FDA Form 3486 is the official document used to report biological product deviations (BPDs) to the Food and Drug Administration. Under 21 CFR 600.14, licensed biological product manufacturers must submit this form within 45 calendar days of discovering any deviation that may affect the safety, purity, or potency of a distributed product. The FDA receives thousands of these reports annually—according to FDA data published in 2022, blood establishments alone submit over 13,800 BPD reports each year. Failure to submit a BPDR ranks among the top FDA 483 inspection observations for the biologics industry.
In this article, you will learn:
đź“‹ Who must file Form 3486 and the specific regulations that apply to your establishment type
⏰ The 45-day deadline and exactly when the clock starts ticking on your reporting obligation
📝 Step-by-step instructions for completing every section of the form correctly
⚠️ Common mistakes that trigger FDA warning letters and 483 observations
đź’» Electronic vs. paper submission methods and how to set up your FURLS account
What Is FDA Form 3486?
Form 3486 is the Biological Product Deviation Report (BPDR) form that FDA requires manufacturers to submit when a deviation or unexpected event occurs during manufacturing that may affect a distributed biological product. The form collects information about the deviation, root cause investigation, corrective actions, and affected products.
This form applies to three main categories of biological products. Blood and blood components fall under 21 CFR 606.171, which covers licensed manufacturers, unlicensed registered blood establishments, and transfusion services. Licensed biological products other than blood are governed by 21 CFR 600.14. Human cells, tissues, and cellular tissue-based products (HCT/Ps) must comply with 21 CFR 1271.350(b).
Do not use Form 3486 to report transfusion-related fatalities. Those require immediate notification under 21 CFR 606.170(b) by telephone, fax, or email, followed by a written investigation report within 7 days. Also, do not use this form to report adverse experiences with biological products—those go through the MedWatch system.
Who Must File Form 3486?
The reporting obligation depends on who had control over the product when the deviation occurred. This concept creates confusion for many establishments because biological products often move through multiple facilities before reaching patients.
| Establishment Type | Governing Regulation | What Triggers Reporting |
|---|---|---|
| Licensed biological product manufacturers | 21 CFR 600.14 | Deviation affecting distributed licensed product |
| Licensed blood/plasma manufacturers | 21 CFR 606.171 | Deviation affecting distributed blood components |
| Unlicensed registered blood establishments | 21 CFR 606.171 | Deviation affecting distributed blood components |
| Transfusion services | 21 CFR 606.171 | Deviation affecting transfused products |
| HCT/P manufacturers (Section 361) | 21 CFR 1271.350(b) | Core CGTP deviation affecting distributed HCT/P |
The responsible person is whoever had control over the product at the time of the deviation. This means if you contract with another facility to perform manufacturing steps, you remain responsible for reporting deviations that occur at that contractor while the product is under your control.
What Triggers a Reportable Deviation?
Not every quality issue requires a BPDR. Under 21 CFR 600.14(b) and 21 CFR 606.171(b), you must report an event only when it meets all of the following criteria:
Criterion 1: The event either represents a deviation from current good manufacturing practice (CGMP), applicable regulations, applicable standards, or established specifications—or represents an unexpected/unforeseeable event. In both cases, the deviation must be one that may affect the safety, purity, or potency of the product.
Criterion 2: The event occurs in your facility or in a facility under contract with you.
Criterion 3: The event involves a distributed product. This is critical—if you caught and quarantined the affected product before it left your facility, no BPDR is required for that specific issue.
According to FDA guidance on BPD reporting, you should use a decision tree to determine reportability. The key question is always: Did the event have the potential to affect safety, purity, or potency of a product that has already been distributed?
The 45-Day Deadline: When Does the Clock Start?
The regulations state you must submit BPDRs within 45 calendar days from the date of discovery—not the date the deviation occurred. The date of discovery is when you acquire information “reasonably suggesting that a reportable event has occurred.”
This distinction matters in practice. Consider this scenario: A testing error occurred on January 1st. You did not discover the error until January 20th during an internal audit. The 45-day clock starts on January 20th, not January 1st. Your BPDR is due by March 6th.
| Timeline Event | Date | Action Required |
|---|---|---|
| Deviation occurs | January 1 | None until discovered |
| Deviation discovered | January 20 | Clock starts—report due within 45 days |
| Report deadline | March 6 | Submit Form 3486 |
For events occurring at contract facilities, the discovery date is when the contractor learns about the deviation, not when you (the license holder) receive notification. This can create tight timelines if contractors delay communication.
