503B Outsourcing Facility Registration: FDA Requirements Explained

503A vs. 503B: Understanding the Compounding Framework

FDA's regulatory framework for drug compounding is divided into two categories under the FD&C Act, each with distinct requirements and exemptions:

Section 503A: Traditional Compounding Pharmacies

Section 503A applies to licensed pharmacies and physicians that compound drugs in response to individual patient prescriptions. A 503A compounder is exempt from three critical FDA requirements: (1) current Good Manufacturing Practice (cGMP) under 21 CFR Parts 210/211, (2) labeling with adequate directions for use under §502(f)(1), and (3) FDA premarket approval (NDA/ANDA). However, 503A compounders must meet specific conditions, including using components that comply with USP standards, not compounding drugs that are essentially copies of commercially available products, and compounding only in response to valid prescriptions.

Section 503B: Outsourcing Facilities

Section 503B, added by the Drug Quality and Security Act (DQSA) of 2013 in response to the 2012 fungal meningitis outbreak traced to the New England Compounding Center (NECC), created a new category of compounder: the outsourcing facility. A 503B facility can compound drugs without individual prescriptions and distribute them to healthcare facilities (hospitals, clinics, physician offices) in advance of or without a specific patient order.

In exchange for this broader distribution capability, 503B facilities take on significantly more regulatory obligations than 503A pharmacies, including:

• FDA registration — must register as an outsourcing facility with FDA (separate from state pharmacy licensing)
• cGMP compliance — subject to 21 CFR Parts 210 and 211 (unlike 503A)
• FDA inspection — subject to risk-based FDA inspections on a regular schedule
• Adverse event reporting — must report serious adverse events to FDA
• Product labeling — must label products with specific information (but exempt from adequate directions for use)
• Reporting — must submit product reports to FDA identifying compounded products and volume

The Drug Quality and Security Act (DQSA)

The DQSA was enacted on November 27, 2013, as a direct response to the NECC disaster, which killed 76 people and sickened over 750 others from contaminated injectable methylprednisolone acetate. The NECC operated in a regulatory gray area between state pharmacy law and federal drug manufacturing law, highlighting the need for a clear federal framework.

Title I of the DQSA (the Compounding Quality Act) amended Section 503A and added Section 503B to the FD&C Act. Key provisions include:

• Voluntary registration — registration as a 503B outsourcing facility is voluntary, not mandatory. However, only facilities that register under 503B receive the exemptions that allow them to compound without prescriptions and distribute to healthcare facilities.
• FDA inspection authority — 503B facilities are inspected by FDA on a risk-based schedule, similar to conventional drug manufacturers. FDA publishes inspection observations (Form 483s) and can issue Warning Letters.
• Product reporting — 503B facilities must report to FDA biannually (every 6 months), identifying each drug compounded during the period and the volume.
• Bulk drug substances — 503B facilities may use bulk drug substances that appear on FDA's published list, are components of FDA-approved drugs, or appear on a clinical need list.

Title II of the DQSA (the Drug Supply Chain Security Act, or DSCSA) addresses drug traceability and verification throughout the pharmaceutical supply chain — a separate topic but part of the same legislation.

Registration Requirements for 503B Facilities

To register as a 503B outsourcing facility, you must submit a registration to FDA that includes:

1. Facility information — name, address, DUNS number, and contact information for the facility and its responsible personnel
2. Type of operations — identification as a 503B outsourcing facility (distinct from other establishment types)
3. State license information — proof of current state pharmacy or drug manufacturing license(s) in the state(s) where the facility operates
4. Product list — initial product report identifying the drug products the facility intends to compound
5. U.S. Agent designation (for foreign facilities) — while most 503B facilities are domestic, any foreign entity seeking to register must designate a U.S. Agent

Registration is submitted through FDA's electronic system and must be renewed annually between October 1 and December 31. FDA publishes a public list of registered outsourcing facilities on its website, allowing healthcare providers and patients to verify that a facility is in good standing.

