A pharmaceutical manufacturer receives three complaints in the same week. Two describe a product that did not dissolve correctly. One describes a patient who experienced an unexpected adverse reaction. The quality team investigates and identifies a batch that may have been produced with a non-conforming excipient.
The question is no longer whether a problem exists. The question is how fast the organisation can respond and what the response needs to include.
Product recalls are among the most consequential events a regulated manufacturer can face. They are also among the most process-dependent. Organisations that have documented recall procedures, current distribution records, and a trained recall team respond faster, make fewer decisions under pressure, and demonstrate to FDA that their quality system functions when it matters most.
This guide walks through each phase of a product recall under 21 CFR Part 7 and 21 CFR Part 806, from initial detection through effectiveness checks and closure.
By the end of this guide, you will understand the regulatory framework governing voluntary and mandatory recalls; how FDA classifies recalls by health risk; the step-by-step recall process from initial assessment through closure; what recall communications must contain under 21 CFR 7.49; how to conduct effectiveness checks; and how to prevent recalls through quality system investment.
The Regulatory Framework
Product recalls in FDA-regulated industries operate under two primary frameworks depending on the product type.
21 CFR Part 7 governs the general recall process for all FDA-regulated products, including pharmaceuticals and medical devices. It defines what a recall is, establishes the recall classification system, sets requirements for recall strategies and communications, and specifies FDA’s role in monitoring and assessing recall effectiveness.
21 CFR Part 806 applies specifically to medical devices and requires manufacturers and importers to submit a written report to FDA of any correction or removal initiated to reduce a risk to health or to remedy a violation of the FD&C Act. The report must be submitted within ten working days of initiating the correction or removal.
Under these regulations, a recall is defined as a firm’s removal or correction of a marketed product that the FDA considers to be in violation of the laws it administers and against which the agency would initiate legal action. Most recalls are voluntary, initiated by the manufacturer or distributor. FDA may request a recall when voluntary action is not forthcoming and may issue a mandatory recall order under 21 CFR Part 810 for medical devices in rare cases where voluntary action has not occurred and patient safety is at risk.
Class I recalls increased 64.76% since 2016. In 2025, FDA launched a Communications Pilot providing faster public alerts for high-risk devices in cardiovascular, hospital, and urology categories, reducing public disclosure time from weeks to potentially hours for affected product categories. Manufacturers in these sectors should expect accelerated FDA engagement timelines for Class I events.
The Recall Process: Step by Step
Step 1: Initial Detection and Signal Identification
Recalls begin with a signal: a complaint, an adverse event report, a failed stability test, an internal quality audit finding, or notification from a supplier. The quality system must be capable of detecting these signals promptly and escalating them through a defined process.
Under 21 CFR Part 820 (QMSR, effective February 2, 2026) and ISO 13485:2016, manufacturers must maintain systems for receiving, reviewing, and evaluating complaints and must have documented procedures for deciding whether complaints require investigation. The complaint handling system is the primary early warning mechanism for recall events.
When a potential recall signal is identified, the immediate action is to document it, preserve all relevant evidence, and convene the recall team without delay. Time from signal identification to initial assessment directly affects the scope of the recall and the FDA’s assessment of the manufacturer’s quality system.
Organisations frequently spend days or weeks attempting to resolve a quality issue internally before convening a formal recall assessment. This approach delays the recall process, increases the quantity of product distributed during the evaluation period, and creates documentation that shows the organisation was aware of a potential issue before initiating a recall. Speed of response is one of the criteria FDA uses to assess a manufacturer’s quality culture.
Step 2: Health Hazard Assessment
A health hazard evaluation determines the severity of the risk associated with the product defect. This evaluation considers whether disease or injury has already occurred from use of the product, what patient populations are exposed and their vulnerability, the probability that the defect will cause harm, and the severity and reversibility of the potential harm.
For medical devices, the manufacturer performs this assessment and submits it to FDA along with the correction or removal report under 21 CFR Part 806. FDA performs its own independent health hazard evaluation to determine recall classification. FDA’s classification may differ from the manufacturer’s assessment.
