Manufacturing Transparency: How to Access FDA Inspection Records
Aug, 13 2026
You think you can just walk into the U.S. Food and Drug Administration (FDA) office and pull up the inspection file for any drug factory? Think again. The reality of manufacturing transparency is a maze of legal statutes, internal policies, and strategic redactions. For quality professionals, supply chain managers, or investors trying to vet a partner, understanding what is public, what is private, and how to get access to FDA inspection records is critical.
The system isn't designed for total openness; it’s designed for enforcement and safety. But there are specific windows where you can see exactly how a facility performed. This guide breaks down the rules, the loopholes, and the new digital shifts changing the landscape in 2026.
What You Can Actually See: The Public Record
When people ask about accessing FDA records, they usually want to know if a factory is clean, compliant, and safe. The FDA makes some data available through its online databases, but it’s not a live feed of every inspector’s notebook.
The primary tool for the public is the Establishment Registration and Listing System (ERLS). Here, you can search for facilities by name or location. If a facility has been inspected, you might find a summary of the inspection date and the outcome. However, the detailed narrative-the specific observations made by investigators-is often restricted unless it leads to formal enforcement action.
If a facility fails an inspection significantly, the FDA issues a Form FDA 483, known as the "Notice of Inspectional Observations." These forms are public documents. They list the specific violations found during the visit, such as poor sanitation, inadequate record-keeping, or equipment failures. You can search for these on the FDA’s website. A recent search might show that a specific plant had issues with cross-contamination controls. This is your best window into a company’s immediate quality problems.
However, do not confuse a Form 483 with a final verdict. It is a preliminary notice. Companies have exactly 15 business days to respond. Their response letter is also public, and this is where you see their defense. Do they admit fault? Do they claim the inspector was wrong? Reading both the 483 and the response gives you a much clearer picture than either document alone.
The Hidden Layer: Internal Audits vs. Regulatory Inspections
Here is where it gets tricky. Not all inspections are created equal, and not all records are accessible. The FDA operates under the Federal Food, Drug, and Cosmetic Act (FD&C Act), specifically Section 704(a)(1). This grants them broad power to inspect manufacturing facilities and review Current Good Manufacturing Practice (CGMP) records.
But there is a major exception protected by policy. According to Compliance Policy Guide (CPG) Sec. 130.300, issued in 1996, the FDA generally does not review or copy internal quality assurance audit reports. Why? To encourage companies to be honest with themselves. If a company knows the government will punish them for finding their own mistakes, they won’t look for those mistakes. Dr. Jane Axelrad, former FDA Deputy Center Director for Policy, explained that this creates a "safe space" for candid internal reviews.
This means that while the FDA can see production logs, validation protocols, and deviation investigations, they often cannot see the raw internal audit trails unless the inspection is "for-cause." Routine surveillance inspections, which make up about 75% of pharmaceutical inspections, follow this rule. But if the FDA shows up because of a consumer complaint or a recall-a "for-cause" inspection-they gain full access to everything, including those protected internal audits.
Record Retention Rules: What Must Be Kept?
If you are a manufacturer, knowing what to keep is half the battle. The FDA requires strict adherence to record retention schedules. Under 21 CFR 211.180, pharmaceutical manufacturers must retain CGMP records for at least one year after a drug product's expiration date. For medical devices, the rule under 21 CFR 820.180 is even stricter: maintain quality system records for the device lifespan plus two years.
These records include:
- Production batch records
- Quality control test results
- Deviation investigations
- CAPA (Corrective and Preventive Action) documentation
In 2024, 22% of warning letters issued by the FDA cited failures in maintaining "contemporaneous records"-meaning real-time documentation. If you write things down later from memory, you are likely violating the law. The FDA wants to see the ink hit the paper (or the digital timestamp occur) at the moment of the activity.
