Nitrosamine Acceptable Intake Limits: CPCA, NDSRIs and Exceedances

An acceptable intake limit for a nitrosamine impurity is the maximum daily exposure, expressed in nanograms per day, that a regulator considers to pose a negligible cancer risk. For a nitrosamine drug substance-related impurity with no carcinogenicity data of its own, the limit is predicted from chemical structure using the Carcinogenic Potency Categorisation Approach, which places the molecule in one of five potency categories, each carrying a fixed limit between 18 and 1500 ng/day.

Most teams arrive at this question the same way. A risk assessment flags a nitrosatable amine centre on the drug substance, nitrosamine impurity testing returns a figure, and that figure now has to be judged against a limit nobody has published for the molecule in front of them.

Three questions follow from there. Which category applies, and on what evidence. What the number becomes once it is written into a specification against a maximum daily dose. And what happens when a confirmed result sits above the limit, which is the point at which the programme stops being an analytical exercise and becomes a supply decision.

This guide works through all three, using the values published by the US Food and Drug Administration (FDA) and the European Medicines Agency (EMA) as they stand at the time of writing, and sets out what the differences between those two sets of values mean for a manufacturer in India supplying more than one market.

What an NDSRI is, and why its limit has to be predicted

Nitrosamine impurities fall into two structural classes. Small-molecule nitrosamines, such as N-nitrosodimethylamine (NDMA) and N-nitrosodiethylamine (NDEA), bear no structural relationship to the active pharmaceutical ingredient and turn up across many different products. Nitrosamine drug substance-related impurities (NDSRIs) are formed by nitrosation of the drug substance itself, at a secondary amine or a dimethyl tertiary amine centre, which makes each one effectively unique to its API.

That uniqueness is the entire problem. A small-molecule impurity studied for decades has rodent carcinogenicity data, and a limit can be calculated directly from it. A newly recognised NDSRI usually has none. There is no study to read, and commissioning a two-year carcinogenicity study is not a realistic response to a batch result.

At the same time, these impurities cannot simply be defaulted to the ordinary threshold of toxicological concern. ICH M7(R2) places N-nitroso compounds in the cohort of concern, a small group of high-potency mutagenic carcinogens for which the generic threshold is considered insufficiently protective. So the usual fallback is unavailable, and the data needed for a compound-specific answer does not exist.

This is why an NDSRI risk assessment runs ahead of any testing. It identifies the nitrosatable amine centres on the drug substance, the nitrite sources that could react with them, and therefore which impurities are credible enough to need a limit and a method at all. The limit question only arises for the structures that assessment flags.

The CPCA was built to close exactly that gap. Rather than measure potency, it predicts it from structure, so that a limit can be assigned to a molecule nobody has tested.

Where a nitrosamine acceptable intake limit comes from

Three routes produce an acceptable intake limit, and they sit in a clear order of preference. A limit from a higher route displaces one from a lower route.

1. Compound-specific dataWhere robust rodent carcinogenicity data exists, the limit is calculated from the TD₅₀, the dose producing tumours in half of the test animals. The TD₅₀ in mg/kg/day is divided by 50,000 to move from a one-in-two tumour incidence to a one-in-100,000 excess cancer risk, then multiplied by a 50 kg body weight. This is how NDMA arrives at 96 ng/day and NDEA at 26.5 ng/day.
2. Read-across from a surrogateWhere the nitrosamine itself is untested but a structurally and mechanistically similar compound is well characterised, the surrogate's potency can be used to derive a limit. The justification rests on the similarity argument, so the choice of surrogate is the part an assessor will examine.
3. The Carcinogenic Potency Categorisation ApproachWhere neither of the above is available, which is the normal position for a new NDSRI, the CPCA assigns a predicted potency category from structure and the category carries the limit.

FDA maintains both outcomes publicly. Its table of CPCA-based limits held 285 entries when checked for this article, and a separate, much shorter table holds the limits derived from compound-specific data or read-across. An impurity can move between them: once real data appears, the predicted limit is superseded. So the first step in fixing an NDSRI acceptable intake limit is to check whether the regulator has already published one for that specific impurity, rather than scoring it from scratch.

