The Workbench · Craft

A combination product's borrowed GMP clauses moved too

A combination product built around a drug constituent part doesn't get to run its quality system on drug CGMP alone, even where the drug carries the primary mode of action. 21 CFR Part 4's streamlined approach lets a manufacturer pick one CGMP framework as its operating system — drug CGMPs under 21 CFR 210 and 211, or the device quality system regulation — but §4.4(b) still requires layering in specific provisions borrowed from whichever framework wasn't chosen. For a drug-primary system, that borrowed list has always meant a handful of numbered device quality-system provisions. Those provisions didn't disappear when QMSR replaced the device regulation's own numbered structure on February 2, 2026. They moved, the same way the rest of that regulation's content moved, and a combination product's quality manual still citing the old subpart numbers is citing sections FDA's own conforming amendments have already pointed somewhere else.

The streamlined approach borrows; it doesn't blend everything

§4.4(a) sets the baseline: a single-entity or co-packaged combination product has to meet the full CGMP requirements applicable to each of its constituent parts, in full, unless the manufacturer takes the alternative §4.4(b) offers. That alternative is the streamlined approach — demonstrate compliance with all of one framework, drug CGMPs or the device quality system, plus a specified subset of provisions from the other, and the combination product is treated as compliant with both. The streamlined approach generally isn't available to a cross-labeled combination product, whose constituent parts stay under their own separate, full CGMP systems — though FDA's own guidance says it won't object to a streamlined system there either, when those constituent parts happen to be manufactured at the same facility.

A drug-primary system still owes five device provisions

Where a combination product runs its streamlined system on drug CGMPs, §4.4(b) has historically named a specific set of device quality-system provisions it still has to satisfy on top: management responsibility, design controls, purchasing controls, corrective and preventive action, and installation — the provisions that, under the old device regulation's own numbering, lived at 820.20, 820.30, 820.50, 820.100, and 820.170. Each one covers ground drug CGMPs don't reach on their own: design controls trace the device constituent's own development record; purchasing controls extend supplier qualification to that constituent's components and materials; CAPA gives the device side its own failure-investigation loop, distinct from the drug side's own deviation system.

Same content, new address

FDA's QMSR final rule didn't just replace the old device regulation's text with ISO 13485:2016 incorporated by reference — it carried conforming amendments into Part 4 alongside it, so the cross-references a combination product's streamlined system has always relied on point at the incorporated standard's own clauses rather than the numbering QMSR retired. Mapped onto ISO 13485's own clause structure, the same content this blog has already traced for the DMR's own move into Clause 4.2 and Clause 7 resolves the same way here: management responsibility sits at Clause 5, design and development at Clause 7.3, purchasing at Clause 7.4, corrective and preventive action at Clause 8.5.2 and 8.5.3, and installation activities at Clause 7.5.3. A combination product's quality manual that still cites “820.30” as the source of its design-control obligation is citing a subpart number Part 4's own conforming amendments no longer point to.

The mirror image runs the other way too

A combination product that instead runs its streamlined system on the device quality system as primary owes the equivalent debt back to drug CGMPs — a comparable, though not identical, set of Part 211 provisions specified in §4.4(b)(2). That list is worth checking against the current guidance directly rather than assumed symmetrical with the drug-primary list; the two directions of the streamlined approach borrow different amounts of documentation because a device constituent and a drug constituent fail, and get investigated, in different ways.

Where this meets the rest of the file

The purchasing-controls provision a drug-primary system borrows is the same discipline a supplier qualification file already has to carry for any device constituent's components, combination product or not, and the borrowed CAPA provision runs into the same tracker built to close a corrective action rather than just log one. A combination product's quality system doesn't get a separate, lighter version of either obligation just because it arrived by way of §4.4(b)'s borrowed list instead of a device manufacturer's own full quality system.

A streamlined-GMP cross-reference worksheet that maps §4.4(b)'s borrowed provisions to their current QMSR clause numbers, on both the drug-primary and device-primary side, is previewed in the launch catalog. If your program's mapping runs differently, the shelf takes that correction directly.

The Regulatory Toolkit launches soon — a free shelf of source-mapped templates, checklists and browser-only tools for regulatory teams. Get one email when it opens, or contribute a template.

All Workbench notes