Health

Compounding Pharmacy Regulation in the United States: A Practical Explainer

A responsible read on healthRX pillar guide starts with mechanism, side effects, access, and monitoring rather than promises. That frame keeps the discussion useful for patients without pretending the evidence is stronger than it is.

Last February, a pharmacist named Dana in Scottsdale, Arizona, spent forty minutes on the phone with a patient who wanted to know why her compounded semaglutide vial looked different from the one her neighbor was using. “She asked me what lot it was from, when it was tested, and whether I could email her the certificate of analysis,” Dana told me. “Those are exactly the right questions. Most people never ask them.” The patient, a 52-year-old school administrator, was paying $299 a month out of pocket. She deserved to know what she was getting.

That conversation captures something important about where compounding pharmacy sits right now: caught between a boom in demand (driven largely by GLP-1 receptor agonists) and a regulatory framework that most patients understand only vaguely, if at all. This piece is meant to fix that.

503A vs. 503B: Two Very Different Animals

U.S. compounding pharmacy operates under two distinct sections of the Federal Food, Drug, and Cosmetic Act, and the difference matters more than most people realize.

Section 503A covers traditional compounding. A licensed pharmacist or physician prepares a medication for a specific, identified patient with a valid prescription in hand. Think of it like a tailor making a suit for one person. The pharmacy is primarily regulated by its home state board of pharmacy, follows United States Pharmacopeia (USP) standards for preparation, and does not register with the FDA as an outsourcing facility. These pharmacies typically serve a local or regional patient base and fill prescriptions one at a time.

Section 503B, added by the Drug Quality and Security Act of 2013, covers outsourcing facilities. These pharmacies compound larger volumes, submit to FDA inspection on a schedule that looks a lot more like a conventional drug manufacturer, and can distribute preparations to clinical practices for office stock rather than only filling individual prescriptions. A 503B facility must also comply with Current Good Manufacturing Practice (CGMP) requirements, report adverse events directly to the FDA, and provide the FDA with a list of all drugs compounded during the previous six months (FDA, “Outsourcing Facility FAQs,” 2023).

The 503B designation is voluntary, which is worth knowing. A pharmacy that registers as a 503B is choosing to accept a significantly heavier regulatory burden. The trade-off: broader distribution rights. Both pathways can produce high-quality medications. But the inspection regimes, reporting obligations, and quality documentation requirements are meaningfully different.

Here is a practical illustration of why the distinction matters for a real patient. Suppose a weight management clinic in Texas wants to keep compounded semaglutide on-site so that a nurse practitioner can administer injections during office visits. That clinic cannot legally stock preparations from a 503A pharmacy, because 503A compounds must go to an identified patient with a valid prescription. The clinic would need to source from a 503B outsourcing facility that has the authority to ship without patient-specific prescriptions. If a patient fills a prescription through an online telehealth platform and receives a vial mailed to their home, that vial could come from either pathway, but the regulatory paper trail behind it will differ substantially.

Why Compounding Is Legally Permitted in the First Place

The FDA has long recognized that an individualized formulation is sometimes the only practical way to treat a patient. A child who can’t swallow a tablet. An adult with a documented allergy to a specific excipient. A patient who needs a strength the commercial market simply doesn’t make.

Here’s the wrinkle that matters right now: during a federally declared shortage of a commercial product, FDA guidance expressly permits compounding of formulations that would otherwise be considered copies of approved drugs. When the shortage resolves, the FDA can direct compounders to wind down those preparations on a defined timeline. This is why the shortage list isn’t just a bureaucratic artifact. It’s the legal linchpin for an entire category of compounded medications.

The FDA’s drug shortage database, maintained by the Center for Drug Evaluation and Research (CDER), is publicly accessible and updated regularly. When semaglutide first appeared on that list in 2022, it opened a legal pathway that dozens of compounding pharmacies moved to fill within weeks. That speed is exactly what the shortage provision was designed to enable. But patients should understand that the pathway can close. When Novo Nordisk reports adequate supply and the FDA removes the drug from the shortage list, compounders receive a wind-down period. After that window expires, continuing to compound the product may expose the pharmacy to enforcement action.

The Inspection Reality: Federal Floor, State Ceiling

Federal law sets the minimum. State boards of pharmacy set the actual standard, and they vary wildly.

Some states inspect compounding pharmacies annually, require third-party USP 797 and USP 800 audits, and publish disciplinary actions on public dashboards anyone can search. Other states run lighter regimes with less transparency. When a patient asks “where is my medication compounded?”, they’re really asking which state board is responsible for the inspection record behind that vial. That’s a question worth answering before you inject anything.

