HHS Peptide Compounding Policy (2026): What It Allows for BPC-157 and 5 Others

Under a draft HHS enforcement policy announced October 28, 2026, the Department of Health and Human Services says it does not intend to take enforcement action against State-licensed 503A pharmacies, Federal facilities or licensed physicians that compound six peptides (BPC-157, epitalon, KPV, MOTS-c, semax and TB-500) under ten conditions^[1][3]. The policy is not final and is not binding on HHS or the public, and written comments are open until November 13, 2026^[2]. This is enforcement discretion, not FDA approval. The policy itself says compounded drugs are not FDA-approved and that FDA does not review their safety, effectiveness or quality before they are sold^[1]. It is interim, it can be revisited if a safety signal appears, and it covers only single-ingredient products made from tested bulk powder, by specific routes, for a named patient with a prescription.

What HHS announced

The document is titled “HHS Enforcement Discretion Policy Regarding 503A Compounding Using Certain Peptide Bulk Drug Substances.” It applies while FDA builds the list of bulk substances that 503A pharmacies may compound with (the 503A bulks list) through formal rulemaking^[1]. Until each peptide is addressed in a final rule, HHS says it does not intend to act against a State-licensed pharmacy, Federal facility or licensed physician that compounds one of the Appendix A peptides, “when all of the following circumstances are present”^[1].

HHS gives two stated reasons. First, it wants to “discourage the continued, widespread use of certain research-use-only peptides supplied by foreign manufacturers that pose a safety risk to US patients,” by offering a more controlled alternative. Second, it says the policy “advances patient choice and freedom while appropriately protecting patient safety”^[1]. It also reserves the right to change course: HHS “may revisit application of this interim policy (in whole or in part) if, among other things, a safety signal or product quality issue arises”^[1].

The formal notice followed two days later. Secretary Robert F. Kennedy Jr. signed a notice of availability that was filed on October 28 and published in the Federal Register on October 30, 2026 (document 2026-22192, 91 FR 68526)^[2]. Three points in that notice matter:

• It is labeled a draft. The notice announces the availability of a “draft” enforcement discretion policy, and the policy itself calls itself interim^[1][2].
• It is not binding. In the notice's words, the policy “does not establish any rights for any person and is not binding on HHS or the public”^[2]. It is a statement of how HHS intends to use its enforcement resources, not a regulation and not a change to the law.
• Comments are open for two weeks after publication. Anyone can submit written comments on regulations.gov under Docket No. HHS-OASH-2026-0496 until two weeks after the October 30 publication date, which is November 13, 2026^[2]. To comment, search regulations.gov for that docket number and use the comment form on the notice. HHS says its website holds the most current version of the policy, so the text can still change^[2].

The six peptides and the routes each one is limited to

Appendix A lists the six peptides. Appendix B pins down the exact chemical identity of each one and, more important for patients, the dosage forms the policy covers^[1]. A product outside these routes is outside the policy, even if the peptide is on the list.

Two of these limits matter most in practice. Semax is covered only as a nasal product, so injectable semax falls outside the policy. One question is open for the spray itself: condition 9 says the only delivery device packaged with the product is a 510(k)-cleared syringe, and the policy does not mention nasal spray pumps, so it is unclear how HHS views a semax product sold in a pump bottle^[1]. Our review of semax nasal spray covers the spray itself. KPV is covered only in topical and oral forms, so the injectable KPV many clinics have marketed is not covered either^[1]. Our comparison of KPV capsules, cream and injection sets out what is known about each route. For BPC-157, oral capsules are within scope, but only if the pharmacy can document that its specific oral formulation reaches adequate oral bioavailability in humans (condition 8 below). Our review of oral BPC-157 vs injection looks at what that absorption evidence amounts to today. For each peptide's evidence, see BPC-157, TB-500, MOTS-c, epitalon, semax and KPV. None of the six has an established human dose; the policy does not set one either, which is why our BPC-157 dosage page and its siblings report study ranges rather than recommendations.

