FDA MedWatch Adverse Event Reporting: Forms, Deadlines, and Penalties

FDA MedWatch adverse event reporting is how serious problems with drugs, medical devices, biologics, cosmetics, and dietary supplements get flagged to the agency after those products are already on the market. Consumers and healthcare professionals file voluntarily through the Safety Reporting Portal using Form FDA 3500 or 3500B. Manufacturers, importers, and hospitals file mandatorily on Form FDA 3500A, usually electronically through ESG NextGen, within deadlines that range from 5 work days for the most urgent device hazards to 15 or 30 calendar days for standard drug and device reports. The right form, portal, and clock all depend on who you are and what product is involved.

What MedWatch Covers

MedWatch accepts safety reports for prescription and over-the-counter medications, biologics such as blood components and gene therapies, medical devices from glucose monitors to implanted hardware, and cosmetics like moisturizers, shampoos, and hair dyes.¹ Dietary supplements have a parallel mandatory reporting track under a separate federal statute.²

Vaccines do not go through MedWatch. Vaccine-related problems belong in the Vaccine Adverse Event Reporting System (VAERS), and tobacco products and animal drugs each have their own dedicated portals.¹ Filing a vaccine complaint through MedWatch delays FDA review; when a VAERS report also involves a non-vaccine drug, VAERS shares it with MedWatch automatically.³

What Counts as a Serious Adverse Event

The FDA defines “serious” by outcome, not by how dramatic the event looks in real time. Under 21 CFR 314.80, an adverse experience qualifies as serious if it produced any of the following:⁴

Death that the product is suspected of causing or contributing to.
A life-threatening experience in which the patient was at immediate risk of dying. An event that could have been fatal in a more severe form does not by itself meet this threshold.
Inpatient hospitalization or prolongation of an existing hospital stay. Emergency room visits that don’t lead to admission generally fall outside this criterion.
Persistent or significant disability that substantially disrupts normal daily activities.
A congenital anomaly or birth defect following exposure during pregnancy.
A medical or surgical intervention needed to prevent one of the outcomes above, such as emergency treatment for allergic bronchospasm.

This same framework applies across drugs, devices, biologics, dietary supplements, and cosmetics. For medical devices, if a qualified medical professional concludes the device did not cause or contribute to the death or serious injury, the manufacturer is not required to file, but must document that determination and keep it on file.⁵

Reporting Deadlines by Product and Reporter

Consumers and healthcare providers filing voluntarily have no deadline. Mandatory reporters do, and the FDA treats a late report and a missing report about the same way.

Drug and Biologic Manufacturers

A 15-day Alert Report is required for any adverse drug experience that is both serious and unexpected (not already described in the current labeling). The 15-calendar-day clock starts the moment the information first arrives anywhere in the company’s reporting infrastructure, not when someone at headquarters reads the email.⁶

For investigational drugs under an IND, when a suspected adverse reaction is both unexpected and fatal or life-threatening, the sponsor must notify the FDA by telephone or fax within 7 calendar days of first learning about it, followed by a complete written report within 15 calendar days.⁷

Periodic safety reports are due quarterly for the first three years after approval (within 30 days after each quarter closes), then annually (within 60 days of the approval anniversary). These sweep in non-serious events and labeled reactions as well.⁶

Medical Device Manufacturers

The standard deadline under 21 CFR Part 803 is 30 calendar days after the manufacturer becomes aware that a device may have caused or contributed to a death or serious injury, or that a device malfunctioned in a way that would likely cause death or serious injury if it recurred.⁵

Certain situations compress that timeline to 5 work days: when remedial action is needed to prevent an unreasonable risk of substantial harm to the public, or when the FDA specifically requests expedited reporting for a device type.