The regulations say you should report as soon as possible, even if that’s before day 45. Earlier reporting demonstrates good faith compliance and gives FDA more time to assess potential public health risks. Delayed reporting—even within the 45-day window—can result in FDA 483 observations for failing to report “as soon as possible.”
Section-by-Section Instructions for Form 3486
The current version of Form FDA 3486 (4/23) contains eight pages. You only need to submit the pages relevant to your report—do not include blank pages. Here is how to complete each section correctly.
Section A: Facility Information
A1. Reporting Establishment Information
Enter the name and complete address of the establishment that had control over the product when the deviation occurred. This might not be your corporate headquarters.
Point of Contact: Enter the name of the person FDA should contact for questions about this report. Include their telephone number and email address. This should be someone with direct knowledge of the deviation and investigation.
Tracking Number: Enter your internal tracking number for this deviation. This number must be unique and should not exceed 25 characters. Do not use your establishment identification number as your tracking number.
A2. Reporting Establishment Identification Number
You must enter either your FDA Establishment Identifier (FEI) or your CLIA number. Most blood establishments use their FEI, which you can look up through FDA’s FEI Search Portal.
Transfusion services operating under CLIA certification (and not separately registered with FDA) may use their 10-character CLIA number instead. Contact your CLIA State Survey Agency if you need to verify your CLIA number.
A3-A4. Deviation Establishment Information
Complete sections A3 and A4 only if the deviation occurred at a different facility than your reporting establishment. This commonly applies when:
- A deviation occurred at a contract testing laboratory
- A deviation occurred at a distribution center
- A deviation occurred at an auxiliary donor center
- A deviation occurred at a contract manufacturing facility
For these situations, enter the establishment name, address, and identification number of the facility where the deviation actually occurred.
Section B: Biological Product Deviation Information
B1. Establishment Tracking Number
This is the same tracking number you entered in Section A1. It links your internal records to this report.
B2. Date BPD Occurred
Enter the date the deviation or unexpected event actually happened, using mm/dd/yyyy format. If you do not know the exact date, make your best estimate.
B3. Date BPD Discovered (Required)
Enter the date you acquired information reasonably suggesting a reportable event occurred. This is the date that triggers your 45-day reporting deadline.
B4. Date BPD Reported (Required)
Enter the date you are completing this report. If you save a draft for later submission, update this date before final submission.
B5. Description of BPD (Required)
Describe what happened in detail. Include:
- What the deviation was
- Summary of relevant information (labeling issues, test results, donor information)
- How the deviation was discovered
- What products were affected
Do not include confidential information such as donor names, patient names, or employee names. You have up to 3,999 characters for this field in the electronic system.
B6. Description of Contributing Factors or Root Cause (Required)
Explain why the deviation happened. FDA expects you to conduct a thorough investigation using recognized tools such as:
- Five-why analysis
- Fishbone (Ishikawa) diagrams
- Failure mode and effects analysis (FMEA)
- Fault tree analysis
If your investigation could not determine a root cause, state that explicitly and explain why. FDA views incomplete or absent root cause analysis as a serious compliance deficiency.
B7. Follow-Up (Required)
Describe your corrective and preventive actions (CAPA). Include both:
- Short-term actions (immediate corrections to address the specific event)
- Long-term actions (preventive measures to avoid recurrence)
You do not need to have implemented all corrective actions at the time of filing. However, you should describe your action plans.
B8. BPD Code (Required)
Enter the 6-character code that best describes your deviation. The code uses a three-level structure:
| Level | Format | Description |
|---|---|---|
| First Level | XX | System affected (e.g., DS = Donor Screening) |
| Second Level | YY | Subset of the system |
| Third Level | ZZ | Specific deviation type |
For blood products, use the Blood Deviation Codes list. For non-blood products and HCT/Ps, use the Non-Blood Product Codes.
If you cannot determine the appropriate code, enter question marks: ??-??-?? or LA-??-??.