The 10 conditions a compounder has to meet

HHS's promise not to act applies only when every one of these is true^[1]. In plain terms:

1. On the list. The peptide appears in Appendix A.
2. Right identity and route. The bulk substance matches the identity in Appendix B (sequence, structure, molecular weight and formula) and is used only by the routes listed there.
3. Tested bulk powder. The bulk substance comes from a facility registered with FDA under section 510 and has a valid certificate of analysis (COA) covering identity, purity, potency, and contaminants such as endotoxins, heavy metals, microbes and impurities.
4. A registered original manufacturer. The original maker (not a repacker or distributor) is FDA-registered, follows current good manufacturing practice, and its physical location is on the COA. A repacker or reseller must have validated that manufacturer and its COA.
5. Reporting. The compounder reports products compounded, serious adverse events and product quality problems to FDA's MedWatch program^[7] and to the States involved, and the patient labeling explains how to report problems.
6. Label statement. The label carries the words “This is a compounded drug product. Not for resale.”
7. One active ingredient. The product contains a single Appendix A peptide and no other active ingredient. HHS says single-ingredient products make it easier to tie adverse events to a specific substance.
8. Proof for oral products. Because peptides are hard to absorb by mouth, a compounder making an oral form must keep documentation that the specific formulation achieves adequate oral bioavailability in humans.
9. Simple devices only. The only delivery device packaged with the product is an FDA 510(k)-cleared syringe.
10. Everything else in the law still applies, including a patient-specific prescription and the ban on compounding under insanitary conditions.

Appendix B also attaches a testing standard for these bulk peptides. It asks for orthogonal identity testing (at least two independent methods), HPLC assay, impurity and residual-solvent limits, elemental impurities, endotoxin and microbial testing, and a COA that states the grade as “Intended for human drug compounding”^[1]. That is a much higher bar than the purity printout a research-chemical website typically posts.

What the policy does not do

• It does not approve anything. None of the six is an FDA-approved drug, and compounding under this policy does not make them one. The policy restates that FDA does not review compounded drugs for safety, effectiveness or quality before marketing^[1][6]. For the drugs that are FDA-approved and happen to be peptides, see our FDA-approved peptides list.
• It is not a finding that they are safe or that they work. FDA's own review pages still describe immunogenicity and impurity concerns and, for several of the six, little or no human safety information^[4]. HHS's justification rests on newer manufacturing data, documented historical use and the policy's safeguards, not on new clinical trials^[1].
• It does not cover 503B outsourcing facilities. The named parties are State-licensed pharmacies, Federal facilities and licensed physicians^[1]. NPR reported that larger 503B facilities are not included^[3]. Our 503A vs 503B explainer covers the difference.
• It does not cover blends. Condition 7 requires a single active ingredient, so premixed stacks such as BPC-157 plus TB-500 are outside it, and so are four-peptide blends such as KLOW. See our BPC-157 and TB-500 stack review and peptide stacking safety.
• It does not cover research-use-only sellers. The policy is aimed at moving people away from those products, not at legitimizing them. A vial labeled “for research use only” is not a compounded drug made for you under a prescription. Our guide to peptide legality explains why.
• It does not cover other peptides. CJC-1295, ipamorelin, AOD-9604, selank, injectable GHK-Cu, melanotan II and thymosin alpha-1 are not on Appendix A^[1][4]. Selank is often sold next to semax; our semax vs selank comparison explains why only one of the two is covered.
• It does not set a dose or a time limit per patient, except that epitalon is to be dispensed in intermittent courses^[1].
• It does not change sports rules. The 2026 WADA Prohibited List names BPC-157 under S0 (non-approved substances) and TB-500 as a thymosin-beta-4 derivative, both banned at all times^[8].

Is BPC-157 legal now?

BPC-157 is the peptide most people ask about, so here is the direct answer as of October 30, 2026.

• It is still not FDA-approved. No BPC-157 drug has been approved for any condition.
• A prescribed, compounded version now falls under a draft federal enforcement discretion policy. The policy is not final or binding^[2], but as written, a licensed prescriber can write a patient-specific prescription, and a State-licensed 503A pharmacy can compound BPC-157 acetate for subcutaneous, intramuscular, oral or topical use, without expecting federal enforcement, if all ten conditions are met^[1].
• Not every product qualifies. Blends, products from 503B facilities, products without a qualifying COA and manufacturer chain, and oral products without bioavailability documentation all fall outside the policy^[1].
• Research-chemical BPC-157 is still not a drug for human use. The policy does nothing for vials sold online as research chemicals.
• State rules can be stricter. The policy describes federal enforcement only. State boards of pharmacy license 503A pharmacies and set their own rules.
• Athletes are still barred. WADA names BPC-157 on its 2026 list, prohibited in and out of competition^[8].
• It can change. HHS may revisit the policy, and FDA's rulemaking may end with BPC-157 included on the 503A bulks list or left off it^[1][2].