For pure malfunctions (no death or serious injury), some product codes are eligible for the Voluntary Malfunction Summary Reporting program, which lets manufacturers batch reports quarterly instead of filing individually within 30 days. Deaths and serious injuries are never eligible.⁸

Hospitals and Other User Facilities

When a device may have caused or contributed to a patient’s death, the facility must report to both the FDA and the manufacturer (if known) within 10 work days. For serious injuries, the 10-work-day report goes to the manufacturer, or to the FDA if the manufacturer is unknown.⁹ Facilities are responsible for information they reasonably know and don’t have to launch investigations beyond their own records.

Dietary Supplements and Cosmetics

For dietary supplements, the person named on the label (manufacturer, packer, or distributor) has 15 business days from receiving the report through the label’s contact information. If new medical information about the same event surfaces within one year, another 15 business days applies. A copy of the product label goes with every report.²

Cosmetics follow the same 15-business-day rule, plus 15 business days for follow-up information within one year, under the Modernization of Cosmetics Regulation Act of 2022. The retail label must accompany the report.¹⁰

Combination Products

Products combining drug, device, and biological components follow the reporting rules matching their marketing authorization. A combination product approved as a device follows Part 803. One approved under an NDA follows Part 314. Where a combination product was approved as a device but contains a drug or biologic component, the 15-day alert report deadline for the drug or biologic portion is extended to 30 calendar days to align with the device timeline.¹¹

Which Form to Use

The FDA has three MedWatch forms, matched to who is reporting.¹²

Form FDA 3500 is the voluntary form for healthcare professionals such as physicians, nurses, and pharmacists. It has clinical detail fields for describing observations and how the patient’s condition changed.
Form FDA 3500B is the voluntary form for consumers and patients. Plain language, fewer technical fields, same core safety information.
Form FDA 3500A is the mandatory form used by manufacturers, importers, and user facilities when electronic submission isn’t required. For most device manufacturers and importers, electronic submission is now the default under 21 CFR 803.12.¹³

How to Submit

Safety Reporting Portal (Voluntary Reporters)

Healthcare providers and consumers filing voluntary reports use the Safety Reporting Portal, which walks you through each required field.¹⁴ You can file as a guest without creating an account, but guest sessions expire after 30 minutes of inactivity with no way to recover a partially completed report. A registered account lets you save drafts, review your submission history, and start follow-up reports from the original filing.¹⁵ Register first if you plan to attach clinical documentation.

ESG NextGen (Manufacturers and High-Volume Reporters)

Mandatory reporters with recurring submissions use ESG NextGen, the FDA’s agency-wide electronic intake system, with registration through the Unified Submission Portal and digital identity verification.¹⁶ Accounts inactive for 60 days are automatically deactivated, which catches companies off guard when months pass between reportable events. Electronic submissions must meet 21 CFR Part 11 requirements for audit trails, electronic signatures, and record integrity.¹⁷

Paper Submission

Paper forms can be mailed or faxed when electronic submission isn’t feasible. A tracked mailing service provides proof of delivery for compliance records. Paper reports reach the FAERS database more slowly, so electronic filing is preferable when deadlines are tight.

What to Put in the Report

Patient identifiers should stay minimal: initials, age, sex, and weight are enough. Do not include full names or Social Security numbers.¹⁸ The point is to let the FDA track the case and spot demographic patterns without creating a privacy problem.

Describe the adverse event specifically: date of onset, symptoms, lab results, treatment given. For a device malfunction, explain exactly what the device did or failed to do. On the product side, include brand name, manufacturer, and lot number or National Drug Code when available. If those aren’t on the packaging, describe whatever the label shows. Include your own contact information so the FDA can follow up.

When a user facility reports a death or serious injury involving more than one device, file a separate form for each additional suspect device.

HIPAA Does Not Block a Safety Report

Providers sometimes hesitate because they worry about disclosing patient information without consent. Under 45 CFR 164.512(b), a covered entity may disclose protected health information to the FDA, or to any person subject to FDA jurisdiction, without patient authorization, for purposes including adverse event collection, product tracking, and post-marketing surveillance.¹⁹ The disclosure must relate to the quality, safety, or effectiveness of the regulated product, and the exemption also covers recalls and lookback activities. Share what’s relevant to the safety report, not the full chart.

