TL;DR
- FDA opened the third year of its Quality Management Maturity (QMM) Prototype Assessment Protocol Evaluation Program on February 11, 2026, seeking up to nine drug manufacturing establishments (Federal Register, Feb. 11, 2026).
- QMM is voluntary and score-based, not a pass/fail inspection: participants get a report rating each practice area, not a compliance classification (FDA, CDER Quality Management Maturity).
- Only establishments already rated No Action Indicated or Voluntary Action Indicated by FDA can apply — a firm coming out of a Warning Letter or Official Action Indicated inspection is not eligible (Federal Register, Feb. 11, 2026).
- Law firm counsel is split on the upside: participation can surface fixable gaps early, but a weak QMM score could theoretically surface later under a Freedom of Information Act request (Arnold & Porter, Feb. 19, 2026).
- QMM traces back to a 2019 federal task force finding that a root cause of drug shortages is the absence of any incentive to exceed baseline CGMP requirements (FDA, Drug Shortages Task Force Report, 2019).
What is FDA's Quality Management Maturity program, and why does it matter if it is voluntary?
The Quality Management Maturity program, or QMM, is a CDER initiative that scores how well a drug manufacturing establishment runs its quality systems, above and beyond baseline current good manufacturing practice requirements. It carries no legal force. Nobody has to apply, and FDA cannot compel an establishment into the assessment.
That voluntary label makes it easy to dismiss. It shouldn't be dismissed. QMM is FDA quietly building the audit-ready benchmark that will eventually separate the manufacturers regulators trust from the ones they merely tolerate.
The program is a spin-off of FDA's earlier Quality Metrics effort, which the drug industry fought hard against after the agency floated it under the Food and Drug Administration Safety and Innovation Act of 2012 (Arnold & Porter, Feb. 19, 2026). Stakeholders pushed back so hard that FDA scaled the mandatory reporting concept down into pilot programs, then into the voluntary QMM assessment that launched in 2024. The lineage matters: this is a regulator that wanted mandatory quality reporting, got told no, and built a quieter version instead.
How is a QMM assessment different from a normal FDA inspection?
A standard FDA surveillance inspection ends in one of three classifications: No Action Indicated, Voluntary Action Indicated, or Official Action Indicated. It is binary in practice — you passed clean, you have minor findings, or you are heading toward a Warning Letter. QMM does not replace that system and does not touch that classification.
Instead, a QMM assessment produces a scored report across multiple practice areas, conducted by a three-person CDER team over up to five days, on-site or hybrid (Federal Register, Feb. 11, 2026). The assessors are CDER staff, not FDA's Office of Inspections and Investigations, and are explicitly walled off from anyone who could initiate a compliance action against the same site.
The report itself names two or three areas of strength and two or three actionable opportunities for improvement in each practice area, then FDA checks back at three months and six months to review the establishment's improvement plan.
Who is even eligible to apply, and what does that filter reveal?
Eligibility criteria in the February 2026 Federal Register notice draw a hard line around who gets considered. An establishment must currently hold an inspection classification of No Action Indicated or Voluntary Action Indicated, have had at least one human drug surveillance inspection, and be actively distributing a CDER-regulated drug or active pharmaceutical ingredient in the U.S. market (Federal Register, Feb. 11, 2026).
Read that filter carefully. A manufacturer sitting on an Official Action Indicated classification, fresh off a Warning Letter, cannot apply for QMM at all. The program is not built to rehabilitate troubled sites. It is built to certify and reward sites that are already compliant and want to prove they are more than merely compliant.
That is a signal worth tracking on its own. FDA is drawing a visible line between firms it considers baseline-compliant and firms it considers advanced, and only the second group gets access to a voluntary credential the first group cannot even request.
What's actually in it for a manufacturer that volunteers?
Participating establishments get a diagnostic most companies would otherwise pay a consulting firm to produce: a structured, FDA-eyes assessment of where their quality system is strong and where it has gaps, months before those gaps could ever show up in an inspection finding. CDER frames the entire program around four goals: build a quality culture mindset, recognize firms with advanced practices, flag improvement opportunities, and reduce the risk of supply disruptions tied to quality failures (FDA, CDER Quality Management Maturity).
