FDA Enforcement in 2026: Medical Devices, Supplements, and Imports Are in the Crosshairs

Three industries are drawing disproportionate FDA attention in 2026: medical devices, dietary supplements, and imported products from Southeast Asia and Latin America. If you operate in any of them, the agency’s current enforcement posture is not the environment where you want to discover your quality system has gaps.

FDA’s Office of Regulatory Affairs (ORA) published its inspection priorities for FY2025 and carried them into 2026 with a clear message: domestic and foreign facilities that haven’t seen an investigator in three or more years are now at the top of the scheduling queue. The pandemic-era inspection backlog created a false sense of security for a lot of manufacturers — a sense the agency is actively correcting.

Medical Device Manufacturers Are Facing a New Compliance Baseline

The medical device sector has been navigating a structural shift since FDA finalized the Quality Management System Regulation (QMSR) under 21 CFR Part 820, aligning it more closely with ISO 13485:2016. The compliance deadline passed in February 2026, and ORA investigators are now walking into device facilities expecting documentation that reflects the updated standard — not the old Quality System Regulation framework that’s been sitting on the wall for 20 years.

Early inspection data from the first two quarters of FY2026 shows that software-related observations are among the most common Form 483 findings in the device space. Design controls, design history files, and design verification records — particularly for software as a medical device (SaMD) — are consistently flagged. This isn’t entirely surprising. The explosion of AI-driven diagnostics and connected health devices over the past five years outpaced quality system documentation at many companies, especially smaller manufacturers that moved fast at launch and never fully caught up on the paperwork side.

What makes this particularly costly: medical device Class I recalls — those where FDA determines there’s a reasonable probability of serious health consequences or death — increased year-over-year through 2024 and 2025. Industry estimates place the average fully-loaded cost of a medical device recall at between $600,000 and $2 million, depending on the breadth of distribution and the complexity of the field correction.

Combination products add another layer of exposure. Devices incorporating a drug component — prefilled syringes, drug-eluting stents, certain wound care products — fall under dual regulatory oversight. FDA’s Office of Combination Products (OCP) has been increasingly active in inspection coordination, and manufacturers who maintain separate quality systems for the device and drug components tend to get the most uncomfortable surprises during these audits.

Dietary Supplements and Food: High Volume, Consistent Pressure

No regulated category generates more FDA recall volume than dietary supplements and food products. This has been true for years, but the pattern in 2025 and into 2026 has some specific characteristics worth calling out.

Undeclared allergens remain the leading cause of food and supplement recalls, accounting for roughly 45% of all food-related recalls in recent FDA data. These almost never result from intentional mislabeling. They’re almost always the result of inadequate supplier verification programs or shared-line manufacturing controls that weren’t properly validated. Under FSMA’s Preventive Controls for Human Food rule (21 CFR Part 117), manufacturers are required to have documented allergen preventive controls — and FDA investigators are specifically checking whether those controls are tested and verified, not just written into a binder.

For dietary supplements, FDA’s 21 CFR Part 111 cGMP framework has been in effect since 2010, but small and mid-size manufacturers still account for a disproportionate share of Warning Letters. The most common deficiencies? Identity testing of incoming raw materials, batch record completeness, and complaint handling. Investigators don’t expect perfection — they expect documented evidence that your system catches problems and corrects them. When the records don’t demonstrate that, the Warning Letter follows.

What’s shifted recently is that FDA has been cross-referencing import records, MedWatch adverse event submissions, and social media signals to prioritize inspection scheduling. A cluster of consumer complaints about a specific product appearing in MedWatch can accelerate your inspection timeline regardless of where you fall in ORA’s standard rotation. That’s a meaningful change in how enforcement targeting actually works.

Import Alerts: The Enforcement Mechanism That Stops Product at the Port

If Warning Letters are FDA’s public enforcement signal, import alerts are its quiet market-exclusion tool — and more manufacturers are running into them than ever.

FDA currently maintains more than 1,800 active import alerts covering thousands of foreign facilities. When a facility is placed under an import alert, every shipment from that location is subject to detention without physical examination (DWPE). The burden shifts entirely to the importer: you must hire a credentialed third party to conduct a facility audit, submit the results to FDA, and then wait for the agency to evaluate whether the alert should be lifted. In practice, that process takes 6 to 24 months — and there’s no guaranteed outcome.

