21 CFR 111Current Good Manufacturing Practice in Manufacturing, Packaging, Labeling, or Holding Operations for Dietary Supplements

21 CFR Part 111 is the FDA's current Good Manufacturing Practice (cGMP) regulation for dietary supplements, finalised in 2007 under the Dietary Supplement Health and Education Act (DSHEA) of 1994. It governs every operation that manufactures, packages, labels or holds a dietary supplement intended for sale in the United States — from the smallest contract encapsulator to the largest national brand owner. The rule has fifteen subparts (A through P) covering roughly seventy operational sections.

Part 111 is structurally similar to the drug-side cGMP (21 CFR Part 211) but written for the supplements industry's specific risks: botanical adulteration, species substitution, undeclared actives, weight-variation in encapsulated products, and the ingredient supply chain that runs through global wholesalers. FDA inspections under Part 111 generate hundreds of Form 483 observations per year; the same two or three sections account for most of them.

Section 111.75(a)(1)(i) requires identity testing on every component that is a dietary ingredient before it is used. The test must be appropriate to identify the ingredient — for a botanical, that typically means an orthogonal combination of macroscopic identification, microscopic identification, HPTLC, and increasingly DNA barcoding. For a synthetic active, FTIR or NMR against a reference standard is usually enough. For an excipient, §111.75(a)(2) allows the manufacturer to rely on the supplier's CoA only if the supplier has been qualified under §111.75(h) and the reliance is documented.

The 'every lot of every component' phrasing is read strictly. Each lot — not each shipment, not each supplier — must be sampled and identity-tested. The sampling plan must be statistically justified (§111.75(h)). Identity testing of botanicals against pharmacopoeial monographs (USP, EP, AHP) is the safest default. Failed identity tests must be investigated under §111.140 and the lot rejected or further investigated; CoA-only release of a failed lot is a Warning-Letter event.

The Master Manufacturing Record (MMR) is the controlled document that drives every batch. §111.210 specifies what it must contain: the name of the dietary supplement, the master formula (with each ingredient by name, weight or measure, and identity), an accurate statement of the weight or measure of each finished batch, a description of packaging and a copy or representation of each label used, complete manufacturing instructions, specifications, procedures for sampling and testing, and a description of the controls at each point. The MMR must be approved and signed by a qualified person (§111.205(b)).

The Batch Production Record (BPR) is the per-batch evidence that the MMR was followed. §111.260 requires the BPR to capture: the batch number, the identity of equipment and processing lines used, the dates and times of significant steps, the identity of each component used (with weights or measures), in-process testing performed, sampling, deviations, and the signature of the quality-unit person who approved the disposition. The BPR must be an accurate reproduction of the MMR — you cannot run from a working copy that deviates from the approved master.

§111.103 requires that quality-control operations be conducted by personnel who are qualified to do so and who are not the same persons who perform the production operations being reviewed. The §111.105 review and release step is non-delegable to production. In practice this means: an operator who weighs and charges cannot also be the person who signs the in-process test result, and a production supervisor cannot also be the QA reviewer who releases the batch. Sites that consolidate QA and production roles to save headcount routinely receive 483s.

§111.103 also gives the quality unit authority to reject — not just recommend — components, in-process materials, finished products, packaging, and labels that do not meet specifications. That authority must be documented in the quality manual and reflected in the org chart that the FDA investigator will ask for in the first hour of an inspection.

Subpart O requires every complaint received by the manufacturer (or any person on the manufacturer's behalf) about a dietary supplement to be reviewed. Complaints alleging a potential cGMP violation, including any adverse event, must be investigated. §111.560 requires the qualified person to determine whether the complaint involves a possible failure of a dietary supplement to meet a specification or another requirement of Part 111. The investigation, the conclusion, and the corrective-action decision must be documented.

The complaint file feeds the §111.140 corrective-action process and the adverse-event reporting obligation under DSHEA §761 (serious adverse events reportable to FDA within 15 days). The MedWatch 3500A form is the reporting vehicle. Investigators routinely cross-reference complaint files against MedWatch submissions to find unreported serious events.

1. §111.75 — Components released on supplier CoA without an independent identity test on each lot. The single most-cited Part 111 observation, year after year.
2. §111.205 / §111.210 — MMR missing required content (sampling and testing procedures, in-process specs, label-control instructions).
3. §111.255 / §111.260 — BPR not an accurate reproduction of the MMR; missing equipment IDs, missing in-process results, signatures applied retrospectively.
4. §111.103 — Quality unit lacks independence from production, or signs release while reporting to the production head.
5. §111.70 — Specifications not established for identity, purity, strength, composition and limits on contaminants.
6. §111.140 — Deviations and OOS results not investigated, or investigations not extended to other batches potentially affected.
7. §111.27 / §111.35 — Equipment not calibrated to a written procedure, or calibration certificates not on file.
8. §111.180 — Rejected materials not segregated and disposed of in a way that prevents reintroduction.

• Incoming-lot workflow enforces identity test before a lot can be released to the warehouse; kiosk dispense refuses to weigh from an unreleased lot.
• MMR is approved with two e-signatures (preparer + independent reviewer per §111.205(b)) and version-controlled — edits create v+1 and require re-approval.
• On WO release, the released MMR is snapshotted into the BPR so the §111.255 'accurate reproduction' requirement is met by construction.
• Kiosk steps capture operator, equipment, scale, calibration status, time, weight (gross/tare/net) and lot — the §111.260 BPR content list is written by the act of working.
• Quality-unit release is a separate role with separate e-signature credentials per §111.103; the same human cannot sign as both preparer and QU reviewer.
• Complaint files are linked to the originating lot and to any cross-scope batches; serious-AE complaints surface a MedWatch reminder.