How the CPCA assigns a potency category

The CPCA is a rule-based structure-activity model. It rests on a single piece of mechanistic reasoning: a nitrosamine becomes genotoxic after metabolic activation by alpha-hydroxylation, so the structural features that make that pathway easier or harder are the features that drive potency.

The approach first asks whether the molecule can be activated at all. Three structural checks answer that. If neither alpha-carbon carries a hydrogen (N-nitroso-felodipine), if no alpha-carbon carries more than one (N-nitroso-enalapril), or if an alpha-carbon is tertiary, meaning an sp3 carbon bonded to three other carbons (N-nitroso-ketamine), activation is treated as blocked, and the nitrosamine goes straight to Category 5 without being scored.

Everything else is scored. A potency score is assembled from three components:

The total maps directly onto the category, and the category carries the limit. A lower score means a higher predicted potency and a tighter limit.

Scroll the table sideways on a narrow screen. Examples are taken from the worked calculations in the EMA's CPCA appendix.

Those eight molecules are worth keeping to hand. They are the only fully worked examples either regulator publishes, and they make it possible to sanity-check an in-house assignment against a position a regulator has already taken in writing.

The five CPCA categories and their nitrosamine limits

Four of the five categories carry identical limits on both sides of the Atlantic. Category 1 does not, and the difference matters to anyone filing in both markets.

Scroll sideways to see all columns.

FDA states the position plainly: for products intended for marketing in the United States it recommends 26.5 ng/day for Category 1 even where a different limit has been recommended elsewhere. A Category 1 NDSRI therefore has two correct limits at the same time, and a specification written for one market is not automatically defensible in the other.

Turning an acceptable intake limit into a product specification

An acceptable intake limit is a daily exposure, but a specification is a concentration. The conversion is a single division against the maximum daily dose shown in the product labelling.

Two points are routinely missed. First, the conversion is market-specific: the same NDSRI can carry different specifications in two different markets. Second, the maximum daily dose that applies is the one in the approved labelling, not the most common prescribed dose.

When more than one nitrosamine is present

Individual limits apply to individual impurities. Where a product contains more than one such impurity, whether NDSRIs, small-molecule nitrosamines or a combination, the total matters as well. If the combined level exceeds the acceptable intake limit of the most potent nitrosamine present, calculated against the maximum daily dose, the manufacturer should take the question to the regulator rather than resolve it internally. FDA directs applicants to raise a proposed total limit through the appropriate meeting or submission route.

When the CPCA does not apply

The CPCA has a defined scope, and assignments made outside it will not hold. It applies to N-nitrosamines carrying a carbon atom on both sides of the N-nitroso group, where that carbon is not directly double bonded to a heteroatom. Several cases therefore fall outside it:

• N-nitrosamides, N-nitrosoureas and N-nitrosoguanidines, and other structures of the same type, sit outside the approach entirely.
• N-nitroso groups on a nitrogen within an aromatic ring, such as nitrosated indoles, are also outside it.
• Molecules carrying more than two N-nitroso groups are not covered; FDA directs manufacturers to contact the agency for guidance.
• Impurities already assigned a limit from compound-specific data or read-across should use that limit, not a predicted one.

Where a structure falls outside the scope, the limit has to be justified by another route, and an early conversation with the regulator is usually more efficient than building a position that will be rejected on scope grounds.

What to do when a result exceeds the acceptable intake limit

A confirmed result above the limit is a serious finding, and the first obligations are immediate. A drug product batch containing an NDSRI above the applicable limit should generally not be released for distribution, and product already in the market may warrant removal, because such product may be considered adulterated. Alongside that, the manufacturer should investigate the root cause and change the manufacturing process or the formulation to eliminate, reduce or mitigate the impurity, reporting the change to the approved application where one applies.

What that framing leaves out is that the limit itself is not always the right number. Four routes can legitimately change the position, and they are worth evaluating in parallel with remediation rather than after it.

Scroll sideways to see all columns.

The enhanced Ames test, and what sits behind it

The standard bacterial reverse mutation assay has reduced sensitivity for some of these compounds, so FDA recommends an enhanced version. The specified conditions include the full OECD 471 strain complement with Salmonella typhimurium TA98, TA100, TA1535 and TA1537 plus Escherichia coli WP2 uvrA (pKM101); the pre-incubation method with a 30-minute pre-incubation rather than plate incorporation; and testing both without a post-mitochondrial fraction and with 30 per cent rat and 30 per cent hamster liver S9 prepared from animals treated with cytochrome P450 inducers. A positive result from a standard Ames assay does not need repeating under enhanced conditions.

