Compliance 16 min read

FDA Consent Decree: Triggers, Requirements, and Exit

J

September 30, 2026

A consent decree is the point where an FDA problem stops being a regulatory conversation and becomes a court order. Most companies that end up here do not get there through one bad inspection. They get there because a long run of warnings was treated as correspondence instead of as a countdown.

This guide covers what a consent decree of permanent injunction is, what usually triggers one, what the decree typically requires, and how a company actually gets out from under it. It is written for quality, regulatory, and executive teams who want to understand the path before they are on it, or who are already on it and need a map.

A consent decree of permanent injunction is a court order, entered by a federal district court, that the company (and usually its senior officers) agrees to in settlement of a civil action brought by the Department of Justice on FDA's behalf. The legal footing is section 302(a) of the Federal Food, Drug, and Cosmetic Act (21 U.S.C. 332(a)), which gives federal district courts jurisdiction to restrain violations of section 301 (21 U.S.C. 331), the prohibited acts provision.

Three features make it different from every other FDA action:

  • It is a court order, not an agency letter. A warning letter is informal and advisory. A decree is enforceable through contempt of court, and the court retains jurisdiction to enforce it.
  • It is negotiated. "Consent" means the defendants agree to the terms instead of litigating. Defendants typically do not admit liability, but they accept binding obligations and give up the argument that they were compliant.
  • It is called "permanent" but it is not necessarily forever. The injunction is permanent in the sense that it is a final judgment, not a temporary restraining order. Most decrees contain provisions for relief once the company demonstrates sustained compliance.

The Department of Justice's Consumer Protection Branch typically handles these cases, working from a referral by FDA. FDA's Regulatory Procedures Manual, Chapter 6 (Judicial Actions), and its subchapter on injunctions is where the agency lays out how it evaluates injunction recommendations. It is worth reading before you assume you know how the agency thinks about them.

There is no single violation that automatically produces a decree. FDA and DOJ choose injunction when they conclude that administrative tools have not produced durable compliance, or when the risk to public health is serious enough that they will not wait. The triggers below are the ones I see recur.

1. Repeated or uncorrected quality system failures

The most common pattern is adulteration under section 501(a)(2)(B) of the FD&C Act (21 U.S.C. 351(a)(2)(B)), which deems a drug adulterated if the methods, facilities, or controls used to make it do not conform to current good manufacturing practice. The device equivalent sits in section 501(h) (21 U.S.C. 351(h)). The underlying regulations are 21 CFR Parts 210 and 211 for drugs, 21 CFR Part 820 for devices (now the Quality Management System Regulation, or QMSR, which incorporates ISO 13485:2016 by reference; see the final rule at 89 Fed. Reg. 7496, February 2, 2024, which set an effective date of February 2, 2026), 21 CFR Part 117 for food, and 21 CFR Part 111 for dietary supplements.

A single Form 483 rarely leads to a decree on its own. The pattern that tends to precede one is the same failure found again across successive inspections, despite earlier commitments to fix it. If you want a refresher on where a 483 sits in the escalation ladder, see FDA warning letter vs. 483 observation.

2. Inadequate responses to warning letters

FDA warning letters state that failure to correct violations promptly may result in enforcement action without further notice, and that language includes seizure and injunction. Companies that answer with promises but no verifiable evidence, or that close out commitments without effectiveness checks, are the ones FDA re-inspects and finds unchanged. A repeat finding of this kind is what commonly leads FDA to consider referring a matter for injunction, through the agency's counsel and then to DOJ, as described in the injunction provisions of RPM Chapter 6.

3. Data integrity and falsification

Falsified records, backdated batch documentation, deleted chromatographic data, and misleading statements to investigators change how the agency views the entire operation. Once FDA concludes it cannot rely on your records, it cannot rely on your assurances either, and injunction becomes the only tool that fits.