The health hazard assessment must be documented with scientific justification. Conclusions that are not supported by data or expert opinion will not withstand FDA review and may result in a higher recall classification than the manufacturer proposed.
Step 3: Define the Scope and Develop the Recall Strategy
The recall strategy defines which lots or product are affected, the depth of recall through the distribution chain (wholesale, retail, consumer, or user level), the method of communications to be used, and how effectiveness will be verified.
Depth of recall is determined by the nature of the hazard and the distribution pattern. A Class I recall typically requires a consumer-level or user-level recall, reaching the individuals actually using the product. A Class II or III recall may stop at the wholesale or retail level depending on the hazard and the product’s use pattern.
The recall strategy must be submitted to FDA within ten working days of initiating the recall for medical devices under 21 CFR Part 806. FDA will review and may recommend modifications to the strategy before approving it. The recall may proceed while FDA reviews the strategy: the manufacturer does not need to wait for FDA approval before initiating removal or correction.
Step 4: Recall Communications
Recall communications must meet the specific requirements of 21 CFR 7.49. A recall communication that does not satisfy these requirements may be deemed inadequate by FDA, extending the recall timeline and increasing regulatory exposure.
Required elements under 21 CFR 7.49:
- Clear identification that the document is a product recall notification
- Product identity: name, lot numbers, codes, serial numbers, sizes, and expiration dates
- Reason for recall in sufficient detail, including a health hazard explanation
- Instructions for recipients describing what to do with the product (return, destroy, or quarantine)
- Contact information for questions and return logistics
- Request for response acknowledging receipt of notification
For Class I and Class II recalls, communications must be marked URGENT on both the letter and the envelope. Communications may be sent by telegram, mailgram, email, electronic portal, or first-class letter. The method chosen must be appropriate for the urgency of the recall classification.
FDA reviews recall communications during inspections and as part of the recall file. The most common deficiency is insufficient detail in the reason for recall section. Recall letters that describe the issue in vague terms (for example, quality concern) without specifying the nature of the defect and its potential health consequences do not satisfy 21 CFR 7.49 and may require reissue.
Step 5: Effectiveness Checks
After recall communications are sent, the manufacturer must verify that recipients actually received the notification and took the required action. This is the effectiveness check requirement under 21 CFR 7.55.
Effectiveness checks may be conducted by personal visits, telephone contacts, letters, or any other means that allow verification of actual receipt and response. For Class I recalls, FDA typically expects a high percentage of consignees to be contacted and confirmed. For lower-classification recalls, the effectiveness check requirement is proportionally less intensive.
The manufacturer must submit periodic status reports to FDA throughout the recall, describing the current status of recalled product recovery, the results of effectiveness checks, and any issues encountered. These reports are submitted until FDA terminates the recall.
Step 6: Product Disposition
Recalled product returned to the manufacturer must be controlled, segregated, and dispositioned under a documented procedure. Options include destruction, rework or reprocessing, return to supplier, or alternative disposition approved by the quality unit.
The disposition decision and the method of destruction or rework must be documented in the recall file. For pharmaceuticals, returned product may not be returned to commercial distribution unless specific conditions are met under 21 CFR Part 211.204. For medical devices, reworked product must be re-evaluated to confirm it meets original or equivalent specifications before redistribution.
Step 7: Recall Closure and CAPA
FDA terminates a recall when it determines that all reasonable efforts have been made to remove or correct the product and that the recall is as effective as possible. Termination is not automatic. The manufacturer must request termination by submitting a final recall status report demonstrating that effectiveness checks are complete, product disposition is documented, and corrective actions have been implemented.
The recall is not over at termination. The CAPA initiated in response to the recall must address the root cause of the defect that triggered the recall, not just the immediate corrective action of removing product from the market. FDA inspectors will review the CAPA associated with a recall during subsequent inspections to evaluate whether the root cause was identified and whether the corrective action was effective.
Recall Prevention: Building Systems That Catch Problems Earlier
The most effective recall is the one that does not happen because the quality system identified the problem before product reached the market. Three quality system investments have the most direct impact on recall prevention.
