The Peptide Gold Rush Just Got a Rulebook. Sort Of.

Back in July we wrote that the Pharmacy Compounding Advisory Committee had recommended six peptides for the Section 503A Bulks List, and that a recommendation is a milestone rather than a change in the law. The other shoe has now dropped, though not from the direction most people were watching and not in the form most people expected.

On October 30, 2026, the Federal Register published an “Enforcement Discretion Policy Regarding 503A Compounding Using Certain Peptide Bulk Drug Substances,” 91FR 68526, which the Department of Health and Human Services had filed for public inspection two days earlier. It covers the same six substances the advisory committee recommended in July: BPC-157, Epitalon, KPV, MOTS-c, Semax,and TB-500. Under it, HHS does not intend to take enforcement action against a state-licensed pharmacy, a federal facility, or a licensed physician compounding with one of those six peptides, provided that ten conditions are satisfied. All ten, not a selection of them.

This is the first federal movement on compounded peptides in years that gives licensed pharmacies something concrete to work from. It is good news for anyone who has been waiting to serve this demand through a regulated channel. It also comes with real homework, so the conditions are the place to start.

Ten Conditions, All of Which Must Be Met

The policy is a conditional pathway drawn substance by substance and route by route, and the conditions are where the compliance work lives:

• ‍The substance appears in Appendix A. BPC-157, Epitalon, KPV, MOTS-c, Semax, TB-500, and nothing else.‍
• Identity and route match Appendix B. This is the condition most likely to catch an existing operation. BPC-157 acetate is covered for subcutaneous, intramuscular, oral, and topical forms. TB-500 acetate and MOTS-c acetate are limited to subcutaneous or intramuscular injectables. Epitalon acetate is limited to subcutaneous or intramuscular injectables dispensed in intermittent courses. Semax free base is intranasal only. KPV acetate is topical and oral. Appendix B also specifies amino acid sequence, chemical structure, molecular weight, and molecular formula for each substance.‍
• The bulk drug substance is characterized in a valid certificate of analysis from a facility registered under Section 510, with test results consistent with the criteria in Appendix B covering identity, purity, potency, and the absence of endotoxins, heavy metals, microbial contamination, and other impurities.‍
• The original manufacturer is FDA registered, CGMP compliant, and its physical location appears on the certificate of analysis. Not the packer, repacker, labeler, or distributor, but the original manufacturer. Where the substance comes through an FDA-registered repacker, relabeler, or reseller, that entity must itself have performed and documented vendor validation of the manufacturer and validation of the manufacturer’s certificate.‍
• Products compounded, serious adverse events, and product quality issues are reported to FDA’s MedWatch program and to the states where the products are compounded and sent, if different. Serious adverse events are reportable whether or not anyone considers them drug related, and product reporting covers active ingredient and strength per unit, the original manufacturer including unique facility identifier, and dosage form and route.‍
• Labeling carries the statement “This is acompounded drug product. Not for resale.” and details the procedure forreporting adverse events and problems with identity, strength, purity, orquality.
• ‍A single active ingredient. One of the six, by itself. The policy explains that attributing an adverse event to a specific substance is only possible with single-ingredient products, which leaves no room in this policy for peptide blends.‍
• Oral formulations require documented bioavailability. Where a peptide is compounded in an oral dosage form, the compounder is expected to maintain documentation confirming that the specific formulation provided to the patient achieves an adequate level of oral bioavailability in humans. For most compounders that documentation does not currently exist.‍
• The only delivery device is a 510(k)-cleared syringe, on the stated reasoning that more complex delivery devices introduce additional patient risk.‍
• Everything else in the FD&C Act still applies, including the prohibition on compounding under insanitary conditions and Section 503A’s patient-specific prescription requirement.

Several of these go beyond what compounders in this space have relied on to date. The certificate of analysis requirements and the vendor validation obligation in particular will require conversations with suppliers that many operators have never had, and those conversations take longer than the comment period does.

This Covers 503A Only, Not 503B

This distinction determines who can actually use the policy, and it is easy to miss while reading about expanded access.

