Before the FDA Calls: Understanding Class I, II, and III Recall Classifications

The call rarely comes with much warning. A complaint surfaces, a routine audit flags a batch deviation, or a distributor notices something off with lot labeling — and suddenly your QA team is having a very different Monday morning. At that point, what matters most isn’t whether a recall is happening. It’s understanding which class of recall you’re facing and what that classification demands from you in the next 72 hours.

The FDA processed approximately 4,500 recall events in fiscal year 2023 across food, drugs, medical devices, cosmetics, and biologics. That number has been trending upward. And for most of the companies involved, the classification of their recall — Class I, II, or III — determined everything from their public notification obligations to the depth of their effectiveness checks. Getting that classification wrong, or not understanding it at all, compounds the problem considerably.

How FDA Classifies Recalls: The Core Framework

FDA recall classifications live in 21 CFR Part 7, Subpart C, along with the agency’s Regulatory Procedures Manual. The agency uses a Health Hazard Evaluation (HHE) process to assign one of three classes based on the severity of potential health risk to the public.

Class I is the most serious category. FDA assigns it when a product “presents a reasonable probability of causing serious adverse health consequences or death.” Think contaminated injectable drugs, implanted devices with documented failure modes, or food products with undeclared allergens capable of causing anaphylaxis. Class I recalls trigger the most aggressive response requirements — typically mandatory press releases, consumer-level effectiveness checks targeting 100% accountability of all distributed units, and ongoing FDA oversight throughout the recall’s execution.

Class II covers situations where a product “may cause temporary adverse health consequences, or where the probability of serious adverse health consequences is remote.” Mislabeled over-the-counter drug products, dietary supplements with potency deviations outside acceptable specification limits, or devices with non-critical software defects often land here. The response is still consequential, but the effectiveness check depth and public notification requirements are generally less intensive than Class I.

Class III applies when a product “is unlikely to cause adverse health consequences” but still violates FDA regulations. These recalls tend to involve labeling deficiencies, minor manufacturing deviations, or packaging non-conformances. They don’t generate headlines — but they do generate a formal regulatory record, and they still require a written recall strategy submitted to the agency.

One thing worth knowing: roughly 60–65% of all FDA recalls in recent years have been classified as Class II. Class I events make up a smaller share but attract the most scrutiny. And Class III recalls, while they feel routine, should never be treated casually — they still create a documented enforcement history that follows a firm through future inspections.

Who Initiates a Recall, and What Triggers the Clock

There’s a persistent misconception that FDA orders most recalls. In practice, the overwhelming majority — typically over 90% — are voluntary, initiated by the manufacturer, distributor, or importer before FDA formally demands action.

Voluntary recalls are governed by 21 CFR §§ 7.40 through 7.59. The moment a firm decides to initiate a voluntary recall, they’re expected to notify their FDA district office promptly and submit a written recall strategy within 10 working days. That strategy must cover the depth of recall (consumer level vs. retail vs. wholesale), the effectiveness check plan, and the approach for notifying accounts and customers in the distribution chain.

For medical devices, there’s an additional layer. Corrections and removals — the device-industry equivalent of a recall — fall under 21 CFR Part 806. Device manufacturers must submit an 806.10 report to FDA within 10 working days of initiating any correction or removal intended to reduce a health risk. The reporting requirements are specific and detailed, and firms that miss the filing window have created a separate compliance problem layered on top of the original issue.

The mandatory recall authority picture has expanded significantly since 2011. The Food Safety Modernization Act gave FDA explicit mandatory recall authority for human and animal foods. The FDA Safety and Innovation Act of 2012 extended that mandatory authority to medical devices. For drugs, FDA has held mandatory recall authority under 21 U.S.C. § 350l since FDASIA. What this means practically: if you don’t move voluntarily and FDA concludes there’s a Class I-level risk, they can compel the recall — and the enforcement record that follows is considerably more damaging than a self-initiated action would have been.

What the Classification Means for Your Response Timeline

Classification isn’t just a label. It directly drives the scope and intensity of what you’re required to execute.

Effectiveness checks are the mechanism FDA uses to verify that recalled products are actually being retrieved from the market. The agency’s Regulatory Procedures Manual specifies four check levels:

• Level A: 100% of consignees contacted
• Level B: Greater than 90% contacted
• Level C: Greater than 75% contacted
• Level D: 10% or fewer contacted

For Class I recalls, FDA nearly always requires Level A checks — every distributor, retailer, and in many cases consumer-level contact must be accounted for. For Class II, Level B is common. Class III recalls may only require Level C or D. The practical implication: a Class I recall across a broad national distribution network is an enormous operational undertaking. Companies that haven’t pre-built recall communication lists, lot-level distribution records, and customer contact databases routinely struggle to meet the accountability expectations — and that failure shows up in FDA’s audit of the recall’s effectiveness.

