Summary. Almost every question in life sciences regulation reduces to two prior questions: what is this product, and what does the company say it does. Classification determines the pathway, the manufacturing standard, the reporting obligations, and whether a state tort claim is preempted — and classification turns substantially on the company's own claims. This toolkit runs the product lifecycle: intended use and classification, pathway selection and the clinical work each requires, quality systems, labeling and promotion, postmarket reporting and recalls, the enforcement ladder, and the preemption doctrines.

What this toolkit is for, and who should use it

A company builds something that touches health, and discovers that whether it is a wellness product, a clinical decision support tool, or a Class III medical device depends on the sentence in its marketing copy. The regulatory pathway determines the capital plan, the timeline, and the exit, and a founder who describes a Class III product as "we'll do a 510(k)" has created a diligence problem that surfaces at the worst moment.

This toolkit is for a general counsel, a regulatory lead, and transactional counsel conducting diligence on a life sciences company.

Roadmap at a glance

  1. Intended use — the organizing principle.
  2. Classification.
  3. Drug and biologic pathways.
  4. Device pathways.
  5. Diagnostics and software.
  6. Clinical research.
  7. Manufacturing and quality.
  8. Labeling.
  9. Promotion and off-label communications.
  10. Postmarket obligations and recalls.
  11. Enforcement.
  12. Preemption, litigation, and diligence.

Stage 1 — Intended use

  • 21 C.F.R. § 201.128 and § 801.4 define intended use by the objective intent of those responsible for the labeling, shown by labeling claims, advertising, oral or written statements, and the circumstances of distribution — including knowledge that the product is being used for an unapproved purpose.
  • Every public statement is evidence: website copy, sales decks, conference posters, social media, and investor materials have all appeared in warning letters.
  • A product can become a drug or device by a claim alone, with no change to the product.
  • Build a claim-control process covering marketing, sales, medical affairs, and executive communications — not merely labeling — and enforce it before any clearance or approval exists.

Resources

Stage 2 — Classification

  • Drug — intended for diagnosis, cure, mitigation, treatment, or prevention of disease, or to affect structure or function, other than food.
  • Device — the same purposes, but not achieving its primary intended purposes through chemical action and not dependent on being metabolized. That clause is the entire distinction.
  • Biological product under the Public Health Service Act, regulated in parallel with the FDCA.
  • Combination product, assigned to a lead center by primary mode of action, governed by 21 C.F.R. Part 4 with a streamlined but genuinely dual quality system.
  • Dietary supplement under DSHEA, with structure-function claims permitted and disease claims prohibited.
  • Cosmetic, distinguished from a drug by claims.
  • Get the classification opinion in writing early, and share it with the board — because it determines the capital plan.

Stage 3 — Drug and biologic pathways

  • NDA under § 505(b)(1) — the sponsor's own preclinical and clinical data establishing safety and effectiveness, preceded by an IND and Phase 1 through 3 studies.
  • § 505(b)(2) — a hybrid relying in part on published literature or the agency's findings for a previously approved drug, plus bridging data. The most underused pathway in the statute and frequently the fastest route for a reformulation.
  • ANDA under § 505(j) — sameness and bioequivalence, with no clinical efficacy trials.
  • Hatch-Waxman: Orange Book patent listing, certifications, the Paragraph IV act of infringement and the 30-month stay, first-filer 180-day exclusivity, and the non-patent exclusivities layered on top.
  • BLA under PHS Act § 351(a); biosimilars under § 351(k) with the interchangeability option, the BPCIA patent exchange, and twelve years of reference product exclusivity.
  • Expedited programs: Fast Track, Breakthrough Therapy, Priority Review, and Accelerated Approval with required confirmatory trials and strengthened withdrawal procedures.

