What a tissue product complaint has to set off

A complaint is where the reporting system starts

When something goes wrong with a tissue-derived product, the first document is usually a complaint. The tissue rules treat that document as the entry point to a defined process.

An establishment must establish and maintain procedures for the review, evaluation and documentation of complaints relating to the core requirements, and for their investigation as appropriate.

Complaints go into a designated file. That file has to contain enough information about each one for proper review and evaluation, including the distinct identification code of the product complained about.

It also has a second purpose written into the same sentence: enough information "for determining whether the complaint is an isolated event or represents a trend."

The file is not private

One clause in the complaint section changes its character. The complaint file must be made available for review and copying upon request from the agency.

That means the file is written for an outside reader who may show up later. It is an inspection artifact, not an internal inbox.

A buyer still cannot see it. Availability runs to the regulator, and nothing in the section requires publication of any complaint or any count of them.

Every complaint gets sorted into one of three outcomes

The review step asks a specific question. Each complaint relating to core requirements is reviewed and evaluated to determine whether it relates to a product deviation or to an adverse reaction, and whether a report is required.

If it represents an event that has to be reported, it must be reviewed, evaluated and investigated as soon as practical.

If it does not, the firm still has to decide whether an investigation is necessary. An investigation may include referring a copy of the complaint to another establishment that performed relevant manufacturing steps.

And if no investigation is made, that decision becomes a record of its own. The firm must keep a record including the reason no investigation was made and the name of the individual or individuals responsible for the decision.

Which products this reporting subpart actually covers

The reporting subpart names its own scope in one sentence, and it is narrower than people assume.

It is implemented for nonreproductive products described in the criteria section and regulated solely under section 361 of the Public Health Service Act. It also covers the establishments that manufacture them.

Then an exclusion, stated directly. Products that are drugs or devices regulated under the act are not subject to the regulations set forth in this subpart. Neither are biological products regulated under section 351 of the Public Health Service Act.

So a product that fails the criteria for the tissue-only pathway is not reported through this route. It falls under a different rulebook with different obligations, which is a separate question from whether anything is being reported at all.

The adverse reaction report, and its four triggers

The reporting duty splits into two halves. The first is adverse reactions.

An establishment must investigate any adverse reaction involving a communicable disease related to a product it made available for distribution. It must report one to the agency if it meets any of four conditions.

The four are stated as a list: if it is fatal; is life-threatening; results in permanent impairment of a body function or permanent damage to body structure; or necessitates medical or surgical intervention, including hospitalization.

Anything short of those four is investigated but not reported through this section. The reporting threshold is severity, not the fact of a complaint.

Fifteen days, on a named form, with follow-up

The clock is explicit. Each report goes on a Form FDA-3500A and must be submitted within 15 calendar days of initial receipt of the information.

Calendar days, not business days. The distinction matters because the deviation half of the same section is counted differently.

Investigation continues after the report. All adverse reactions that are the subject of a fifteen-day report must be investigated as soon as practical, with follow-up reports within fifteen calendar days of receiving new information or as requested by the agency.

There is a provision for a dead end. If additional information is not obtainable, a follow-up report may be required describing the steps taken to seek it and why it could not be obtained.

The deviation report, on a longer clock

The second half of the section covers product deviations rather than patient outcomes. The investigation duty is broad: all deviations related to a distributed product for which the establishment performed a manufacturing step.

The reporting duty is narrower. A deviation must be reported if it relates to the core requirements and occurred in one of two places. The establishment's own facility, or a facility performing a manufacturing step for it under contract, agreement or other arrangement.

That second clause is the interesting one. A deviation at a contractor is reportable by the firm that hired the contractor, so outsourcing a step does not outsource the report.

Each report contains a description of the deviation, plus information relevant to the event and the manufacture of the product. It also carries information on all follow-up actions taken or to be taken, with recalls named as an example.

The deadline is 45 days from discovery of the event, on Form FDA 3486, filed electronically through the agency's web application or by mail.

Two clocks, and where they start

The two halves of this section are easy to conflate and they behave differently.

The adverse reaction clock is fifteen calendar days and starts at initial receipt of the information. The deviation clock is forty-five days and starts at discovery of the event.

One is keyed to when you were told. The other is keyed to when you found out, which can be a date the firm sets itself.

Both flow out of the same complaint file, which is why the complaint procedure has a determination step built into it rather than a filing step.

What a reader can take from this

The reporting chain exists and it is specific, but it is almost entirely invisible from outside. Reports go to the agency, and the complaint file goes to an inspector.

What the structure does tell you is where responsibility lands. The establishment that performed or contracted for a manufacturing step carries the investigation and the report, including for work done by someone else.

It also tells you what a serious event looks like in regulatory terms: fatal, life-threatening, permanently impairing, or requiring medical or surgical intervention. That is a much higher bar than a bad experience.

Whether a given product falls under this subpart at all depends on which regulatory category it occupies, and a product page is not where that gets settled.

Sources

Each document below is named as it names itself, with the date printed on that document rather than the day it was read.

1. 21 CFR 1271.320, Complaint file — Electronic Code of Federal Regulations, title 21, August 2026
2. 21 CFR 1271.330, Applicability — Electronic Code of Federal Regulations, title 21, August 2026
3. 21 CFR 1271.350, Reporting — Electronic Code of Federal Regulations, title 21, April 2015