21 CFR 211.22
Every DSRV article whose Regulatory Snapshot cites 21 CFR 211.22: the enforcement case behind it, the inspection exposure it created, and what the desk would do about it.
- What has FDA cited under 21 CFR 211.22?
- 7 DSRV articles cite 21 CFR 211.22. Enforcement cases behind them: Genzyme Ireland FDA Warning Letter, June 22, 2026; Tetrate governance framework, Securing the MCP Supply Chain, published in the first week of June 2026, alongside MCPManager.ai's regulated-industry MCP compliance guide and the Agentic AI Institute's June 2026 enterprise adoption analysis; FDA Warning Letter 320-26-54, CMS Case 722736, to Yangzhou H&R Plastic Daily Chemical Co., Ltd., March 18, 2026; FDA Warning Letter 320-24-62, CMS Case 684644, to MMC Healthcare Ltd., September 24, 2024; FDA warning letter closeout to Nephron SC, LLC, Case No. 634647, May 8, 2026, closing the October 11, 2022 warning letter with an explicit sustainability caveat; read alongside the FDA voluntary recall notice from JXK Enterprises, Inc., May 23, 2026, for undeclared sildenafil in a consumer chocolate product; FDA Warning Letter 320-26-58 (CMS Case 722591) to Purolea Cosmetics Lab, April 2, 2026, the CDER letter citing AI-generated drug product specifications, procedures, and master production and control records issued without adequate quality-unit review; FDA Warning Letter 707857 to Shiva Analyticals Private Limited, July 23, 2025, read alongside warning letters to Global Calcium Pvt. Limited (January 16, 2025), Landy International (June 12, 2024), and A. Nelson and Co. Ltd. (February 12, 2026). Inspection exposure across them: 5 high, 2 moderate.
- What does DSRV recommend for 21 CFR 211.22?
- From the newest article (FDA Is Treating Discarded Evidence as a Quality Unit Failure): Inspection readiness is not having enough records after the fact — it is decision trails strong enough that FDA does not have to guess what the quality unit knew, reviewed, or allowed. DSRV is decision support, not legal advice; verify against the official source each article names.
- 7 min readHigh exposure
FDA Is Treating Discarded Evidence as a Quality Unit Failure
FDA's June 22, 2026 warning letter to Genzyme Ireland shows how undocumented retesting, discarded review artifacts, and canceled deviations now read as quality-unit governance failures. Small pharma quality teams should treat this as a warning that incomplete records are no longer a narrow documentation problem.
- Case
- Genzyme Ireland FDA Warning Letter, June 22, 2026
- DSRV take
- Inspection readiness is not having enough records after the fact — it is decision trails strong enough that FDA does not have to guess what the quality unit knew, reviewed, or allowed.
- 5 min readModerate exposurecited as a tag
What Pharma Quality Teams Need to Know About MCP Governance
Three governance frameworks for MCP-connected AI agents landed in the first week of June 2026. The controls they describe, including audit trails, identity management, sandboxing, and human oversight for high-risk actions, are the same ones 21 CFR Part 11 and EU GMP Annex 11 have required from regulated computer systems for decades. The question is whether your AI agent deployment includes them.
- Case
- Tetrate governance framework, Securing the MCP Supply Chain, published in the first week of June 2026, alongside MCPManager.ai's regulated-industry MCP compliance guide and the Agentic AI Institute's June 2026 enterprise adoption analysis.
- DSRV take
- MCP governance is not a new compliance category; it is Part 11 and Annex 11 applied to a new connection layer, and the validation boundary must cover the agent's tool access before deployment rather than after.
- 6 min readHigh exposurecited as a tag
The Certificate of Analysis Is Not a Test
FDA's March 2026 warning letter to Yangzhou H&R Plastic documented three co-occurring failures that define small OTC manufacturer inspection risk: batch release without identity testing, a quality unit with no structural independence, and zero process validation before commercial distribution.
