The pharma quality vocabulary, as the regulator uses it

The list of inspectional observations an FDA investigator issues at the close of an inspection: conditions that, in the investigator's judgment, may constitute violations of the Food, Drug, and Cosmetic Act. It is not a final agency determination, and it does not by itself say the firm is out of compliance.

FDA's principal tool for obtaining prompt voluntary correction of violations of regulatory significance. It cites the specific regulation for each violation, requests a written response, and is published on FDA's site with the firm's name.

FDA's three-way outcome for an inspection. No Action Indicated: no objectionable conditions found. Voluntary Action Indicated: objectionable conditions found but not at a level warranting regulatory action. Official Action Indicated: regulatory or administrative action is recommended.

A court order, agreed between the firm and the Department of Justice on FDA's behalf, that settles an injunction case. It typically binds the firm to a remediation plan with third-party oversight and can halt manufacturing or distribution until conditions are met.

A notice that FDA has enough evidence to detain a product or a firm's shipments at the border without physical examination (detention without physical examination). Import Alert 66-40 covers drugs from firms that do not meet current good manufacturing practice.

The minimum requirements for the methods, facilities, and controls used in manufacturing, processing, and packing a drug product, set out for finished pharmaceuticals in 21 CFR Parts 210 and 211. The word current means the systems and technology must keep up with what is presently accepted, not what was accepted when the rule was written.

The organizational unit 21 CFR 211.22 makes responsible for approving or rejecting all components, containers, closures, in-process materials, packaging, labeling, and drug products, for reviewing production records, and for approving procedures and specifications that affect product quality. Its responsibilities must be in writing and followed.

A departure from an approved procedure, specification, or expected result. 21 CFR 211.192 requires that any unexplained discrepancy or failure of a batch to meet its specifications be thoroughly investigated, that the investigation extend to other batches that may have been associated with the failure, and that a written record state the conclusions and follow-up.

The system for eliminating the cause of a detected nonconformity (corrective action) and the cause of a potential one (preventive action). ICH Q10 names it as one of the four elements of a pharmaceutical quality system, driven by investigations of complaints, rejections, deviations, audits, and trends.

The formal process for proposing, evaluating, approving, implementing, and reviewing changes to processes, equipment, materials, and systems. ICH Q10 requires that changes be assessed with quality risk management and evaluated after implementation to confirm they had the intended effect.

The ICH Q10 model for a quality system that covers the whole product lifecycle. Its four elements are process performance and product quality monitoring, corrective and preventive action, change management, and management review, all supported by knowledge management and quality risk management.

The ICH Q9 process for assessing, controlling, communicating, and reviewing risks to the quality of a drug product across its lifecycle. The 2023 revision, Q9(R1), adds guidance on managing subjectivity in risk assessments, on how much formality a given decision needs, and on risks to product availability.

The record 21 CFR 211.188 requires for each batch, documenting every significant step of manufacture and control: dates, equipment, components and their quantities, in-process and laboratory results, labeling control, and the identity of the people who performed and checked each step. Under 211.192 the quality unit reviews it before the batch is released.

The evaluation 21 CFR 211.180(e) requires at least annually for each drug product, covering representative batches, complaints, recalls, returned products, and investigations, to decide whether specifications, procedures, or controls need to change.

A written agreement between a drug owner and a contract facility that defines which cGMP activities each party performs and who has the final say on quality decisions. FDA's 2016 guidance on contract manufacturing arrangements sets out what it should cover, and 21 CFR 211.22 keeps the owner's quality unit responsible for the product regardless of the contract.

A test result that falls outside the specifications or acceptance criteria established in an application, drug master file, official compendium, or the manufacturer's own specifications. FDA's OOS guidance describes a two-phase investigation: a laboratory phase to identify assignable laboratory error, then a full-scale investigation into manufacturing when none is found.

A result that is within specification but inconsistent with the expected trend, most often seen in stability data. The term is not defined in 21 CFR; the expectation comes from 211.180(e), which requires the evaluation of product quality data over time, and from ICH Q1E's treatment of stability trends.

The completeness, consistency, and accuracy of data across its lifecycle. FDA's 2018 question-and-answer guidance describes the expectation as ALCOA: attributable, legible, contemporaneous, original, accurate; industry extends it with complete, consistent, enduring, and available. The applicable cGMP provisions include 211.68 (computer controls), 211.188 (batch records), and 211.194 (laboratory records).

A secure, computer-generated, time-stamped record of who created, changed, or deleted an electronic record and when, that does not obscure the earlier entry. 21 CFR 11.10(e) requires it for electronic records, and FDA's data integrity guidance expects audit trails that capture changes to critical data to be reviewed as part of the record review under 211.68, 211.188, and 211.192.

