TL;DR
- FDA hit Novo Nordisk with a warning letter on March 5, 2026, for failing to report serious adverse events tied to semaglutide, liraglutide, nedosiran sodium, and estradiol within the required 15-calendar-day window (FDA, March 5, 2026)
- Cited cases include a stroke, a suicide, suicidal ideation, and at least two deaths that were rejected, invalidated, or stuck in "medical review" instead of reported (FDA warning letter, 2026)
- The inspection ran January 13-February 7, 2025, and FDA rejected Novo's corrective-action responses spanning eight separate letters between March 2025 and January 2026 as inadequate (FDA, 2026)
- Just weeks earlier, on February 5, 2026, FDA's Office of Prescription Drug Promotion sent Novo a separate Untitled Letter over misleading Wegovy pill TV ads (FDA/OPDP, Feb. 5, 2026)
- Takeaway: pharmacovigilance procedure language, not just intent, is what FDA is auditing, and "we didn't get consent to follow up" is not a defense under 21 CFR 314.80
Why did the FDA send Novo Nordisk a warning letter over Ozempic and Wegovy safety reporting?
FDA sent Novo Nordisk Inc. a warning letter dated March 5, 2026, because an inspection of the company's Plainsboro, New Jersey headquarters found systemic failures in how it surveilled, evaluated, and reported postmarketing adverse drug experiences (ADEs) for products containing semaglutide (Ozempic, Wegovy, Rybelsus), liraglutide (Victoza, Saxenda), nedosiran sodium, and estradiol (FDA Warning Letter 717576, March 5, 2026). The letter cites specific violations of 21 CFR 314.80(b) and (c)(1)(i)-(ii), the regulations that require drug manufacturers to report serious and unexpected adverse events to FDA within 15 calendar days of first learning about them.
This isn't a manufacturing or labeling letter. It's a pharmacovigilance letter, and it reads as one of the more detailed public accounts of how a major sponsor's safety-reporting machinery can quietly fail even while its internal quality system believes it's working.
What specific cases did FDA cite as evidence?
The letter names individual case numbers from Novo's own Argus safety database, which is unusually granular for a warning letter:
- Case #1331385: A consumer disabled by a stroke while taking liraglutide. The case was rejected from reporting because the consumer said they didn't believe the stroke was related to the drug, even though FDA's ADE definition explicitly requires reporting "whether or not considered drug-related" (FDA, 2026).
- Case #1342548: A death reported in a male patient on semaglutide, invalidated by Novo's team for lack of a patient identifier — an identifier FDA investigators found sitting in the source documents during the inspection.
- Case #1334278: A report of suicidal ideation in a patient on semaglutide, received December 9, 2024. Novo's own procedure required medical review within 10 days; the case sat in "medical review" status until February 3, 2025, after FDA raised it during the inspection.
- Case #1171264 and Case #1079792: Two reports involving patient death, including one described as a suicide, that were never investigated because Novo's internal procedure only required follow-up if the reporter's "consent" was obtained — a requirement that does not exist anywhere in 21 CFR 314.80.
FDA's letter notes Novo had already opened internal deviations (DV0166369 in April 2024, DV0155511 in December 2023) acknowledging pieces of this problem before the inspection, and closed them without confirming the underlying reporting gaps were fixed.
How did FDA respond to Novo's corrective action plan?
Not well. Novo submitted written responses and follow-up correspondence eight separate times — March 3, April 11, May 2, June 6, July 11, September 19, and October 31, 2025, and January 15, 2026 — describing steps like revising SOPs, removing consent-related fields from IT systems, and building new Vendor Management and Quality teams (FDA, March 5, 2026).
FDA rejected each explanation as insufficiently specific. The letter repeatedly uses variations of the same sentence: the response "did not provide sufficient details for the Agency to determine whether your actions effectively resolved the existing issues and will prevent similar violations in the future." That phrase, appearing across multiple violation sections, is worth compliance teams reading literally. FDA is not asking companies to describe a fix in general terms; it wants proof the fix closes the specific procedural gap that caused the failure, with evidence the correction was verified, not just implemented.
Is this connected to Novo's separate Wegovy advertising letter?
Not directly, but the timing matters. On February 5, 2026, a month before the pharmacovigilance warning letter, FDA's Office of Prescription Drug Promotion sent Novo an Untitled Letter over a Wegovy oral tablet TV ad, saying claims like "live lighter" and "a way forward" misleadingly implied the pill formulation was superior to other GLP-1 treatments without data to support it (FDA/OPDP Untitled Letter, Feb. 5, 2026). Two different FDA offices, two different regulatory bases, one company, five weeks apart. For a firm managing the highest-profile drug class on the market right now, that is a compressed enforcement cadence compliance and regulatory affairs teams should treat as a signal, not a coincidence.
What should compliance teams take from this?
- Audit your ADE exclusion criteria against the literal regulatory text. If any internal SOP defines "reportable" adverse events using a causality or relatedness filter, that language conflicts with 21 CFR 314.80's plain requirement to report regardless of perceived relatedness.
- Treat "missing patient identifier" rejections as a documentation problem, not a reporting exemption. FDA found identifiers in source documents that Novo's team had missed, a review-quality issue, not a genuine data gap.
- Never let a written procedure require reporter consent for follow-up. Nothing in PADE regulations conditions investigation on consent, and building that requirement into an SOP creates an affirmative violation.
- Closing a deviation is not the same as verifying the fix worked. FDA flagged that Novo closed root-cause deviations without confirming all affected cases were actually resubmitted.
- When responding to FDA, show the verification, not just the plan. Every corrective-action rejection in this letter cites the same gap: insufficient detail proving effectiveness, not absence of effort.
FAQ
What is a 15-day Alert report?
A 15-day Alert report is the FDA submission a drug manufacturer must file within 15 calendar days of first learning about an adverse drug experience that is both serious and unexpected, under 21 CFR 314.80(c)(1)(i). The clock starts at initial receipt of the information, not after internal medical review is completed (eCFR 21 CFR 314.80).
Does FDA require patient consent before a company follows up on an adverse event report?
No. FDA's warning letter to Novo Nordisk explicitly states that PADE regulations "do not require the obtaining of consent to acquire additional information," and cites Novo's consent-gated follow-up procedure as a root cause of unreported cases (FDA, March 5, 2026).
What happens if a company doesn't adequately respond to a warning letter within 15 business days?
FDA states that failure to adequately address the deficiencies "may lead to regulatory action," which can include further inspections, import restrictions, injunctions, or referral for civil or criminal enforcement, depending on severity and recurrence.
Is this warning letter related to Ozempic's safety being pulled or restricted?
No. The letter concerns Novo's internal reporting procedures and documentation practices, not a new safety finding about the drugs themselves. It addresses whether adverse events were properly surveilled and reported to FDA, not whether the products are unsafe for approved use.
Sources: FDA Warning Letter, Novo Nordisk Inc., MARCS-CMS 717576, March 5, 2026, FDA/OPDP Untitled Letter, Wegovy, Feb. 5, 2026, 21 CFR 314.80, eCFR. Byline: The Argus Regulatory Analysis Team. Published 2026-07-06.