21 CFR 211.192
Every DSRV article whose Regulatory Snapshot cites 21 CFR 211.192: the enforcement case behind it, the inspection exposure it created, and what the desk would do about it.
- What has FDA cited under 21 CFR 211.192?
- 14 DSRV articles cite 21 CFR 211.192. Enforcement cases behind them: FDA Warning Letter 320-26-126 (MARCS-CMS 732028) to Bentley Laboratories LLC, 111 Fieldcrest Avenue, Edison, NJ (FEI 2244819); inspected 03/16-03/27/2026, issued 09/17/2026, posted 09/29/2026; FDA Warning Letter CMS Case 732115 to ABS Corporation, July 23, 2026; FDA Warning Letters: Creative Essences (09/25/2025), SV Labs (12/09/2025), Patcos Cosmetics (03/12/2026); Genzyme Ireland FDA Warning Letter, June 22, 2026; Production reliability measurements presented by Dynatrace CTO Bernd Greifeneder at Dynatrace Perform 2026, February 2026, on sequential agentic-call degradation and deterministic-first AI architecture; FDA inspectional focus on CAPA and investigation adequacy under 21 CFR §211.192, with pharmaceutical quality system expectations set by ICH Q10; FDA inspectional emphasis on investigation adequacy under 21 CFR §211.192, including OOS result invalidation without an assignable laboratory cause; FDA Warning Letters to Medline Industries, LP, CMS Case 723866, March 25, 2026, and Intas Pharmaceuticals Limited, CMS Case 721151, March 30, 2026; Deviation and investigation documentation expectations under 21 CFR §211.192 and quality system review practice per ICH Q10; FDA draft guidance, Responding to FDA Form 483 Observations at the Conclusion of a Drug CGMP Inspection, published March 2026; FDA Warning Letter 320-26-40 to Cohance Lifesciences Limited, January 30, 2026, citing the firm's Hyderabad finished-dose facility under 21 CFR 211.192 and 21 CFR 211.67(a); FDA press announcement, FDA Launches One-Day Inspectional Assessments to Strengthen and Expand Oversight, May 6, 2026, with Commissioner Marty Makary's remarks at the FDLI Annual Conference; about 46 one-day assessments completed as of late April 2026; Recurring FDA 483 and warning-letter themes on inadequate investigations and CAPA effectiveness; FDA data integrity warning letters to Sun Pharmaceutical, Ipca Laboratories, and Hetero Drugs, read against FDA's guidance for industry, Data Integrity and Compliance With Drug CGMP: Questions and Answers, December 2018. Inspection exposure across them: 10 high, 4 moderate.
- What does DSRV recommend for 21 CFR 211.192?
- From the newest article (Bentley Widened the pH Limit Instead of Finding the Cause): A CAPA that changes the limit and leaves the cause alone closes the record and keeps the risk. The file an inspector wants shows what caused the result, which other lots it reaches, and a limit change justified by data dated independently of the failure. DSRV's matching service is the Investigation Defensibility Audit, delivered through controlled intake at /submit. DSRV is decision support, not legal advice; verify against the official source each article names.
- 6 min readHigh exposure
Bentley Widened the pH Limit Instead of Finding the Cause
FDA's warning letter to Bentley Laboratories says an out-of-specification pH result at 36 months was answered with a wider specification range and no scientific justification. The same letter shows what an OOS investigation has to contain.
- Case
- FDA Warning Letter 320-26-126 (MARCS-CMS 732028) to Bentley Laboratories LLC, 111 Fieldcrest Avenue, Edison, NJ (FEI 2244819); inspected 03/16-03/27/2026, issued 09/17/2026, posted 09/29/2026
- DSRV take
- A CAPA that changes the limit and leaves the cause alone closes the record and keeps the risk. The file an inspector wants shows what caused the result, which other lots it reaches, and a limit change justified by data dated independently of the failure.
- 4 min readHigh exposure
A Quality Unit That Averaged Away Its Own OOS Failures
FDA's July 2026 warning letter to ABS Corporation shows a Quality Unit that averaged out failing assay results, handwrote higher specification limits onto batch records during validation, and released product made with a raw material that had already failed retesting. The pattern is not sloppy paperwork. It is a Quality Unit deciding the answer before the test ran.