The regulation that sets the criteria under which FDA accepts electronic records and electronic signatures as equivalent to paper records and handwritten signatures: system validation, audit trails, access controls, record retention, and signature linkage. FDA's 2003 scope-and-application guidance narrowed enforcement to records required by predicate rules such as Part 211.

A supplier's report of the test results for a specific lot of a component. Under 21 CFR 211.84(d)(2) a manufacturer may rely on a supplier's COA in place of its own full testing only after establishing the reliability of the supplier's analyses through validation at appropriate intervals, and it must still run at least one specific identity test on each lot.

The 21 CFR 211 Subpart I requirements for the laboratory: scientifically sound specifications, sampling plans, and test procedures (211.160), testing of each batch before release (211.165), a written stability program (211.166), and laboratory records that include complete data from every test (211.194).

The system that produces, stores, and distributes water used in manufacturing, from purified water to water for injection. 21 CFR 211.48 requires a potable supply under continuous positive pressure and free of defects that could contaminate product; USP general chapter 1231 describes design, qualification, and monitoring expectations.

The written program 21 CFR 211.166 requires to assess the stability characteristics of a drug product and to set its storage conditions and expiration date: sample size and test intervals based on statistical criteria, storage conditions, validated stability-indicating methods, and testing in the marketed container. ICH Q1A(R2) defines the long-term and accelerated conditions and testing frequency used for registration.

The date, required on the label by 21 CFR 211.137, through which a drug product is expected to meet its specifications when stored as labeled, determined by appropriate stability testing. ICH Q1E describes how to evaluate stability data and when a shelf life may be extrapolated beyond the real-time data available. For drug substances the equivalent concept is the retest period.

Reduced stability study designs described in ICH Q1D. Bracketing tests only the extremes of a design factor such as strength or container size, on the assumption that intermediates are covered. Matrixing tests a subset of the possible samples at each time point. Both trade full data for a justified reduction in testing.

The ICH Q1B evaluation of whether light exposure produces unacceptable change in a drug substance or product. It comprises forced-degradation studies and confirmatory studies at a defined overall illumination and near-ultraviolet energy, in the immediate pack and, if needed, the marketing pack.

The collection and evaluation of data, from process design through commercial production, that establishes scientific evidence a process is capable of consistently delivering quality product. FDA's 2011 guidance describes three stages: process design, process qualification (including process performance qualification, PPQ), and continued process verification. The underlying rule is 21 CFR 211.100(a).

The demonstration that a test method is suitable for its intended purpose. 21 CFR 211.165(e) requires the accuracy, sensitivity, specificity, and reproducibility of test methods to be established and documented. ICH Q2(R2) sets out the validation characteristics and Q14, its companion, describes lifecycle development of the procedure.

The documented evidence that a computer system used in production or control does what it is intended to do. 21 CFR 211.68 requires that such systems be routinely calibrated, inspected, or checked, that input and output be verified for accuracy, and that program changes be made only by authorized personnel. Computer software assurance (CSA) is FDA's risk-based framing of the same objective.

Manufacturing a sterile product by sterilizing the product, container, and closure separately and assembling them in a controlled environment, as opposed to terminal sterilization. 21 CFR 211.113(b) requires written procedures designed to prevent microbiological contamination of sterile products, including validation of all aseptic and sterilization processes; FDA's 2004 guidance sets out the expectations for facility design, personnel, media fills, and environmental monitoring.

The amended 21 CFR Part 820 for medical devices, which incorporates ISO 13485:2016 by reference and took effect on 2 February 2026, replacing the former Quality System Regulation. It applies to devices and combination products with a device constituent, not to drug products under Part 211.

The World Health Organization programme that assesses medicines, vaccines, diagnostics, and manufacturing sites so that United Nations agencies and national procurers can buy products of assured quality. It includes a dossier assessment and an inspection of the manufacturing site against WHO GMP guidelines.

The Nigerian National Agency for Food and Drug Administration and Control directive under which the registration of certain imported finished pharmaceutical products is limited to an initial five-year period, with any further five-year renewal conditional on a plan to move manufacturing into Nigeria. It is a market-access rule, not a GMP standard, but it drives site qualification and technology transfer decisions.

The United States Pharmacopeia's numbered chapters. Chapters numbered below 1000 are enforceable requirements when referenced by a monograph or by general notices; chapters numbered 1000 and above are informational. A drug that claims a USP name must meet the monograph, and 21 CFR 211.194 requires that compendial methods be verified as suitable under actual conditions of use.

An open protocol that standardizes how AI applications connect to external tools, data sources, and services. In a regulated quality environment an MCP server that reads batch records, LIMS data, or document systems is a computerized system under 21 CFR 211.68, and a change to the protocol or the server is a change to that system.