HHS Announces Interim Enforcement Discretion for Section 503A Compounding with Certain Peptide Bulk Drug Substances

Background

On October 30, 2026, the HHS Office of the Secretary published a Federal Register notice of availability (FR Doc. 2026-22192; RIN 0910-ZD94) announcing a draft "Enforcement Discretion Policy Regarding 503A Compounding Using Certain Peptide Bulk Drug Substances," signed by Secretary Robert F. Kennedy, Jr. Under FD&C Act section 503A, a bulk drug substance that is neither the subject of an applicable USP or NF monograph nor a component of an FDA-approved drug must appear on the 503A bulks list, established through rulemaking. The six covered peptides do not satisfy that pathway. HHS acknowledges that compounded drugs are not FDA-reviewed for safety, effectiveness, or quality, but cites Pharmacy Compounding Advisory Committee (PCAC) proceedings, utilization data, and the lack of approved products as grounds for an interim policy to expand patient access while FDA reviews the substances.

For an in-depth analysis, read our full alert.

Scope and Covered Peptides

From September 2023 until April 22, 2026, each peptide was in FDA's Category 2 (evaluated, but with significant safety risks identified); Appendix B states this did not change any peptide's section 503A status. CDER recommended against listing each peptide, and PCAC voted in favor. HHS departs from CDER based on additional characterization data from FDA-registered sources, historical use, the nature of the safety concerns, and the policy's safeguards.

Conditions for Enforcement Discretion

The policy applies only while a peptide has not been addressed in a final rule, is not a component of an approved drug, lacks an applicable USP/NF monograph, and is not on the list at 21 CFR 216.23(a). HHS does not intend to take enforcement action when all of the following are met:

1. The peptide is listed in Appendix A, has the identity described in Appendix B, and is used only by the listed routes
2. The substance comes from a section 510-registered facility with a valid COA meeting FDA's guidance-based criteria
3. The original manufacturer is section 510-registered, CGMP-compliant, and identified by location on the COA; any registered repacker, relabeler, or reseller has validated and documented the manufacturer and COA
4. The compounder reports products, serious adverse events, and quality issues to MedWatch and the relevant states, and patient labeling explains how to report problems
5. Labeling states: "This is a compounded drug product. Not for resale."
6. The product contains a single Appendix A active ingredient; oral forms are supported by documented adequate human bioavailability; and the only device is an FDA 510(k)-cleared syringe
7. The product meets all other FD&C Act requirements, including the insanitary-conditions prohibition and section 503A's patient-specific prescription requirement

HHS also aims to steer patients away from research-use-only peptides from foreign manufacturers and toward a more controlled alternative.

Key Considerations

Enforcement discretion is not legalization. None of the peptides have been added to the 503A bulks list, so the statutory bulk-substance condition remains unmet. HHS states only that it does not intend to take federal enforcement action when every condition is met. The policy is not a safe harbor and does not make covered compounding lawful under section 503A, however long it lasts.

The policy is vulnerable. It lasts only until a final rule includes or excludes each peptide, has no reliable end date, and may be revisited in whole or in part. CDER's adverse record remains, and HHS's reweighing of it (characterizing several concerns as mechanistic, inferential, or based on limited information) is not an FDA safety and effectiveness determination. A successor administration could reverse course without amending any regulation.

State and private-litigation risk persist. The policy does not bind state boards, attorneys general, or other regulators, or displace state law. Plaintiffs may invoke the products' federal status in consumer-protection, false-advertising, or negligence claims; defenses such as preemption and the bar on private FD&C Act enforcement may apply, but the policy does not remove the risk.

Marketing and telehealth will draw scrutiny. Do not describe covered products as "legal," "legalized," "FDA approved," or "FDA compliant." Review claims substantiation, telehealth and patient-specific prescribing, fulfillment, and supplier qualification separately.

Best Practices

• Map products against Appendix A and permitted routes
• Audit suppliers and COAs against Appendix B, including the "Intended for human drug compounding" grade statement, the manufacturer's FEI number and address, a signed CGMP statement, and dosage-form-appropriate tests for non-injectables (the endotoxin and bioburden criteria apply to injectables)
• Update labeling, MedWatch and state reporting, and single-API and syringe-only packaging
• Consider commenting on Docket No. HHS-OASH-2026-0496 at Regulations.gov by November 13, 2026
• Before major investments, assess state-law and litigation exposure, seek regulatory-change termination rights, and keep a wind-down plan for inventory and patients
• Monitor 503A rulemaking and the current policy version on the HHS website