Method·August 12, 2026 · 3 min read

The letter FDA doesn't have to post

FDA runs two advisory-action letters, not one. Warning Letters post to a structured database on a rule-bound cadence. Untitled Letters, issued for the same kinds of violations minus the enforcement threat, post only when FDA decides three named criteria are met — and the database a monitoring pipeline actually watches was never built to carry them.

By Connor Griggs — Regulatory & Quality Strategist

FDA’s Regulatory Procedures Manual names two advisory-action letters, not one. A Warning Letter and an Untitled Letter both put a violation on record. Only one of them is promised a place in a public, structured database the day it goes out.

Two letters, one threshold between them

Under Chapter 4 of the RPM, FDA issues a Warning Letter for violations it considers of regulatory significance— the kind that may lead to enforcement action if a firm doesn’t correct them promptly. The letter says so, in words: it warns the recipient that inaction can escalate. An Untitled Letter cites a violation that doesn’t clear that bar. It carries no such warning — the RPM is explicit that an Untitled Letter does not include a statement that failure to correct may result in enforcement action. Same office, same statute, a different letter for a violation FDA has already decided is the lesser one.

One is a database. The other is a decision.

Warning Letters are redacted and posted to fda.gov as a matter of course, so the public can read one without filing a FOIA request. Untitled Letters carry no such standing commitment. FDA posts one only after the Center decides posting is appropriate under one of three named conditions — three or more FOIA requests already anticipated, a belief that posting would inform the public about a health risk, or a belief that posting would deter the same violation elsewhere. Meet none of the three and the letter can exist, be issued, close a case — and never appear on a public page at all.

A Warning Letter is a promise to publish. An Untitled Letter is a maybe.

The page that holds both, and the tool that watches one

CDRH keeps a single page, Letters to Industry, that lists Warning Letters, Untitled Letters, and “It Has Come To Our Attention” letters side by side. The structured warning-letter search tool — the JSON endpoint behind fda.gov’s warning-letter database, and the one FDA Radar’s own pipeline reads — is scoped to Warning Letters specifically. An Untitled Letter, even a posted one, was never built to surface there. A monitoring practice keyed only to the Warning Letter database isn’t wrong about anything it shows. It is silent about a category of FDA correspondence that lives one page over.

Per what FDA Radar monitors and how often, this is regulatory intelligence about where CDRH publishes its own correspondence, never regulatory advice about how a specific firm should read a specific letter.

Regulatory intelligence, not regulatory advice. This post describes method and published FDA records as of its date; decisions about a specific device belong with your regulatory professional.

Method
The lab is accredited. Not the device.
Practice
Breakthrough is law. STeP is a guidance.
Practice
MDSAP replaces routine. Not for-cause.
Method
No field on a 510(k) says what it treats
Method
Discretion is a policy. Exclusion is a statute.
Practice
Designated by one office. Approved by another.
Method
MedSun sits beside MAUDE, not inside it
Practice
The five-unit device never gets a K-number
Practice
Meeting the criteria isn't a tracking order
Method
The PMA clock doesn't stop at approval
Practice
The K-number doesn't track today's device
Method
A MAUDE report proves it was filed
Practice
Not every MDR starts with the manufacturer
Method
Completed. Not terminated.
Practice
The device-ban list has three entries
Method
The UDI exception has its own deadline
Method
MDUFA VI is being negotiated in public
Practice
The inspection manual changed, not the rule
Method
The count Congress had to legislate
Practice
The small-business rate isn't retroactive
Method
A detention order has no docket to read
Practice
PMA approvals moved off the Federal Register
Method
A citizen petition names names
Practice
A market withdrawal isn't a recall
Method
Not every device letter comes from CDRH
Practice
Closed on one device. Open on the rest.
Method
No IDE is confirmed until the PMA is
Practice
The remedial-action call sets the clock
Method
Jurisdiction is a letter, not a field
Practice
An address is not a footprint
Method
The final rule that isn't final yet
Practice
The special controls aren't in the record
Method
Exempt from GMP. Not from complaints.
Practice
The notify list isn't the shortage list
Method
A constraint can't be skipped. A script can.
Practice
No cron sends this. A person does.
Method
Corrected, not rewritten
Practice
Quiet is a finding, not a default
Method
The summary is public. The statement isn't.
Practice
A competitor's 513(g) leaves no trace
Practice
An empty response field proves nothing
Method
A petition is public. Its outcome isn't.
Practice
The panel is a category, not a meeting
Method
An accessory carries its own classification
Method
A TPLC report is a category, not a device
Practice
A 522 order is a question, not a verdict
Method
A PCCP change leaves no new record
Practice
Not every signal becomes a recall
Method
eSTAR did not remove the acceptance check
Practice
An early alert has no recall number yet
Practice
A consent decree isn't a database row
Method
The record has no cybersecurity field
Practice
Classification Change is not one event
Method
Publication date is not effective date
Method
One event. Many recall numbers.
Practice
Quantity is a sentence, not a number
Practice
How a firm told you is a field too
Method
A RIN outlives the document number
Method
The docket ID is not the comments
Practice
The 510(k) record doesn't name the predicate
Practice
The 510(k) FDA didn't review first
Practice
Cleared doesn't say which track it took
Method
The clock stops. The calendar doesn't.
Method
Why a guessed match never reaches you
Practice
The standards list never names a device
Method
The guidance isn't in the Federal Register.
Practice
Filtered. Not discarded.
Method
There are two recall databases, not one
Practice
Breakthrough status is confidential by law
Practice
One MAUDE report is not one malfunction
Method
A supplement number is not a track
Method
Cleared is not approved
Practice
Nationwide doesn't mean your building
Practice
Not every correction reaches FDA
Method
Registered. Not reviewed.
Method
Contact ODE is not a pathway
Practice
Almost no recall is FDA-mandated
Method
FDA's device names read like a card catalog
Practice
openFDA is free. It is not unlimited.
Method
GUDID stores the model. Not the box.
Practice
Detention doesn't need a warning letter
Method
A Class I device, a Class I recall
Practice
21 CFR 820 didn't move. Its contents did.
Method
The product code that doesn't exist yet
Practice
The classification posts. The 483 behind it doesn't.
Method
A recall has three dates, and the pipeline had to pick one
Practice
The count is real. The rate is not.
Method
The firm on the record is not the firm on the box
Practice
Low confidence is an instruction, not a hedge
Method
The same company, spelled three ways
Practice
A device that was never a medical device
Method
FDA's warning letters, addressed by column number
Practice
Your regulation has a decimal. FDA's watch doesn't.
Method
Three letters is too short to search for
Practice
Most warning letters never close
Method
The guidance that skipped the draft
Practice
Ongoing, as of when?
Method
The least interesting fact in a 510(k)
Practice
No recall arrives with a product code attached
Practice
The deadline that doesn't email you
Method
The warning letter has two dates
Method
How to monitor FDA without drowning
Practice
Your predicate was recalled. Now what?
Method
Why no item reaches you without a human