Important: 503B registration with FDA does not replace state licensing requirements. Outsourcing facilities must comply with both federal and applicable state laws. Many states have enacted their own laws governing outsourcing facilities, which may impose additional requirements beyond federal law.

cGMP Requirements for 503B Facilities

Unlike 503A pharmacies, 503B outsourcing facilities are subject to current Good Manufacturing Practice (cGMP) requirements under 21 CFR Parts 210 and 211. This is one of the most significant regulatory differences and the primary trade-off for the ability to compound without prescriptions.

cGMP requirements for 503B facilities cover:

• Personnel qualifications — staff must have the education, training, and experience to perform their assigned functions. A qualified person must oversee manufacturing operations.
• Buildings and facilities — the facility must be designed, constructed, and maintained to prevent contamination. This includes proper environmental controls, clean room standards for sterile compounding, and separation of operations.
• Equipment — equipment must be of appropriate design, size, and location, and properly maintained, cleaned, and calibrated.
• Production and process controls — written procedures for production and process control, including master production records, batch records, and in-process testing.
• Laboratory controls — adequate testing of components, in-process materials, and finished products. Testing must include identity, strength, quality, and purity.
• Records and reports — detailed records of production, control, and distribution. Records must be maintained for inspection.
• Packaging, labeling, and holding — proper procedures for packaging, labeling (including beyond-use dates), and storage conditions.

FDA has issued guidance documents specific to 503B facilities to clarify how cGMP requirements apply in the compounding context. For a detailed overview of Parts 210/211, see our guide on drug cGMP basics for foreign manufacturers.

Adverse Event Reporting and FDA Inspections

503B outsourcing facilities have mandatory adverse event reporting obligations under Section 503B(b)(5) of the FD&C Act:

• Serious adverse events must be reported to FDA within 15 calendar days of the facility becoming aware of the event
• Follow-up reports must be submitted within one year if new information becomes available
• Records of all adverse events (not just serious ones) must be maintained for at least 3 years

Adverse event reports are submitted through FDA's MedWatch system (Form FDA 3500A). A "serious adverse event" is defined as an event that results in death, a life-threatening experience, hospitalization, disability, congenital anomaly, or a medical intervention to prevent one of these outcomes.

FDA conducts risk-based inspections of 503B facilities, with higher-risk facilities (those compounding sterile products, those with prior compliance issues) inspected more frequently. During inspections, FDA investigators evaluate:

• Compliance with cGMP requirements (21 CFR Parts 210/211)
• Environmental monitoring data and clean room conditions
• Batch records and release testing documentation
• Sterility assurance practices (for sterile products)
• Adverse event reporting and complaint handling
• Compliance with the conditions of Section 503B (e.g., not compounding drugs on the FDA withdrawal list)

FDA publishes inspection results, including Form 483 observations and Warning Letters, on its public website. Serious violations can result in injunctions, consent decrees, or criminal prosecution. Since the DQSA was enacted, FDA has issued dozens of Warning Letters to 503B facilities and taken enforcement action against several for contamination, sterility failures, and cGMP violations.

Key Considerations for 503B Registration

If you are considering registering as a 503B outsourcing facility, keep these critical factors in mind:

• Investment in infrastructure — cGMP compliance requires significant investment in facility design, environmental controls, equipment, and quality systems. The cost differential between a 503A pharmacy and a 503B facility is substantial.
• Regulatory exposure — 503B facilities face FDA oversight similar to conventional drug manufacturers, including unannounced inspections and public disclosure of compliance issues.
• State law complexity — state outsourcing facility laws vary widely. Some states require separate licensure, impose additional restrictions on compounding, or have different reporting requirements.
• Drug shortage compounding — 503B facilities play a critical role in addressing drug shortages. FDA maintains a drug shortage list, and 503B facilities can compound drugs that appear on the shortage list to help meet patient needs.
• Bulk drug substance lists — 503B facilities can only use bulk drug substances that are on FDA's published list, are components of FDA-approved drugs, or appear on FDA's clinical need list. Using non-permitted bulk substances is a violation.

For foreign entities considering 503B operations, the path is more complex but possible. Foreign 503B facilities must register with FDA, designate a U.S. Agent, and comply with all the same requirements as domestic facilities. Contact Assurentry for guidance on foreign 503B registration and U.S. Agent services.