DSHEA Explained for Supplement Brands

The Dietary Supplement Health and Education Act of 1994 (DSHEA) is the foundational law that created the dietary supplement regulatory category in the United States. Before DSHEA, the FDA could regulate supplements as food additives or even unapproved drugs. After DSHEA, supplements got their own regulatory framework. If you own a supplement brand, you need to understand DSHEA not because it is legally interesting but because it defines what your product is, what you can say about it, and what testing you must do to stay compliant.

What DSHEA did

DSHEA amended the Federal Food, Drug, and Cosmetic Act to create a distinct regulatory category for dietary supplements. Before 1994, there was no clear legal distinction between a dietary supplement and a food additive or a drug. The FDA had attempted to regulate certain supplements as unapproved drugs, and the supplement industry pushed back with DSHEA.

DSHEA did several specific things:

1. Defined "dietary supplement." A dietary supplement is a product intended to supplement the diet that contains one or more dietary ingredients: vitamins, minerals, herbs or botanicals, amino acids, or substances used to increase total dietary intake. It must be labeled as a dietary supplement and cannot be represented as a conventional food or as a sole item of a meal.

2. Created the structure/function claim framework. DSHEA allows supplement labels to make statements describing how a product affects the structure or function of the human body ("supports immune health," "promotes restful sleep") without being regulated as drugs, provided the statements are truthful, not misleading, and accompanied by the FDA disclaimer.

3. Established New Dietary Ingredient (NDI) requirements. Any dietary ingredient not marketed in the US before October 15, 1994, is a "new dietary ingredient" and requires an NDI notification to the FDA at least 75 days before marketing, demonstrating reasonable expectation of safety.

4. Gave the FDA authority to establish GMPs for supplements. DSHEA authorized the FDA to create Good Manufacturing Practice regulations for dietary supplements, which became 21 CFR 111 in 2007.

5. Created the Commission on Dietary Supplement Labels. A temporary body that made recommendations on supplement labeling, leading to the Supplement Facts panel requirements we have today.

What DSHEA did not do

Just as important as what DSHEA did is what it did not do. DSHEA did not give the FDA pre-market approval authority over dietary supplements (unlike drugs). The FDA does not approve supplements before they are marketed. The manufacturer is responsible for ensuring safety, labeling compliance, and GMP compliance. The FDA only acts after a product is on the market, through inspections, Warning Letters, and enforcement.

DSHEA also did not create a mandatory registration or listing system for supplements (though later legislation added establishment registration). The burden of compliance is on the manufacturer and brand owner, not on the FDA.

This framework -- post-market regulation rather than pre-market approval -- means that your testing program is essentially your only quality gate. If you do not test, nobody else will until you get caught. For a complete testing framework aligned with FDA expectations, see our 21 CFR 111 testing requirements guide.

How DSHEA defines a dietary supplement vs a drug

This distinction matters because getting it wrong carries severe consequences. Under DSHEA, a product is a dietary supplement if:

• It is intended to supplement the diet
• It contains a dietary ingredient (vitamin, mineral, herb/botanical, amino acid, dietary substance)
• It is labeled as a dietary supplement
• It is not represented as a conventional food or sole item of a meal
• It is not represented as a drug (does not claim to diagnose, cure, mitigate, treat, or prevent a disease)

A product becomes a drug -- and an unapproved new drug if not FDA-approved -- if its labeling includes disease claims. "Treats arthritis" is a drug claim. "Supports joint health" is a structure/function claim. The line can be gray, and the FDA interprets it aggressively when it believes a product is being marketed as an unapproved drug.

The consequences of crossing the line: the FDA can issue a Warning Letter, order a recall, seek an injunction, and in cases involving fraud or safety risks, pursue criminal prosecution. Products marketed as supplements that the FDA considers unapproved drugs are among the agency's highest enforcement priorities.

