Research
Where a side-effect report actually goes
There is a federal system for collecting reports of harm from medical products, and there are published rules about who must file into it. Most of this market sits outside those rules.
Two different questions, and this page answers one of them
Something goes wrong, and two questions arrive at once. What should happen next for the person, and where does a record of the event end up.
The first is a clinical question between a person and a clinician, and this site does not answer it.
The second is a question about plumbing. There is a national collection system for reports of harm from medical products, and there are published rules about who has to file into it and when.
Knowing the plumbing is useful for an unexpected reason. The gaps in it tell you a lot about how much published safety information a category is ever going to generate.
The program that takes reports from anybody
The agency runs a medical product safety reporting program that accepts reports from health professionals, patients and consumers alike.
Its own description says it receives reports from the public and, when appropriate, publishes safety alerts for regulated products. The list of product types it covers is broad: prescription and over-the-counter medicines, biologics, medical devices, combination products, cannabinoid hemp products and cosmetics.
Reports from members of the public are voluntary. Nobody is compelled to file one, and nothing about the system depends on the reporter being a clinician.
The agency points people toward it in plain language elsewhere. Its guidance on buying medicines online says that if you have an unexpected experience or side effect associated with the use of a medicine, you should report that information using the program. The same page points to a separate tool for reporting websites you believe are selling medicine unlawfully.
The database behind it, and its new name
Reports about drugs land in a database built for post-marketing safety surveillance of drug and therapeutic biologic products.
The agency describes its contents as adverse event reports, medication error reports, and product quality complaints that resulted in adverse events. Its structure follows an international safety reporting standard, and events are coded using a standard medical dictionary so that similar descriptions can be counted together.
The system is being renamed and consolidated. The agency now labels the page for it with a new title and notes the former name in brackets, describing a single platform intended to replace several separate reporting systems across product categories.
A public dashboard and quarterly data files sit on top of it. That matters for anyone trying to check a claim, because it means the raw material is browsable rather than locked away.
What a report is, in the regulation that defines it
The word "report" is doing quiet work here, and the defining regulation is precise about it.
It defines an adverse drug experience as any adverse event associated with the use of a drug in humans, whether or not considered drug related.
That last clause is the whole point. A report records that something happened while a drug was in use. It does not assert that the drug caused it, and the definition says so on its face.
The regulation also defines what makes an experience serious: death, a life-threatening experience, inpatient hospitalization or the prolongation of one, persistent or significant disability or incapacity, or a congenital anomaly. It adds that important medical events which do none of those may still count when they require intervention to prevent one of them.
And it defines unexpected in a way that catches people out. An experience is unexpected when it is not listed in the current labeling for the product.
Hold that definition against a category where products often carry very little labeling. The narrower the labeling, the wider the set of experiences that meet the definition of unexpected.
Who is actually required to file
Voluntary reporting from the public is one channel. Mandatory reporting from companies is the other, and it is the one with rules attached.
One rule covers marketed prescription drug products that are not the subject of an approved application. It requires manufacturers, packers and distributors to establish and maintain records, and to report all serious, unexpected adverse drug experiences. It also requires them to develop written procedures for surveillance, receipt, evaluation and reporting.
The urgent category has its own name and clock. Certain reports are filed as fifteen-day alert reports, with follow-up reports after them.
Outsourcing facilities are pulled into the same machinery by statute. The compounding law says such facilities shall submit adverse event reports in accordance with the content and format requirements established under that regulation.
The same statute puts the reporting address on the product. The container an outsourcing facility ships has to carry the web address and phone number of the reporting program, so the route to filing travels with the box.
The section that says nothing about reporting
The compounding law has two halves, and the half covering a pharmacist compounding for an identified individual patient reads very differently.
A search of that section for "adverse" returns one hit. Reading it shows the phrase is "an adverse effect on the safety or effectiveness of that drug product", inside a clause about products that are difficult to compound. A search for "report" returns one hit, and it is "reports in peer reviewed medical literature", inside criteria for a substances regulation.
The same two searches over the outsourcing facility section return four and eleven, and those hits are the reporting duties described above.
So the section governing pharmacy compounding for an individual patient contains no adverse event reporting requirement of its own. That is a statement about one federal section and nothing more.
It is not a finding that such a pharmacy has no obligation anywhere. The regulation above binds manufacturers, packers and distributors, and state boards of pharmacy impose their own duties. Whether a particular business falls inside any of those categories is a legal question a comparison site cannot settle.
Why the surveillance is thinnest where this market is thickest
Put the pieces together and a shape appears.
Mandatory reporting attaches to companies handling marketed prescription drug products, and to outsourcing facilities by name. A vial sold with a research-use-only label is not being offered as either. There is no dispensing, no prescription and no pharmacy record, so there is no point in the chain where a filing duty naturally attaches.
