Based on my experience as a former Compliance Officer and Compliance Branch Director at FDA, the Form FDA 483 is indeed releasable under FOIA and there is no legal obligation for the recipient to provide a response to the agency. But this information is also publicly available from FDA. Field Management Directive (FMD) 120 addresses both points and even explicitly refers to 483 responses as "unsolicited." While there is no legal obligation to respond to the 483, firms rarely if ever fail to do so.
The EIR itself will (should) be proactively provided to the inspected firm pursuant to the conditions established in FMD 145 (i.e. when regulatory action is no longer being considered).
Field Management Directives (as well as Staff Manual Guides) can be found by searching the FDA website.
------------------------------
Mark Lookabaugh
Principal Consultant
PAREXEL International, LLC
------------------------------