Stage 4 — Device pathways

  • Classification under 21 U.S.C. § 360c drives everything: Class I with general controls and mostly exempt from premarket notification; Class II with special controls and a 510(k); and Class III requiring premarket approval.
  • 510(k) establishes substantial equivalence to a predicate — same intended use, and either the same technology or different technology shown to be as safe and effective. It is a comparison, not an independent showing of safety and effectiveness, which matters enormously for preemption.
  • PMA requires an independent demonstration of reasonable assurance of safety and effectiveness, generally with clinical data under an IDE, a facility inspection, and frequently an advisory panel — and any change affecting safety or effectiveness requires a supplement.
  • De Novo for a novel low-to-moderate risk device with no predicate, which then becomes a predicate for others.
  • Humanitarian Device Exemption for small populations, with probable benefit in place of effectiveness and IRB oversight of use.
  • Request a pre-submission meeting. The Q-Submission program is free, the feedback is substantive, and the minutes become the record.

Stage 5 — Diagnostics and software

  • Laboratory developed tests — designed, manufactured, and used within a single laboratory. FDA's rule extending device regulation to them was vacated in 2025, returning oversight to CLIA and enforcement discretion, with the legislative question unresolved. Expect continued attention to high-risk tests, direct-to-consumer distribution, and claims exceeding validation.
  • Software as a medical device is regulated as a device where it meets the definition. The 21st Century Cures Act excludes administrative software, general wellness software, qualifying electronic health records, data storage and display without interpretation, and clinical decision support software that displays the basis for its recommendation so the professional does not rely primarily on it. Software that outputs a score without explaining its basis is a device.
  • Artificial intelligence: most authorized AI-enabled devices have come through 510(k) or De Novo, and the central design question for an adaptive product is the predetermined change control plan, which must be developed with the submission rather than added later.
  • Cybersecurity: sponsors of cyber devices must submit a plan to monitor and address vulnerabilities, design and maintain the device securely, and provide a software bill of materials.

Stage 6 — Clinical research

  • IND under 21 C.F.R. Part 312, effective thirty days after submission absent a clinical hold; IDE under Part 812 for significant-risk device studies, with the sponsor's own initial risk determination reviewable.
  • IRB review under Part 56 of the protocol, the consent form, and recruitment materials, with continuing review and prompt reporting of unanticipated problems.
  • Informed consent under Part 50 with the required elements and narrow exceptions.
  • Sponsor and investigator duties: qualified investigators, monitoring, control of the investigational article, protocol adherence, and financial disclosure under Part 54 — undisclosed arrangements have led the agency to refuse to rely on entire studies.
  • Data integrity. Bioresearch Monitoring inspections reach sites and sponsors; findings of protocol deviations, missing source documents, or fabricated data can exclude study data, disqualify an investigator, and support criminal referral.
  • Registration and results reporting on ClinicalTrials.gov, with civil penalties for noncompliance.
  • Expanded access and Right to Try — decide the policy in advance, in writing, rather than case by case under public pressure.

Stage 7 — Manufacturing and quality

  • Drugs and biologics: current good manufacturing practice at 21 C.F.R. Parts 210 and 211. A drug not so manufactured is adulterated regardless of whether any unit is defective.
  • Devices: the quality system regulation at 21 C.F.R. Part 820, amended to incorporate ISO 13485 as the Quality Management System Regulation. Companies with certification will find the transition modest; those that built to Part 820 without reference to the standard need a gap assessment.
  • Design controls apply during development. A company reconstructing a design history file for a submission is doing the most expensive work in the industry.
  • Recurring inspection findings: inadequate CAPA, design control failures, complaint handling that never escalates, paper-only supplier controls, data integrity problems in electronic records, and process validation performed once and never revisited.
  • Supply chain: the Drug Supply Chain Security Act's serialization, tracing, and verification obligations; UDI and GUDID for devices; and foreign facility registration with a U.S. agent, where refusal to permit inspection renders products adulterated by statute.

Stage 8 — Labeling

  • Adulteration under 21 U.S.C. § 351 addresses the product's condition; misbranding under § 352 addresses its labeling — false or misleading in any particular, missing required information, lacking adequate directions for use, or failing to warn.
  • "Labeling" is broader than the label, reaching brochures, detail aids, websites, and materials that supplement or explain the product even when physically separate.
  • Content requirements by product type: prescribing information in the required format, device labeling and instructions for use, UDI, and the specific warnings a class requires.
  • Changes: drugs may add a warning through a changes being effected supplement before approval; devices generally require a supplement or a new 510(k) depending on the change.
  • Review labeling against the approved or cleared intended use every time marketing proposes a revision.