Section 503A governs compounding by a licensed pharmacist in a state-licensed pharmacy or federal facility, or by a licensed physician, for an identified individual patient pursuant to a valid prescription. Section 503B governs outsourcing facilities, which register with FDA, comply with current good manufacturing practice requirements, and may compound in bulk without patient-specific prescriptions. The two sections have separate bulk drug substance lists, developed through separate processes.

This enforcement policy reaches 503A pharmacies. It does not open things up to 503B pharmacies. The operative sentence names a “State-licensed pharmacy, Federal facility, or licensed physician,” and the title of the document limits it to 503A compounding. An outsourcing facility that begins compounding these peptides is not covered by this policy, whatever its registration status and however carefully it meets the ten conditions. The conditions themselves confirm the scope, since the tenth one requires compliance with Section 503A’s patient-specific prescription requirement, which is a 503A concept and has no 503B analogue.

If your supply model runs through an outsourcing facility, and many telehealth and wellness platforms have built exactly that way because it scales, this policy does not do what you may have been told it does.

What Did Not Happen

A small note of caution in what is otherwise a sea of good news. No peptide has been added to the 503A Bulks List. That list is codified at 21 C.F.R. 216.23, and it reads exactly as it did before this policy issued, containing the same six substances it has contained since FDA established it by final rule in February 2019. Adding anything to it requires notice-and-comment rulemaking under Section 503A(c)(2), and no rule has been proposed for any of these peptides.

None of these substances is FDA approved, and nothing in this policy moves them toward approval. Compounded drugs are not reviewed by FDA for safety, effectiveness, or quality before they reach patients, and the policy says exactly that in the second paragraph.

Most importantly for anyone deciding how much weight to put on this, the Federal Register notice states that the policy “does not establish any rights for any person and is not binding on HHS or the public,” and the policy document adds that HHS “may revisit application of this interim policy (in whole or in part) if, among other things, a safety signal or product quality issue arises with a compounded drug product within the scope of this policy.” It is always risky to build a platform or product based only on a promise of enforcement discretion. That is particularly true when the enforcement discretion document includes language like this one does. But this sort of gray area is nothing new to most compounding pharmacies and their experience dealing with this uncertainty should help them navigate this until the FDA issues a final rule on these peptides.

HHS Acted. FDA Did Not.

Here is the aspect of this that has received the least attention and may reflect the disagreements we saw with the PCAC recommendations.

This is not an FDA document. The notice lists the agency as the Office of the Secretary, Department of Health and Human Services. It carries an HHS-OASH docket number rather than an FDA one, the contact is an official in the Office of the Assistant Secretary for Health, and it is signed by Secretary Kennedy. Across the full policy and both appendices there is no statement of FDA’s position on any of it.

The authority is genuine, so this is not a question of whether or not the policy is legal. Section 503A(c)(1) vests the listing power in the Secretary, and FDA ordinarily exercises it by delegation, so a Secretary who issues an enforcement policy in this area is using authority Congress actually gave him. The question is not whether he could. The question is what it tells us that he did.

Appendix B answers that question substance by substance, and the answer is blunt. For each of the six peptides it reports that the Center for Drug Evaluation and Research recommended against listing while the advisory committee voted in favor. All six sat in Category 2 from September 2023 until April 22, 2026, and the appendix is careful to note that neither the placement nor the removal changed their status under Section 503A. The agency’s own scientific center recommended against every substance covered by this policy, and the policy issued anyway, over the Secretary’s signature, without a word from the agency.

There are charitable readings available, too, and I don’t want to make a mountain out of a molehill. Reporting indicates that FDA and HHS staff worked together on how to accommodate the Secretary’s interest in expanded access while addressing the safety concerns FDA scientists had raised, and the ten conditions look very much like the product of that kind of negotiation. Several of them read as though a scientist drafted them, because the single-ingredient requirement, the lot-level testing, the MedWatch obligation, and the device restriction are not conditions an access advocate would have thought to impose. Read that way, this is a reasonable compromise that expands access but addresses the FDA’s safety concerns.