- Case
- FDA Warning Letter 320-26-54, CMS Case 722736, to Yangzhou H&R Plastic Daily Chemical Co., Ltd., March 18, 2026.
- DSRV take
- The diagnostic question is not whether incoming materials are tested but whether the person signing incoming material releases has any organizational reason to approve them regardless of the data; if the QU Director also controls the budget that pays suppliers, the org chart is already a finding.
- 5 min readHigh exposurecited as a tag
FDA Data Integrity Violations Keep Repeating. This Is Why.
FDA has cited data integrity failures under 21 CFR 211.68(b) for years, and recent warning letters against MMC Healthcare and Landy International follow the same pattern. The violation is never really about the data system.
- Case
- FDA Warning Letter 320-24-62, CMS Case 684644, to MMC Healthcare Ltd., September 24, 2024.
- DSRV take
- The decisive control is whether the quality unit actively monitors what the data environment is producing, because computerized system controls that rest on the assumption that personnel are honest are not a defensible position under 21 CFR 211.68(b).
- 8 min readModerate exposure
What a Recall and a Closeout Letter Say About Quality Systems: Hidden Sildenafil, CAPA Sustainability, and Inspection Readiness
Two FDA actions in May 2026 — a voluntary recall for undeclared sildenafil and a warning-letter closeout with an explicit sustainability caveat — point to the same quality lesson: finding the issue is only the first control.
- Case
- FDA warning letter closeout to Nephron SC, LLC, Case No. 634647, May 8, 2026, closing the October 11, 2022 warning letter with an explicit sustainability caveat; read alongside the FDA voluntary recall notice from JXK Enterprises, Inc., May 23, 2026, for undeclared sildenafil in a consumer chocolate product.
- DSRV take
- A closeout means the firm documented what it did, not that the system is fixed; the decisive controls are scheduled re-verification of corrections, CAPA ownership assigned beyond the original remediation lead, and a weekly recall-feed review that catches category signals before they reach the supply chain.
- 4 min readHigh exposure
AI Wrote the Documents. FDA's Warning Letter Was Addressed to You.
An April 2026 FDA warning letter cited a drug manufacturer for using AI to generate specifications, procedures, and production records without adequate quality-unit review. The compliance logic has not changed: under GMP, human accountability does not transfer to the tool.
- Case
- FDA Warning Letter 320-26-58 (CMS Case 722591) to Purolea Cosmetics Lab, April 2, 2026, the CDER letter citing AI-generated drug product specifications, procedures, and master production and control records issued without adequate quality-unit review.
- DSRV take
- AI changes the tool, not the owner: the decisive control is a defined review checkpoint that names the reviewer, states the criteria applied, and records what was checked in each AI-generated document, because a signature alone proves only that someone touched it.
- 5 min readHigh exposurecited as a tag
What FDA's Data Integrity Remediation Demands Actually Reveal
When FDA's warning letters require independent assessments, patient-risk analyses, and global CAPA strategies, the agency is not just describing consequences. It is disclosing the standards it expected to find before the inspection started.
- Case
- FDA Warning Letter 707857 to Shiva Analyticals Private Limited, July 23, 2025, read alongside warning letters to Global Calcium Pvt. Limited (January 16, 2025), Landy International (June 12, 2024), and A. Nelson and Co. Ltd. (February 12, 2026).
- DSRV take
- FDA's remediation demands, read in reverse, are a published specification of baseline CGMP: enabled and reviewed audit trails, individual role-limited access, formally retained raw data, and a quality unit that surfaces data integrity anomalies before an inspector does.
Pressure-test your evidence before an inspector reads it
Bring the document that has to hold up under 21 CFR 211.22. DSRV maps the evidence, names the gaps, and routes judgment calls to human review. Controlled intake, no public file upload.
Regulatory intelligence and interpretation, not legal advice. Verify against the official FDA or ICH source each article names.