Expanded Access Is Not Informal: Lessons from a Recent FDA Warning Letter
In a recent FDA warning letter involving investigational distribution practices, the agency cited failures tied to regulatory authorization and documentation requirements. The specific facts are unique to that company, but the broader lesson applies to every emerging biotech developing an investigational product.
Expanded access is not informal.
When a product is still investigational, every use outside a formal clinical trial remains subject to defined regulatory pathways. Compassionate intent does not replace submission obligations. Urgency does not eliminate documentation requirements. And small company size does not reduce FDA expectations.
For early- and growth-stage biotechs, that distinction is critical.
Expanded Access Is a Structured Regulatory Pathway
Whether the product is a drug, biologic, or device, expanded access operates within a defined framework. Depending on the product type and situation, sponsors may need IND submissions or amendments, IDE supplements, IRB review, informed consent documentation, and formal notifications to the agency.
These are not technical details. They are core compliance elements.
A common misconception is that compassionate use exists in a regulatory gray zone. It does not. It is a regulated mechanism that balances patient needs with safety oversight and product development integrity.
If a company distributes an investigational product outside of an approved protocol, the FDA will expect to see:
Clear identification of the regulatory pathway used
Evidence that required submissions was made
Documentation of internal decision-making
Records of IRB involvement and informed consent
Accurate representations of the product’s regulatory status
If those records do not exist, the exposure becomes real.
Why Small Biotechs Are More Vulnerable
Large pharmaceutical companies typically manage expanded access through formal regulatory operations teams. Small biotechs often do not.
In a lean organization, a physician's request may arrive by email. A chief medical officer may make a rapid decision. A regulatory consultant may advise informally. Documentation may be stored across inboxes and shared drives.
When a patient is critically ill, the impulse to act quickly is understandable. But speed without structure creates risk.
Expanded access decisions require more than clinical judgment. They require regulatory analysis, documented approvals, and traceable records. When those steps are handled ad hoc, they depend entirely on memory and individual discipline.
That is fragile, especially under inspection.
The Gap Between Policy and Practice
Many companies have a written expanded access policy. Fewer have operational infrastructure that ensures the policy is consistently followed.
Without a structured process:
Requests may bypass regulatory review
Submission checkpoints may be missed
Decision rationales may not be recorded
Communications may overstate regulatory status’
Documentation may need to be reconstructed during inspection
When enforcement occurs, the issue is often not malicious intent. It is the absence of an embedded process.
As the volume of expanded access grows, this problem compounds. What feels manageable at five cases per year becomes unstable at fifty.
Regulatory expectations do not scale down because a company is early-stage.
Building Defensible Infrastructure Early
For emerging biotechs, the solution is not bureaucracy. It is clarity.
At a minimum, companies should ensure they have:
A defined intake pathway for expanded access requests
Clear decision authority
A regulatory submission checklist
Required documentation steps that cannot be skipped
Centralized record retention
Guardrails around external communications
The goal is not to slow access. It is to ensure that compassionate decisions are supported by a defensible process.
Inspection readiness is rarely built in response to an inspection. It is built in advance, through a disciplined workflow.
A Practical Step Forward
As companies advance into later-stage development, expanded access becomes an operational function rather than an exception. Embedding structured intake, regulatory checkpoints, and documented approval workflows into that function materially reduces preventable risk.
MedaSystems supports pharmaceutical and biotechnology companies in operationalizing expanded access and investigational workflows through structured, policy-driven platforms designed for regulated environments. By aligning compassionate access with a documented process, companies can serve patients while maintaining regulatory discipline.
Expanded access exists to help patients in urgent need. That mission deserves structure.
Compassion requires documentation. Documentation requires a process. Process requires infrastructure.
