Dietary Supplement Adverse Event Reporting Under DSHEA

Adverse Event Reporting and the Dietary Supplement Framework

Adverse event reporting protects both consumers and your business. When someone experiences a serious reaction to your dietary supplement, federal law requires you to report it to the FDA within 15 business days. Effective adverse event management under DSHEA goes beyond that single obligation — it's how companies identify safety patterns early, maintain regulatory compliance, and demonstrate their commitment to the people who use their products.

The Dietary Supplement Health and Education Act of 1994 established dietary supplements as a distinct product category, separate from conventional foods and drugs, and created a framework in which manufacturers are responsible for product safety before and after market entry. In 2006, the Dietary Supplement and Nonprescription Drug Consumer Protection Act amended that framework to add mandatory serious adverse event reporting — a change that formalized what had previously been a voluntary system.

Understanding these requirements is important for anyone whose company name appears on a supplement label. Whether you're a contract manufacturer producing for multiple brands, an importer bringing foreign products into the U.S., or a private label seller, you have independent reporting obligations under this framework. For broader context on adverse event management across regulated product categories, see our complete guide to adverse event management services.

Who Must Report: Responsible Persons Under DSHEA

The law identifies three categories of responsible persons with independent reporting obligations: manufacturers, packers, and distributors. According to FDA's guidance, the entity required to submit serious adverse event reports is the manufacturer, packer, or distributor whose name appears on the label of a dietary supplement marketed in the United States.

In practical terms, this means the label is the determining factor — not the role a company plays in the supply chain. A retailer whose name appears on a supplement label as distributor may, by written agreement with the manufacturer or packer, transfer responsibility for submitting adverse event reports, provided the retailer forwards all adverse events it receives to that party. If no such agreement exists and the retailer's name is on the label, the reporting obligation falls to them.

Multiple companies can have independent reporting obligations for the same product. A supplement manufactured by one company, packaged by another, and sold under a third company's private label may create three separate responsible persons, each required to submit reports independently. Companies involved in complex supply arrangements should evaluate carefully which entities bear reporting obligations and whether any formal delegation agreements are in place.

What Constitutes a Serious Adverse Event Under DSHEA

The law defines a serious adverse event as one that results in death, a life-threatening experience, inpatient hospitalization, a persistent or significant disability or incapacity, or a congenital anomaly or birth defect — or that requires, based on reasonable medical judgment, a medical or surgical intervention to prevent one of those outcomes. Section 761(a)(2) of the FD&C Act sets out this definition.

FDA's guidance clarifies that inpatient hospitalization includes initial admission on an inpatient basis even if the patient is released the same day, as well as prolongation of an existing inpatient hospitalization. The reasonable medical judgment standard for the intervention criterion means that a clinician's assessment of what was necessary to prevent a serious outcome is the relevant measure, not simply whether a procedure occurred.

Meeting any single criterion is sufficient to make an event reportable. Companies do not need to establish that the supplement caused the event before reporting — the standard is association, not causation. Submitting a report is not construed as an admission that the supplement contributed to the event.

Because these determinations involve clinical judgment, companies should have qualified medical reviewers involved in the triage process. Consistent internal criteria for seriousness assessment — documented in standard operating procedures — help ensure events are classified accurately and that the 15-business-day clock is tracked from the correct starting point.

The 15-Business-Day Reporting Requirement

The 15-business-day deadline is calculated from the date the responsible person receives the report — not from when the event occurred. Under FDA's guidance, the clock starts once the responsible person has the minimum data elements necessary to file a report: an identifiable patient, an identifiable initial reporter, the identity and contact information of the responsible person, the suspect dietary supplement, and a description of the serious adverse event.

Business days exclude weekends and federal holidays. This distinction matters for events received late in the week or near holidays, where a few calendar days can represent a smaller number of business days than companies might expect.

FDA's statutory language specifies the 15-business-day requirement for reports received through the address or phone number on the product label. For reports received through other channels, FDA's guidance recommends submitting within the same 15-business-day window, noting that prompt reporting across all channels is consistent with the public health purpose of the requirement.

Sources of Reports That Start the Clock

Adverse event information can arrive through a wide range of channels, and responsible persons need intake processes that capture reports consistently regardless of source. These include consumer contacts through label phone numbers or addresses, email or web form submissions, healthcare provider reports, social media and online platform mentions, published case reports in medical literature identifying a specific product, and information received through litigation-related communications.

FDA guidance notes that the responsible person's obligation to submit extends to reports received by any means. Companies that monitor only their primary consumer contact channels may miss reportable information arriving through other routes.

Sources of Reports That Start the Clock

FDA's guidance addresses situations where the responsible person doesn't initially have all the information needed for a complete report. The 15-business-day clock begins once the minimum data elements are known. If a report comes in with insufficient information to file, the clock starts when the additional information completing the minimum elements is received. An incomplete but timely report is compliant; a complete report submitted late is a violation.

FDA recommends that responsible persons make a reasonable effort to obtain complete information during initial contacts and follow-up. Using trained healthcare practitioners, structured questionnaires, or interview guides designed to capture relevant clinical details can improve the completeness of initial reports and reduce the need for subsequent FDA follow-up requests.

Follow-Up Reporting Within One Year

The reporting obligation does not end with the initial submission. If the responsible person receives new medical or other information about a previously reported serious adverse event within one year of the initial report, that new information must be submitted to FDA within 15 business days of receipt.

This ongoing obligation requires companies to maintain organized case files and systematic processes for recognizing when new information applies to a previously submitted report. Follow-up reporting can continue for months in cases involving ongoing medical treatment, product analysis, or investigation findings that develop over time.

