Supplements: How Supplement Regulation Actually Works
DSHEA (1994) shifted burden of proof to FDA to demonstrate harm after market entry. Roughly 75,000 supplement SKUs are sold in the US with no pre-market efficacy review. GMP certification requires manufacturing controls but not product testing.
| Measure | Value | Unit | Notes |
|---|---|---|---|
| Evidence Tier | 1 | tier | Tier 1 — regulatory framework is documented law and policy, not empirical study |
| DSHEA Enacted | 1994 | year | Dietary Supplement Health and Education Act signed October 25, 1994 |
| US Supplement Products on Market | ~75,000 | SKUs | Estimated 75,000–80,000 unique supplement products; FDA does not maintain a complete registry |
| FDA Adverse Event Reports (AERs) per year | ~50,000 | reports/year | Voluntary CFSAN AER system — widely considered a significant undercount of actual adverse events |
| GMP Inspection Rate | <50 | % compliant | FDA inspections consistently find ~50% or more of supplement facilities with GMP violations |
| Illegal Drug Found in Supplements (Tucker 2018) | 776 | products | 776 dietary supplement products over 10-year period found to contain undisclosed pharmaceutical ingredients |
DSHEA 1994: What the Law Actually Says
The Dietary Supplement Health and Education Act of 1994 is the foundational US law governing supplements. Before DSHEA, supplements were regulated more like food additives — manufacturers needed to demonstrate safety. DSHEA inverted this: supplements are presumed safe unless the FDA proves otherwise.
| Regulation Type | Prescription Drugs | OTC Drugs | Dietary Supplements | Medical Foods |
|---|---|---|---|---|
| Pre-market approval required | Yes (NDA) | Yes (OTC monograph) | No | No |
| Safety testing required before sale | Yes | Yes | No (manufacturer’s responsibility) | No |
| Efficacy testing required | Yes (Phase III RCTs) | Yes | No | No |
| Labeling health claims | FDA-approved only | Regulated | Structure/function + disclaimer | Supervised use |
| Post-market surveillance | Required (Phase IV) | Passive (MedWatch) | Voluntary (CFSAN AER) | Limited |
| Enforcement mechanism | Pre-market (proactive) | Pre-market + post | Post-market only (reactive) | Post-market |
What “FDA Registered” Actually Means
Supplement companies can register their facilities with the FDA. This does not mean the FDA has reviewed, tested, or approved their products. Facility registration is an administrative step. Many marketing materials use FDA facility registration to imply governmental approval — this is misleading.
GMP Certification: What It Does and Doesn’t Cover
FDA’s Good Manufacturing Practice regulations (21 CFR Part 111) require supplement facilities to maintain:
- Written manufacturing procedures and batch records
- Qualified personnel and training documentation
- Identity testing of incoming raw materials
- Controls to prevent contamination and mislabeling
- Systems to handle consumer complaints
GMP does not require testing finished products for potency, purity beyond identity, or biological activity. A GMP-certified facility that receives authentic ingredients and runs a documented production process is compliant — even if the final product has no measurable effect.
Structure/Function Claims: Legal Fiction
The phrase “supports energy metabolism” can legally appear on a supplement label with zero clinical evidence. The mechanism: DSHEA allows structure/function claims (distinct from disease claims like “cures fatigue”) without FDA pre-approval. The required disclaimer — “This statement has not been evaluated by the Food and Drug Administration. This product is not intended to diagnose, treat, cure, or prevent any disease.” — appears in fine print.
Most consumers do not read or understand the disclaimer. Most interpret “supports energy” as meaning the product has a demonstrated energy effect. Both the FTC (which governs advertising) and FDA (which governs labeling) have brought enforcement actions for egregious cases, but the volume of products makes comprehensive oversight impossible.
The Adverse Event Reporting Gap
The FDA’s CFSAN Adverse Event Reporting System (CAERS) is voluntary for consumers and healthcare providers. Mandatory reporting by manufacturers is required only for serious adverse events. Voluntary systems typically capture 1–10% of actual adverse events in pharmacovigilance research. With ~75,000 products on market, the 50,000 annual reports likely represent a significant undercount.
Related Pages
Sources
- Cohen PA. (2012). Assessing supplement safety — the FDA's controversial proposal. N Engl J Med 366(5):389–391.
- Dietary Supplement Health and Education Act of 1994. Public Law 103-417.
- Tucker J et al. (2018). Unapproved pharmaceutical ingredients included in dietary supplements associated with US Food and Drug Administration warnings. JAMA Netw Open 1(6):e183337.
Frequently Asked Questions
Does the FDA approve supplements before they reach store shelves?
No. Under DSHEA (1994), manufacturers do not need FDA approval before selling dietary supplements. The FDA can only act after a product is on the market and harm has been demonstrated. This is the opposite of the drug approval process, where manufacturers must prove safety and efficacy before sale.
What do GMP (Good Manufacturing Practice) regulations actually require?
FDA's GMP regulations (21 CFR Part 111) require supplement manufacturers to have quality control systems, accurate labeling, and manufacturing processes that consistently produce the labeled product. Critically, GMP does not require testing the finished product for efficacy — only that the production process meets quality standards. A GMP-certified facility can manufacture an inert product perfectly.
What is a 'structure/function claim' and why does it matter?
Structure/function claims are statements like 'supports immune health' or 'promotes energy metabolism.' Under DSHEA, manufacturers can make these claims without FDA pre-approval or proof of efficacy. They must be truthful (not misleading), accompanied by a disclaimer that the FDA has not evaluated the claim, and the manufacturer must notify FDA within 30 days of first use. The bar for 'truthful' is extremely low.
Can supplements legally contain dangerous ingredients?
Some do. Tucker et al. (2018, JAMA Netw Open) identified 776 supplement products over a 10-year period containing undisclosed pharmaceutical ingredients — including sildenafil (Viagra), sibutramine, and anabolic steroids. Weight loss, sexual enhancement, and sports performance categories had the highest rates. These were illegal under existing law but remained on shelves until FDA action.