4. Serious contamination or patient harm events

Sterility failures, microbial contamination, undeclared active ingredients, and unreported adverse events all raise the public health stakes. Where the company's controls plainly did not prevent the failure and the same conditions persist, FDA does not need a long history of paper violations.

5. Refusal to recall, refusal of inspection, or distribution after a stop

Continuing to ship product FDA has said is violative, resisting inspection under section 704 (21 U.S.C. 374), or refusing a requested recall all move a case toward court quickly.

6. Unapproved or misbranded products marketed against agency direction

Firms that keep selling an unapproved new drug or an uncleared device after being told to stop are candidates for injunction, regardless of manufacturing quality.

Who can be named as a defendant?

Not only the company. Under United States v. Park, 421 U.S. 658 (1975), the Supreme Court held that a responsible corporate officer can be held accountable under the FD&C Act based on their position and authority to prevent or correct a violation, without proof of personal wrongdoing. Decrees regularly name the president, the head of quality, and sometimes the head of operations as individual defendants. That is why a decree is a board-level and personal issue, not only a quality department problem.

Feature Warning Letter Consent Decree of Permanent Injunction
Issued or entered by FDA Federal district court (DOJ files on FDA's behalf)
Legal nature Informal, advisory Binding court order
Enforcement of noncompliance Further FDA action Contempt of court, plus decree-specified remedies
Public visibility Posted on FDA's website Public court record, and often announced by DOJ or FDA
Individuals named Sometimes addressed to CEO Often named as defendants
Who decides when you are compliant FDA, through close-out letter FDA, and typically an independent expert, under court oversight
Modification Not applicable Requires agreement or a motion to the court
Duration No set term; remains open until FDA issues a close-out letter or takes further action Set by the decree's own terms, often years in practice

If you are at the warning letter stage, the remediation work you do now is the cheapest insurance against reaching the right-hand column. Our warning letter remediation page describes how that work is structured.

Every decree is negotiated, so read yours line by line and do not rely on someone else's. That said, most FDA decrees share a common skeleton.

Cessation of specified operations

The decree usually prohibits the company from manufacturing, processing, packing, or distributing the covered products at named facilities until specific conditions are met. This is the provision that makes decrees commercially painful. Some decrees carve out exceptions for products deemed medically necessary or for shipments under FDA-approved plans, but those carve-outs are negotiated and narrow.

Independent expert or auditor

The company must retain a qualified third party, independent of the company and acceptable to FDA, to inspect the facilities and certify in writing that the operations meet the applicable regulations. The decree spells out qualifications, and FDA generally reserves a right to object. Choosing this expert is one of the highest-leverage decisions in the entire process because their reports drive the timeline.

Corrective action work plan

Most decrees require a written plan, often reviewed by FDA, covering how the company will correct each identified deficiency. Expect requirements to revalidate processes, rebuild CAPA and complaint systems, retrain staff, and in some cases conduct look-backs on product already released.

Sequenced expert certification and FDA re-inspection

After the expert certifies, the company submits the report to FDA. FDA then re-inspects at its discretion, and the company generally may not resume operations until FDA notifies it in writing that it appears to be in compliance. This is the core gate of the decree. The expert's certification is necessary but not sufficient.

Recalls, destruction, and product disposition

Decrees frequently direct recall of violative product, or set conditions for reconditioning or destroying inventory on hand.

Reporting and record-keeping

Expect periodic written reports to FDA, notification of any changes in ownership or corporate structure, and records access that goes beyond the normal section 704 inspection authority.

Cost recovery

Companies commonly agree to reimburse FDA's costs of inspections, analyses, and supervision under the decree, generally at stated hourly or per-inspection rates. Budget for this. It is a line item that surprises finance teams.

Liquidated damages and disgorgement

Some decrees include a schedule of liquidated damages for each violation of the decree, and some require disgorgement of profits from products distributed in violation of the FD&C Act. Whether these appear, and the amounts and caps, vary case to case and are set only in the decree text. Read the published decrees for comparable companies, which are public court records, before negotiating.