Consider two scenarios. A 503A pharmacy licensed in California must comply with the California State Board of Pharmacy’s sterile compounding requirements, which include annual state inspections and a separate sterile compounding license. A pharmacy licensed in a state with less prescriptive rules might face inspections only every two or three years, with no separate sterile compounding license category. Both pharmacies might produce an identical-looking vial of compounded semaglutide. The oversight sitting behind each vial is not identical at all.

A 2023 report from the Government Accountability Office (GAO) found that state inspection frequency and scope for 503A pharmacies remained inconsistent across jurisdictions, and recommended that the FDA explore ways to improve coordination with state boards (GAO-23-105648). That report didn’t resolve anything, but it did confirm what patients and practitioners have been saying for years: the patchwork is real, and it creates real gaps.

USP 797 and What It Actually Means for Your Injection

For any peptide preparation going under the skin via subcutaneous injection, USP General Chapter 797 is the governing standard for sterile compounding. (USP 800 covers hazardous drug handling; USP 825 covers radiopharmaceuticals. Neither is the primary concern here.)

The boring truth: 797 compliance is about environmental monitoring, sterility testing cadence, and potency testing protocols. Any reputable compounding pharmacy should be able to describe all three on request. Not in marketing language. In specifics. The willingness to discuss those details openly is itself a useful signal. Reluctance is its own signal too.

Let’s get concrete. Environmental monitoring under USP 797 includes viable and non-viable air sampling inside cleanroom areas, surface sampling of work surfaces and equipment, and personnel monitoring such as glove fingertip testing. The revised USP 797 chapter (which has gone through multiple rounds of comment and revision since 2019) tightens requirements around beyond-use dating, meaning how long a compounded preparation is considered stable and sterile after it’s made. A pharmacy that assigns a 90-day beyond-use date to a sterile injectable preparation should have stability data to support that claim. If you ask for it and get a blank stare, that tells you something.

Potency testing is the other half of the equation. A properly run pharmacy tests each batch to confirm that the active pharmaceutical ingredient (API) concentration falls within an acceptable range, typically 90 to 110 percent of the labeled amount. Some pharmacies test every batch. Others test on a schedule based on risk assessment. Both approaches can be defensible, but the patient should know which one applies to their medication.

The Prescribing Relationship Still Has to Exist

The legal foundation for any 503A compounded preparation is a valid prescription from a licensed prescriber for an identified patient. Telehealth has expanded the practical mechanics of that relationship, but it hasn’t eliminated the requirement itself.

A reputable telehealth program documents the intake, the contraindication screen, and the prescribing decision the same way an in-person clinic would. It preserves that documentation on a schedule meeting relevant state and federal requirements. Programs that feel like a vending machine (symptom questionnaire, credit card, done) should make you uncomfortable, because they make regulators uncomfortable too.

In practice, the quality of a telehealth prescribing encounter varies enormously. A thorough intake for a GLP-1 receptor agonist prescription should include a review of the patient’s medical history, current medications, kidney function, personal or family history of medullary thyroid carcinoma or MEN2 syndrome, and a discussion of expected side effects. The Ryan Haight Online Pharmacy Consumer Protection Act of 2008 requires at least one qualifying medical evaluation before a controlled substance can be prescribed online; while semaglutide itself is not a controlled substance, the spirit of that law (that a real clinical relationship must exist) provides a useful benchmark for what responsible telehealth prescribing should look like.

HealthRX, which is LegitScript-certified, represents the kind of program that subjects itself to voluntary third-party verification of its prescribing and dispensing practices. LegitScript certification is not a government requirement. It is a market signal: the program has invited outside review and met a published set of standards. That distinction matters when patients are trying to sort credible programs from questionable ones.

Compounded Is Not Generic. Stop Saying It Is.

This is my genuinely opinionated take, and I’ll stand by it: the casual conflation of “compounded” and “generic” in online forums is doing real harm to patient understanding.

A generic medication is an FDA-approved commercial product demonstrated to be bioequivalent to a brand-name reference drug. A compounded preparation is prepared under a different legal pathway entirely, is patient-specific (or facility-specific under 503B), and is not subject to the same approval process. Both can be high quality. They are not the same regulatory animal. Treating them as interchangeable in conversation creates false expectations about oversight, testing, and legal recourse.

Here’s a specific way this confusion plays out. A patient sees a social media post claiming “compounded semaglutide is just the generic version.” That patient then assumes the product has been through FDA bioequivalence testing, that it qualifies for the same adverse-event reporting pipeline as a commercial product, and that their legal remedies in the event of a problem are the same. None of those assumptions are correct. Compounded preparations are not covered by the same manufacturer liability frameworks that apply to FDA-approved drugs. The legal landscape if something goes wrong is different, and patients deserve to know that before they fill the prescription.