Voluntary reporting still works. Anyone can file, including a person who bought such a vial, and the public channel does not ask what category the product belonged to.
But a system that depends on voluntary reports produces less information than one backed by filing duties. That is the structural reason a person searching for published safety data on these compounds finds so little of it.
The absence of reports is therefore not evidence of safety. It is partly evidence that fewer parties are obliged to report, which is a different fact wearing the same clothes.
What is checkable before you need it
A few things are observable in advance, and none of them requires a lawyer.
Does the seller identify a dispensing pharmacy or an outsourcing facility by name, so there is a named party with published duties rather than a brand and a support address?
Does the packaging carry a route for reporting, as an outsourcing facility container is required to?
Does the seller publish anything about how it handles a report of harm, or does its written material go quiet at exactly that point?
Those answers say nothing about whether a product is safe. They say who would be on the other end of a report, which is a fact worth knowing while nothing is wrong.
Key takeaways
- The federal reporting program accepts voluntary reports from patients and consumers, not only clinicians.
- The regulation defines an adverse drug experience as an event associated with drug use "whether or not considered drug related".
- An experience is "unexpected" when it is not listed in the current labeling, which is a wide net for thinly labeled products.
- Manufacturers, packers and distributors of unapproved marketed prescription drugs must report serious, unexpected experiences.
- Outsourcing facilities are required by statute to report, and must print the reporting address on the container.
- The federal section on pharmacy compounding for an individual patient contains no reporting requirement of its own.
- Few reports is partly a fact about who is obliged to file, not evidence that little has happened.
Frequently asked questions
Where do consumer reports of a drug side effect go?
Into the agency's medical product safety reporting program, which accepts reports from health professionals, patients and consumers. It describes itself as receiving reports from the public and publishing safety alerts when appropriate, across prescription and over-the-counter medicines, biologics, devices, combination products and more. Reports about drugs feed a post-marketing surveillance database with a public dashboard and downloadable quarterly files.
Does a report in that system mean the drug caused the problem?
No. The regulation defines an adverse drug experience as any adverse event associated with the use of a drug in humans, whether or not considered drug related. A record in the system establishes that an event was reported alongside the use of a product. Establishing cause is a separate analytical exercise, which is why counting entries is not the same as measuring risk.
Who is legally required to report an adverse event?
For marketed prescription drug products without an approved application, the regulation requires manufacturers, packers and distributors to keep records and report all serious, unexpected adverse drug experiences. It also requires written procedures for surveillance and evaluation, and it puts certain reports on a fifteen-day clock. Outsourcing facilities are required by statute to submit adverse event reports under the same regulation.
Does a compounding pharmacy have to report adverse events?
The federal section governing compounding by a pharmacist for an identified individual patient contains no adverse event reporting requirement. Its only occurrences of "adverse" and "report" are unrelated phrases, read in full. That is a statement about one section. Reporting regulations bind manufacturers, packers and distributors, state boards impose their own duties, and whether a business falls inside any category is a legal question this site does not answer.
What counts as a serious adverse event?
The regulation lists death, a life-threatening experience, inpatient hospitalization or the prolongation of one, persistent or significant disability or incapacity, and a congenital anomaly. It adds that important medical events which do not meet those outcomes may still count when medical judgment says they jeopardize the patient and require intervention to prevent one of the listed outcomes.
Why is there so little published safety data on these compounds?
Partly because the mandatory reporting duties attach to parties this market often does not include. A vial sold with a research-use-only label involves no dispensing, no prescription and no pharmacy record, so no filing duty naturally attaches anywhere in the chain. Voluntary reporting still works and anyone can use it. But an absence of reports reflects who is obliged to report as much as it reflects what happened.
Sources
Each document below is named as it names itself, with the date printed on that document rather than the day it was read.
- Title 21 Code of Federal Regulations section 310.305, Records and reports concerning adverse drug experiences on marketed prescription drugs for human use without approved new drug applications — Electronic Code of Federal Regulations, Office of the Federal Register, June 2014
- MedWatch: The FDA Safety Information and Adverse Event Reporting Program — U.S. Food and Drug Administration, September 2026
- FDA Adverse Event Monitoring System (AEMS), formerly the FDA Adverse Event Reporting System (FAERS) — U.S. Food and Drug Administration, March 2026
- United States Code Title 21, Section 353b(a)(10) and (b)(5), Outsourcing facilities, 2024 Main Edition — Office of the Law Revision Counsel, U.S. House of Representatives, January 2025
- United States Code Title 21, Section 353a, Pharmacy compounding, read in full and searched for adverse event reporting duties, 2024 Main Edition — Office of the Law Revision Counsel, U.S. House of Representatives, January 2025
- BeSafeRx: Your Source for Online Pharmacy Information — U.S. Food and Drug Administration, September 2020