New Trends: Remote Assessments and Unannounced Visits
The landscape shifted dramatically in mid-2025. The FDA finalized guidance on Remote Regulatory Assessments (RRAs) in July 2025. These are virtual evaluations that may substitute for physical inspections in certain circumstances. RRAs involve requests for records, read-only database access, or remote interactive evaluations. They do not generate Form 483s, which makes them less visible to the public but still highly impactful for compliance.
At the same time, foreign facilities face tighter scrutiny. In May 2025, the FDA announced it would expand unannounced inspections for foreign facilities from 12% to a targeted 35% by the end of 2025. Domestic facilities still mostly receive scheduled visits (92% frequency), but the global supply chain is no longer safe from surprise audits. This move addresses concerns raised in a 2024 GAO Report about foreign facility compliance gaps.
| Inspection Type | Frequency (2024-2025) | Access to Internal Audits | Public Output |
|---|---|---|---|
| Routine Surveillance | ~75% | Limited (Protected by CPG 130.300) | Form 483 (if violations found) |
| For-Cause | ~18% | Full Access | Form 483, Warning Letters |
| Unannounced (Foreign) | Targeted 35% by 2025 | Full Access | Form 483, Import Alerts |
| Remote Regulatory Assessment (RRA) | 8% (H1 2025) | Digital Record Review | No Form 483 |
How to Prepare for an Inspection
If you manage a facility, preparation is not optional. Industry surveys indicate that 78% of pharmaceutical manufacturers now maintain dedicated inspection readiness teams. The average cost for this preparation is $385,000 annually per facility, according to a 2025 benchmarking study.
Your team needs to distinguish clearly between protected quality assurance audit reports and mandatory quality control investigation records. This distinction requires about 200-300 hours of specialized documentation work. New quality personnel typically need 6-9 months of training to understand these nuances. Certification through organizations like the Regulatory Affairs Professionals Society (RAPS) has been shown to increase preparedness by 37%.
When responding to a Form 483, speed and accuracy matter. Companies using root cause analysis methodologies achieve closure rates of 89% within six months, compared to only 62% for those using simplified approaches. Don’t just fix the symptom; prove you fixed the system.
Future Outlook: More Transparency?
There is political pressure to open more books. The 2024 bipartisan Pharmaceutical Supply Chain Transparency Act (S. 2884) proposed mandatory public disclosure of certain inspection findings. While opposed by industry groups like PhRMA, who argue it undermines internal audit candor, the trend is toward greater visibility. The FDA’s 2025-2027 Strategic Plan targets a 25% reduction in inspection cycle times through enhanced digital record systems, making data easier to access and analyze.
For now, the balance remains: enough transparency to ensure safety, enough privacy to encourage self-correction. Understanding this balance is key to navigating manufacturing quality in 2026.
Can the public see FDA inspection reports for drug manufacturers?
The public can see summaries of inspections and Form FDA 483s (notices of observations) if violations were found. Detailed internal audit reports are generally protected from public view and even from routine FDA review to encourage honest self-assessment by manufacturers.
What is the difference between a routine inspection and a for-cause inspection?
Routine inspections are scheduled and follow standard protocols, often limiting access to internal quality audits. For-cause inspections are triggered by complaints, recalls, or adverse events, granting the FDA full access to all records, including protected internal audits.
How long must manufacturers keep their records?
Pharmaceutical manufacturers must keep CGMP records for at least one year after a drug's expiration date. Medical device manufacturers must keep quality system records for the device lifespan plus two years.
What is a Remote Regulatory Assessment (RRA)?
An RRA is a virtual evaluation introduced by the FDA in 2025 that may substitute for physical inspections. It involves reviewing digital records and interactive evaluations without generating a public Form 483.
Why doesn't the FDA always review internal quality audits?
Under CPG Sec. 130.300, the FDA avoids reviewing internal QA audits during routine inspections to create a "safe space" for companies to conduct candid internal reviews without fear of immediate regulatory repercussions for finding their own errors.