The geographic distribution of import alerts tells a useful story about where the risk concentrates. Indian pharmaceutical manufacturers have faced sustained scrutiny since a wave of data integrity findings in the mid-2010s. That scrutiny never really dissipated. In 2024 and 2025, additional Warning Letters cited data manipulation at active pharmaceutical ingredient (API) facilities supplying US-marketed generic drugs. Vietnamese food manufacturers have also received increased attention as US import volumes from that region have grown substantially.

For US companies that source raw materials or finished goods internationally, the practical implication is direct: your supplier’s regulatory history is part of your compliance risk profile. A supplier qualification program that doesn’t include checking FDA’s import alert database before onboarding a new facility is incomplete. A supplier that clears your internal quality audit but sits under an active FDA import alert is a supply chain disruption waiting to happen.

What Proactive Regulatory Compliance Consulting Actually Looks Like

Many companies approach regulatory compliance consulting reactively — after a 483, after a Warning Letter, after a recall announcement. That’s the most expensive version of the model.

The approach that actually shows up in better outcomes is pre-inspection readiness. A structured gap assessment against the applicable 21 CFR parts — conducted 6 to 12 months before an anticipated inspection — gives manufacturers time to remediate findings before an FDA investigator ever arrives. That window matters because 483 observations that go unaddressed frequently escalate to Warning Letters, and Warning Letters with inadequate responses can trigger consent decrees.

Consent decrees are operationally brutal. They typically require independent third-party oversight of all manufacturing operations, can restrict or halt product distribution, and have cost companies hundreds of millions of dollars in remediation and lost revenue over multi-year periods. Johnson & Johnson’s McNeil Consumer Healthcare consent decree, which stretched from 2011 through the mid-2010s, is the textbook case — but smaller manufacturers have faced proportionally similar burdens, sometimes threatening the viability of the business entirely.

What effective regulatory compliance consulting addresses in practice:

• SOP and record review against current regulatory expectations — not against what the SOPs say internally, but against what FDA investigators actually document when they find deficiencies
• Mock FDA inspections conducted by professionals with direct ORA or CDER/CDRH experience, using the same approach and documentation requests investigators use in the field
• CAPA system assessment — the Corrective and Preventive Action system is where FDA finds the deepest systemic problems, because a weak CAPA system means the same quality issues repeat across product lines and time periods
• Supplier audit support and import alert screening — particularly for companies with international supply chains where your compliance posture is partly determined by your suppliers’ regulatory standing
• Post-483 response strategy — if you’ve already received a Form 483, the written response you submit within 15 business days is your best opportunity to demonstrate good faith and prevent escalation to formal action

The companies getting hit hardest right now aren’t necessarily bad actors. They’re organizations that built compliance programs around the expectation of light-touch oversight and never updated them when the enforcement environment changed. That’s a correctable problem — but it’s much easier to correct before the investigator shows up than after.

Don’t Wait for the Investigator to Find Your Gaps

FDA’s inspection backlog is clearing. The agency is better resourced, more data-driven in its targeting, and more willing to escalate to formal enforcement when it finds systemic issues than it was during the 2020–2022 period. For medical device manufacturers, supplement brands, pharmaceutical companies, and food producers with meaningful US market exposure, 2026 is not the year to defer your quality system review.

Run a gap assessment. Screen your suppliers against FDA’s import alert database. Stress-test your CAPA system with a mock inspection. If you haven’t reviewed your quality documentation against the updated 21 CFR Part 820 QMSR requirements, that’s where to start today.

The cost of finding your own deficiencies before FDA does is a fraction of what it costs to manage a Warning Letter response, execute a recall, or operate under a consent decree.

Written by Sam Sammane, Founder & CEO, Aurora TIC | Founder, Qalitex Group. Learn more about our team

Talk to our compliance consultants Contact us

Related from our network

• ISO 17025-accredited lab testing to support FDA audit readiness — Qalitex Laboratories provides documented analytical testing results that support 483 responses, supplier qualification programs, and pre-inspection evidence packages.
• GMP compliance resources for manufacturers in the Canadian market — Androxa covers Health Canada and Canadian GMP requirements for manufacturers navigating both US FDA and cross-border regulatory obligations.