For what the human evidence on BPC-157 does and does not show, see BPC-157 side effects and safety and BPC-157 for weight loss. For providers, our BPC-157 provider page lists every seller we confirmed sells BPC-157 as a single-ingredient product, shows the form each one sells, and labels any form the policy does not cover; blends are left off. A listing does not confirm that the pharmacy meets the policy’s other conditions, so use the checklist further down this page yourself. For the steps in order, from finding a prescriber to the red flags to check, see how to get BPC-157 online.

How the six peptides got here

FDA sorts nominated bulk substances into categories while it builds the 503A list. Category 2 is for substances where FDA “has identified significant safety risks”^[5]. According to Appendix B, each of the six was in Category 2 from September 2023 until April 22, 2026^[1]. FDA's Category 2 page, last updated April 22, 2026, now lists BPC-157, epitalon, KPV, MOTS-c, semax and TB-500 among substances “nominated but withdrawn,” with FDA's safety concerns still printed next to each^[4]. For BPC-157, for example, FDA wrote that it had identified “no, or only limited, safety-related information for the proposed routes of administration”^[4].

Appendix B also records that FDA's Center for Drug Evaluation and Research (CDER) recommended against listing each peptide, and that FDA's Pharmacy Compounding Advisory Committee voted in favor^[1]. NPR reported the committee vote took place in July 2026, and that FDA's own scientists recommended against easing the restrictions at that same meeting^[3]. HHS's stated reasons for going ahead anyway follow the same pattern for each peptide: newer lot-level certificates of analysis from FDA-registered manufacturers that fill testing gaps CDER had flagged, documented and quantified historical use, and, for most of the six, the view that CDER's safety concerns rested on mechanism or missing data rather than observed harm. For BPC-157, the third reason given is that the policy's own conditions (lot testing, single-ingredient products and MedWatch reporting) address the risks^[1]. None of these reasons is a new clinical trial.

Who supports it and who objects

The Alliance for Pharmacy Compounding welcomed the policy as a “more accountable alternative” for people buying gray-market peptides, while warning that it will take time for suppliers and pharmacies to meet the requirements^[3]. A Florida pharmacy owner told NPR that 503A pharmacies alone could not meet demand^[3]. Public Citizen argued that all peptides should go through the standard FDA approval process, and the Partnership for Safe Medicines said the decision leaves patients unsure whether the peptides are safe^[3].

What this means if you are considering one of these peptides

The draft policy describes a quality-tested route that HHS says it will not take enforcement action against. It does not make these peptides proven. If you go ahead with a prescriber, these checks follow directly from the conditions:

• A real prescription for you. A clinician should evaluate you and write a patient-specific prescription. A website that sells vials without one is outside the policy.
• A State-licensed 503A pharmacy. Ask which pharmacy compounds it and check its license. Some sellers also use 503B outsourcing facilities, which the policy does not cover. Our pharmacy legitimacy lookup can help.
• The label line. Look for “This is a compounded drug product. Not for resale.” and instructions for reporting problems.
• One peptide per product, on a covered route. No blends. No injectable semax or KPV. Epitalon in courses, not continuously.
• The device. If anything comes in the box for giving the dose, it should be a 510(k)-cleared syringe. Pens are outside the policy, and for semax ask how the spray pump fits condition 9.
• COA traceability. The pharmacy should be able to say who manufactured the bulk peptide and that it holds a lot-specific COA meeting the policy's tests.
• Report side effects. Tell the pharmacy and prescriber, and you can report directly to FDA MedWatch^[7].

Our provider pages for BPC-157, TB-500, MOTS-c, KPV, semax and epitalon list every seller we confirmed sells that peptide as a single-ingredient product, show the form each one sells, and label any form the policy does not cover. Blends are left off. A listing does not confirm that the pharmacy meets the policy’s other conditions, so run through the checks above yourself. For the evidence behind each peptide's claims, see the reviews of KPV, semax, epitalon, MOTS-c and TB-500, plus our separate page on TB-500 side effects and safety, or browse every peptide in our A-Z evidence guide.

How long the policy lasts

It is interim by design. It applies “until a peptide bulk drug substance is addressed in a final rule as being included or not included on the 503A bulks list”^[1]. The Federal Register notice says FDA's future rulemakings “may propose adding some or all of these peptides” based on the evidence^[2]. Separately, HHS can narrow or withdraw the policy for any peptide if a safety signal or quality problem emerges^[1]. Anyone starting one of these peptides should treat access as conditional and plan for it to change.