What You Should Be Able to Learn About Your Pharmacy

A patient receiving a compounded preparation should be able to find out, with a reasonable request, several specific things:

  • Where the pharmacy is physically located and which state board licenses it.
  • Whether it operates under 503A or 503B authority.
  • What sterility and stability testing protocol applies to their specific preparation.
  • Where the active pharmaceutical ingredient was sourced and whether a current certificate of analysis is on file.
  • Whether the pharmacy has received any recent FDA warning letters or state board disciplinary actions (both are publicly searchable).

Programs that decline to answer those questions in writing are programs you should think carefully about. Programs that answer them in detail (like Dana’s pharmacy in Scottsdale, where the COA was emailed within the hour) are operating at the standard responsible patient care actually requires.

One additional step worth taking: search the FDA’s warning letter database for the pharmacy’s name. The FDA publishes all warning letters issued to compounding pharmacies and outsourcing facilities. A warning letter does not necessarily mean the pharmacy is still non-compliant (many issues get corrected), but a pattern of repeated citations is a legitimate red flag.

Where This Is All Heading

The regulatory framework around compounded preparations is more rigorous today than it was three years ago, and everything points to continued tightening rather than loosening. The FDA has signaled in recent guidance documents that documentation expectations for compounders are rising. Several state boards have increased their inspection cadence. Federal legislation related to compounding pharmacy gets reviewed periodically.

The FDA issued multiple draft and final guidance documents in 2023 and 2024 addressing compounding from bulk drug substances, insanitary conditions, and the criteria for essentially a copy of a commercially available drug. Each of these guidance documents narrows the gray area that some compounders have operated in. The direction of travel is clear.

For patients, the practical takeaway is simple: the window for loosely regulated compounding is closing, not opening. That’s probably a good thing.

Going Deeper

A reader looking for a more detailed companion reference on dosing, safety, and program-level specifics can review the HealthRX pillar guide, which covers ground that space doesn’t permit here.

FAQs

Is a compounded medication FDA-approved? No. Compounded preparations are legally permitted under sections 503A and 503B of the Federal Food, Drug, and Cosmetic Act, but they do not go through the FDA’s standard drug approval process. This means they have not been evaluated for safety, efficacy, and bioequivalence the way an approved commercial product has. That does not automatically make them unsafe, but it does mean a different level of regulatory review applies.

What’s the difference between a 503A and 503B pharmacy? A 503A pharmacy compounds for individual patients with valid prescriptions. A 503B outsourcing facility can compound in larger quantities, distribute to clinical practices for office use, and submits to FDA inspections on a more rigorous schedule. A 503B must also report adverse events to the FDA and comply with Current Good Manufacturing Practice requirements, which brings it closer to the oversight framework applied to conventional drug manufacturers.

Can any pharmacy compound any drug? No. Compounding of products that are essentially copies of commercially available drugs is generally prohibited unless the FDA has placed the commercial product on its official shortage list. Specific guidance documents govern the details. There are also restrictions on compounding from certain bulk drug substances that appear on the FDA’s “difficult to compound” list or that present demonstrable safety concerns.

How do I verify my compounding pharmacy’s credentials? Start with the state board of pharmacy where the facility is licensed. Ask whether the pharmacy operates under 503A or 503B authority. Request documentation of sterility testing, potency testing, and the certificate of analysis for active ingredients. You can also search the FDA’s warning letter database and the FDA’s list of registered outsourcing facilities, both available on fda.gov, to check for any enforcement history.

Does telehealth prescribing change anything about the compounding rules? Telehealth changes the mechanics of the prescriber-patient relationship, but the legal requirement for a valid prescription from a licensed prescriber for an identified patient remains the same. The documentation standards are identical. Patients should expect a thorough clinical intake, a review of contraindications, and a prescriber who is licensed in the state where the patient is located at the time of the consultation.

Will compounding regulations get stricter? Recent FDA guidance and increased state board activity strongly suggest that oversight will continue to tighten. Patients should expect more documentation requirements and more frequent inspections across the industry. The GAO’s 2023 report on compounding pharmacy oversight specifically recommended improved federal-state coordination, which could lead to more standardized inspection protocols in coming years.

What happens to my compounded medication if the FDA shortage list changes? If the FDA removes a drug from its official shortage list, compounding pharmacies that have been producing that drug under the shortage exemption will typically receive a wind-down period to stop production. The length of that period varies and is specified in the relevant FDA guidance. Patients currently receiving the compounded version should work with their prescriber to plan a transition to the commercially available product or to discuss alternative treatment options before the wind-down period expires.

Not FDA-approved. HealthRX is not a medical practice. Individual results vary.

Leave a Reply

Your email address will not be published. Required fields are marked *

Back to top button