21 CFR 58Good Laboratory Practice for Nonclinical Laboratory Studies

21 CFR Part 58 is FDA’s Good Laboratory Practice regulation for nonclinical laboratory studies. It is the quality system that underpins the credibility of toxicology, biocompatibility, and other nonclinical safety data submitted in support of U.S. research and marketing applications. When followed, it allows regulators to reconstruct what was planned, what was done, what was observed, and how conclusions were drawn.

The rule applies when study results are intended to support an IND, NDA, or BLA for drugs and biologics, and for medical devices through 510(k) notifications and PMA applications. Its core objective is not to dictate science, but to require an organizational and documentation backbone that assures unbiased execution and traceable, defensible data.

Part 58 establishes clear accountability. A single Study Director is responsible for the overall conduct of each study. An independent Quality Assurance Unit monitors adherence to the protocol and SOPs, audits critical phases, and verifies that the final report accurately reflects raw data. Facility design, equipment qualification, and staff training expectations are spelled out so that environmental factors and instrument performance do not compromise results.

In practice, GLP rigor shows up as contemporaneous raw entries, controlled revisions to protocols and SOPs, traceable sample handling, and archives that preserve everything required to reconstruct the study years later. Electronic systems that generate, process, or store GLP records should also meet the expectations of 21 CFR Part 11. Neighboring frameworks, such as device quality requirements in 21 CFR 820, interact at the submission boundary but govern different life‑cycle phases.

Part 58 covers nonclinical laboratory studies in which test articles are studied under laboratory conditions to determine safety and other properties that support regulatory submissions to FDA. This includes in vivo animal toxicology, in vitro assays that inform biocompatibility or toxicity, and analytical characterizations necessary to interpret exposure and response. The rule is product‑agnostic: drugs, biologics, medical devices, food additives, and animal drugs all fall within scope when nonclinical data will be submitted.

Part 58 does not apply to basic exploratory research not intended for submission, to studies on humans, to clinical investigations, or to field studies that are not laboratory‑based. Academic or discovery-stage experiments may therefore be out of scope until or unless they are designated to support an IND, IDE, marketing application, or related submission. When studies migrate toward support of a submission, GLP planning, governance, and documentation controls must be implemented before first data are generated.

The regulation is organized across subparts that specify organization and personnel, facilities, equipment, testing facility operations, test and control articles, protocol and conduct of the study, records and reports, and the grounds and process for disqualification. Disqualification is a last‑resort enforcement tool when fundamental GLP breakpoints compromise data integrity.

Other agencies impose parallel GLP rules for different statutes. For example, environmental fate and ecotoxicology for pesticides fall under U.S. EPA GLP at 40 CFR Part 160, not FDA GLP. International sponsors often align with OECD GLP principles to enable multi‑region acceptability, while still complying with 21 CFR 58 for U.S. submissions. Where computerized systems are used, the data‑integrity expectations of 21 CFR Part 11 typically also apply, and laboratories benefit from robust document control and traceability.

GLP begins with management. Facility management must provide qualified personnel, adequate facilities, and approved SOPs. They appoint a Study Director as the single point of study control and establish an independent Quality Assurance Unit (QAU) that is separate from study conduct. Independence ensures that those who generate data are not the same people who verify compliance.

The Study Director has ultimate responsibility for protocol approval, study conduct, raw data integrity, and the scientific content of the final report. Principal Investigators may oversee phases at remote sites in multi‑center studies, but the Study Director retains overall accountability. The QAU maintains a master schedule sheet, conducts inspections of each study at intervals adequate to assure integrity, audits critical phases, and reviews final reports for consistency with raw data.

Archiving is also a formal role. Facilities must designate an archivist or equivalent function to manage secure retention and retrieval. Training records, equipment qualifications, environmental conditions, and supplier qualifications must be documented and available to reconstruct decision‑making. For computerized systems, defined user roles, access controls, and validated workflows should be aligned with 21 CFR Part 11 and supported by audit readiness.

GLP requires facilities that are designed and maintained to prevent mix‑ups and cross‑contamination and to protect the integrity of test systems and specimens. Animal rooms should be adequate for species‑specific needs and separated from areas where test and control articles are mixed or stored. Space must be sufficient for proper conduct of studies, storage of supplies, and segregation of clean and dirty activities.

Equipment must be of appropriate design and capacity and be suitably located. It should be calibrated, standardized, and maintained according to written SOPs. Calibrations should use traceable standards where appropriate, with records that allow trend analysis over time. Documentation of preventive maintenance and repairs is expected to explain any potential impact on data generated during affected intervals.

Environmental conditions such as temperature, humidity, light cycles, and airborne particulates should be monitored and controlled to the extent that they could influence the test system. Storage conditions for reagents, test articles, and specimens must be appropriate to maintain identity, strength, quality, and purity. Cold storage and cryogenic units require continuous monitoring and alarm response plans with documented actions.

