FDA Enforcement Part 1: What Michigan Medicine Built After an FDA Warning Letter

TL;DR

FDA’s 2017 Warning Letter to the University of Michigan identified real compounding problems. It also called out corrections the medical center said it had made but had not supported with records. Retraining without training records. Repairs without repair documentation.

They later did something rare: published what was built. This gives us a chance to look beyond the inspection findings and learn what it takes to make better compliance practices last.

The useful lesson: compliance has an operating layer and an evidence layer, and they have to move together.

Pick one compliance activity completed in your pharmacy. Can you show what was done, who owned it, and how you know the work is still being done?

Why I'm Starting the Series Here

I analyzed 680 FDA compounding enforcement documents in order to understand what actually goes wrong with pharmacy inspections.

Michigan Medicine is the best place to start because it shows both layers of the problem in one letter, and because they did something rare afterward: published, in detail, what was built in response.

Start With What FDA Actually Said

FDA inspected the University of Michigan Medical Center's sterile-compounding operation from June 6 through June 29, 2016 and issued a Form 483 at the end of the inspection.

In the Warning Letter issued September 28, 2017, the FDA investigators noted that drug products intended or expected to be sterile were prepared, packed, or held under insanitary conditions.

These are operating and facility findings. Real practice problems, not missing paperwork.

Then the letter turns to the medical center's written response, and this is the part I want you to see.

FDA identified several gaps:

• The facility said it retrained staff, but did not provide the updated procedure or training records.
• The facility described an improved material-transfer process, but the submitted procedure did not fully explain how other surfaces would be sanitized.
• The facility reported repairs, but did not provide supporting documentation.
• The response did not address 2 observations FDA identified in the letter.

The team may well have done this work, but from the reviewer's side of the table, it didn't exist.

If it isn't documented, it didn't happen.

What a Form 483 and Warning Letter Actually Establish

FDA explains that a Form 483 records conditions that investigators judge may violate the Federal Food, Drug, and Cosmetic Act or related requirements. It is not a final determination.

FDA considers the inspection report, the evidence, and the organization's response when deciding what comes next.

A Warning Letter communicates violations FDA considers significant and gives the recipient an opportunity to respond and correct them. It is advisory, not final action.

FDA weighs the observed conditions, the applicable law, and the response together. There is no single-factor formula here, and I won't pretend the public record shows one.

What Michigan Medicine Reported Building

Michigan Medicine later published a set of articles in the _American Journal of Health-System Pharmacy_ describing its sterile-compounding work. The authors described the system they built and its impact on how the organization assigned responsibility, trained people, maintained facilities, audited work, and kept records.

A Dedicated Compliance Team

In _A compounding compliance team at an academic medical center_, Chaffee and colleagues describe creating a specialized Compounding Compliance Team after visits from several regulatory bodies produced complex findings.

The team's work included:

• SOP development
• Training and credentialing
• Practice auditing
• Environmental monitoring
• Equipment certification
• Recordkeeping
• Communication with operational and leadership partners

The design choice that matters is explicit ownership. Compliance work no longer depended on operational leaders finding time for it.

Internal Expertise and Oversight

In _Impact of enhanced compounding vigilance: Three perspectives_, Michigan Medicine leaders wrote that they had considered the department compliant before the inspection. The inspection and external review showed them that compounding required more rigor and sustained attention than they had understood.

This is an important lesson: A capable, well-resourced team believed it was compliant.

The stronger lesson isn't compliant-versus-noncompliant. It's that a quality program has to keep learning what standards require and keep showing that the resulting controls stay in use.

Facilities as an Operating Program

_Compounding facilities assessment and planning_ describes their work on the physical facility. Their experience with design and construction as a continuing coordination problem.

A certification document or a finished construction project does not end the work. The organization needs to document what was assessed, what changed, which records support the result, and what gets monitored next.

Training That Produces Records

In _Development of a sterile compounding training and competency program_, Penzien and colleagues describe all the work needed to show a properly trained staff.

• identifying compounding staff
• developing and adapting policies
• establishing baseline and continuing training
• conducting observational competency assessments
• maintaining records

Training stopped just requiring attendance. It became a managed program with a defined population, requirements, assessments, monitoring, and documentation.

The Five-Question Record Test

Here is the test I use when I look at any compliance record. It is Pomio's heuristic, not an FDA requirement.

Pick one recurring task, training event, facility check, or corrective action. Ask:

1. What was expected? Name the task, procedure, requirement, or corrective action.
2. Who owned it? Identify the person or responsible group.
3. When did it occur? Show the due date, completion date, and current status.
4. What supports completion? Connect the form, result, procedure, record, or other evidence.
5. Who reviewed it, and what happened next? Show approval, correction, monitoring, or an effectiveness check when applicable.

Look back at the four response gaps FDA identified. Each one fails this test at question 4 or 5.

Each piece of work has its own requirements and thus produces different records, a complexity that without proper management does not scale.

What Transfers to a Smaller Pharmacy

An independent nonsterile or hazardous-drug pharmacy is not a large academic sterile compounding program, but the requirements are the same and have the same operating questions:

• Is responsibility explicit?
• Can the team see what is due or incomplete?
• Does completed work produce the required evidence?
• Is review visible?
• Can the pharmacy retrieve the record later?
• Does corrective work become a sustained control?

A small pharmacy will probably never build a dedicated compliance department, but it still needs a system that doesn't live on one person’s to-do list.

The Useful Lesson

Michigan Medicine's story should not be reduced to "they did the work but couldn't prove it."

The useful lesson is narrower and stronger: the work has to change, and the organization has to be able to show what changed, who owns it, and how the change continues. That's a test any compounding operation can run on itself, this week, with one record.

Next in the Series

Part 2 looks at which failure themes recur across the 439 substantive documents in the enforcement set.

Sources and Scope

• University of Michigan Warning Letter, September 28, 2017
• FDA Form 483 Frequently Asked Questions
• FDA: About Warning and Close-Out Letters
• Chaffee et al., _A compounding compliance team at an academic medical center_
• Lucarotti et al., _Impact of enhanced compounding vigilance: Three perspectives_
• Clark et al., _Compounding facilities assessment and planning_
• Penzien et al., _Development of a sterile compounding training and competency program_

This article discusses a federal inspection of a health-system sterile-compounding operation. It does not establish requirements for every 503A pharmacy, 503B outsourcing facility, or state-board inspection. Confirm requirements with the applicable regulator and qualified advisors. This article is educational and is not legal advice.