Section C: Unit/Product Information
Check whether your deviation involves Blood products or Non-Blood products, then complete the appropriate page.
C1. Blood Products/Components (Page 5)
Enter the total number of units (not components). One whole blood donation that yields Red Blood Cells, Plasma, and Platelets counts as 1 unit with 3 components.
For each component, provide:
| Field | Description | Example |
|---|---|---|
| Unit # | Donor or lot number | ABC123456 |
| Collection Date | Date blood was collected | 01/15/2026 |
| Expiration Date | Component expiration | 01/22/2026 |
| Product Code | From Blood Product Code list | DB29 |
| Disposition | What happened to the product | Transfused |
| Notification | Did you notify consignee? | Yes/No/RN |
Disposition options for blood products include:
- No information
- Corrected by consignee
- Destroyed by consignee
- Expired
- Returned and corrected
- Returned and destroyed
- Sent for further manufacturing
- Transfused
- Other (explain in comments)
Notification uses three values:
- Yes – You notified the consignee
- No – You did not notify the consignee
- RN – Reverse notification (the consignee notified you)
Do not list products that were never distributed. The BPDR requirement only applies to distributed products.
C2. Non-Blood Products (Page 6)
Enter the total number of distributed lots affected by the deviation. For each lot, provide:
| Field | Description |
|---|---|
| Lot # | Product lot number |
| Expiration Date | Product expiration |
| Product Type | Category (Vaccines, Therapeutics, HCT/Ps, etc.) |
| Product Code | From Non-Blood Product Code list |
| Disposition | What happened to the product |
| Notification | Yes or No |
Product types include: Allergenics, Derivatives, In-Vitro Diagnostics, Therapeutics, Vaccines, “351” HCT/Ps (licensed), “361” HCT/Ps (regulated solely under Section 361), Gene Therapy Products, and Fecal Microbiota Products.
Section D: Additional Comments
Use this section to provide any information that does not fit in the structured fields. Common uses include:
- Explaining “Other” dispositions
- Listing additional unit numbers beyond the 18 rows on Page 5 or 6
- Providing context for product codes not on the standard lists
- Adding details about notification methods or timing
Three Real-World Scenarios
Scenario 1: Labeling Deviation at a Blood Center
A blood center discovers that 15 units of Red Blood Cells were labeled with incorrect expiration dates. The products were distributed to three hospitals before the error was discovered.
| Action | Consequence |
|---|---|
| Blood center labels RBCs with 35-day expiration instead of 42-day | Products distributed to hospitals with incorrect information |
| Error discovered during internal audit 10 days later | 45-day reporting clock starts on discovery date |
| Blood center notifies hospitals immediately | Products already transfused or destroyed |
| Blood center files Form 3486 within 45 days | Compliance with 21 CFR 606.171 |
BPD Code: LA-81-02 (ABO and/or Rh incorrect or missing) or LA-82-05 (Expiration date incorrect)
Who Reports: The blood center, because they had control over the product when the labeling error occurred.
Scenario 2: Contract Laboratory Testing Failure
A licensed biologics manufacturer uses a contract laboratory for potency testing. The contract lab used expired reagents on three lots that were subsequently distributed.
| Action | Consequence |
|---|---|
| Contract lab performs potency testing with expired reagents | Test results may be invalid |
| Manufacturer distributes three lots based on potentially invalid results | Product safety, purity, or potency may be affected |
| Contract lab discovers reagent issue during internal review | Discovery date for reporting purposes |
| Manufacturer must file Form 3486 | Manufacturer is responsible because product was under their control |
BPD Code: TE-03-01 or similar from the Non-Blood deviation codes (testing-related)
Who Reports: The licensed manufacturer, not the contract laboratory. The manufacturer had control over the product through the contract arrangement.
Scenario 3: HCT/P Distribution to Ineligible Recipient
A tissue bank distributes corneal tissue to a hospital. Post-distribution, the tissue bank discovers the donor had a previously unreported medical condition that affects eligibility.
| Action | Consequence |
|---|---|
| Donor screening missed relevant medical history | Donor eligibility determination was incorrect |
| Corneal tissue distributed and transplanted | Product used in patient |
| Tissue bank receives updated donor information 2 weeks later | Discovery date triggers 45-day clock |
| Tissue bank must file Form 3486 | Compliance with 21 CFR 1271.350(b) |
BPD Code: DE-XX-XX (Donor Eligibility category)
Who Reports: The tissue bank that made the HCT/P available for distribution and determined it met release criteria.
