Field Notes: Sharper, Not Softer
AI oversight, disappearing records protections, and the new inspection reality under QMSR.
Three months into QMSR, the easy read is “FDA went quiet.” My own pull of the FDA inspection database, the new One-Day pilot, and the first AI citation in agency history say something else. Here’s what shifted this week.
1. Purolea Made “Did A Human Read This?” An Inspection Question
On April 2, FDA issued Warning Letter 320-26-58 to Purolea Cosmetics Lab. The citation: 21 CFR 211.22(c), Quality Unit oversight, specifically for “inappropriate use of artificial intelligence.” AI agents generated drug specifications, procedures, and master production or control records used without QU review. It is the first FDA warning letter explicitly citing AI over-reliance as a CGMP violation.
Purolea is a CDER drug facility. The principle is not. Quality Unit responsibility for AI-generated output sits inside QMSR via ISO 13485 Clause 4.1.6 (validation of computer software used in the QMS) and Clause 4.2 (control of documents and records). CDRH investigators read CDER warning letters. By this week, ProPharma, Sakara Digital, Complizen, ECA Academy, Greenlight Guru, and RAPS had all run framing pieces. The industry has metabolized it. Every device firm with an AI-assisted procedure, an AI-summarized complaint file, or an AI-drafted CAPA effectiveness check now has a public regulatory precedent to defend against.
FDA’s own standard is brutally simple: “If you use AI as an aid in document creation, you must review the AI generated documents to ensure they were accurate and actually compliant with CGMP.” Build the AI-output review record now. The 483 you avoid is the one already written somewhere else.
Source: FDA Warning Letter, Purolea Cosmetics Lab, 4/2/2026. https://www.fda.gov/inspections-compliance-enforcement-and-criminal-investigations/warning-letters/purolea-cosmetics-lab-722591-04022026
2. The 820.180(c) Records Shield Just Stopped Working
The April 1 QMSR Town Hall #2 confirmed it formally. FDA’s own QMSR FAQ states it plainly: “The exceptions that existed in the QS regulation at § 820.180(c) are not maintained in the QMSR.” Management review minutes, internal audit reports, and supplier audit reports that QSR kept off the inspection table are now requestable.
The citations are already arriving. Pulled from the FDA dashboard through April 22, the 80-day post-QMSR window includes 214 device inspections. Five of those inspections were cited for management review procedures not being documented (ISO 5.6.1), and another five for failure to conduct internal audits (ISO 8.2.4). Both clauses cover records and reports that were largely shielded under QSR. Inspectors couldn’t ask to see the management review minutes. Now they can. Both are already in the standing top-25 most-cited references, three months in.
Management review in most quality systems I’ve sat in worked from a defined list of input sources. The team quantified what they could. A lot wasn’t quantifiable. Decisions got made and documented, often thinly: entries like “no action necessary, see section X.X.” Management reps were doing their best to represent their quality system with the data they had. What was usually missing wasn’t effort. It was analytical rigor on the data, and a documented risk-based rationale for the decisions. The decision might have made sense to everyone in the room. Whether it would hold up in an audit was a different question. Under QSR, FDA never had to ask. Manufacturers only had to show a review occurred: agenda, minutes, signatures. The analysis behind the decisions stayed in-house. Now everything is fair game. Expect a justifiably critical evaluation of how those decisions get made and documented.
Sources: FDA QMSR Frequently Asked Questions. https://www.fda.gov/medical-devices/quality-management-system-regulation-qmsr/quality-management-system-regulation-frequently-asked-questions. FDA Device Inspection data through 4/22/2026 (FDA Inspections Dashboard, internal consolidated workbook).
3. FDA’s Two-Lane Sort: Fewer Citations, Tighter Findings
My own pull of the FDA inspection database through April 22 shows the post-QMSR per-day device citation rate down 52.6% (3.45 vs 7.28 in the matching FY25 window). Read fast and that says enforcement softened. It didn’t.
Look at the same data a different way. Percentage of inspections producing a 483 went up from 46.9% in the matching FY25 window to 50.5% post-QMSR. Average observations per 483 fell from 3.46 to 2.56. More inspections produce a 483, and each 483 is tighter. The citation framework also flipped overnight: pre-QMSR FY26 Q1 ran 81.8% 21 CFR 820 / 0% ISO 13485. Post-QMSR: 0.4% / 90.2%, with exactly one trailing CFR 820 citation from an inspection finalized 2/3. Any consultant, gap assessment, or remediation plan still framed in 820 language is communicating in the prior regulation.
The mechanism showed up this week. On May 6, FDA announced the One-Day Inspectional Assessments pilot, which covers multiple inspectorates including medical products. Approximately 46 assessments are complete since April, most ending NAI. The pilot is under FY26 evaluation. The official release attributes facility selection to “risk-based criteria.” That same day at FDLI, Commissioner Makary said it differently: “The one-day inspections are a screening inspection in low risk facilities that our AI is identifying as low risk.” HALO and Elsa 4.0 launched the same week, expanding Elsa to all FDA staff including investigators. FDA isn’t unanimous on what that means. At FDLI, Steven Musser, FDA’s Associate Commissioner for Human Foods, said it would be “difficult for an inspector to integrate this information during an inspection.”
That’s the story. AI ranks facilities at case selection. It is not yet running the inspection itself. NAI-likely sites get pulled into a one-day screening lane. The standard inspection pool is now weighted toward higher-risk firms. The post-QMSR numbers are not enforcement softening. They are case selection. Lane assignment is invisible to the firm being assigned, and the signals routing a site into the standard track are the ones HALO can already correlate: registration accuracy vs floor reality, complaint trending, MDR patterns, supplier overlaps, prior 483 history. The cheapest defensive QMS investment of 2026 is registration hygiene.
The QMSR transition pause has an expiration date. The two-lane sort does not.
Sources: FDA Device Inspection data through 4/22/2026 (FDA Inspections Dashboard, internal consolidated workbook). FDA press release, One-Day Inspectional Assessments, 5/6/2026. https://www.fda.gov/news-events/press-announcements/fda-launches-one-day-inspectional-assessments-strengthen-and-expand-oversight. RAPS, “Makary announces one-day inspection pilot for low-risk facilities,” 5/6/2026. https://www.raps.org/resource/makary-announces-one-day-inspection-pilot-for-low-risk-facilities.html. Bloomberg Law, 5/6/2026. https://news.bloomberglaw.com/health-law-and-business/fda-to-launch-pilot-for-single-day-domestic-foreign-inspections. RAPS, “FDA Officials Discuss New AI Tool HALO,” 5/7/2026. https://www.raps.org/resource/fda-officials-discuss-new-ai-tool-halo-other-applications-of-ai.html. FDA HALO/Elsa announcement. https://www.fda.gov/news-events/press-announcements/fda-expands-ai-capabilities-and-completes-data-platform-consolidation