Complaint trending that identifies patterns across individual reports is the earliest warning system available. A single complaint about a product characteristic may not trigger investigation. Three complaints about the same characteristic in 30 days should. Quality systems that trend complaint data by product, lot, complaint category, and geographic region detect signals that individual complaint reviews miss.
When a recall is required, the speed and completeness of product removal depends entirely on the accuracy of distribution records. 21 CFR 211.150 requires pharmaceutical manufacturers to maintain distribution records that allow complete lot traceability. Under QMSR and ISO 13485:2016, medical device manufacturers have equivalent requirements. Records that cannot locate all consignees for a recalled lot extend the recall duration and increase regulatory exposure. Quarterly audits of distribution data quality, checking for missing customer addresses, incomplete lot documentation, and data discrepancies, are the most efficient way to confirm that recall capability exists before it is needed.
A mock recall is a drill that tests the organisation’s ability to locate, notify, and recover product from distribution. Organisations that conduct annual mock recalls consistently perform better in actual recalls. The mock recall identifies gaps in distribution record completeness, tests the notification process, confirms that the recall team knows their roles, and provides documented evidence of recall readiness that FDA values during inspections.
Knowledge Check
Test your understanding of the recall process before applying it at your organisation.
Ten working days from the date the correction or removal was initiated. The report must be submitted even while the recall strategy is still being developed. Manufacturers should not delay initiating the correction or removal while waiting to complete the full recall strategy document. The ten-day clock starts when the action is initiated, not when the strategy is finalised.
21 CFR 7.49 requires that the reason for recall be described in sufficient detail, including a health hazard explanation. A vague description of the defect does not allow recipients to assess the nature of the risk or make informed decisions about the urgency of their response. The recall communication must describe the specific defect, its potential health consequences, and the basis for the health hazard assessment. Insufficient detail in recall communications is one of the most common deficiencies identified by FDA during recall monitoring.
A CAPA deficiency observation under 21 CFR Part 820 (QMSR) or 21 CFR 211.192. A CAPA that addresses only the immediate corrective action without identifying and eliminating the root cause does not satisfy GMP or QMS requirements. The purpose of CAPA is to prevent recurrence, which requires understanding why the defect occurred. An investigator who finds that the same type of defect reoccurred after a recall CAPA was closed has strong evidence of a systemic CAPA system failure.
Immediate corrective action on distribution record quality, followed by a follow-up mock recall within six months to verify improvement. Distribution records with 15% incompleteness would make a real Class I recall significantly more difficult, extending the timeline for notifying consignees and increasing the likelihood that some product cannot be located and recovered. The corrective action should include identifying the process gaps that caused the documentation failures, implementing controls to prevent recurrence, and verifying that the improved process produces complete records before a real recall requires them.
Recall Readiness Checklist
✓ Documented recall procedure covering detection, assessment, strategy, communication, effectiveness checks, and closure
✓ Recall team designated with defined roles and current contact information
✓ Distribution records maintained with complete lot traceability per 21 CFR 211.150 and ISO 13485:2016 requirements
✓ Annual mock recall conducted and results documented
✓ Recall communication templates prepared and reviewed against 21 CFR 7.49 requirements
✓ Health hazard assessment procedure documented with criteria for Class I, II, and III determination
✓ FDA district office contact information current
✓ Product disposition procedure documented for returned recalled product
✓ CAPA system capable of addressing root causes, not just immediate corrections
✓ Complaint trending system capable of detecting signals across multiple reports
Sources
- 21 CFR Part 7 Subpart C: Recalls, Guidance on Policy, Procedures, and Industry Responsibilities
- 21 CFR Part 806: Medical Devices; Reports of Corrections and Removals
- 21 CFR Part 810: Medical Device Recall Authority
- FDA: Industry Guidance for Recalls
- FDA: Recalls, Corrections and Removals for Medical Devices
- Complizen: What Is an FDA Medical Device Recall? Complete Crisis-Prevention Guide (July 2025)