Modern laboratories often rely on digital and connected instrumentation. Computerized systems used in generation, processing, or storage of GLP data should be validated for intended use, access‑controlled, and compliant with 21 CFR Part 11. V5 provides operational scaffolding via calibration management, environmental monitoring, and traceability to demonstrate control from instrument to archive.

• Segregate animal housing, test article handling, and specimen archiving areas
• Define and document calibration intervals, methods, and acceptance criteria
• Monitor and record environmental parameters tied to study validity
• Control access to critical rooms, equipment, and computerized systems

GLP requires rigorous control of test and control articles, including identity, strength, purity, composition, and stability. These characteristics must be known with sufficient accuracy to interpret toxicologic or biocompatibility results. Certificates of analysis, validated analytical methods, and stability data under expected storage and use conditions are central evidence sets.

Labeling must unambiguously identify lot, concentration, and storage conditions. In‑study preparations, dilutions, or admixtures must be prepared under SOPs with traceable balances, calibrated volumetrics, and appropriately documented calculations. Each movement—from receipt to preparation to administration or application—should be recorded to establish an unbroken chain of custody.

Controls must be fit for purpose: negative controls free of the test article and positive controls that reliably elicit a known response, where scientifically justified. For device biocompatibility, extraction vehicles, surface area normalization, and recovery studies require special attention, while GLP ensures the documentation backbone rather than imposing the toxicology paradigm itself.

• Characterize identity, strength, purity, and composition before first use
• Establish and document storage conditions and expiries based on stability
• Use calibrated, verified equipment for preparations and keep full calculations
• Maintain chain‑of‑custody logs for receipt, dispensing, and disposal

V5 helps enforce these controls with weigh and dispense workflows, barcode‑driven traceability, and embedded SDS management. Where container performance matters, link study documentation to container‑closure system qualification evidence.

Every GLP study must have an approved, dated, and signed protocol that prespecifies objectives, test system, methods, and planned analyses. The Study Director approves the protocol and any amendments, ensuring that changes are justified, documented, and communicated to all personnel before implementation. SOPs cover routine operations to assure consistency and reproducibility across studies and staff.

Data integrity is fundamental. Raw data must be recorded promptly, legibly, and indelibly, with corrections that preserve original entries, show the reason for change, and are signed and dated. Electronic records require validated systems, secure audit trails, and role‑based access controls aligned to 21 CFR Part 11. Analytical methods should be qualified or validated for their context of use, with system suitability and positive and negative controls where appropriate.

Protocol deviations must be documented, assessed for impact on study integrity, and, when material, formalized via amendments approved by the Study Director before execution. The QAU inspects critical phases and audits data to verify that the final report is a complete and accurate reflection of the raw record. Training and competency records demonstrate that personnel were qualified to perform assigned tasks.

1. Objectives, test system, test and control articles, and dose or exposure levels
2. Experimental design, randomization, blinding (if used), and sample size rationale
3. Methods for observations, measurements, statistical analyses, and acceptance criteria
4. Recordkeeping, archiving plan, and criteria for handling deviations and amendments

V5 operationalizes these expectations with controlled document control, scheduled periodic document review, laboratory QC workflows, and structured deviations. For sponsors bridging to manufacturing, see how study‑to‑production traceability connects with electronic batch records.

GLP documentation must enable an independent scientist to reconstruct the study. Raw data include all original observations and activities necessary to reconstruct procedures and results, not just summarized tables. This encompasses instrument printouts, audit trails, animal room logs, environmental records, training files, and chain‑of‑custody documents for test and control articles.

The final report must identify the test and control articles, describe the test system, methods and materials, present results and discussion, and state the study’s conclusions. It must include the Study Director’s signed statement of responsibility and a signed QAU statement describing the inspections performed and dates, as well as the phase(s) inspected. Any deviations from the protocol or SOPs must be described and justified.

Archiving is mandatory. Facilities must maintain secure, indexed archives with controlled access and environmental conditions suitable to preserve legibility and integrity. Records are generally retained for at least two years after the date FDA approves the application supported by the study, or for at least two years after study completion or discontinuation if not submitted, consistent with 21 CFR 58.195. Retrieval should be timely, with documented check‑out and return.

V5 supports retention through tamper‑evident storage, traceability, and searchable metadata. For device sponsors operating under 21 CFR 820, harmonized controls simplify downstream design history file linkages. For communications with FDA following inspections, see our 483 response guidance.

FDA inspects GLP facilities under its Bioresearch Monitoring (BIMO) program to verify compliance and data integrity. Inspections review the master schedule, QAU function, ongoing and completed studies, and the fidelity of final reports to raw data. Investigators may perform data audits, observe live phases, and interview personnel to assess training and independence.