How to Submit Reports to the FDA

Serious adverse event reports for dietary supplements may now be submitted electronically through the FDA Safety Reporting Portal or by mail using MedWatch Form 3500A, and must include a copy of the dietary supplement label. Reporters are encouraged to submit through the Safety Reporting Portal (SRP). Submission does not constitute an admission that the product caused or contributed to the adverse event, and responsible persons may include a statement to that effect with their report. Manufacturers should stay vigilant, as FDA reporting requirements and procedures may evolve over time.

Record Retention: Six Years for All Adverse Events

DSHEA requires responsible persons to maintain records of all adverse events — serious and non-serious — for six years from the date the report is received. This retention obligation applies to every adverse event report regardless of whether it required FDA submission.

For serious adverse events submitted to FDA, records should include copies of all submissions, follow-up reports, FDA correspondence, medical records obtained in connection with the case, and documentation of the company's internal assessment and conclusions. For non-serious adverse events, records should capture sufficient detail to understand what was reported, identify the product and lot, and enable investigation if similar events emerge over time.

FDA can access adverse event records during routine facility inspections. Companies should maintain records in a format that is organized and retrievable, with written procedures specifying where records are stored and how quickly they can be produced. Failure to maintain required records or to provide FDA access constitutes a violation subject to enforcement.

Companies that also manufacture or distribute other FDA-regulated products should maintain separate systems for dietary supplement adverse event records, as DSHEA's requirements differ from those governing drugs, medical devices, and cosmetics.

Integration With Current Good Manufacturing Practices

Adverse event reporting under DSHEA does not exist in isolation from a company's other quality obligations. FDA's dietary supplement current Good Manufacturing Practices under 21 CFR Part 111 require review of product complaints as part of ongoing quality assurance — and adverse event reports are a category of complaint that intersects directly with cGMP systems.

Patterns in adverse event data can surface quality issues that require action under cGMP: contamination, incorrect formulation, ingredient identity problems, or other manufacturing failures. Companies with well-functioning quality systems generally find that adverse event management fits into their existing complaint handling infrastructure, with clear escalation paths for serious events that require FDA reporting.

FDA's AEMS Database and Signal Detection

FDA maintains the Adverse Event Monitoring System (AEMS), which contains mandatory serious adverse event reports submitted by responsible persons as well as voluntary reports from consumers and healthcare providers. The database covers both dietary supplements and conventional foods, amongst other product classes overseen by FDA.

FDA uses AEMS data to identify safety signals — patterns suggesting an emerging concern associated with a particular ingredient, product, or product category. Signals can come from a cluster of similar reports, an increasing frequency of a specific event type, or a single well-documented case involving an unusual outcome. When FDA identifies a signal, it may investigate further, request product samples, consult outside experts, or take regulatory action.

Companies that analyze their own adverse event data with the same rigor they apply to regulatory submissions are better positioned to detect patterns before they become the subject of FDA inquiry. Early internal identification of a safety signal allows for proactive response rather than reactive scrambling under regulatory pressure.

Building Operational Systems for DSHEA Compliance

Meeting DSHEA's reporting requirements consistently depends on operational systems that function reliably across intake, assessment, submission, follow-up, and recordkeeping. Companies at different stages of building these capabilities often evaluate several core areas:

• Intake coverage: Are all channels through which adverse event reports might arrive — phone, email, website, social media, sales team contacts — captured and triaged consistently?
• Seriousness assessment: Is there a documented process for assessing whether reported events meet the serious adverse event threshold, with access to qualified medical reviewers for cases that require clinical judgment?
• Timeline management: Are deadline tracking systems in place for both initial reports and follow-up submissions, with alerts that account for business days rather than calendar days?
• Recordkeeping: Are records being maintained in a format that can be produced for FDA inspection, with written procedures specifying retention location and access protocols?
• Staff training: Have staff who handle consumer contacts and complaints been trained to recognize potential adverse events and escalate appropriately? Is there a process for documenting and storing training records?

Whether a company builds these capabilities internally or works with a specialized partner, documented processes and clear accountability are foundational to consistent compliance. FDA inspectors look for evidence of systematic approaches — written SOPs, training records, case files — not just outputs.

We work with companies across regulated industries to build adverse event management programs that fit their specific product categories and operational realities. If you're evaluating your current approach or building a new program, we can discuss what makes sense for your situation.

FDA Reference Sources

The following FDA sources were used to develop this content. We recommend consulting these directly for the most current guidance, as FDA updates its guidance documents periodically.

1. FDA, "Guidance for Industry: Questions and Answers Regarding Adverse Event Reporting and Recordkeeping for Dietary Supplements as Required by the Dietary Supplement and Nonprescription Drug Consumer Protection Act" (September 2013) — fda.gov/media/87434/download

2. FDA, Section 761 of the Federal Food, Drug, and Cosmetic Act (21 U.S.C. 379aa-1) — the statutory basis for dietary supplement serious adverse event reporting requirements

3. FDA Safety Reporting Portal — for electronic submission of serious adverse event reports

4. FDA MedWatch Form 3500A — fda.gov/safety/medwatch (for paper submissions)

5. FDA, 21 CFR Part 111 — Current Good Manufacturing Practice in Manufacturing, Packaging, Labeling, or Holding Operations for Dietary Supplements

6. FDA CAERS (Center for Food Safety and Applied Nutrition Adverse Event Reporting System) — fda.gov/food/compliance-enforcement-food/cfsan-adverse-event-reporting-system-caers

Note for reviewers: Please verify the current FDA mailing address for paper submissions and confirm the FDA Safety Reporting Portal URL are accurate at time of publication. Also flag if the September 2013 guidance has been superseded by a more recent version.