Research · 11 min read

What a REMS Is, and Why These Labels Do Not Carry One

A boxed warning and a restricted-access program are different instruments, and having the first does not imply the second. Across six approved labels in this category, the phrase does not appear once — while a control label from another drug returned it 47 times in the same pass.

Key takeaways

  • A REMS is a program FDA requires a company to run, not language on a label, and the standard is that it be necessary to ensure the drug's benefits outweigh its risks.
  • Across six approved labels in this category read as structured product data, the phrase appears zero times, with a control label returning it 47 times in the same pass.
  • That census covers those six labels only; it is not a query of FDA's REMS database.
  • The statutory minimum is just an assessment timetable — 18 months, three years, and the seventh year — which a patient would never encounter.
  • Optional middle-tier elements include a Medication Guide, a patient package insert, a provider communication plan, and packaging or safe-disposal requirements.
  • Restrictive elements are available only where a drug could be approved only if, or would be withdrawn unless, they were imposed.
  • FDA may require a strategy after approval on new safety information, with 120 days for the holder to propose one.
  • A compounded preparation has no approved application, so no strategy attaches to it under this section.

Answer first: a REMS is a program, not a warning

A risk evaluation and mitigation strategy is something FDA requires a company to run. It is not text on a label. At its heaviest it can decide which prescribers may write for a drug, which pharmacies may dispense it, and whether a patient is enrolled in a registry.

The trigger is a determination by FDA that such a strategy is necessary to ensure that the benefits of the drug outweigh the risks. That phrase repeats through the statute and is the whole standard.

Six approved labels in this category were read in full as structured product data: the two semaglutide injections, the semaglutide tablet label, the two tirzepatide injections, and the orforglipron tablet. The words "REMS" and "Risk Evaluation and Mitigation" appear zero times across all six.

That count is only worth something if the search could have found the phrase, so a control was run in the same pass. A marketed isotretinoin label returned "REMS" 47 times and "iPLEDGE" 34 times. All six of the labels above returned a boxed warning and dozens of mentions of thyroid in the same pass, so the documents were read rather than empty.

What the census does and does not establish

It establishes that the phrase is absent from the text of those six approved labels, measured with an instrument shown to fire on another drug's label in the same run.

It is not a query of FDA's REMS database, and nothing here should be read as one. A separate agency system holds the authoritative list of approved strategies.

It says nothing about any product outside those six. Other products in and near this class exist, and each would need its own reading.

And it is a statement about today's labeling. The statute expressly allows FDA to require a strategy after approval, so absence now is not a permanent condition.

The six factors behind the decision

The statute does not leave the determination to instinct. It lists what the Secretary shall consider in deciding whether a strategy is necessary at initial approval.

The estimated size of the population likely to use the drug. The seriousness of the disease or condition being treated. The expected benefit of the drug for that condition. The expected or actual duration of treatment.

Then the two that carry the most weight in practice. The seriousness of any known or potential adverse events that may be related to the drug, and the background incidence of those events in the population likely to use it. And whether the drug is a new molecular entity.

That fifth factor is the one people skip, and it explains a lot of otherwise puzzling decisions. A serious event that already occurs at some rate in the population being treated is weighed against that background rate, not in isolation.

There is also a procedural guardrail worth knowing. Determinations under this subsection may not be delegated downward. They must be made by individuals at or above the level of those empowered to approve a drug, such as division directors within the Center for Drug Evaluation and Research.

The lightest version of a strategy is a schedule

A common misconception is that any REMS means restricted access. The statute's minimum is far smaller than that.

The minimal strategy is a timetable for submitting assessments of the strategy. It must include an assessment 18 months after the strategy is initially approved, another at three years, and another in the seventh year.

Beyond those three, the frequency is set in the strategy itself and can be increased or reduced as needed.

And it can end. Assessments may be eliminated after the three-year period if the Secretary determines that serious risks of the drug have been adequately identified and assessed and are being adequately managed.

So a drug can carry a strategy that a patient would never notice, consisting entirely of a reporting schedule between the company and the agency.

The middle tier: guides, letters and packaging

Above the timetable sit optional elements FDA may require, each on its own determination.

A Medication Guide, provided for under the same part of federal regulation that governs Medication Guides generally, and a patient package insert if the Secretary determines it may help mitigate a serious risk.

This is where a real distinction lives. A Medication Guide can be required through the Medication Guide regulation on its own, and it can also be required as an element of a strategy. The presence of a guide therefore does not tell you a strategy exists.

A communication plan to health care providers is another optional element. The statute lists what it may include. Letters to providers. Information about the strategy's elements, to encourage implementation or to explain safety protocols such as periodic laboratory tests. Information through professional societies about serious risks and safe-use protocols. And information about drug formulations or properties, and how those may relate to serious adverse events.