The 2024 cohort, the program's first year, covered nine establishments spanning generic manufacturers, a contract testing laboratory, and brand-name drug makers. Participants told CDER that the report itself, and the chance for open dialogue with the assessment team, delivered real value (FDA, CDER Quality Management Maturity).
What is the actual risk of volunteering for FDA scrutiny you don't legally have to accept?
Here is the part compliance counsel actually debates. Arnold & Porter's February 2026 advisory names the tension directly: cooperating with FDA in a setting built for guidance could help a site improve, but a negative QMM assessment released under a Freedom of Information Act request could paint the company in an unflattering light, or invite more intensive scrutiny down the line (Arnold & Porter, Feb. 19, 2026).
That risk is real but bounded. QMM assessors are separated from the inspection and enforcement arm of FDA by design, and a QMM score is not an inspection classification. Still, any document FDA holds about your facility is potentially FOIA-reachable, and a candid self-assessment naming your own weak practice areas is a different kind of document than a routine inspection report.
Compliance officers weighing whether to volunteer are really weighing a bet: does the internal value of an early, structured gap analysis outweigh the long-tail risk that a mediocre score becomes public record. FDA is betting that enough manufacturers say yes to make the benchmark meaningful across the industry over time.
Where did this program come from, and where is it going?
QMM's origin traces to a 2019 report from a multi-agency federal task force studying why drug shortages kept happening. The task force's core finding: manufacturers had no real incentive to build quality management systems that exceeded bare CGMP compliance, because CGMP compliance was the only thing FDA measured (FDA, Drug Shortages Task Force Report, 2019).
FDA's Pharmaceutical Science and Clinical Pharmacology Advisory Committee voted unanimously in November 2022 to recommend CDER build exactly this kind of maturity-scoring program. Two years later, in 2024, the first nine-establishment cohort ran, followed by a second cohort under a Federal Register notice published in April 2025. Now, in 2026, FDA is running its third consecutive year, again capped at nine volunteer establishments, again gathering feedback to refine the tool further (Federal Register, Feb. 11, 2026).
Three consecutive annual cycles of a voluntary pilot is not typically how FDA treats programs it intends to abandon. The more plausible read, and the one compliance teams should plan around, is that CDER is building a maturity rating system it eventually wants industry-wide, the same way credit ratings started as a voluntary disclosure tool before becoming close to mandatory in practice.
What should a compliance team do with this information right now?
If your establishment already holds a No Action Indicated or Voluntary Action Indicated classification, decide deliberately, not by default, whether QMM participation fits your risk tolerance. The application window for this cycle closes April 13, 2026, though FDA has run this notice annually and is likely to reopen it in 2027 (Federal Register, Feb. 11, 2026).
If your establishment is not eligible, or you decide not to apply, borrow the rubric's structure anyway. CDER's practice-area framework is public, and running an internal self-assessment against it costs nothing and carries no FOIA exposure. Firms building toward QMM eligibility, or toward the day this voluntary program becomes an industry expectation, are the firms least likely to be blindsided when a customer or auditor asks whether their quality system goes beyond the CGMP floor.
FAQ
Is FDA's Quality Management Maturity program mandatory?
No. Participation is entirely voluntary, and FDA cannot require any establishment to apply or to accept an assessment. Only establishments that request participation and meet the eligibility criteria, then get selected from the applicant pool, are assessed.
Can a company under a Warning Letter apply for QMM?
No. The Federal Register notice restricts eligibility to establishments currently classified No Action Indicated or Voluntary Action Indicated. A site coming out of an Official Action Indicated inspection, which typically precedes a Warning Letter, cannot apply for this cycle.
Does a QMM assessment score become public information?
FDA does not proactively publish individual QMM scores, but any record FDA holds is potentially subject to a Freedom of Information Act request, a risk that at least one law firm has flagged directly to clients considering participation.
Founding rates end once 10 subscribers sign up — see current pricing →
Sources: Federal Register, Feb. 11, 2026, FDA, CDER Quality Management Maturity, Arnold & Porter, Feb. 19, 2026, FDA, Drug Shortages Task Force Report, 2019. Byline: Andy Gaber. Published 2026-07-06.