Comparing CGMP Citation Rates Across Pharma, Devices, and Cosmetics: One Regulation Family, Three Enforcement Speeds

Part of: FDA Enforcement by Industry

TL;DR

• Pharma, device, and cosmetics enforcement all touch the drug CGMP regulations at 21 CFR Parts 210 and 211 at some point, but the three industries arrive there through different routes and at different enforcement speeds.
• Pharma is cited under 210/211 directly, as the regulation's intended primary audience — CDER issued 303 drug Warning Letters in FY2025, up 59% from FY2024.
• Devices are increasingly cited under the Quality Management System Regulation (QMSR) instead, a related but legally distinct framework effective February 2, 2026 that replaced most of the prior Quality System Regulation — device Warning Letters rose a separate 17% year over year.
• Cosmetics manufacturers are the outlier: they're being cited under drug CGMP rules (21 CFR 210/211) — rules written for drugs, not cosmetics — because the dedicated cosmetic GMP regulation required by MoCRA has not yet been finalized, at least five cosmetics facilities receiving this treatment between November 2025 and April 2026.

Why these three industries belong in the same comparison

Pharmaceuticals, medical devices, and cosmetics sit in an unusual relationship to each other within FDA's regulatory structure: all three can, in different circumstances, be reached by the drug CGMP framework at 21 CFR Parts 210 and 211, but for entirely different reasons and via entirely different paths. Comparing them side by side surfaces something the pillar's industry-by-industry breakdown treats separately but that's clearer as a direct comparison: one regulation family, three enforcement speeds, three different relationships to the underlying rule.

Pharma: the rule's intended home, and the fastest-growing volume

Pharmaceutical manufacturing is 21 CFR 210/211's primary, intended audience — the regulation was written for drug manufacturing, and pharma citations under it are the least structurally unusual of the three. What stands out about pharma specifically is the speed of enforcement growth: CDER issued 303 drug Warning Letters in FY2025, up from 190 in FY2024, a 59% increase, with a senior FDA official separately confirming CDER's own internal count rose roughly 50% (RAPS, "FDA official: CDER warning letters up 50% in FY 2025," Dec 2025). Within that volume, 21 CFR 211.22 — the quality control unit's authority — was the single most-cited subsection in FY2025, appearing in 62 of 134 inspection-based drug Warning Letters (Argus HQ, "The 5 most-cited FDA warning letter violations in FY2025, ranked").

Devices: migrating away from 210/211's neighborhood entirely

Medical devices historically sat under a related but separate framework — the Quality System Regulation, 21 CFR Part 820 — rather than 210/211 directly. That separation became more pronounced, not less, with the Quality Management System Regulation (QMSR) taking effect February 2, 2026, replacing most of Part 820 and aligning U.S. device requirements more closely with the international ISO 13485 standard. Device Warning Letter volume rose 17% year over year into 2026 — a smaller increase than pharma's 59%, but arriving alongside a structural framework change that makes direct year-over-year comparison imperfect: some of the volume increase, or its composition, may reflect the transition itself rather than a pure increase in underlying violation rates (Argus HQ, "Is FDA's new device quality rule a compliance reset?"). Devices, in short, are moving further from the 210/211 neighborhood over time, not closer to it, even as both frameworks share conceptual DNA (both are quality-system-based, CGMP-style regulatory structures).

Cosmetics: borrowing a rulebook that wasn't written for them

Cosmetics present the most structurally unusual pattern of the three. FDA has been issuing CGMP-based Warning Letters to cosmetics-labeled facilities under the existing drug manufacturing regulations in 21 CFR Parts 210 and 211 — rules written for drugs, not cosmetics — because the dedicated cosmetic Good Manufacturing Practice rule required by the Modernization of Cosmetics Regulation Act (MoCRA) has not yet been finalized. At least five cosmetics facilities received CGMP Warning Letters on this basis between November 2025 and April 2026 (Argus HQ, "Why is FDA sending cosmetics companies CGMP warning letters before its cosmetic GMP rule even exists?"). The mechanism here is different from either pharma's direct application or devices' parallel-framework relationship: FDA is reaching cosmetics facilities through 210/211 specifically because a facility manufactures both drug and cosmetic products, or because a cosmetic product's labeling crosses into drug claims — not because 210/211 was ever intended to govern cosmetics manufacturing generally.

The comparison, read together

Laid side by side, the three industries show a spectrum of relationship to the same underlying regulation family: pharma is the rule's direct, intended target with the fastest-growing enforcement volume; devices are actively migrating to a parallel, related-but-distinct framework (QMSR) with more moderate volume growth complicated by the framework transition itself; cosmetics are being reached by the drug rules opportunistically, through specific factual triggers (dual-use facilities, claims that cross into drug territory) rather than as the rules' intended audience, pending a dedicated cosmetics GMP rule that doesn't yet exist. No single enforcement-speed or citation-type comparison applies cleanly across all three — a 59% pharma increase and a 17% device increase aren't measuring the same thing, and cosmetics enforcement under 210/211 isn't measuring a third version of the same thing either; it's measuring how many cosmetics facilities happen to trigger a rule built for a different industry.

What this means for a company operating in more than one of these three industries

• Don't benchmark enforcement volume trends across these three industries as if they were measuring the same underlying phenomenon. Pharma's growth rate, device's framework-transition-complicated growth rate, and cosmetics' opportunistic exposure to a foreign rulebook are three different statistical stories.
• A dual-use facility (drug and cosmetic) carries compounded 210/211 exposure. If a facility manufactures both product types, or if cosmetic labeling approaches drug-claim territory, treat 210/211 compliance as applicable to the cosmetic line too, regardless of the absence of a dedicated cosmetics GMP rule.
• Device compliance programs should track QMSR specifically, not assume continuity with prior Part 820 practice. The February 2, 2026 effective date introduced a framework change significant enough to affect enforcement statistics themselves.
• "No dedicated rule yet" is not a safe-harbor argument for cosmetics manufacturers. The absence of a MoCRA-mandated cosmetics GMP rule has not stopped FDA from reaching cosmetics facilities through the existing drug rules where the facts support it.

Related reading

• FDA Enforcement by Industry — the pillar this spoke expands on.
• What Is CGMP? FDA's Core Manufacturing Standard, Explained
• Why is FDA sending cosmetics companies CGMP warning letters before its cosmetic GMP rule even exists?

Sources

• RAPS, "FDA official: CDER warning letters up 50% in FY 2025," December 2025.
• Argus HQ, The 5 most-cited FDA warning letter violations in FY2025, ranked.
• Argus HQ, Is FDA's new device quality rule a compliance reset? The first warning letters say no.
• Argus HQ, Why is FDA sending cosmetics companies CGMP warning letters before its cosmetic GMP rule even exists?.

Argus HQ is informational only. Summaries are AI-assisted and may contain errors, misclassifications, or omissions. The underlying FDA Warning Letters are public records; always verify against the original source before regulatory decisions. Not legal, financial, or medical advice.