Findings are documented on Form FDA 483 at the close‑out meeting. Significant or systemic issues can lead to Warning Letters, rejection of study data, or, in egregious cases, disqualification of the testing facility under Subpart J. Disqualification procedures involve notice, opportunity for hearing, and publication of the determination; reinstatement requires corrective actions and demonstration of sustained compliance.

Risk‑based surveillance means facilities should maintain continuous inspection readiness. Strong QAU programs that detect and correct issues early, robust computerized system validation, and complete archives reduce inspection friction. Thorough, timely, and well‑supported responses to FDA observations are essential to mitigate enforcement risk and protect the acceptability of submitted data.

• Triggering events include pre‑approval, for‑cause, and routine surveillance inspections
• 483 observations require prompt, specific, and sustainable corrective actions
• Data rejection or facility disqualification can jeopardize entire submissions
• Effective CAPA programs and QAU independence are primary safeguards

V5 helps teams prepare through inspection readiness, audits and CAPA auto‑routing, and structured responses aligned to FDA 483 best practices. Integration with audit readiness dashboards makes status visible to leadership ahead of BIMO visits.

FDA’s 21 CFR Part 58 aligns conceptually with OECD GLP principles used by many jurisdictions to enable mutual acceptance of data. While terminology and procedural details can differ, the backbone—clear accountability, independent QA, validated methods, and auditable records—is shared. Sponsors running global programs often design studies to satisfy both OECD GLP and 21 CFR 58 so data are broadly acceptable.

In the United States, the Environmental Protection Agency enforces a separate GLP rule at 40 CFR Part 160 for pesticide and environmental studies. Study types such as environmental fate, residue chemistry, and ecotoxicology generally fall under EPA GLP rather than FDA GLP. Our companion guide to GLP (40 CFR 160) outlines those distinctions and operational impacts.

ICH guidance shapes what nonclinical safety studies are needed and when. ICH M3(R2) and related safety guidelines define recommended timing, duration, and endpoints to support clinical trials and marketing applications; GLP defines how to run those studies to assure integrity. Device sponsors intersect with GLP most often through biocompatibility testing and bench studies that feed 510(k) or PMA submissions, while overall device quality systems remain under 21 CFR 820. Combination products should also consider 21 CFR Part 4.

Data integrity expectations for computerized systems cut across frameworks. FDA’s inspections and compliance posture, EMA’s scientific guidance, and ICH on data reliability converge on secure audit trails, validated systems, and governance. For teams seeking harmonization with manufacturing quality, ICH Q10 readiness and ICH Q9 risk management provide complementary life‑cycle tools.

Many GLP failures trace to governance gaps rather than scientific errors. The most common is blurring the roles of Study Director and QAU, which erodes independence and invites bias. Another is initiating dosing or sample collection before the protocol is formally approved and distributed, creating irreconcilable gaps between planned and executed work.

Computerized systems are a persistent weak point. Without validated workflows, access controls, and complete audit trails, electronic raw data may be deemed unreliable. Similarly, missing or incomplete chain‑of‑custody records for test articles, or the use of expired or uncharacterized materials, undermines study interpretability.

Facilities often underestimate the rigor of archiving. Scattered storage, undocumented environmental excursions for archives, and poor indexing lead to retrieval delays and inspection findings. QAU programs can also atrophy if master schedules are not current or if inspections avoid critical phases. The corrective path generally involves sharpening SOPs, retraining personnel, and implementing systems that make compliance the path of least resistance.

• Approve the protocol and all methods before first data, and control amendments
• Maintain QAU independence with documented master schedules and inspection reports
• Validate computerized systems and align with 21 CFR Part 11
• Enforce test article characterization and full chain‑of‑custody documentation
• Centralize archives with controlled access, indexing, and environmental monitoring
• Use structured deviations and CAPA to drive durable fixes

V5 Ultimate provides a configurable quality backbone that maps directly to GLP roles, records, and oversight. Study Directors orchestrate protocols, amendments, and controlled methods inside a single source of truth. The Quality Assurance Unit works from a live master schedule, plans phase‑appropriate inspections, and issues auditable statements for inclusion in final reports. Role‑based access and eSignatures align with 21 CFR Part 11.

Laboratory operations are supported by calibrated instrument registries, scheduled checks, and enforced methods through lab QC. Test article lifecycle is managed via barcode traceability, weigh and dispense with verified calculations, and integrated SDS management. Archives are indexed and searchable, with controlled retrieval and immutable audit trails.

Inspection readiness is continuous. Dashboards surface QAU coverage, calibration status, training currency, and deviation closure. When FDA issues a 483, inspection readiness and audits and CAPA auto‑routing accelerate evidence gathering and response. For sponsors bridging to manufacturing or device development, integrations support qMS, document control, and downstream QC release.