⚠️ Note

If your product has the same active ingredient as an FDA-approved drug (even if naturally derived), marketing it as a supplement is high-risk regardless of DSHEA. The FDA has taken the position that such products are excluded from the dietary supplement definition and are unapproved drugs. This applies to products containing ingredients like vinpocetine, CBD (in food/supplement form), and certain others. Always verify the regulatory status of each ingredient independently.

Structure/function claims under DSHEA

DSHEA section 403(r)(6) allows structure/function claims -- statements about how a product affects the structure or function of the body. Examples:

• "Calcium supports bone health"
• "Fiber maintains bowel regularity"
• "Antioxidants support cellular health"

These claims must meet four requirements:

1. The manufacturer must have substantiation that the claim is truthful and not misleading
2. The label must include the FDA disclaimer: "These statements have not been evaluated by the Food and Drug Administration. This product is not intended to diagnose, treat, cure, or prevent any disease."
3. The manufacturer must notify the FDA within 30 days of first marketing the product with the claim
4. The claim cannot be a disease claim

Testing connects to structure/function claims because your substantiation file should include documentation that the product contains the dietary ingredient at the labeled amount (identity and potency testing). A structure/function claim for magnesium supporting muscle function is only defensible if your product actually contains the amount of magnesium on your label.

For a deep dive on substantiating claims through testing, see our structure/function claims testing guide.

New Dietary Ingredient (NDI) requirements

If your supplement contains a dietary ingredient that was not marketed in the US before October 15, 1994, it is a New Dietary Ingredient (NDI). You must submit an NDI notification to the FDA at least 75 days before introducing the product into interstate commerce. The notification must include safety data demonstrating that the ingredient is reasonably expected to be safe under the conditions of use recommended on the label.

The FDA estimates that a substantial percentage of NDIs on the market have not been properly notified, and the agency has periodically increased enforcement. An NDI notification failure can result in the ingredient being deemed adulterated, leading to Warning Letters, recalls, and potential enforcement action.

Testing is critical for NDIs because the safety data in your notification typically includes identity testing to confirm the ingredient is what you claim it is, contaminant testing (heavy metals, microbiology, pesticides) to demonstrate it is safe at proposed use levels, and stability data to support shelf life.

Determining whether an ingredient is actually an NDI can be complex. The FDA maintains a list of pre-DSHEA ingredients, but the list is not exhaustive. If you are working with a novel ingredient, consult regulatory counsel and budget for the significant testing investment required for an NDI notification.

How DSHEA shapes your testing requirements

DSHEA itself does not specify testing requirements. Those come from 21 CFR 111 (the GMP regulations authorized by DSHEA). But DSHEA shapes the testing landscape in several specific ways:

Common misunderstandings about DSHEA

"DSHEA means supplements are unregulated." False. Supplements are regulated. The FDA regulates them through post-market enforcement: inspections, 483s, Warning Letters, recalls, and in serious cases, injunctions and criminal prosecution. Supplements must comply with 21 CFR 111 GMPs, labeling requirements, and adverse event reporting. The regulatory framework is lighter than for drugs, but it is real and actively enforced.

"If my manufacturer has GMP certification, I do not need to worry about DSHEA compliance." False. The brand owner -- the person whose name is on the label -- is legally responsible for compliance. If the manufacturer fails to test, the FDA will hold both the manufacturer and the brand owner accountable. Your quality agreements with the manufacturer are helpful, but they do not transfer your legal obligations under the Act.

"DSHEA grandfathers all ingredients sold before 1994." Not exactly. DSHEA exempts pre-1994 ingredients from the NDI notification requirement, but they must still comply with all other requirements: GMPs, testing, labeling, and safety. The NDI exemption applies only to the pre-market notification requirement, not to ongoing compliance.

For guidance on what finished product testing looks like in practice, see our finished product testing guide.

Quick Reference

Lab Category Matching

Real Methods Explained

What Sample to Send

For identity testing: raw material samples in clean containers with lot numbers. For finished product testing: finished product in final packaging. For NDI safety testing: multiple lots of the ingredient (typically 3-5 non-consecutive lots) to demonstrate consistency. Confirm sample quantities and documentation requirements with the lab before shipping. Typical sample amount: 50-100 g per test panel.

