FDA Tightens the Rules for Antibody (Serology) Test Manufacturers
Client Alert | 1 min read | 05.05.20
EDIT The U.S. Food and Drug Administration (FDA) walked back its policy that allowed COVID-19 antibody test kits to enter the market without agency review. In its original March 16 Final Guidance, FDA allowed commercial manufacturers to market and sell antibody test kits after internally validating their own products and notifying FDA. The Agency did not require emergency use authorization (EUA) as it did with PCR (molecular) testing, though seeking an EUA was “encouraged.”
The updated Final Guidance requires manufacturers to submit a completed EUA request within ten business days of notification to FDA that the assay has been successfully validated, or the date of publication of the guidance, whichever is later. This requirement applies even to already-marketed tests that did not previously receive EUAs. The Guidance states that if FDA becomes aware of questions or concerns about a test after notification, such as poor performance or misleading statements about the test, FDA will communicate those concerns to the manufacturer and provide the manufacturer an opportunity to address the questions or concerns. If the concerns cannot be or have not been addressed in a timely manner, and the manufacturer has already distributed the test, FDA would expect the manufacturer to suspend distribution of the test.
Appendix A to the Guidance offers a template for manufacturers’ submissions to FDA. The Appendix states that the clinical agreement data should be provided using at least 30 antibody positive samples for each immunoglobulin claimed and 75 antibody negative samples. The test should demonstrate a minimum overall 90.0% positive percent agreement and overall 95.0% negative percent agreement. In other words, tests should be able to accurately detect at least 90% of positive patients and produce false positives less than 5% of the time.
Contacts
Insights
Client Alert | 7 min read | 08.17.26
Delayed Notification of Cyberattacks May Trigger HIPAA Breach Notification Rule
After identifying a ransomware attack in 2021, OSF Healthcare System waited until its forensic investigation had concluded before notifying the U.S. Department of Health and Human Services (HHS) — and the affected individuals — of the breach. The 110-day delay (nearly double the 60-calendar-day notification deadline mandated by the HIPAA Breach Notification Rule) triggered an investigation from HHS’s Office for Civil Rights (OCR). The health system’s investigation determined that protected health information (PHI) had been stolen.
Client Alert | 4 min read | 08.14.26
License to Hack? The White House Greenlights Private-Sector Offensive Cyber Operations
Client Alert | 4 min read | 08.13.26
Supreme Court Confirms Contractual Loss of Bargain Without Repudiatory Breach
Client Alert | 7 min read | 08.12.26
Developments in Canadian Investment Treaty Practice: New FIPA Between Canada and UAE in Force


