FDA Section 522 Orders: The Plan Is Due in 30 Days — Surveillance in 15 Months

A Section 522 order looks, on the page, like a data-collection request. It is a statutory command with two independent clocks attached, and FDA does not treat either one as negotiable: a surveillance plan due within 30 days of the order, and surveillance that must begin within 15 months of the date FDA issued it. Miss either deadline and the device is misbranded under the Federal Food, Drug, and Cosmetic Act — a conclusion that has nothing to do with whether the underlying product is safe.

What makes a device eligible for a 522 order

FDA's authority under Section 522 reaches class II and class III devices, not every cleared or approved product. The order can issue at the time of clearance or approval, or at any point afterward if new information changes FDA's risk calculus — which is why a device years into commercial distribution can still receive one. The criteria are narrow by design:

• Serious adverse health consequences. Device failure would reasonably be expected to cause them.
• Long-term implant. The device is intended to be implanted in the human body for more than one year.
• Life-sustaining or life-supporting use outside a user facility. The setting, not just the function, matters.
• Significant pediatric use. Added by the FDA Amendments Act of 2007 as a fourth, independent trigger.

The 15-month clock does not pause while a plan works through FDA review. A plan that invites a request for modification has already spent weeks of runway before a single patient is enrolled. Why plan quality decides the real deadline

Why the plan itself is the point of failure

FDA does not review a 522 submission as a formality. Under 21 CFR 822.10, the plan has to name its objectives, study subjects, methodology, sample size, consent and IRB approach, the content and timing of reports, patient follow-up, and surveillance duration as distinct, reviewable elements — not folded into a general study synopsis. A plan that is thin on sample-size justification or monitoring procedure is the plan most likely to come back with a request for modification, and every week spent revising is a week subtracted from the 15 months. This is a different discipline than a postmarketing requirement or commitment: a PMR/PMC attaches to a drug or biologic approval to confirm efficacy or characterize a known risk, while a Section 522 order is a device-specific mechanism under Part 822 that can issue on its own schedule, with its own submission structure FDA checks element by element.

What noncompliance actually triggers

The consequence is not a deficiency letter. Under Part 822, failing to meet the 30-day or 15-month deadline — or failing to otherwise comply with an approved plan — makes the device misbranded under FD&C Act §502(t)(3), which is a prohibited act under §301(q)(1)(C). That status gives FDA access to its standard enforcement toolkit: seizure, injunction, prosecution, or civil money penalties, on top of whatever recall exposure the underlying safety question already carries. FDA's October 2022 final guidance, which replaced the May 2016 version, sharpened its expectations here specifically: it added surveillance status categories meant to surface slow enrollment and reporting gaps earlier, not just the binary of whether surveillance started on time. A program that technically commenced within 15 months but then stalls on enrollment is still exposed under the same statutory framing — a pattern FDA has pursued through warning letters against device manufacturers who missed enrollment and reporting commitments after an on-time start.

None of this is exotic once it is scoped correctly: fix the two trigger dates, build the plan to the regulation's named elements rather than an existing study design, and treat the post-approval reporting obligation as part of the same program rather than a separate, lower-priority task. Teams that route a 522 order through the same rigor as a complaint-handling and MDR program — owned, dated, and reported on a fixed cadence — are the ones who clear both clocks without drawing FDA's attention back to the file. If a 522 order has just landed, or a surveillance program is drifting against its own plan, that is the moment to get a second set of eyes on the submission before FDA's clock does the judging for you; our postmarket surveillance program support and device regulatory team both exist for exactly this gap.