The less charitable reading is that this is what it looks like when a Secretary overrides his own agency and the agency declines to put its name on the result. Which reading is right will become clearer if FDA says anything on its own behalf during the comment period, and clearer still if it says nothing at all.

A Draft Now, a Rule Later

Two features of the notice are worth flagging because they shape what comes next.

The first is that the document is ambiguous about its own status. The summary announces the availability of “an Enforcement Discretion Policy” while the background section and the sentence disclaiming legal effect both refer to “the draft Enforcement Discretion Policy.” The operative language is present tense throughout, and comments are open for two weeks. That ambiguity survived from the inspection copy into the published text, so it was not caught in proofing, and the notice does not reconcile it. We expect clarification.

The second is that the notice signals where this is heading. It states that “FDA’s future rulemakings may propose adding some or all of these peptides to the 503A bulks list based on the available evidence,” and the policy adds that HHS expects public comments to supply evidence FDA can consider in that rulemaking. The interim policy runs until a substance “is addressed in a final rule as being included or not included on the 503A bulks list.” Note the qualifier, because “some or all” means nothing here guarantees that all six substances make it onto the list,and a substance addressed in a final rule as not included loses the interim policy along with the listing.

Be realistic about the timeline. FDA published its Section 503A interim policy on bulk drug substances in June 2016 and established the bulks list by final rule in February 2019, placing six substances on it. More than seven years later, 21 C.F.R. 216.23(a) still contains those same six substances and nothing further. Whatever “interim” means in this context, the history suggests it describes a long time.

What To Watch For

Whether FDA speaks. The clearest open question in the document is FDA’s own position, and silence through the comment period would itself be informative.

Whether the states follow. HHS enforcement discretion does not bind a state board of pharmacy. Section 503A presupposes a state-licensed pharmacy or a licensed physician, and state boards set their own enforcement priorities. A divergence between states would create exactly the kind of patchwork that multi-state telehealth operations struggle to manage.

Access without approval. Enforcement discretion is a statement about what the government intends to do, not a grant of permission, and it creates no rights anyone can enforce. The Supreme Court held in Heckler v. Chaney, a case about FDA under this very Act, that an agency’s decision not to take enforcement action is “presumed immune from judicial review.” It also does nothing for marketing, since Section 502(bb) makes a compounded drug misbranded if its advertising or promotion is “false or misleading in any particular,” listed or not. A policy permitting limited compounding of BPC-157 for specific routes is not permission to market it for everything the wellness market currently sells it for.

The comment docket. Comments are due November 13, 2026, two weeks after publication, via regulations.gov under Docket No. HHS-OASH-2026-0496. HHS did not print a closing date in the notice, so that date is computed from the date of publication rather than quoted from it. Confirm it on the docket, and do not leave a submission to the last day.

Enforcement at the edges. The conditions create bright lines, and bright lines are what gets enforced. Blends, unapproved routes, non-compliant certificates of analysis, and marketing claims that outrun the policy are the obvious exposures. We also wrote recently about Eli Lilly’s litigation against sellers of a peptide that is not FDA approved, which is a reminder that the government is not the only party with an interest in how this market behaves.

The Bottom Line

The peptide gold rush now has a federal document attached to it, and the document is better news for licensed, careful operators than for anyone else. That appears to be deliberate, since HHS says in the policy that the goal is to discourage widespread use of research-use-only peptides from foreign suppliers by offering a more controlled alternative. The conditions are strict enough that satisfying them is a genuine compliance project, which means the operators who do satisfy them will be visibly distinguishable from the ones who do not.

Three things are worth doing now if you are in this market. Pull your certificates of analysis and confirm that the original manufacturer is identified, that its physical location appears, and that the testing matches what Appendix B describes. Compare every product you offer against the Appendix B routes, and identify anything carrying more than one active ingredient. And if you hold real-world safety or utilization data,consider putting it in front of HHS before the comment window closes on November 13, because the rulemaking that follows is the step that actually decides this.

If you are working through what this policy means for your operation, or weighing whether to submit a comment, we are happy to talk it through.