Electronic vs. Paper Submission
FDA encourages electronic submission through the eBPDR system, which is part of FDA’s Industry Systems (FIS) portal.
Setting Up Electronic Submission
- Create a FURLS account through FDA’s FURLS system
- Associate your establishment with your account using your FEI or CLIA number
- Verify registration information is correct in the system
- Browser requirements:Â Use Mozilla Firefox 43.0+, Google Chrome 49.0+, or Internet Explorer (with Compatibility View disabled)
Benefits of Electronic Submission
| Feature | Electronic | Paper |
|---|---|---|
| Submission speed | Immediate confirmation | Mail delays |
| Data validation | Real-time error checking | Manual review |
| Product upload | Excel file upload for large reports | Manual entry only |
| Session timeout | 30-minute limit with extension option | N/A |
| Amendment process | Email [email protected] with confirmation number | Mail to CBER |
Paper Submission
If you cannot use the electronic system, download Form FDA 3486 and mail completed forms to:
For CBER-regulated products:
Director, Office of Compliance and Biologics Quality
Food and Drug Administration
Center for Biologics Evaluation and Research
Document Control Center
10903 New Hampshire Avenue
Building 71, Room G112
Silver Spring, MD 20993-0002
For CDER-regulated biologics:
Division of Compliance Risk Management and Surveillance
Office of Compliance
Center for Drug Evaluation and Research
10903 New Hampshire Ave.
Silver Spring, MD 20993-0002
Amendments and Follow-Up Reports
You may need to submit additional information after your initial report. Send amended or follow-up reports by email to [email protected] for biological products or [email protected] for HCT/Ps.
Include in your email:
- Establishment identification number
- Your internal tracking number
- First listed unit or lot number
- Original submission date
- The confirmation number (if submitted electronically)
FDA Recall Classification and Form 3486A
When FDA reviews a BPDR and determines the event may warrant recall classification, you will receive an email from [email protected] requesting additional information via Form 3486A.
FDA classifies recalls into three categories:
| Class | Risk Level | Description |
|---|---|---|
| Class I | Highest | Reasonable probability of serious adverse health consequences or death |
| Class II | Moderate | May cause temporary or medically reversible adverse health consequences |
| Class III | Lowest | Not likely to cause adverse health consequences |
The additional information requested on Form 3486A includes:
- Distribution pattern
- Method of consignee notification
- Updated product disposition
- Industry recall contacts
According to FDA data, approximately 3% of submitted BPDRs require this additional information for recall classification purposes.
Mistakes to Avoid
Based on FDA 483 observations and warning letters, here are the most common BPDR errors:
Mistake 1: Failing to submit a BPDR at all
This is among the top 5 FDA observations for biologics. The consequence is a Form 483 observation, potential warning letter, and increased regulatory scrutiny.
Mistake 2: Missing the 45-day deadline
Even submitting at day 46 constitutes a violation of 21 CFR 600.14(c). The consequence is documented non-compliance during FDA inspections.
Mistake 3: Incomplete root cause analysis
FDA expects documented investigation using recognized quality tools. Stating “human error” without further analysis is insufficient. The consequence is FDA observation for inadequate investigation and potential repeat deviations.
Mistake 4: Failing to report deviations at contract facilities
You remain responsible for deviations at contractors working under your control. The consequence is regulatory action against your establishment, not the contractor.
Mistake 5: Including confidential information
Never include donor, patient, or employee names in BPDRs. The consequence is potential privacy violations and FDA rejection of the report.
Mistake 6: Using incorrect BPD codes
Select codes that accurately describe the deviation. The consequence is compromised FDA data analysis and potential follow-up requests.
Mistake 7: Not documenting product disposition
Track what happened to every affected distributed product. The consequence is incomplete reporting and potential recall complications.
Do’s and Don’ts
Do’s
✅ Do file as soon as possible—Even though you have 45 days, earlier submission shows good faith compliance and protects public health.