Packaging and disposal is a third. Where there is a serious risk of the kind the statute defines, FDA may require unit dose packaging, packaging that provides a set duration, or another packaging system. It may instead require dispensing with a safe disposal packaging or system, where that may mitigate the risk and is sufficiently available.

The heavy tier, and the bar it has to clear

Elements to assure safe use are the restrictive ones, and the statute sets a high threshold before they can be imposed.

They are available where the drug has been shown to be effective but is associated with a serious adverse drug experience. A second condition applies too. The drug can be approved only if, or would be withdrawn unless, those elements are required to mitigate a specific serious risk listed in the labeling.

Read that standard carefully. It is not "this drug has risks". It is "this drug cannot stay on the market without these controls".

Where the bar is met, the elements may require several things. That prescribers have particular training or experience, or are specially certified. That pharmacies, practitioners or health care settings dispensing the drug are specially certified. That the drug be dispensed only in certain settings such as hospitals. That it be dispensed with evidence or documentation of safe-use conditions such as laboratory test results. That each patient be subject to certain monitoring. Or that each patient be enrolled in a registry.

Access protections are written in alongside. Training or certification opportunities must be available to any willing provider from a frontier area through a widely available method, including an online course or by mail, at reasonable cost to the provider.

The burden test

The statute treats restricted access as a cost, not a free good, and builds in a review of that cost.

FDA must seek input from patients, physicians, pharmacists and other providers, through its Drug Safety and Risk Management Advisory Committee or another advisory committee. The question is how these elements may be standardized so as not to be unduly burdensome on patient access, and to minimize delivery-system burden as far as practicable.

It must periodically evaluate whether the elements for one or more drugs actually assure safe use, are not unduly burdensome on patient access, and minimize delivery-system burden.

And it must act on what it learns, by issuing or modifying guidance and by modifying elements for one or more drugs as appropriate.

That is the trade the whole section is built around. Every control that keeps a drug on the market also keeps some patients off it, and Congress required the agency to keep measuring which way that balance is running.

What would change if one were ever required here

The postapproval route is live. Where FDA approved an application without requiring a strategy, it may later require one for that drug. The trigger is that it becomes aware of new safety information and determines a strategy is necessary. That power extends to acting on a supplemental application for a new indication.

The company then has 120 days from notification to submit a proposed strategy, or such other reasonable time as the Secretary requires to protect the public health.

For a reader buying through a telehealth program, the elements that would bite are specific. Prescriber certification would mean the clinician writing for you has to hold it. Pharmacy or setting certification would mean the dispensing pharmacy has to hold it. Documentation of safe-use conditions would mean a lab result has to reach the pharmacy before it fills. Registry enrollment would mean your participation is recorded in a program.

None of those is in place for these six labels today. That is worth knowing in both directions: it is one fewer barrier, and it is also one fewer external check on who is receiving the drug.

Where a compounded preparation sits

The section is written around approved applications throughout. The strategy is submitted as part of an application, the postapproval power runs against the holder of an approved covered application, and the elements attach to labeling approved by FDA.

A compounded preparation has no approved application, so nothing in this section produces a strategy for one. That is a scope fact about the statute rather than a safety finding about any pharmacy.

It does mean the entire tier of controls described above — prescriber certification, pharmacy certification, documented safe-use conditions, patient registries — has no federal source for a compounded preparation. Whatever equivalent exists is the compounder's or the program's own, adopted voluntarily.

The reasonable question to ask a program is therefore not whether it complies with a strategy. It is what it does instead, and who outside the company checks it.

