Independent and not affiliated with the FDA, MHRA, ISPE, PDA, or any agency. Get the appgoutham@madhadi.com
madhadi.comData Integrity & GxP Quality
Browse all topics → Articles Templates & Procedures Learning paths GlossaryScenariosToolsRegulatory ReferencesLearning PathsTopics About Start here
Checklist Plug-and-play starting point Audits & Inspection

Checklist: Responding to a Records Request or Remote Regulatory Assessment

A plug-and-play checklist for handling an FDA Section 704(a)(4) records request or a remote regulatory assessment: logging, scope confirmation, assembly under document control, QA review, on-time production, and retaining what you sent, with a filled specimen.

Document type: Checklist

Read and copy the template below into your own quality system. It is a generic starting point for your own internal use, provided as is, with no warranty; see the Terms and License. Adopting it does not by itself create compliance.

This is a ready-to-use checklist for the inspection that arrives without a visit: an FDA records request under Section 704(a)(4) of the Federal Food, Drug, and Cosmetic Act, or a remote regulatory assessment (RRA). The records you send become the record of the examination, produced on a deadline, with no chance to explain in the room, so retrieval speed, completeness, and a proper true copy carry the whole event. Work each item and mark Pass / Fail / NA. Replace every <<FILL: ...>> placeholder and route it through your normal document control. A filled specimen follows. The background is in inspection readiness; confirm each cited authority against the current source before you rely on it.

Context header

FieldEntry
Request reference<<FILL: internal tracking ID>>
Type704(a)(4) mandatory records request / Mandatory RRA / Voluntary RRA
Date received<<FILL>>
Stated deadline<<FILL>>
Requesting office<<FILL: FDA office / investigator>>
Owner (coordinator)<<FILL: role/name>>

1. Intake and logging

#ItemPass / Fail / NA
1.1Request logged the day it arrived: date received, deadline, requesting office, and exact scope captured verbatim.
1.2Type confirmed: mandatory (704(a)(4) or mandatory RRA) versus voluntary RRA, and the consequence of each understood.
1.3A single coordinator and a named backup are assigned to own the response.
1.4Senior quality management and, where used, regulatory/legal are informed the same day.

2. Scope confirmation

#ItemPass / Fail / NA
2.1Every requested record, system, lot, date range, and format is identified and mapped to where it lives.
2.2Any ambiguity in the request is clarified with the requesting office in writing before assembly begins.
2.3The boundary is documented: what is in scope, and what is out of scope with a recorded reason.
2.4For a voluntary RRA, a decision to participate or decline is made and documented, recognizing that declining may prompt an on-site inspection.

3. Assembly under document control

#ItemPass / Fail / NA
3.1Each record is the correct, current version, retrieved from the controlled source.
3.2Copies provided are true/certified copies, with the certification recorded.
3.3Associated metadata and audit trails are included where the record’s meaning depends on them.
3.4Nothing is altered, backdated, completed, or “tidied” to send it; a gap found is handled as a deficiency, not edited away.
3.5Genuinely confidential commercial information is marked appropriately, without withholding a record the agency is entitled to.

4. Quality review before production

#ItemPass / Fail / NA
4.1QA reviews the assembled package for completeness against the request scope.
4.2QA reviews for accuracy and internal consistency (dates, signatures, cross-references reconcile).
4.3The package is exactly responsive: the records requested, and not a pile of unrequested extras that widen exposure.
4.4Sign-off recorded that the package is complete, accurate, and ready to produce.

5. Production and retention

#ItemPass / Fail / NA
5.1The package is produced by the stated deadline, through the channel the request specified.
5.2If more time is genuinely needed, a documented request for an extension is made before the deadline, not after.
5.3An exact copy of precisely what was sent, and the date/time sent, is retained (the equivalent of the on-site request log).
5.4Any follow-up questions or supplemental requests are logged and handled through this same checklist.

6. Acceptance criteria

The response is defensible when: the request was logged and scoped on arrival; the package is complete, accurate, and made of true copies with audit trails where needed; QA reviewed before anything left the building; nothing was altered to send it; the response met the deadline (or a timely, documented extension was agreed); and an exact copy of what was sent is retained. If you cannot later reconstruct precisely what the agency received, the response was not controlled.

7. References

Section 704(a)(4) of the Federal Food, Drug, and Cosmetic Act (records or other information in advance of or in lieu of an inspection), added for drugs by FDASIA (2012) and extended to devices and bioresearch monitoring by FDORA (2022). FDA guidance, Conducting Remote Regulatory Assessments, Questions and Answers (finalized 26 June 2025). 21 CFR Part 11 (electronic records and signatures); 21 CFR 211.180 and 211.194 (records). FDA guidance, Data Integrity and Compliance With Drug CGMP (2018).

Confirm the current version and clause numbers of each reference before issue.

8. Filled specimen

An illustrative completed intake and production summary. The company, systems, and numbers are illustrative; replace them with your own.

FieldEntry
Request referenceRR-2026-004
Type704(a)(4) mandatory records request
Date received03 August 2026
Stated deadline17 August 2026
ScopeBatch records and CDS audit trails for lots 26-0611, 26-0624; last EM trend report for the fill suite
Ambiguity clarifiedConfirmed “audit trails” meant the run-level CDS trails, in writing, 04 August
Assembled2 batch records, 2 CDS trail exports (certified copies), 1 EM trend report, rev current
QA reviewComplete and accurate; sign-off S. Rao, 12 August
Produced13 August, via the secure portal specified; deadline met with margin
RetainedExact copy of the sent package + transmittal timestamp filed under RR-2026-004

In this example the firm logged and scoped the request on arrival, clarified an ambiguity in writing before assembling, produced certified copies with the audit trails included, had QA review the package before it left, met the deadline with margin, and kept an exact copy of what was sent. That is a records request handled as the mandatory examination it is.

9. Common mistakes this checklist prevents

  • Treating a records request as lower stakes than a visit and missing the deadline.
  • Sending an incomplete set on the assumption that a follow-up conversation will fix it.
  • Producing records without QA review, so an inconsistency reaches the agency uncorrected.
  • Not keeping an exact copy of what was sent, so the examination cannot be reconstructed later.
  • Declining a voluntary RRA without realizing it can convert to an on-site inspection on short notice.
  • Editing or completing a record to close a gap the assembly exposed, converting a deficiency into a data integrity finding.

10. How to adapt this checklist

  1. Set your tracking scheme, coordinator role, and escalation contacts.
  2. Point the cross-references to your real document-control, true-copy, and deviation procedures.
  3. Pre-map where each common record type lives, so scope-to-location mapping in section 2 is fast under a deadline.
  4. Confirm the statutory basis and guidance status in section 7 against the current source before issue.
Use madhadi.com as an app Full screen, works offline, one tap from your home screen.