✅ Do investigate thoroughly—Use formal root cause analysis tools and document your investigation process.
✅ Do track all affected products—Maintain detailed records of every distributed unit or lot affected by the deviation.
✅ Do notify consignees promptly—Your internal procedures should specify notification timeframes, and you should follow them.
✅ Do keep records for 10 years—Biological product manufacturers must maintain deviation records for this extended period.
Don’ts
❌ Don’t wait until day 44 to start—Complex deviations may require extensive investigation before you can complete the form accurately.
❌ Don’t submit custom reports—Use the official Form 3486 format. FDA discourages attachments without the standardized form.
❌ Don’t report non-distributed products—If you caught and quarantined the product before distribution, no BPDR is required for that specific issue.
❌ Don’t confuse BPDR with fatality reports—Transfusion fatalities require immediate notification under 21 CFR 606.170(b), not Form 3486.
❌ Don’t assume contractors will report—The establishment with control over the product is responsible, which is typically the license holder.
Pros and Cons of Electronic Submission
Pros
Speed and efficiency: Electronic submission provides immediate confirmation that FDA received your report. Paper submissions may take days to arrive and be processed.
Data validation: The eBPDR system validates required fields before submission, reducing errors. Paper forms may be returned for missing information.
Bulk upload capability: You can upload product information from Excel files for reports involving many lots or units. This saves significant time for large-scale deviations.
Accessible records: Submitted reports remain viewable in the system for 90 days. You can print, copy, or reference previous reports easily.
Direct amendment process: Follow-up reports can be submitted via email referencing your confirmation number. No need to mail additional paper forms.
Cons
Technical requirements: You need specific browser versions and a stable internet connection. Some organizations with older IT infrastructure may face challenges.
Account setup time: Creating a FURLS account and associating establishments requires advance preparation. Do not wait until you have a deviation to set this up.
Session timeout: The system logs you out after 30 minutes of inactivity. Complex reports may require multiple sessions.
File format limitations: Excel uploads must be in .xls format (not .xlsx). Organizations using newer Excel versions must save in the older format.
Maximum character limits: Narrative fields allow only 3,999 characters. Very complex deviations may require careful summarization.
Key Contacts and Resources
| Purpose | Contact |
|---|---|
| BPDR questions (CBER) | [email protected] |
| HCT/P deviations | [email protected] |
| Blood establishment registration | [email protected] |
| Tissue registration | [email protected] |
| CDER BPDRs | [email protected] |
| Fatality reports | CBER Office of Compliance and Biologics Quality |
FAQs
Do I need to file a BPDR if the affected product was never distributed?
No. The reporting requirement under 21 CFR 600.14 and 21 CFR 606.171 applies only to distributed products. Quarantined products do not trigger a report.
Can I submit a BPDR after the 45-day deadline has passed?
Yes. You should still submit the report, but your submission will be documented as late. FDA may issue a 483 observation for the delayed filing.
Do I need a separate BPDR for each affected product lot?
No. If a single deviation affected multiple lots, you may report them all on one Form 3486. List all affected products in Section C.
Does submitting a BPDR mean I’m admitting the product caused harm?
No. Submission of a BPDR does not constitute an admission that the biological product caused or contributed to any adverse event.
Can a transfusion service file BPDRs even if they don’t manufacture products?
Yes. Transfusion services that had control over a product when a deviation occurred are required to report under 21 CFR 606.171.
Do I need to wait for my investigation to complete before filing?
No. You must file within 45 days even if your investigation is ongoing. Describe your action plans and submit follow-up reports with additional findings.
Is there a fee for submitting Form 3486?
No. There is no fee to submit a BPDR, whether electronically or by mail.
What if I can’t determine the root cause of my deviation?
State that explicitly in Section B6. Explain what investigative steps you took and why a definitive root cause could not be identified.
Do voluntary reports require Form 3486?
No. Form 3486 is for mandatory reporting of deviations meeting the regulatory criteria. Voluntary quality improvements or non-reportable events do not require this form.
Can multiple establishments file a joint BPDR?
Yes. When a deviation involves multiple facilities (such as a blood center and transfusing hospital for a transfusion fatality-related deviation), the establishments may coordinate and submit a joint report.