Sources

  1. 21 U.S.C. 355-1 — Risk evaluation and mitigation strategiesUnited States Code, 2023 Edition, via the U.S. Government Publishing Office (govinfo.gov) · United States Code, 2023 Edition — the edition date printed on the document itself · Retrieved September 2026Subsection (a)(1) for the necessity determination and the six factors — estimated population size, seriousness of the disease or condition, expected benefit, expected or actual duration of treatment, seriousness of known or potential adverse events together with their background incidence in the likely population, and whether the drug is a new molecular entity. Subsection (a)(2) for the postapproval power on new safety information, including supplemental applications for a new indication, and the 120-day submission window with the public-health alternative. Subsection (a)(4) for the non-delegation rule requiring determinations at or above the level of individuals empowered to approve a drug, such as division directors within CDER. Subsection (d) for the minimal strategy — an assessment at 18 months, at three years and in the seventh year, frequency set in the strategy, and elimination after the three-year period where serious risks are adequately identified, assessed and managed. Subsection (e)(2) for the Medication Guide and patient package insert elements; (e)(3) for the communication plan and its four listed contents; (e)(4) for packaging and safe-disposal elements. Subsection (f)(1) for the threshold that the drug can be approved only if, or would be withdrawn unless, elements are required to mitigate a specific serious risk listed in the labeling; (f)(3) for the six elements to assure safe use and the frontier-area training and certification access provision; (f)(5) for the advisory committee input, the periodic evaluation against the unduly-burdensome and delivery-system-burden tests, and the duty to issue or modify guidance and modify elements.
  2. Structured product labels for six approved products, DailyMed API v2 (XML)U.S. National Library of Medicine, National Institutes of Health · Labels as served by the API on the retrieval date; the URL above is the WEGOVY setid, one of the six read · Retrieved September 2026The census. Six labels were fetched as XML in one run and searched on the raw document, case-insensitively, for the literal strings "REMS" and "Risk Evaluation and Mitigation": WEGOVY (semaglutide injection, 942,510 characters), ZEPBOUND (tirzepatide injection, 819,859), MOUNJARO (tirzepatide injection, 718,422), OZEMPIC (semaglutide injection, 625,740), the semaglutide tablet label carrying both RYBELSUS and OZEMPIC (397,716), and FOUNDAYO (orforglipron tablets, 362,638). Every one returned zero for both strings, and every one returned a nonzero count for "BOXED WARNING" and for "thyroid" in the same pass. Identity of each capture was confirmed from its own contents rather than from its filename.
  3. Isotretinoin capsule structured product label — positive control, DailyMed API v2 (XML)U.S. National Library of Medicine, National Institutes of Health · Label as served by the API on the retrieval date · Retrieved September 2026The control that proves the search fires. This label, 281,651 characters, returned "REMS" 47 times, "Risk Evaluation and Mitigation" 3 times and "iPLEDGE" 34 times under the identical method used for the six labels above. ⛔ A first candidate positive control — a marketed clozapine tablet label, 344,146 characters — returned zero for both phrases and was discarded rather than explained; no claim is made here about why it read zero. A negative control in the same run, a well-formed but nonexistent setid, returned HTTP 404 at zero bytes.

Frequently asked questions

Does a boxed warning mean there is a REMS?

No, and the two are separate instruments. A boxed warning is text in the approved labeling. A risk evaluation and mitigation strategy is a program FDA requires a company to operate, triggered by a determination that it is necessary to ensure the benefits of the drug outweigh the risks. Across six approved labels in this category read as structured product data, the words "REMS" and "Risk Evaluation and Mitigation" appear zero times, while every one of the six carries a boxed warning.

How confident is that zero?

It was measured with a control in the same run. A marketed isotretinoin label returned "REMS" 47 times and "iPLEDGE" 34 times using the identical method, so the search finds the phrase where it exists. A first candidate control returned zero and was discarded rather than reasoned around, because a ruler that reads zero on the document chosen to prove it works is measuring itself. What the census covers is the text of six approved labels — it is not a query of FDA's REMS database and says nothing about products outside those six.

What is the smallest thing a REMS can be?

A reporting schedule. The statutory minimum is a timetable for submitting assessments of the strategy. It requires an assessment at 18 months after initial approval, another at three years, and another in the seventh year, plus whatever frequency the strategy itself sets. Assessments can even be eliminated after the three-year point if the Secretary determines the serious risks have been adequately identified, assessed and managed. A patient would never encounter a strategy at that level.

What is the heaviest thing one can be?

Elements to assure safe use. They are available only where a drug can be approved only if, or would be withdrawn unless, those elements are required to mitigate a specific serious risk listed in its labeling. They can require prescriber training or special certification. They can require special certification of pharmacies, practitioners or health care settings. They can restrict dispensing to certain settings such as hospitals, or condition it on documentation of safe-use conditions such as laboratory results. And they can require monitoring of each patient, or enrollment of each patient in a registry.

Could one be required later?

Yes. Where FDA approved an application without requiring a strategy, it may subsequently require one, including when acting on a supplemental application for a new indication. The condition is that it becomes aware of new safety information and determines a strategy is necessary to ensure benefits outweigh risks. The holder then has 120 days from notification to submit a proposed strategy, or such other reasonable time as the Secretary requires to protect the public health.

Does a compounded version come under a REMS?

No, for a definitional reason rather than a judgment about any pharmacy. The section operates on approved applications: the strategy is submitted as part of an application, the postapproval power runs against the holder of an approved covered application, and the elements attach to FDA-approved labeling. A compounded preparation has no approved application, so no strategy attaches to it. Any equivalent safeguards a program uses are its own, adopted voluntarily.

Is having no REMS good news?

It cuts both ways, and it is worth holding both halves. It means no certification requirement stands between a patient and a prescription, and no registry records participation. It also means one fewer externally imposed check on prescribing and dispensing in this category. The statute itself treats restricted access as a cost. It requires FDA to keep evaluating whether such elements are unduly burdensome on patient access, and to minimize delivery-system burden.