FDA Found Zero Asbestos Testing at Five OTC Manufacturers

On June 2, 2026, FDA's Center for Drug Evaluation and Research issued five coordinated warning letters to OTC drug manufacturers across four countries. Revlon Group Holdings in the United States (WL 320-26-89). Shantou Qiwei Industry in China (WL 320-26-90). Umendra Life Sciences and Zydus Lifesciences in India (WL 320-26-92). Laboratorios Dr. Collado in the Dominican Republic (WL 320-26-87). Same issuance date. Nearly identical citations under 21 CFR 211.84(d). And not one on-site inspection.

That last detail is what quality teams should study.

FDA used Section 704(a)(4) records requests to gather everything it needed. No inspection team entered any of these facilities. The agency sent records requests, reviewed the documentation each firm returned, and had sufficient basis to issue five formal warning letters for the same systemic failure across four countries in a single day.

The violation is not complicated. The enforcement mechanism is the story.

The Remote Enforcement Mechanism

Section 704(a)(4) of the Federal Food, Drug, and Cosmetic Act authorizes FDA to require manufacturers to produce records for inspection and copying, without a physical site visit. It is a long-standing statutory authority. What the June 2 cluster demonstrates is FDA using that authority as a coordinated, multi-country enforcement instrument to surface the same systemic failure across an entire product category at once.

Firms that responded to the records requests and disclosed inadequate testing gave FDA precisely what it needed. Firms that could not demonstrate adequate testing through their own documentation had already answered the enforcement question.

Remote enforcement via records requests changes the risk model for quality teams. Inspection readiness has traditionally meant preparing for someone to walk through the door. The June 2 action shows that framing is incomplete. FDA can assess your quality system's response to specific compliance questions through documentation alone. What you have on file, and what you cannot produce, is the compliance evidence.

What 211.84(d) Actually Requires

The specific violation in all five letters is failure under 21 CFR 211.84(d)(1) and (d)(2). The regulation requires drug manufacturers to test each incoming shipment of a component, either by performing the tests themselves or by establishing the reliability of supplier testing through a validated certification program.

Multiple firms in the June 2 cluster admitted to zero asbestos testing on incoming talc. Several relied exclusively on certificates of analysis from their talc suppliers, without any documented basis for concluding that those COAs were reliable substitutes for their own testing.

A COA is not a test. It is a supplier's assertion that material meets the supplier's specifications. 21 CFR 211.84 does not authorize reliance on that assertion unless the manufacturer has established, through its own documented validation work, that the supplier's testing program is reliable. An audit record, method comparison data, or a program of periodic verification testing can support reduced in-house testing. An uncritical stack of COAs cannot.

FDA has cited COA-only reliance patterns across multiple product categories for years. The June 2 letters apply that standard specifically to talc and to the known risk of asbestos contamination in that material.

Why Talc Carries "Higher Risk" Classification

FDA's five letters uniformly characterized talc-containing products as higher risk for asbestos contamination by inhalation. This is not a classification the agency invented for this enforcement action.

Asbestos occurs naturally in geological deposits near talc deposits. Mining and processing steps to separate them are imperfect, and contamination events in cosmetic and OTC drug products have put the issue in front of FDA repeatedly. The agency has documented concerns about asbestos contamination in talc across multiple enforcement cycles, including a proposed rule on cosmetics testing that it later withdrew in November 2025.

The relevant question for quality teams is not whether they knew talc carried asbestos risk. It is whether their component testing specification was designed to address that known risk. A specification that covers appearance, loss on drying, and pH but omits asbestos does not capture the failure mode FDA has explicitly characterized as the relevant hazard for this material. Under 21 CFR 211.84(d)(2), testing must be adequate against specifications that address the actual quality attributes and risk profile of the component.

Revlon's letter illustrates that the component qualification problem extends beyond asbestos. In addition to the talc-related testing failure, FDA cited incomplete USP identity testing and yeast/mold limit violations. The June 2 action is not only an asbestos story. It is a story about incoming component programs that were not designed to address the specific failure modes regulators have already documented for these materials.

The Zydus Case and What VAI Actually Means

Zydus Lifesciences' Baddi facility received a Voluntary Action Indicated classification from FDA in August 2025, ten months before the June 2 warning letter.

VAI is the best outcome an inspection can produce. It means FDA observed no objectionable conditions during that inspection. Quality teams frequently treat VAI and recent clean inspection outcomes as evidence of their compliance posture.

The June 2 letter for Zydus Baddi is a precise demonstration of why that reasoning fails. FDA's August 2025 inspection did not surface the component testing failure that a 704(a)(4) records request surfaced ten months later. VAI reflects the findings of a specific inspection at a specific point in time. It does not certify that every dimension of a facility's quality system is in compliance. An inspection that did not specifically examine talc component testing records says nothing about whether those records are adequate.

Remote enforcement via records requests can reach into dimensions of a quality system that an on-site inspection did not examine. The compliance picture FDA holds after a 704(a)(4) review may differ materially from the picture after a site visit, because the questions being asked are different ones.

What Your Incoming Component Records Should Show

The June 2 letters define, with reasonable precision, what adequate documentation for incoming talc component testing looks like. For any OTC manufacturer using talc, three documentation questions determine the current enforcement exposure.

Does your talc specification include asbestos testing? If not, the specification may not satisfy 211.84(d)(2) for a material FDA has classified as higher risk specifically for that impurity.

If you are relying on supplier COAs for reduced testing, what is the documented basis for that reliance? Method comparisons, supplier audits, periodic verification batches, or other documented evidence of testing reliability are required to support COA reliance under CGMP. The documentation must exist before FDA asks for it.

Do your incoming component records for talc tell a coherent story from receipt through release? If FDA sent a 704(a)(4) request for your component testing records, would those records demonstrate systematic testing or systematic COA collection? The answer to that question is the current enforcement risk.

The same analysis applies to any component with a documented risk profile that your current specification does not address. Talc and asbestos are the present enforcement focus, but the standard under 211.84(d) is material-agnostic.

The Records Question

The five June 2 letters are instructive precisely because of what they are not. They are not the result of an unannounced inspection, a complaint, or a recall trigger. They are the result of FDA asking for component testing records that CGMP regulations require manufacturers to maintain, and receiving documentation that did not demonstrate adequate testing.

Inspection readiness is about having records that answer the questions regulators will ask. Remote enforcement adds one dimension to that standard: those questions can arrive without any prior signal that FDA is examining your facility's documentation at all. What your records show on any given day is what FDA will find when they request them.

The five firms that received letters on June 2 knew they were required to test incoming talc. Several of them admitted they had not tested for asbestos at all. That admission came through their own response to a records request. The documentation told the story without anyone walking through the door.

If you manufacture OTC products containing talc or components with documented contamination histories, the Inspection Risk Scan can identify where your incoming component testing program is exposed before FDA asks. Get your Inspection Risk Scan at dsrv.io.