FDA Logo--links to FDA home page
U.S. Food and Drug Administration
HHS Log--links to Department of Health and Human Services website

FDA Home Page | Search FDA Site | FDA A-Z Index | Contact FDA | FDA Centennial

horizontal rule

MOU number: 225-03-8001

Memorandum of Understanding

Between
The Food and Drug Administration

and

The Centers for Disease Control and Prevention

I. PURPOSE

This Memorandum of Understanding (MOU) between the Food and Drug Administration (FDA) and the Centers for Disease Control and Prevention (CDC) provides a framework for the coordination and collaborative efforts between these two agencies which are both components of the Department of Health and Human Services. This MOU also provides the principles and procedures by which information exchanges between FDA and CDC shall take place.

This memorandum supersedes the Memorandum of Understanding Between the Centers for Disease Control and the Food and Drug Administration, dated 6/26/00, regarding the exchange of information and coordination of actions.

II. BACKGROUND

FDA and CDC are sister agencies within the Department of Health and Human Services. Both FDA and CDC exist and work to protect the public health but have different statutory mandates and responsibilities.

FDA is a regulatory agency responsible for protecting the public health through the regulation of food, cosmetics, and medical products, including human drugs, biological products, animal drugs, and medical devices. FDA administers the Federal Food, Drug, and Cosmetic Act and relevant sections of the Public Health Service Act, among other statutes. Among its duties, FDA approves pre-market applications, conducts inspections of manufacturing facilities, and monitors post-marketing adverse events. FDA also initiates civil and criminal litigation to enforce applicable laws and regulations.

CDC is charged with protecting the public health by providing leadership and direction in the prevention and control of diseases and other preventable conditions and by responding to public health emergencies. CDC administers relevant sections of the Public Health Service Act, the Occupational Safety and Health Act, the Clinical Laboratory Improvement Act, and the Federal Mine Safety and Health Act. CDC, among other activities, administers national programs for the prevention and control of communicable and vector-borne diseases, enforces quarantine regulations, and works to monitor and control disease outbreaks.

CDC's and FDA's respective missions to protect the public health may overlap in a variety of ways depending upon the subject matter. Each agency has a responsibility to work collaboratively to protect and improve public health. It may sometimes be the case that FDA or CDC will be in possession of information that could be useful to the other agency in that agency's performance of its responsibilities. Timely sharing of information between CDC and FDA is therefore critical to protecting the public health.

III. SUBSTANCE OF AGREEMENT AND RESPONSIBILITIES
OF EACH AGENCY

A. Coordination and Collaboration Relative to Public Health Activities

It is mutually agreed that:

1.  Each agency will coordinate and collaborate with the other agency to protect and improve the public health.  To achieve this, each agency will utilize the expertise, resources, and relationships of the other agency in order to increase its own capability and readiness to respond to emergency situations.  In addition, each agency will designate central contact points where communications from the other agency, dealing with matters covered by this agreement, should be referred.

2.  Each agency will participate in periodic joint meetings to promote better communication and understanding of regulations, policies, and statutory responsibilities, and to serve as a forum for questions and problems that may arise.

3.  Each agency will notify the other agency as soon as possible when issues of mutual concern become evident.

4.  Each agency will collaborate with the other agency in all investigations of mutual concern.  Such collaboration may include providing alerts to the other agency regarding disease outbreaks encountered as part of its activities; providing technical advice in areas of recognized expertise; providing results of analysis; making available expert witnesses; and exchanging information as described in section III B.

5.  Each agency will consult with the other before issuing press or scientific releases or publications that may have a significant impact on the other agency.

6.  Each agency will refer its proposed regulations, guidances, or recommendations that may have a significant impact on the other agency for review and comment by that agency before publication.

7.  This agreement does not preclude CDC or FDA from entering into other agreements which may set forth procedures for special programs which can be handled more efficiently and expertly by other agreements.

B. Principles and Procedures for the Exchange of Information That is Not Publicly Available

FDA and CDC agree that the following principles and procedures will govern the exchange of nonpublic information between the two agencies.

Although there is no legal requirement that FDA and CDC exchange information in all cases, FDA and CDC agree that there should be a presumption in favor of full and free sharing of information between FDA and CDC. As sister public health agencies within the Department of Health and Human Services, there are no legal prohibitions that preclude FDA or CDC from sharing with each other most agency records in the possession of either agency. Both agencies recognize and acknowledge, however, that it is essential that any confidential information that is shared between FDA and CDC must be protected from unauthorized public disclosure. See e.g., 21 U.S.C. sec. 331(j); 18 U.S.C. section 1905; 21 C.F.R. Parts 20 and 21; 42 C.F.R. Parts 5 and 5b, and 42 U.S.C. section 301(d). Safeguards are important to protect the interests of, among others, owners and submitters of trade secrets and confidential commercial information; patient identities and other personal privacy information; privileged and/or pre-decisional agency records; and information protected for national security reasons. Such safeguards also help guarantee FDA's and CDC's compliance with applicable laws and regulations.