- Case
- FDA Warning Letter CMS Case 732115 to ABS Corporation, July 23, 2026.
- DSRV take
- The decisive control is whether the quality system forces failing data to be investigated before specifications, retest logic, or batch disposition can be changed.
- 6 min readHigh exposure
FDA’s 2025–2026 Warning-Letter Pattern: Water Systems Are Still Breaking Quality Systems, Not Just Utilities
If your water system is unstable, FDA is not just looking at maintenance. Recent warning letters show water-related failures treated as systemic failures in investigations, CAPA, product risk, and quality oversight.
- Case
- FDA Warning Letters: Creative Essences (09/25/2025), SV Labs (12/09/2025), Patcos Cosmetics (03/12/2026).
- DSRV take
- When water-system excursions occur, treat them as quality-system governance events rather than isolated engineering work orders.
- 7 min readHigh exposurecited as a tag
FDA Is Treating Discarded Evidence as a Quality Unit Failure
FDA's June 22, 2026 warning letter to Genzyme Ireland shows how undocumented retesting, discarded review artifacts, and canceled deviations now read as quality-unit governance failures. Small pharma quality teams should treat this as a warning that incomplete records are no longer a narrow documentation problem.
- Case
- Genzyme Ireland FDA Warning Letter, June 22, 2026
- DSRV take
- Inspection readiness is not having enough records after the fact — it is decision trails strong enough that FDA does not have to guess what the quality unit knew, reviewed, or allowed.
- 6 min readModerate exposure
Your Quality Workflows Are Sequential. That Is Where LLMs Fail.
At Perform 2026, Dynatrace's CTO measured a 95% accurate LLM falling to 60% reliability after 10 sequential agentic calls. Your OOS investigation, CAPA chain, and release decision are exactly that kind of workflow.
- Case
- Production reliability measurements presented by Dynatrace CTO Bernd Greifeneder at Dynatrace Perform 2026, February 2026, on sequential agentic-call degradation and deterministic-first AI architecture.
- DSRV take
- The design decision that determines auditability is sequencing: validated deterministic logic must establish the confirmed facts before any generative layer is asked to reason about them, because better prompts do not change the compounding probability math.
- 8 min readHigh exposure
CAPA Response Strategy: What FDA Expects to See
A strong CAPA is more than a corrective fix — FDA expects a defensible root cause, a systemic corrective and preventive action, and a real effectiveness check. Here is how to structure one that holds up.
- Case
- FDA inspectional focus on CAPA and investigation adequacy under 21 CFR §211.192, with pharmaceutical quality system expectations set by ICH Q10.
- DSRV take
- A CAPA is only as defensible as the system-level cause it targets and the predefined effectiveness check that proves the fix worked.
- 8 min readHigh exposure
Weak Root Cause vs. Defensible Investigation Logic
The difference between a closed deviation and a defensible one is the reasoning. We contrast shallow root-cause shortcuts with investigation logic that withstands a reviewer's scrutiny.
- Case
- FDA inspectional emphasis on investigation adequacy under 21 CFR §211.192, including OOS result invalidation without an assignable laboratory cause.
- DSRV take
- A reviewer reads an investigation backward from the conclusion - defensible logic documents the alternatives considered and why the evidence rules them out.
- 5 min readHigh exposure
The CAPAs Were Filed. The Problem Kept Recurring.
Two FDA warning letters from March 2026 cite Medline Industries and Intas Pharmaceuticals not for missing CAPA systems but for CAPA responses that failed to match the size of the problem. The distinction is one most quality teams have not fully internalized.
- Case
- FDA Warning Letters to Medline Industries, LP, CMS Case 723866, March 25, 2026, and Intas Pharmaceuticals Limited, CMS Case 721151, March 30, 2026.
- DSRV take
- FDA has moved past asking whether a CAPA procedure exists to asking whether closed CAPAs changed outcomes, so any failure type that recurs within a year of closure is standing evidence that the root cause was never correctly identified.
- 6 min readModerate exposure
Reviewer-Style Questions for Deviation Reports
Before a deviation report leaves your desk, run it past the questions a quality reviewer or inspector will ask. This checklist turns self-review into a defensibility test.
