Are supplement brands required to report adverse events to the FDA?

Yes. Under the Dietary Supplement and Nonprescription Drug Consumer Protection Act (DSNDCPA), enacted in 2006, supplement companies must report serious adverse events to the FDA within 15 business days of receiving the report. Companies must also maintain records of all adverse event reports (serious and non-serious) for 6 years. This applies to all companies whose name appears on the product label, including brand owners who use contract manufacturers.

What counts as a serious adverse event for supplements?

The FDA defines a serious adverse event as one that results in death, a life-threatening experience, inpatient hospitalization, a persistent or significant disability or incapacity, a congenital anomaly or birth defect, or requires medical or surgical intervention to prevent one of these outcomes. A consumer reporting mild stomach upset is a non-serious event. A consumer reporting hospitalization after using your product is a serious event that triggers the 15-business-day reporting requirement.

What happens if I don't report an adverse event to the FDA?

Failure to report serious adverse events within the required 15-business-day timeframe is a federal violation. Consequences can include FDA warning letters, injunctions, product seizures, and criminal prosecution in severe cases. FDA may also inspect your facilities and records to verify compliance. Beyond legal consequences, unreported adverse events represent a product safety risk that can lead to consumer harm and product liability lawsuits.

Adverse Event Reporting: What Supplement Brands Are Required to Do

If a consumer experiences a serious health problem after using your supplement, federal law requires you to report it to the FDA within 15 business days. This is not optional. Most new brand owners don't know this requirement exists until they need it. This guide covers the law, the process, and how to build a system before your first report.

Dietary supplement manufacturers must comply with 21 CFR Part 111 (Current Good Manufacturing Practice for dietary supplements). This includes requirements for personnel, facilities, equipment, production, laboratory operations, and record-keeping.

What the Law Requires

The Dietary Supplement and Nonprescription Drug Consumer Protection Act (DSNDCPA) was enacted in December 2006. It established mandatory adverse event reporting for dietary supplements. The law applies to the "responsible person," defined as the company whose name appears on the product label.

If you are the brand owner and your company name is on the label, you are the responsible person. This is true even if a contract manufacturer produces the product and a third-party fulfillment company ships it. The reporting obligation follows the label, not the manufacturing process.

Your product label must include a domestic address or domestic phone number through which consumers can report adverse events. This contact information is a legal requirement under the act. Email or website may supplement these methods but cannot replace them on the label.

Serious vs Non-Serious Adverse Events

The law distinguishes between serious and non-serious adverse events. Only serious events trigger the 15-business-day mandatory reporting requirement. Both types must be documented and retained.

Serious Adverse Event	Non-Serious Adverse Event
Death	Mild stomach upset or nausea
Life-threatening experience	Headache or dizziness
Inpatient hospitalization	Mild allergic reaction (no medical treatment)
Persistent or significant disability or incapacity	Unpleasant taste or texture complaints
Congenital anomaly or birth defect	General dissatisfaction with the product
Requires medical/surgical intervention to prevent the above	Mild digestive changes

When in doubt about whether an event is serious, treat it as serious and consult your regulatory attorney. Under-reporting is a far greater risk than over-reporting.

The 15-Business-Day Reporting Rule

When you receive a report of a serious adverse event, the clock starts. You have 15 business days to submit a report to the FDA. The clock begins on the day you receive the report, not the day the event occurred.

What to include in a serious AE report

A copy of the product label
The adverse event report as received from the consumer
Consumer contact information (if available and with consent)
Product name, lot number, and expiration date
Date the event occurred and date you received the report
Description of the adverse event
Medical information (if available)

How to File: MedWatch and the FDA Safety Reporting Portal

Serious adverse event reports are submitted through the FDA Safety Reporting Portal (formerly MedWatch Form 3500A for mandatory reports). The FDA has published educational materials and instructional videos to help companies understand the filing process.

After filing the initial report, you must submit any new medical information received within one year of the initial report. These follow-up reports are also required within 15 business days of receiving the new information.

Your regulatory counsel should review your first several reports before submission to ensure they meet FDA requirements. Building this process correctly from the start prevents compliance problems later.

Six-Year Record Retention

You must maintain records of all adverse event reports for six years. This includes both serious and non-serious reports. Records must be available for FDA inspection at any time during this period.

Keep records organized by product and date. Include the original report, any correspondence with the consumer, your internal investigation notes, and copies of submissions to FDA. Digital records are acceptable if they are secure and accessible.

Building an Adverse Event Response Process

Don't wait for your first report to build your process. Set up the following before you sell your first unit:

Designate a responsible person. Someone in your organization must own AE reporting. For small brands, this is typically the founder. That person needs to understand the process and the deadlines.
Create an intake form. When a customer reports a health problem, you need to capture specific information: product name, lot number, date of use, description of the event, medical treatment received, and consumer contact information.
Establish assessment criteria. Define how you will determine if an event is serious or non-serious. Document the criteria. Work with regulatory counsel to create a decision tree.
Train customer-facing staff. Anyone who interacts with customers (support, social media, returns processing) must know how to recognize and escalate an adverse event report.
Set up record-keeping. Create a system for logging, tracking, and storing AE reports. This can be as simple as a secure spreadsheet for small brands or a dedicated quality management system for larger operations.
Retain regulatory counsel. Have a regulatory attorney identified before your first report. When a serious event occurs, you need legal guidance immediately, not a two-week search for counsel.

Discontinued Products Still Require Reporting

If you discontinue a product, your reporting obligation continues. Consumers may still have the product in their homes. Retailers may still have it on shelves. As long as your company name is on the label of a product in commerce, you must accept and process adverse event reports.

This is one reason product liability insurance is essential even after you stop selling a product. Claims can arise years after the last sale.

For more on regulatory enforcement, see our compliance risks guide and 21 CFR Part 111 overview.

Disclaimer: This guide is an educational overview of adverse event reporting requirements, not legal or regulatory advice. Federal reporting requirements are complex, and penalties for non-compliance are significant. Consult a regulatory attorney to build your adverse event reporting process. See our Terms of Service for details.