A negative enhanced Ames result is supportive rather than conclusive. FDA has indicated it is currently also requesting a second in vitro mammalian cell mutation assay together with in vitro metabolism data before accepting a limit of 1500 ng/day, and in vivo mutagenicity data where a limit above 1500 ng/day is sought.

Interim limits and the supply question

Where a manufacturing change or a recall is likely to disrupt supply, the shortage question is handled separately from the quality question and should be raised immediately rather than after remediation planning. FDA directs manufacturers to contact its Drug Shortage Staff directly, evaluates each case individually, and may recommend an interim limit for a temporary period, publishing it where more than one manufacturer is affected. Published interim limits have been set well above the corresponding predicted limits and carry an explicit review date, so they are a bridge to a permanent control strategy rather than a settlement.

The less-than-lifetime adjustment: the 2026 change

On 24 September 2026, FDA communicated that a less-than-lifetime adjustment may be appropriate for this class of impurity, adopting for this class the framework already described in ICH M7(R2). This reversed a long-standing position and is the most significant recent development in the area.

The logic is straightforward. Published acceptable intake limits assume daily exposure across a 70-year lifetime. A medicine taken for two weeks does not deliver that cumulative dose, so the limit can be raised by a factor that keeps the total lifetime exposure within the same one-in-100,000 risk estimate.

Scroll sideways to see all columns. The third column is illustrative, applying each factor to the 100 ng/day Category 2 limit.

For short-course products in particular, antibiotics, antifungals and acute-care medicines among them, this adjustment can move a failing result into compliance without any change to the process or the formulation. It should be the first calculation performed after a confirmed exceedance, because it may remove the need for the other three routes entirely.

What this means for manufacturers in India

Indian pharmaceutical and generic manufacturers face this framework from an unusual position, because most are supplying the domestic market and one or more regulated export markets from the same site and frequently from the same batch record.

Indian Pharmacopoeia 2022 introduced General Chapter 5.11 on nitrosamine impurities, effective from December 2022, giving a domestic reference point alongside the ICH, FDA and EMA frameworks. In August 2026 the Indian Pharmacopoeia Commission released seven Indian Pharmacopoeia Nitrosamine Impurities Reference Standards, covering the compounds most often named in risk evaluations. Those standards materially reduce the cost and lead time of qualifying a method domestically, although NDSRIs remain product-specific and sit outside any fixed set.

Four consequences follow for a programme run from India:

On the deadline point, FDA acknowledged in June 2025 that the August 2025 date was not achievable for every approved application and set out what a progress update should contain instead: whether NDSRIs can form under targeted forced degradation, which were detected, the validated test method, the batches analysed, the confirmatory results in ng/day or ppm, the root cause where known, the mitigation attempted and an estimated completion date. For application holders this belongs in the Log of Outstanding Regulatory Business in the Annual Report. Manufacturers of non-application products, which do not file annual reports, should prepare the same information and retain it for inspection.

What the submission has to show

Whichever route produces the limit, an assessor is reading for a consistent chain of reasoning rather than a single number. A complete position generally contains the following.

• The nitrosamine risk assessment, identifying the nitrosatable amine centres in the drug substance and the nitrite sources in the excipients, water and packaging, with the reasoning for each conclusion recorded rather than summarised.
• The limit and its derivation, stating the route used, and for a CPCA assignment the structural features scored and the resulting category, in a form an assessor can reproduce.
• The conversion to a specification, showing the maximum daily dose used and the resulting ppm or ppb figure.
• The analytical method and its validation, demonstrating quantitation at a level appropriate to the specification, in the actual product matrix rather than in solvent.
• Confirmatory results on representative batches, with the date of analysis relative to the date of manufacture, since NDSRI levels can change on storage.
• The control strategy, covering root cause, the mitigation applied and the ongoing controls, including excipient nitrite specifications where those are the source.

Where a limit has been raised by read-across, an enhanced Ames result or a less-than-lifetime adjustment, the supporting justification travels with it, and the labelling-based treatment duration becomes part of the quality argument rather than a clinical detail.

Frequently asked questions