FDA draft guidance on Data Integrity – 18 Questions & Answers
On April 14th 2016 U.S. Food and Drug Administration published a draft guidance for comments on Data Integrity: Data Integrity and Compliance With Current Good Manufacturing Practice Guidance for Industry. The draft guidance is a question & answer document, raising 18 questions regarding data integrity and provides FDA’s current thinking about the role of data integrity in current good manufacturing practice (CGMP) for drugs, as required in 21 CFR parts 210, 211, and 212. As stated in the introduction section, “FDA expects that data be reliable and accurate”. According to the guidance document, FDA expects firms to “implement meaningful and effective strategies to manage their data integrity risks based upon their process understanding and knowledge management of technologies and business models.”
With the 18 questions and answers the guidance document provides a good overview on data integrity, FDA’s view on data integrity and how the FDA expects data integrity to be implemented. The first important answers that the documents gives, are for the questions:
- What is data integrity? and
- What is metadata?
FDA refers to the ALCOA principle, an acronym that was introduced by the FDA themselves and already used for years in many industry presentations. In this guidance document FDA not only explains the acronym ALCOA, standing for
C ontemporaneously recorded,
O riginal or a true copy, and
They also providing guidances for the regulatory sources, i.e. “for attributable, see §§ 211.101(d), 211.122, 211.186, 211.188(b)(11), and 212.50(c)(10); for legible see §§ 211.180(e) and 212.110(b); for contemporaneously recorded (at the time of performance) see §§ 211.100(b) and 211.160(a); for original or a true copy see §§ 211.180 and 211.194(a); and for accurate see §§ 211.22(a), 211.68, 211.188, and 212.60(g)”.
Other questions that are answered by the draft guidance are:
- When is it permissible to exclude CGMP data from decision making?
- Does each workflow on our computer system need to be validated?
- How should access to CGMP computer systems be restricted?
- Why is FDA concerned with the use of shared login accounts for computer systems?
- How should blank forms be controlled?
- How often should audit trails be reviewed?
- Who should review audit trails?
- Can electronic copies be used as accurate reproductions of paper or electronic records?
- Is it acceptable to retain paper printouts or static records instead of original electronic records from stand-alone computerized laboratory instruments, such as an FT-IR instrument?
- Can electronic signatures be used instead of handwritten signatures for master production and control records?
- When does electronic data become a CGMP record?
- Why has the FDA cited use of actual samples during “system suitability” or test, prep, or equilibration runs in warning letters?
- Is it acceptable to only save the final results from reprocessed laboratory chromatography?
- Can an internal tip regarding a quality issue, such as potential data falsification, be handled informally outside of the documented CGMP quality system?
- Should personnel be trained in detecting data integrity issues as part of a routine CGMP training program?
- Is the FDA investigator allowed to look at my electronic records?
- How does FDA recommend data integrity problems identified during inspections, in warning letters, or in other regulatory actions be addressed?
The document is a good source when looking for answers for a data integrity implementation, respectively for assessing if a firms quality systems has the right measures and procedures in pace to comply with FDA’s expectations regarding data integrity. We will publish more articles soon that will comment the draft guidance and provide details regarding the impact on data integrity implementation. For example, we will comment on the issue how electronic batch recording systems like MES are impacted by this guidance document.
The document has been published for comments that can be submitted within 60 days after publication. It can be downloaded from the FDA website: http://www.fda.gov/ucm/groups/fdagov-public/@fdagov-drugs-gen/documents/document/ucm495891.pdf