Section 503A is an exemption, not an approval, and it is conditional on four things. A patient-specific prescription; a licensed pharmacist or physician doing the compounding in a licensed facility; bulk substances that either have a USP monograph, appear on the FDA's 503A bulks list, or are components of an approved drug, each with a certificate of analysis from a registered supplier; and the preparation must not be essentially a copy of a commercially available drug. That last condition is the one that moves: it turns on the shortage list, and what was lawful under 503A while a product was in shortage stops being lawful when the shortage is resolved. None of the four requires the finished preparation to be tested, which is the gap that independent assay fills.
This is a regulatory question with a clean answer, unusually for this family.
Outsourcing facilities may produce without a patient-specific prescription, register federally, are inspected on a risk-based schedule and are subject to current good manufacturing practice.
503A versus 503B
| Dimension | 503A | 503B outsourcing facility |
|---|
| Prescription required | Patient-specific | Not required |
| cGMP compliance | Exempt | Required |
| Primary regulator | State board | FDA registration and inspection |
| Release testing | Generally none | Required |
| Operative standard | USP <795> / <797> | cGMP plus USP |
| Practical consequence | Potency varies between sites | Potency is tested before release |
Concretely, adverse event reporting obligations attach to the outsourcing category and not to the patient-specific one, which is a real difference in the information that exists about what a facility produces.
Nothing here is legal or medical advice.
The category tells you which standards apply, not how good the preparation is.
edited 9 Dec 2025 by ilaria_bertone — added a caveat about sampling