FDA Consent Decrees: Triggers, Requirements, and Executive Exposure

An FDA consent decree is a court-enforced agreement between a company and the federal government, entered by a federal judge as a permanent injunction, that halts some or all of the company’s operations until it corrects serious manufacturing or quality failures. The Department of Justice files the case on the FDA’s behalf, and once the judge signs the order, every obligation inside it carries the weight of a court order rather than a regulatory notice. Violating it is contempt of court.

How a Company Ends Up Under One

A consent decree is never the first step. It sits at the top of an enforcement ladder that usually starts with a routine facility inspection. When an FDA investigator finds problems, those observations go on a Form 483 handed to management at the close of the visit. If the company’s response is inadequate, or if it promises fixes and never delivers, the FDA issues a public Warning Letter naming the firm and setting a response deadline.1U.S. Food and Drug Administration. Responding to FDA Form 483 Observations at the Conclusion of a CGMP Inspection

Ignore the Warning Letter, or submit a plan you never follow, and the FDA refers the matter to the Department of Justice for judicial action. That referral is what produces a consent decree. Most companies that end up under one have a trail of repeat inspection failures, multiple Form 483s, and at least one Warning Letter they failed to address. By the time DOJ files the complaint, the government has built a record showing voluntary compliance did not work.

What Violations Trigger a Consent Decree

The statutory authority comes from 21 U.S.C. § 332, which gives federal courts the power to restrain violations of the Federal Food, Drug, and Cosmetic Act.2Office of the Law Revision Counsel. 21 USC 332 – Injunction Proceedings The underlying prohibited acts appear in 21 U.S.C. § 331: introducing adulterated or misbranded products into interstate commerce, refusing FDA inspections, failing to keep required records, and more.3Office of the Law Revision Counsel. 21 USC 331 – Prohibited Acts

In practice, the violations that push the government toward a consent decree almost always involve persistent failures to follow Current Good Manufacturing Practices — the baseline quality standards for drug manufacturing codified at 21 CFR Parts 210 and 211.4eCFR. 21 CFR Part 2105eCFR. 21 CFR Part 211 – Current Good Manufacturing Practice for Finished Pharmaceuticals These rules govern facility sanitation, equipment calibration, laboratory testing, and batch documentation. Failing them makes a product legally adulterated.

The specific problems repeat across cases: incomplete batch records, laboratories that skip required testing or lack proper controls, contamination from poorly maintained equipment, and failures to investigate when a batch does not meet specifications. What they share is a breakdown in the systems meant to catch problems before a product reaches patients. The government pursues a consent decree when those breakdowns are so widespread that further warning letters would accomplish nothing.

What the Decree Forces the Company to Do

The first and most disruptive requirement is usually a full or partial shutdown. The decree prohibits the company from manufacturing or distributing covered products until it proves compliance with federal law. This “unless and until” structure is the defining feature of most FDA consent decrees: operations stay frozen until the company earns its way back.6U.S. Food and Drug Administration. Regulatory Procedures Manual – Chapter 6 Judicial Actions

Recalls are almost certain. The decree generally requires the company to pull violative products already on the market and either destroy or recondition them under FDA oversight. A “letter shutdown” provision also gives the government discretion to order additional recalls or halt operations at any point if new violations surface, without going back to court for a new order.

Beyond the immediate shutdown, the company must develop a detailed remediation work plan covering every deficiency named in the decree. The plan spells out which equipment needs replacing, which standard operating procedures need rewriting, and which employees need retraining. It has to be approved before large-scale changes begin, and every milestone is documented. Timelines for specific upgrades — new air handling systems, digital batch tracking, laboratory instrument qualification — are baked in so progress can be measured objectively.

Independent Third-Party Oversight

No company under a consent decree grades its own homework. The decree requires the firm to hire, at its own expense, an independent Current Good Manufacturing Practices expert to verify that remediation is actually happening.7U.S. Food and Drug Administration. Sun Pharmaceutical Industries Inc Non-Compliance Letter The expert audits every department involved in production, quality control, and laboratory testing, then certifies in writing that the corrections meet federal standards.

The expert’s reports go directly to the government, not just to company management. If the expert identifies remaining gaps, those go into the record and can delay a return to full operations. Expert certification is a prerequisite for requesting permission to resume manufacturing; until the FDA accepts that certification based on its own review, the shutdown remains in effect. Many companies get stuck here — physical upgrades finish quickly enough, but demonstrating that new procedures are consistently followed across every shift and every department takes far longer than most firms anticipate.

What It Costs

The financial impact goes well past the price of fixing the facility. Most decrees include liquidated damages provisions imposing daily penalties for any future violations. These amounts can reach $20,000 per day per violation, with additional sums tied to the retail value of any violative products. The penalties stack: a single day with multiple violations generates multiple charges.

Some decrees also require disgorgement, where the company turns over profits earned from selling products that violated federal standards. Courts have ordered disgorgement in a number of FDA cases since the late 1990s. Related to this, some decrees require restitution — returning money to the actual purchasers of violative products rather than paying the government.