Who Is Exempt From Device Reporting

Under 21 CFR 803.19, the following are not subject to mandatory device reporting:⁵

Licensed practitioners who manufacture or import devices solely for diagnosing and treating their own patients within a physician-patient relationship.
Researchers who manufacture devices solely for personal use in research or teaching, not for sale. These individuals are typically subject to investigational device exemption rules under Part 812 instead.
Dental and optical laboratories.

A report is also unnecessary when the manufacturer or importer determines the information it received was erroneous and no device-related adverse event actually occurred, though the determination must be documented and retained. If a company receives information about a device it did not manufacture or import, it must forward the information to the FDA with an explanatory letter rather than ignore it.

What Happens After You File

Reports enter the FDA Adverse Event Reporting System (FAERS) database for drugs and biologics or the Manufacturer and User Facility Device Experience (MAUDE) database for medical devices, with events coded using the Medical Dictionary for Regulatory Activities (MedDRA) terminology.²⁰ FAERS updates quarterly with roughly a three-month lag.

Safety evaluators may contact the reporter for additional medical records or product details. Manufacturers must submit follow-up reports when new information about a previously reported event becomes available.¹³ Based on accumulating data, the FDA can issue safety communications, require labeling changes, mandate a Risk Evaluation and Mitigation Strategy, or in serious cases withdraw a product from the market.

Penalties for Not Reporting

Failure to file required reports is a prohibited act under 21 USC 331, covering failures to establish or maintain records or make reports required under the device reporting, drug safety, dietary supplement, and cosmetics provisions of federal law. Enforcement typically starts with a warning letter, then escalates to product seizures, injunctions, civil money penalties adjusted annually for inflation, and, in willful cases, criminal prosecution. Even a warning letter enters the public record and can affect a company’s standing with investors, distributors, and healthcare systems that screen suppliers for FDA compliance history.

1
U.S. Food and Drug Administration. MedWatch: The FDA Safety Information and Adverse Event Reporting Program
2
Office of the Law Revision Counsel. 21 USC 379aa-1 Serious Adverse Event Reporting for Dietary Supplements
3
U.S. Food and Drug Administration. Vaccine Adverse Event Reporting System (VAERS) Questions and Answers
4
eCFR. 21 CFR 314.80 Postmarketing Reporting of Adverse Drug Experiences
5
eCFR. 21 CFR Part 803 Medical Device Reporting
6
eCFR. 21 CFR 314.80 Postmarketing Reporting of Adverse Drug Experiences
7
eCFR. 21 CFR 312.32 IND Safety Reporting
8
U.S. Food and Drug Administration. Voluntary Malfunction Summary Reporting Program
9
eCFR. 21 CFR 803.30 User Facility Reporting Requirements
10
U.S. Food and Drug Administration. How to Report a Cosmetic Product Related Complaint
11
eCFR. 21 CFR Part 4 Subpart B Postmarketing Safety Reporting for Combination Products
12
U.S. Food and Drug Administration. MedWatch Forms for FDA Safety Reporting
13
eCFR. 21 CFR 803.12 How Do I Submit Initial and Supplemental or Followup Reports
14
Safety Reporting Portal. Safety Reporting Portal
15
Safety Reporting Portal. Frequently Asked Questions
16
U.S. Food and Drug Administration. Electronic Submissions Gateway Next Generation (ESG NextGen)
17
eCFR. 21 CFR Part 11 Electronic Records Electronic Signatures
18
U.S. Food and Drug Administration. Instructions for Completing Form FDA 3500
19
eCFR. 45 CFR Part 164 Subpart E Privacy of Individually Identifiable Health Information
20
U.S. Food and Drug Administration. FDA Adverse Event Reporting System (FAERS) Database