Duration and sunset

Decrees commonly specify a minimum period of demonstrated compliance after resuming operations, followed by a route to petition for dismissal or termination of certain provisions. Duration varies by decree and is not fixed by statute. Read that clause first. It determines what "exit" means for you.

How Do You Comply Once the Decree Is Entered?

The most useful way to see a decree is as a project with a court-supervised finish line. The teams that get out fastest treat it that way.

  1. Read the decree with counsel and quality together. Regulatory counsel interprets the legal obligations. Quality translates each clause into a deliverable with an owner and a date. Build a clause-by-clause obligations register the first week.
  2. Stop what must stop, immediately and demonstrably. If the decree prohibits distribution, document the hold, quarantine inventory, and brief every function that touches shipping. A violation of the decree, even a small one, is far more expensive than the original problem.
  3. Select the independent expert early. Vet qualifications against the decree text, confirm independence in writing, and clear the choice with FDA if the decree requires it.
  4. Diagnose root causes before writing fixes. The expert will look for evidence that the underlying causes were found, not just symptoms patched. A gap assessment against 21 CFR Part 211, Part 820 (QMSR), or Part 117, whichever applies, is the starting point.
  5. Fix the quality unit first. Decrees are rarely about a single machine or procedure. They are often about a quality unit that lacked authority, staffing, or independence from production. Section 211.22 for drugs is a good place to test whether yours has all three.
  6. Validate and verify, then verify again. Every corrective action needs an effectiveness check with objective evidence. Sustained performance over time matters more than a well-written procedure.
  7. Run mock FDA inspections. Before the expert certifies, and again before FDA arrives, test the site with people who have not been inside the remediation. Our guide on what to expect during an FDA inspection is a useful reference for briefing site staff.
  8. Report on time, accurately, and completely. Missed reports are easy for the government to prove and they damage credibility with the agency.

Start-up

  • [ ] Obligations register built from the decree, with owner and due date per clause
  • [ ] Cessation-of-operations provisions implemented, documented, and communicated
  • [ ] Independent expert selected, vetted for qualifications and independence, and cleared with FDA where required
  • [ ] Corrective action work plan drafted, approved as required, and tracked Remediation

  • [ ] Root-cause analyses completed for every prior 483 observation and warning letter item

  • [ ] Quality unit authority, staffing, and independence verified
  • [ ] CAPA, complaint, and change control systems rebuilt and tested for effectiveness
  • [ ] Data integrity controls confirmed across paper and electronic systems
  • [ ] Recall, disposition, and look-back obligations completed and documented Reporting, oversight, and readiness

  • [ ] Periodic reports to FDA calendared and reviewed by counsel before submission

  • [ ] Cost reimbursement and any liquidated damages exposure tracked by finance
  • [ ] Mock inspections completed and findings closed before expert certification
  • [ ] Board or ownership updates scheduled at a fixed cadence

The sequence is more orderly than most executives expect, but each step has its own trap.

Steps 1 and 2: Expert certification and FDA review

The gates are the ones described under the required provisions above: expert certification, then FDA's written notice that the company appears to be in compliance. The practical points are that a conditional certification is common early on, that a weak first report can slow everything, and that FDA will test a sample of the expert's conclusions, so your evidence must support the report line by line.

Step 3: Phased resumption of operations

Many decrees allow staged restart, by facility, product line, or process. FDA's comfort will depend on the first restart going cleanly.

Step 4: Sustained compliance period

After resumption, the decree typically requires ongoing expert audits, often on an annual or similar schedule, and periodic reports. This period is where companies get complacent. The inspection that matters most is the one that occurs a year after everyone relaxed.