To facilitate the sharing of information with each other, it is necessary that FDA and CDC implement procedures to ensure, at a minimum, that such sharing of information is indeed appropriate and that the recipient agency guards the confidentiality of all information received. 1   There are separate procedures, as described below, for routine requests for information and for emergency requests.  It is incumbent upon both agencies to respond to request for information in a timely manner.  Any unauthorized disclosure of shared confidential information by the agency receiving the information shall be the responsibility of that agency.

1.  Routine Requests for Information

a. The requesting agency must demonstrate, in writing, why it is necessary for it to obtain the requested information.  This demonstration should consist of a summary that describes in detail the information requested (to facilitate identification of relevant records) and a brief statement of the purpose for which the information is needed.  This request shall state which internal agency offices and/or individuals requested the information.  A model request letter is attached.

b. The agency receiving the request for information shall, based upon the sufficiency of the need-to-know demonstration described in section III B 1a above, determine whether it is appropriate to share the requested information with the requesting agency.  The need-to-know threshold is a low one.  As stated above, there is a presumption in favor of information exchange between FDA and CDC.  An agency should only decide not to share information in response to a request if it has credible information and a reasonable belief that the requesting agency may not be able to comply with applicable laws or regulations governing the protection of non-public information or with the principles or procedures set forth in this MOU.  If an agency decides that it is not appropriate to share information with the requesting agency, it shall describe to the requesting agency the reasons for such decision.

c. The requesting agency agrees that it shall comply with the following conditions:

-- The requesting agency shall limit the dissemination of shared information it receives to internal agency offices and/or individuals that have been identified in its written request and/or have a need-to-know.  The agency official who signs the request letter will be responsible for ensuring that there are no other recipients of the information.

-- The requesting agency shall agree in writing not to publicly disclose any shared information in any manner including publications and public meetings.  If the requesting agency wishes to disclose shared information, including information that it believes is publicly releasable, it shall first request and obtain the written permission of the agency that has shared the information.  If the requesting agency receives a Freedom of Information Act (FOIA) request for the shared information, it will refer the request to the information-sharing agency for it to respond directly to the requester regarding the releasability of the information.  In such cases, the agency making the referral will notify the requester that a referral has been made and that a response will issue directly from the other agency.

-- The agency that shares information with the requesting agency shall include a transmittal letter, along with any agency records exchanged.  The transmittal letter shall indicate the type of information (e.g., confidential commercial information, personal privacy, or pre-decision).  A model transmittal letter is attached.

-- The requesting agency shall promptly notify the appropriate office of the information-sharing agency when there is any attempt to obtain shared information by compulsory process, including but not limited to, a FOIA request, subpoena, discovery request, or litigation complaint or motion.

-- The requesting agency shall notify the information-sharing agency before complying with any judicial order that compels the release of such information so that the agencies may determine the appropriate measures to take, including where appropriate the filing of a motion or an appeal with the court.

2.  Emergency Requests for Confidential Information

In cases in which the requesting agency has a need to obtain certain information as soon as possible due to emergency circumstances, such as a foodborne illness outbreak, FDA and CDC may utilize the following procedures. These procedures are intended for use only in the case of an actual emergency situation and are not appropriate for routine requests for information.

a. The requesting agency shall indicate orally or in writing to the agency in possession of the relevant information that has the need to obtain certain identifiable information as soon as possible due to the existence of emergency circumstances.  The requesting agency shall also describe what the emergency circumstances are.

b. The requesting agency shall verbally agree to protect from unauthorized public disclosure any and all information that is shared, according to all applicable laws and regulations.

c. The existence of an actual emergency situation shall warrant, as determined by the agency in possession of the requested records, the waiver of the need-to-know demonstration and determination described above in section III B 1a and B 1b.  However, once the requesting agency has obtained the information it seeks, it shall comply with those procedures set forth in section III B 1c above.

IV. NAME AND ADDRESS OF PARTICIPATING PARTIES

A. Food and Drug Administration
Department of Health and Human Services
5600 Fishers Lane
Rockville, Maryland  20857

B. Centers for Disease Control and Prevention
Public Health Service
Department of Health and Human Services
Atlanta, Georgia  30333

V. LIAISON OFFICERS

A. Contact for FDA:

Ellen F. Morrison, Director
Office of Crisis Management
Emergency Operations Center
Food and Drug Administration
Rockville, MD 20857
(301) 827-5660

B. Contact for CDC:

Associate Director for Science
Centers for Disease Control and Prevention
Atlanta, Georgia  30333
(404) 639-7240

VI. PERIOD OF AGREEMENT

This agreement becomes effective upon signature of both parties and will continue for three years. It may be modified by mutual consent or terminated by either party upon 120 days written notice.

Attachments
Model Request Letter
Model Transmittal Letter

Model Language for Request

The Centers for Disease Control and Prevention (CDC) has requested the following information from FDA for the following purposes: [Identify information and purpose]

                        or

CDC hereby requests the following information from FDA that it will use for the following purposes: [Identify information and purpose]

CDC agrees that it will not publicly disclose any such information that FDA shares with it without prior written permission from FDA and that it will comply with the principles and procedures set forth in the Memorandum of Understanding on information sharing between CDC and FDA. Applicable laws and regulations prohibit the disclosure of such information. See, e.g., 21 U.S.C. §331(j); 18 U.S.C. §1905, 21 C.F.R. Parts 20 and 21, 42 C.F.R. Parts 5 and 5b, and 42 U.S.C. §301(d).