Public notification scales with classification as well. Class I recalls involving consumer-facing FDA-regulated products almost always generate a press release coordinated through FDA’s public recall database. Class II recalls sometimes generate public notices, particularly where consumer distribution is broad. Class III recalls rarely require consumer-level public notification. But FDA’s enforcement discretion here isn’t absolute — the agency can escalate notification requirements based on the product’s reach and the nature of the violation.

Timeliness matters more than most firms realize. The 10-working-day recall strategy window is firm. Delays signal to FDA that internal recall procedures weren’t operational — which creates its own audit exposure. When a Form 483 or Warning Letter follows the recall, demonstrated procedural gaps often receive more pointed criticism than the underlying product issue itself.

Common Recall Pitfalls We See in Practice

After working with manufacturers across pharmaceutical, medical device, dietary supplement, and food categories through regulatory compliance consulting engagements, a few failure patterns come up consistently.

Inadequate lot traceability. Without granular lot-level distribution records extending to the retail or customer level, firms can’t complete Level A effectiveness checks accurately. This isn’t just a recall problem — it’s a GMP documentation failure under 21 CFR Part 211 (drugs), 21 CFR Part 820 (devices), or 21 CFR Part 117 (foods). Recalls expose it publicly.

Delayed internal escalation. Firms sometimes sit on a potential issue for days or weeks while debating internally whether a recall is truly necessary. That deliberation period can matter when FDA later audits the timeline. The question they’ll ask: when did you first have knowledge of the defect? The gap between that date and the date you notified FDA is scrutinized closely.

Misclassifying the hazard severity. Some firms attempt to self-classify a recall at a lower severity level to reduce operational burden. FDA’s Health Hazard Evaluation process will arrive at its own classification regardless. If FDA concludes the event was Class I and the firm’s recall strategy was built for Class III expectations, the remediation effort — and the regulatory fallout — is significantly worse than if the firm had prepared correctly from the start.

A recall strategy that can’t be executed. A document that looks good on paper but doesn’t match operational reality (no mechanism for consumer-level outreach, no system to receive and reconcile returned goods, no assigned recall coordinator with actual authority) creates a compliance gap that audit teams are specifically trained to surface.

Building a Recall-Ready Program Before You Need It

The most effective recall programs are built when nobody is panicking. That means documented procedures with defined roles, a standing recall committee, clear escalation thresholds, and — critically — operational infrastructure that matches what the procedures say.

Under 21 CFR Part 211.192 and FDA’s broader GMP expectations, drug manufacturers should have written procedures covering how potential recall situations are identified, evaluated, escalated, and communicated to the agency. The same principle applies to device manufacturers under 21 CFR Part 820 quality system requirements, and to food facilities under Part 117’s preventive controls framework.

A mock recall exercise — running the full notification and traceability process on paper without an actual product issue driving it — is one of the most underutilized tools in the compliance toolkit. It surfaces distribution record gaps, communication bottlenecks, and procedure ambiguities at a time when correcting them is far less expensive than doing so under regulatory pressure. FDA’s own guidance on recall procedures encourages mock recall exercises as part of a mature quality system.

Our team at Aurora TIC regularly helps clients structure mock recall drills and recall readiness assessments as part of broader quality system engagements. What we find, more often than not, is that the recall procedure document exists — but the operational capability behind it doesn’t. That gap is precisely what FDA’s investigators are trained to identify during a for-cause inspection that follows a recall event.

FDA’s recall database is publicly searchable at FDA.gov. If you want to understand what’s being recalled in your product category right now, and at what classification level, spending 30 minutes there will tell you more about your industry’s real-world risk profile than almost any other free resource available.

Written by Sam Sammane, Founder & CEO, Aurora TIC | Founder, Qalitex Group. Learn more about our team

Talk to our compliance consultants Contact us

Related from our network

• ISO 17025-Accredited Analytical Testing for Recall Root Cause Analysis — Independent laboratory testing to support lot disposition decisions and root cause investigations during FDA recall events.
• GMP Compliance and Quality System Support for Canadian Manufacturers — Laboratory qualification, audit readiness, and Health Canada GMP documentation support for manufacturers distributing across North America.