Stage 9 — Promotion and off-label communications

  • Prescription drug advertising is regulated by FDA under 21 C.F.R. Part 202, requiring fair balance, a brief summary or adequate provision, and no false or misleading presentation. Device and OTC advertising is primarily the FTC's domain.
  • Off-label promotion. The traditional theory — that promoting an unapproved use creates a new intended use and renders the product misbranded — has been narrowed by the First Amendment. United States v. Caronia, 703 F.3d 149 (2d Cir. 2012), and Amarin Pharma, Inc. v. FDA, 119 F. Supp. 3d 196 (S.D.N.Y. 2015), protect truthful, non-misleading communications.
  • What is permitted under guidance: distribution of scientific and medical publications subject to conditions; responses to unsolicited requests tailored to the request and delivered by medical affairs; and health care economic information to payors and formulary committees.
  • The compliance architecture: a firewall between commercial and medical affairs; a documented unsolicited-request process; a promotional review committee with medical, regulatory, and legal participation; substantiation on file for every claim; and training emphasizing that the risk is the unsupported claim, not the word "off-label."
  • Parallel exposure: off-label promotion supports False Claims Act liability where it causes federally reimbursed claims, and Anti-Kickback Statute theories where remuneration is involved. Those cases are frequently larger than the FDA exposure.

Resources

Stage 10 — Postmarket obligations and recalls

  • Adverse event reporting: drugs under 21 C.F.R. § 314.80 with 15-day expedited reports; devices under Medical Device Reporting, 21 C.F.R. Part 803, within 30 days of a death, serious injury, or qualifying malfunction, and 5 days where remedial action is required.
  • Registration and listing, annually.
  • Postmarket studies and surveillance as conditions of approval or by order.
  • Corrections and removals reported under Part 806.
  • Recalls under 21 C.F.R. Part 7: ordinarily voluntary, classified by FDA as Class I, II, or III by the probability of adverse health consequences. FDA has mandatory recall authority for devices and certain other products.
  • The health hazard evaluation documenting the recall decision is the first document produced in the litigation that follows — write it accordingly, with the reasoning and the data.
  • Complaint handling is the leading indicator for both recalls and litigation, and inadequate complaint handling is the most common inspection finding.

Resources

Stage 11 — Enforcement

The escalation ladder, in order: inspection ending in a Form 483 (respond within fifteen business days with specific corrections, timelines, and evidence); an untitled letter; a warning letter, publicly posted, which customers, investors, partners, and plaintiffs' counsel all read; import alert and detention without physical examination for foreign firms; seizure; injunction, usually resolved by a consent decree with third-party expert certification, production suspension, and liquidated damages, persisting for years; civil money penalties; and criminal prosecution.

  • The FDCA imposes strict liability misdemeanor liability for introducing an adulterated or misbranded product into interstate commerce, and under the responsible corporate officer doctrine an executive with authority to prevent or correct the violation may be convicted without personal participation.
  • Debarment under § 306 bars individuals and firms from participating in applications.
  • Exclusion from federal health care programs follows certain convictions and is career-ending in this industry.
  • Prepare for inspection before it happens: a designated host, a document room process, a scribe, daily debriefs, and a rule that only designated people speak.

Stage 12 — Preemption, litigation, and diligence

Master resource index

Articles

Guides

Checklists

Related toolkits

External and primary sources

  • Federal Food, Drug, and Cosmetic Act: 21 U.S.C. § 351 (adulteration); § 352 (misbranding); § 355 (new drugs); § 360c (device classification); § 360e (premarket approval)
  • Public Health Service Act 42 U.S.C. § 262 (biologics and biosimilars)
  • 21 C.F.R. Part 4 (combination products); Part 7 (recalls); Part 11 (electronic records); Part 50 and Part 56 (human subjects); Part 211 (drug cGMP); Part 312 (INDs); Part 803 (MDR); Part 812 (IDEs); Part 820 (quality system)

This toolkit is educational and not legal advice. FDA regulations, guidance, and rulemakings change frequently and several matters discussed here are subject to ongoing litigation. Consult qualified FDA regulatory counsel before making a classification determination, submitting an application, or responding to an inspection or warning letter.