CDC will limit dissemination of any shared information to the following CDC offices and/or employees: [Identify office(s) and/or employees(s)]

 

 


Name

 


Date

[Signature and Date by CDC official with requisite responsibility and authority.]

Model Language for Request

The Food and Drug Administration (FDA) has requested the following information from Centers for Disease Control and Prevention (CDC) for the following purposes: [Identify information and purpose]

                        or

FDA hereby requests the following information from CDC that it will use for the following purposes: [Identify information and purpose]

FDA agrees that it will not publicly disclose any such information that CDC shares with it without prior written permission from CDC and that it will comply with the principles and procedures set forth in the Memorandum of Understanding on information sharing between FDA and CDC. Applicable laws and regulations prohibit the disclosure of such information. See, e.g., 21 U.S.C. §331(j); 18 U.S.C. §1905, 21 C.F.R. Parts 20 and 21, 42 C.F.R. Parts 5 and 5b, and 42 U.S.C. §301(d).

FDA will limit dissemination of any shared information to the following FDA offices and/or employees: [Identify office(s) and/or employees(s)]

 


Name

 


Date

[Signature and Date by FDA official with requisite responsibility and authority.]

[Model Transmittal letter from CDC to FDA]

This letter accompanies agency records that the Center for Disease Control and Prevention (CDC) is sharing with the Food and Drug Administration (FDA) in response to FDA's request, dated                   . These agency records contain one or more of the following categories of non-public information, including information the public disclosure of which may be prohibited by law:

[CDC checks applicable numbers below]

             trade secrets;
             confidential commercial or financial information;
             information the disclosure of which would constitute a clearly unwarranted invasion of personal privacy;
             information subject to the Privacy Act;
             intra-agency records;
             records or information compiled for law enforcement purposes; or
             information protected for national security reasons.

FDA shall notify the appropriate office of the information-sharing agency if there are any attempts to obtain shared information by compulsory process, including but not limited to, Freedom of Information Act requests, subpoenas, discovery requests, and litigation complaints or motions.

FDA shall notify the information-sharing agency before complying with any judicial order that compels the release of such information so that FDA and/or CDC may take appropriate measures, including filing a motion with the court or an appeal.

FDA has agreed, by this letter or e-mail and by a signed request letter dated                                    , not to publicly disclose the above-described information without prior written permission of CDC. FDA acknowledges that applicable laws and regulations may prohibit the disclosure of such information. See e.g., 21 U.S.C.§331(j); 18 U.S.C. §1905, 21 C.F.R. Parts 20 and 21, 42 C.F.R. Parts 5 and 5b, and 42 U.S.C. §301(d). FDA also agrees to comply with the principles and procedures set forth in the Memorandum of Understanding between FDA and CDC, cite.

[Model Transmittal letter from FDA to CDC]

This letter accompanies agency records that the Food and Drug Administration (FDA) is sharing with the Center for Disease Control and Prevention (CDC) in response to CDC's request, dated                                  . These agency records contain one or more of the following categories of non-public information, including information the public disclosure of which may be prohibited by law:

[FDA checks applicable numbers below]

             trade secrets;
             confidential commercial or financial information;
             information the disclosure of which would constitute a clearly unwarranted invasion of personal privacy;
             information subject to the Privacy Act;
             intra-agency records;
             records or information compiled for law enforcement purposes; or
             information protected for national security reasons.

CDC shall notify the appropriate office of the information-sharing agency if there are any attempts to obtain shared information by compulsory process, including but not limited to, Freedom of Information Act requests, subpoenas, discovery requests, and litigation complaints or motions.

CDC shall notify the information-sharing agency before complying with any judicial order that compels the release of such information so that FDA and/or CDC may take appropriate measures, including filing a motion with the court or an appeal.

CDC has agreed, by this letter or e-mail and by a signed request letter dated     , not to publicly disclose the above-described information without prior written permission of FDA. CDC acknowledges that applicable laws and regulations may prohibit the disclosure of such information. See e.g., 21 U.S.C.§331(j); 18 U.S.C. §1905, 21 C.F.R. Parts 20 and 21, 42 C.F.R. Parts 5 and 5b, and 42 U.S.C. §301(d). CDC also agrees to comply with the principles and procedures set forth in the Memorandum of Understanding between FDA and CDC, cite.


1. It is assumed that each agency has implemented or will implement all data and information security requirements and has implemented or will implement, to the extent necessary and practicable, all data and information security recommendations.

Approved and Accepted
for the Centers for Disease Control and Prevention

Signed by: Julie Louise Gerberding, M.D., M.P.H.
Director, Centers for Disease Control and Prevention

Date: June 19, 2003

Approved and Accepted
for the Food and Drug Administration

Signed by: Mark B. McClellan, M.D., Ph.D.
Commissioner of Food and Drugs

Date: June 17, 2003

horizontal rule