- Case
- Deviation and investigation documentation expectations under 21 CFR §211.192 and quality system review practice per ICH Q10.
- DSRV take
- Every "no" on a reviewer-style pre-flight check is a question you will eventually have to answer - better now, with the team and evidence at hand, than during an inspection.
- 6 min readModerate exposure
Your 483 Response Has 15 Business Days. FDA Just Defined the Bar.
FDA's March 2026 draft guidance converts the 483 response from a closeout ritual into a formal test of your investigation quality under 21 CFR 211.192.
- Case
- FDA draft guidance, Responding to FDA Form 483 Observations at the Conclusion of a Drug CGMP Inspection, published March 2026.
- DSRV take
- The response is downstream of the investigation: a quality unit that already investigates rigorously under 21 CFR 211.192 can produce a credible response inside 15 business days, while one that starts thinking about response methodology at inspection closeout cannot.
- 7 min readHigh exposure
Your Complaint Investigation Is Closed. FDA Says the Risk Is Not.
FDA's January 2026 warning letter to Cohance Lifesciences rejected a re-opened complaint investigation for the same gap it had the first time. The enforcement record documents what happens when a quality unit treats complaint handling and cleaning validation as separate systems.
- Case
- FDA Warning Letter 320-26-40 to Cohance Lifesciences Limited, January 30, 2026, citing the firm's Hyderabad finished-dose facility under 21 CFR 211.192 and 21 CFR 211.67(a).
- DSRV take
- The decisive control is a procedural handoff that forces a shared-equipment complaint to trigger a cleaning data review and a multi-product impact assessment, rather than leaving that connection to individual investigator judgment.
- 5 min readModerate exposurecited as a tag
FDA's 1-Day Inspection Pilot Changes Inspection Readiness
FDA's 1-day inspection pilot and AI-assisted risk ranking change what inspection readiness means for quality teams: less time to recover, more pressure on records that can stand on their own.
- Case
- FDA press announcement, FDA Launches One-Day Inspectional Assessments to Strengthen and Expand Oversight, May 6, 2026, with Commissioner Marty Makary's remarks at the FDLI Annual Conference; about 46 one-day assessments completed as of late April 2026.
- DSRV take
- A one-day assessment punishes performative readiness and rewards systems that stay organized without rehearsal, so inspection readiness has to be engineered into the daily system rather than staged for the visit.
- 9 min readHigh exposure
Usable Procedures Are Not Defensible Quality Decisions
Modern AI tools can make SOPs clearer and easier to follow. But inspectors do not cite companies for unclear formatting. They cite them for weak investigations, missing escalation logic, and decisions that cannot be traced to evidence. Usability and defensibility are different problems.
- Case
- Recurring FDA 483 and warning-letter themes on inadequate investigations and CAPA effectiveness.
- DSRV take
- Making an SOP easier to read does not make a quality decision defensible - defensibility comes from documented reasoning and traceable evidence.
- 7 min readHigh exposurecited as a tag
FDA Data Integrity Enforcement Is Accelerating — Here's What the Warning Letters Actually Say
Data integrity citations appeared in over 60% of pharmaceutical manufacturing warning letters in 2025. FDA is citing the systems that allowed falsification to happen unchallenged — not just the falsification itself. Here is what the enforcement record shows and what separates sites that pass from those that don't.
- Case
- FDA data integrity warning letters to Sun Pharmaceutical, Ipca Laboratories, and Hetero Drugs, read against FDA's guidance for industry, Data Integrity and Compliance With Drug CGMP: Questions and Answers, December 2018.
- DSRV take
- The separating control is whether audit trail review, OOS-rate trending, and validated technical access controls run as scheduled operations, because FDA reads an undetected manipulation pattern as a failed quality system rather than an analyst problem.
Investigation Defensibility Audit
Bring the document that has to hold up under 21 CFR 211.192. DSRV maps the evidence, names the gaps, and routes judgment calls to human review. Controlled intake, no public file upload.
Regulatory intelligence and interpretation, not legal advice. Verify against the official FDA or ICH source each article names.