Then come the indirect costs. A facility shutdown means lost revenue for every day the line sits idle. The company pays for independent experts, infrastructure upgrades, staff retraining, and the documentation systems the decree demands. For large manufacturers, total remediation can run into tens of millions of dollars. Smaller companies can expect costs well into six figures across their sites.

Frozen Product Approvals

A consent decree can freeze more than existing production. If the FDA invokes its Application Integrity Policy against the company, the agency stops reviewing all pending and new product applications from that firm. No new drugs or devices get approved until the underlying data integrity or compliance concerns are resolved.8U.S. Food and Drug Administration. Application Integrity Policy

The scope can be devastating. The FDA may apply the policy to a single facility or extend it across all of a company’s applications if the problems raise broad questions about data reliability. The only exception is for products with genuine public health significance, such as when the firm is a sole supplier of a medically necessary product. Outside that narrow exception, the application pipeline goes dark. For companies that depend on a steady flow of new approvals for revenue, this can be more financially damaging than the facility shutdown itself.

Personal Exposure for Executives

A consent decree puts the company under judicial oversight, but individual executives can face personal criminal liability under a separate legal theory known as the Park Doctrine. The Supreme Court held in United States v. Park that corporate officers who had the authority to prevent or correct FDA violations, and failed to do so, can be held personally responsible even without proof they knew about the specific violation.9Justia US Supreme Court. United States v Park, 421 US 658 (1975)

The government only needs to show that the officer held a position with responsibility and authority over the area where the violation occurred and failed to prevent or promptly correct it. The Court described this as imposing “the highest standard of foresight and vigilance” on corporate leaders, though it also acknowledged that the law does not require what is objectively impossible. An executive who can show they were genuinely powerless to prevent the violation has a defense, but the bar is high.

Under 21 U.S.C. § 333, a first offense is a misdemeanor carrying up to one year in prison and a $1,000 fine. A second conviction, or a violation committed with intent to defraud, jumps to a felony with up to three years in prison and a $10,000 fine. Knowingly adulterating a product in a way that creates a reasonable probability of serious injury or death carries up to 20 years in prison and a $1,000,000 fine.10Office of the Law Revision Counsel. 21 USC 333 – Penalties

The FDA does not pursue Park Doctrine prosecutions casually. Its internal guidance weighs whether the violation caused actual or potential public harm, whether it was obvious, whether it reflected a pattern of illegal behavior, and whether the company ignored prior warnings. When a consent decree already documents years of ignored warnings and systemic failures, those factors tend to line up against the executives in charge.

Disclosure for Public Companies

Publicly traded companies face an additional layer of consequences. A consent decree is almost certainly a material definitive agreement that triggers mandatory disclosure under SEC rules. The company must file a Form 8-K within four business days of entering into the decree.11U.S. Securities and Exchange Commission. Form 8-K

The filing makes the decree, its terms, and its financial implications public to investors. The stock price impact is often immediate. Companies that fail to disclose promptly, or that downplay the decree’s significance, risk securities fraud claims on top of their FDA problems.

Violating an Active Decree

Because a consent decree is a federal court order, violating its terms is contempt of court. The FDA has a continuing obligation to monitor compliance and advise the court if the company fails to obey.12U.S. Food and Drug Administration. Drug Residue Injunctions and Related Actions The government can pursue civil or criminal contempt. Civil contempt typically means escalating financial penalties, with the liquidated damages provisions making each day of non-compliance more expensive than the last. Criminal contempt, reserved for willful defiance, can bring additional fines and imprisonment.

The letter shutdown provision hands the government even more immediate power. If the FDA identifies a new violation, it can order the company to stop operations, conduct a recall, or take other corrective action simply by sending a letter. No new hearing required. The enforcement tools available under an active decree are far more potent than the warning letters that preceded it.

How a Consent Decree Ends

A consent decree does not expire on its own. It stays in effect until a court specifically vacates it, and earning that relief is a multi-year process.

The Sunset Period

After the company completes all remediation, receives expert certification, and passes FDA reinspection, it enters the sunset period. This is a stretch of continuous compliance, virtually always five years, during which the company must maintain clean inspection records and keep operating within the decree’s terms.6U.S. Food and Drug Administration. Regulatory Procedures Manual – Chapter 6 Judicial Actions The government wants proof that the improvements are durable, not a temporary response to pressure.

If the company stumbles during the sunset period, whether through a failed inspection, a new violation, or a lapse in documentation, the clock can reset. Some companies have spent a decade or more under consent decrees because they could not string together five clean years.

Filing the Motion to Vacate

Once the sunset period concludes without incident, the company’s lawyers prepare a motion asking the district court to vacate the injunction. Before filing, the company coordinates with the FDA. The Office of Chief Counsel, the relevant center, and the district office all review the company’s compliance record. If none of them objects, the FDA informs the company’s counsel that it will not oppose the motion.

The motion itself is typically short: it describes the sunset provision, summarizes the compliance record, and notes that the FDA does not object. When the judge signs the order, the permanent injunction is lifted and the company returns to standard regulatory oversight. From the day the decree is entered to the day it is vacated, the full cycle rarely takes less than seven or eight years and often takes considerably longer.