

When batch records and investigation documentation are managed electronically, 21 CFR Part 11 applies on top of Part 211. Part 11 requires systems that create or maintain electronic records to include secure, time-stamped audit trails that independently record who made entries or changes and when, and it requires that previously recorded information not be obscured by later edits. Access has to be limited to authorized individuals.⁵

FDA’s current guidance says the agency exercises enforcement discretion on certain Part 11 requirements as long as the underlying CGMP requirements in Part 211 are still met.⁶ The practical reading: a narrow Part 11 technical gap may not draw a citation, but if the electronic system makes it impossible to reconstruct a reliable batch history or verify who approved a record, the same facts become a Part 211 problem.

What Happens When 211.192 Is Not Followed

Weak investigations show up in FDA enforcement at every level. The most common starting point is a Form 483, issued at the end of an inspection to identify objectionable conditions and presented to senior management before the investigator leaves the site.⁷ Inadequate investigations, missing written records, and failure to extend an investigation to related batches are among the most frequent 211.192 observations.

If a 483 is not adequately addressed, FDA typically escalates to a warning letter, which formally identifies the significant violations and requests a response within a specified time. Warning letters are public.⁸

Beyond that, FDA can pursue product seizure. Under 21 U.S.C. 334, any adulterated drug is subject to seizure and condemnation in federal court, whether still in interstate commerce or in a warehouse after shipment.⁹ A drug made in a facility with systematic CGMP failures is considered adulterated even if the individual unit tests within specification. For the most serious or persistent violations, the Department of Justice can seek a consent decree of permanent injunction, which typically bars the manufacturer from producing or distributing product until compliance is demonstrated through defined remedial steps.¹⁰

Criminal Exposure and the Park Doctrine

Criminal prosecution is available under 21 U.S.C. 333. A first offense for violating the Federal Food, Drug, and Cosmetic Act is a misdemeanor carrying up to one year of imprisonment and a fine of up to $1,000. A second offense, or a first offense committed with intent to defraud, is a felony punishable by up to three years of imprisonment and a fine of up to $10,000.¹¹

Under the Park Doctrine, established by the Supreme Court in United States v. Park (1975), corporate officers can be held personally liable for FDCA violations based on their position of authority in the company. The government does not have to prove the executive personally participated in or knew about the specific violation. It has to show the officer had the responsibility and authority to prevent or correct it and did not. Weak 211.192 procedures can become a personal criminal matter, not just a corporate one.

Recalls and Field Alert Reports

An unresolved failure can end in a recall. FDA classifies recalls by health risk: Class I where a reasonable probability exists of serious health consequences or death; Class II where the product may cause temporary or medically reversible problems and the probability of a serious outcome is remote; and Class III where the product is unlikely to cause adverse health consequences but still violates FDA requirements.¹²

Products approved under new drug applications or abbreviated new drug applications carry an added obligation. The manufacturer must submit a field alert report within three working days when information surfaces suggesting a distributed batch may have a significant problem.³ A 211.192 investigation that confirms an OOS result on a distributed batch can start that clock immediately.

1
eCFR. 21 CFR 211.192 – Production Record Review
2
eCFR. 21 CFR 211.22 – Responsibilities of Quality Control Unit
3
Food and Drug Administration. Investigating Out-of-Specification (OOS) Test Results for Pharmaceutical Production
4
eCFR. 21 CFR 211.180 – General Requirements
5
eCFR. 21 CFR Part 11 – Electronic Records; Electronic Signatures
6
Food and Drug Administration. Guidance for Industry Part 11, Electronic Records; Electronic Signatures – Scope and Application
7
U.S. Food and Drug Administration. FDA Form 483 Frequently Asked Questions
8
U.S. Food and Drug Administration. About Warning and Close-Out Letters
9
Office of the Law Revision Counsel. 21 USC 334 – Seizure
10
United States Department of Justice. U.S. Files Consent Decree for Permanent Injunction Against Pharmaceutical Ranbaxy Laboratories
11
Office of the Law Revision Counsel. 21 USC 333 – Penalties
12
U.S. Food and Drug Administration. Recalls Background and Definitions