🔹 Introduction
In the pharmaceutical industry, documentation is everything.
If it’s not written down — it didn’t happen.
Proper document control ensures that all records, procedures, and data are accurate, traceable, and compliant with Good Manufacturing Practices (GMP). This not only supports product quality but also protects patient safety and company reputation.
Let’s explore the key GMP principles that form the foundation of pharmaceutical document control.
🔹 1. What Is a Document?
A document is any written or electronic record that defines or captures GMP-related information — such as procedures, specifications, test data, or batch records.
Purpose:
- Ensures consistency and standardization of activities.
- Provides traceability for audits and investigations.
- Demonstrates regulatory compliance throughout the product lifecycle.
Examples: SOPs, batch manufacturing records (BMRs), validation reports, training logs, and deviation reports.
🔹 2. ALCOA & ALCOA+ Principles (GMP Data Integrity Standards)
Data integrity is a critical aspect of GMP. Every document — whether paper or electronic — must follow the ALCOA principles:
| Principle | Meaning | Description |
|---|---|---|
| Attributable | Who did it and when | Each record must identify the person responsible. |
| Legible | Readable and permanent | Information should be clear and unaltered. |
| Contemporaneous | Recorded at the time | Data must be written immediately when the activity occurs. |
| Original | First record or true copy | Use original data or a verified copy. |
| Accurate | Correct and truthful | Records must be error-free and verified. |
To strengthen integrity further, ALCOA+ adds:
Complete, Consistent, Enduring, and Available — ensuring records are comprehensive, logically ordered, long-lasting, and easily retrievable during inspections or audits.
🔹 3. Standards for GMP Documents
To maintain uniformity and control, all GMP documents should include:
- Unique document number and clear title
- Version or revision number to track changes
- Approval sequence: Prepared by → Reviewed by → Approved by
- Concise and unambiguous wording
- Controlled distribution to ensure only current versions are in circulation
Tip: Always withdraw and archive obsolete versions immediately after revision to avoid mix-ups.
🔹 4. Key Document Control Activities
Effective document control involves the following activities:
| Activity | Description |
|---|---|
| Issuance | Controlled by QA; issue logs must be maintained. |
| Revision | Done through change control with proper approval. |
| Access Control | Only authorized personnel should handle documents. |
| Tracking | Maintain a master index or document register for traceability. |
Example: When a new SOP version is released, QA should recall all previous copies, update the master list, and ensure users are trained on the new version.
🔹 5. Document Retention Periods (as per WHO, EU GMP, US FDA)
| Document Type | Retention Period |
|---|---|
| Batch Manufacturing/Packaging Records (BMR/BPR) | At least 1 year after batch expiry |
| SOPs, Specifications, Validation Protocols/Reports | Minimum 5 years after supersession |
| Training Records | Duration of employment + 1 year |
| Equipment Qualification & Calibration Records | Life of equipment + 1 year |
| Deviation, CAPA, OOS, OOT Reports | Minimum 5 years |
| Change Control Records | Minimum 5 years |
| Environmental Monitoring Data | Minimum 5 years |
| Distribution Records | At least 1 year after product expiry |
| Complaint & Recall Records | Minimum 5 years after closure |
| Electronic Data | Same retention as paper, with validated backups |
Note: Retention periods may vary slightly depending on regulatory authority or company policy, but should never be shorter than the minimum GMP requirement.
🔹 6. Document Destruction Methods
When the retention period ends, documents must be disposed of securely and traceably.
Methods:
- Physical: Shredding, pulping, or incineration
- Electronic: Secure deletion or overwriting (with IT validation)
Destruction Procedure:
- Obtain QA approval before destruction
- Record details in a Document Destruction Log including:
- Document ID and title
- Date and method of destruction
- Approved by (QA authority)
Proper destruction ensures data confidentiality and prevents unauthorized recovery of information.
🔹 7. GMP Guidelines and References
Key international guidelines for documentation practices include:
- WHO TRS 996 Annex 3 – Good Documentation Practices
- ICH Q10 – Pharmaceutical Quality System
- EU GMP Part I, Chapter 4 – Documentation
- US FDA 21 CFR Part 211.180 – Records and Reports
- PIC/S PE 008 – GMP Guide
These references provide harmonized standards for document creation, control, storage, and archival processes.
💡 Example of Compliance in Practice
Change Control SOP Example:
- Prepared and approved by QA
- Retained for 5 years after closure
- Stored in a secure, access-controlled cabinet
- Destroyed by shredding after the retention period ends
This simple yet structured approach keeps documentation organized, compliant, and audit-ready.
🔹 Final Thoughts
Document control is the backbone of GMP compliance.
It ensures that every activity — from production to packaging — is recorded, verified, and traceable.
By following ALCOA+ principles, maintaining robust control systems, and adhering to retention and destruction policies, companies can guarantee data integrity, product quality, and regulatory confidence.
Remember:
“If you didn’t document it, you didn’t do it.”