Step 5: Petition for relief or dismissal

When the decree's minimum period has passed and the required audits are clean, the company may seek termination of the decree, or of specific provisions, subject to the language of the decree and the court's discretion. Where the decree has no clear sunset route, or where you need changes to its terms, the legal standard for modifying a consent decree comes from Rufo v. Inmates of Suffolk County Jail, 502 U.S. 367 (1992), and Federal Rule of Civil Procedure 60(b)(5). Under Rufo, the party seeking modification carries the burden of showing a significant change in facts or law that warrants revision. Negotiating a clear exit path at the outset is much easier than arguing for one later.

Where exits go wrong

  • Treating expert certification as the finish line instead of the beginning of FDA's review
  • Letting the quality unit's independence erode after restart because production pressure returns
  • Changing ownership, facilities, or product scope without the notice the decree requires
  • Missing a report deadline and handing the government a documented violation
  • Not preserving the evidence trail that proves sustained compliance when it is time to petition

Yes, and prevention is where most of the effort belongs if you are reading this before anything has happened. The escalation pattern described above turns largely on whether a company answers a 483 and a warning letter with system-level change or with document-level cosmetics.

A practical prevention sequence:

  1. Respond to every Form 483 with root-cause-driven corrections and evidence, following a defined timeline. See how to respond to an FDA Form 483.
  2. Treat a warning letter as an executive event, with a named accountable officer and board visibility.
  3. Commission an independent gap assessment before FDA's re-inspection, not after.
  4. Track effectiveness of corrective actions for months, not days.
  5. Keep the door open to FDA. Regular, honest communication about progress is not a sign of weakness, and agencies remember who was straightforward.

Further background is on the FDA compliance page.

Key Takeaways

  • A consent decree is a negotiated court order under section 302(a) of the FD&C Act (21 U.S.C. 332(a)), enforceable through contempt.
  • Triggers are usually patterns: repeated inspection findings, weak warning letter responses, data integrity failures, or serious patient safety events.
  • Under United States v. Park, individual officers can be named without proof of personal wrongdoing.
  • The decree's exit gates are independent expert certification, written FDA notification of apparent compliance, and a sustained compliance period.
  • Read the sunset and modification clauses before you sign. They determine how long you live with the decree.

If you take one thing from this guide, let it be this: the decree does not create your problems, it makes them public and puts a date on fixing them. The work required is the work that was always required.

Frequently Asked Questions

There is no fixed statutory duration. Each decree sets its own terms, and most include a minimum period of demonstrated compliance after operations resume, followed by a process to petition the court for dismissal or relief from certain provisions. Read the sunset language in your decree, because it controls.

Typically no. Consent decrees are settlements, and defendants generally do not admit liability. They do, however, become bound by court-enforceable obligations, and violating them can lead to contempt proceedings and the remedies written into the decree.

Yes. Under United States v. Park, 421 U.S. 658 (1975), responsible corporate officers can be held accountable under the FD&C Act based on their authority to prevent or correct violations. Decrees regularly name senior executives as individual defendants alongside the company.

It depends on the terms. Many decrees halt manufacturing or distribution at named facilities until an independent expert certifies compliance and FDA notifies the company in writing that it appears to be in compliance. Some allow limited exceptions, but those are negotiated in the decree itself.

A warning letter is informal and advisory, issued by FDA. A consent decree is a binding order entered by a federal court, enforceable by contempt, and it often names individuals and requires third-party audits, reports, and cost reimbursement.

Last updated: 2026-09-30

Jared Clark, JD, MBA, PMP, CMQ-OE, CQA, CPGP, RAC, is Principal Consultant at Certify Consulting (https://certify.consulting). This article is general information and not legal advice; consent decree matters require qualified regulatory counsel.

J

Jared Clark

Principal Consultant, Certify Consulting

Jared Clark is the founder of Certify Consulting, helping organizations achieve and maintain compliance with international standards and regulatory requirements.

Need Help Now? Don't Wait for the Blog.

If you're facing an FDA inspection, responding to a warning letter, or navigating a regulatory submission — schedule a free consultation with Jared Clark, RAC. Expert guidance, no obligation.