Expected Turnaround Time

Accreditation Notes

All testing used to support DSHEA compliance, including NDI safety data and label claim substantiation, should come from ISO/IEC 17025 accredited laboratories. If you submit NDI notification safety data from a non-accredited lab, the FDA may reject the notification as incomplete or request additional data, extending your timeline and cost. For current GMP compliance testing, ISO 17025 accreditation is not explicitly required by 21 CFR 111 but is the strongest way to demonstrate scientific validity.

Price Ranges

Country/Region Targeting

DSHEA applies only to dietary supplements marketed in the United States. Other countries have their own regulatory frameworks: Health Canada regulates Natural Health Products (NHPs) under the Natural Health Products Regulations, which include pre-market licensing. The EU regulates food supplements primarily under Directive 2002/46/EC with national variations by member state. Australia regulates complementary medicines through the TGA. If you export to multiple markets, each country's framework requires separate compliance documentation and testing.

FAQ

Q: Does DSHEA require pre-market FDA approval for supplements?

No. DSHEA does not require pre-market approval for dietary supplements (except for NDI notifications for new dietary ingredients). Unlike drugs, supplements are regulated post-market. The manufacturer is responsible for ensuring that the product is safe, properly labeled, and manufactured in compliance with GMPs before marketing. The FDA acts after the product enters the market, through inspections, Warning Letters, and enforcement actions. This is why your own testing program is critical: it is your only pre-market quality gate.

Q: What is a structure/function claim and what disclaimer is required?

A structure/function claim describes how a dietary ingredient affects the structure or function of the human body without claiming to treat or prevent a disease. Examples include "supports immune health," "promotes bone strength," and "maintains healthy cholesterol levels." DSHEA requires that any product making a structure/function claim include the disclaimer: "These statements have not been evaluated by the Food and Drug Administration. This product is not intended to diagnose, treat, cure, or prevent any disease." This disclaimer must appear on the label, and the manufacturer must notify the FDA within 30 days of first marketing the product with the claim.

Q: How do I know if my ingredient is a New Dietary Ingredient (NDI)?

An NDI is a dietary ingredient that was not marketed in the US before October 15, 1994. If your ingredient was marketed as a dietary ingredient before that date, it is not an NDI and does not require notification. Determining whether an ingredient is an NDI can be legally and factually complex. The FDA maintains a non-exhaustive list of pre-DSHEA ingredients. You may need to demonstrate through business records, historical catalogs, or other documentation that the ingredient was in commercial use before 1994. If you are unsure, consult regulatory counsel before marketing. An unjustified NDI violation can result in an adulteration charge, Warning Letter, and mandatory recall.

Q: What happens if I market a supplement without DSHEA compliance?

The FDA can take enforcement action through a Warning Letter, which is published publicly. The agency can also seek an injunction to stop distribution, order a recall, seize products, and in cases involving safety issues or fraud, pursue criminal prosecution. State attorneys general can also bring enforcement actions under state laws that parallel or exceed FDA requirements. Commercial consequences include Amazon listing removal, retailer delisting, and civil litigation. The most common consequences for first-time compliance failures are Warning Letters and recalls, but the financial and reputational damage is often severe.

Q: How does DSHEA connect to 21 CFR 111 testing requirements?

DSHEA authorized the FDA to establish GMPs for dietary supplements, which became 21 CFR 111 in 2007. 21 CFR 111 contains the specific testing requirements: identity testing per 111.70(e), finished product testing per 111.75(a)(2), contaminant testing per 111.75(c), and laboratory operations per 111.110. DSHEA is the parent law; 21 CFR 111 is the implementing regulation. When an FDA inspector cites a testing deficiency, they cite the specific 21 CFR 111 section, but the authority for that requirement comes from DSHEA. Understanding both is essential for a compliant testing program.

Get lab testing quotes →