EU GMP Annex 21 (Importation)

EU GMP Annex 21 — Importation of Medicinal Products — codifies the long-standing expectations of EU inspectorates for medicinal products made in third countries and brought into the EU/EEA. It addresses what must occur at the designated importation site, how the Qualified Person (QP) certifies imported batches, the strategy for importation testing, and the documentation that must accompany each batch.

Published in February 2022 and effective from 21 August 2022, Annex 21 provides consistent, auditable criteria for holders of a Manufacturing and Importation Authorisation (MIA) that import. It closes gaps once handled only through national guidance or inspection practice, and it ties importation activities to EU GMP Volume 4 and the QP certification framework.

In practice, Annex 21 focuses on three control pillars. First, controls at the importation site, including receipt, segregation, sampling, and onward distribution under GDP. Second, analytical testing to satisfy Union requirements or, where law permits, reliance on mutually recognised controls. Third, batch certification by a QP who has full oversight of manufacturing and quality control history, including deviations and shipping conditions.

The Annex does not replace other GMP annexes. Rather, it supplements them where products cross the external border. For example, the sterility risk posture for parenterals remains governed by Annex 1. Annex 21 ensures that, regardless of where the batch was made, its journey into the Union ends with equivalent assurance of quality, safety, and compliance.

Annex 21 sits within EudraLex Volume 4, the guide to Good Manufacturing Practice for medicinal products. It operationalises importation obligations arising under Directive 2001/83/EC and Regulation frameworks that require a Manufacturing and Importation Authorisation for third‑country products entering the EU/EEA. The Annex translates high‑level legal duties into practical controls at the importation site and into documentation available to the Qualified Person (QP) for batch certification.

Under Directive 2001/83/EC, the QP must ensure that every batch is manufactured and checked in accordance with EU requirements. For products made in third countries, the law requires specific testing to occur within a Member State unless a lawful reliance mechanism, such as a mutually recognised control framework, applies. Annex 21 explains how MIA holders plan and justify testing strategies, manage sampling and analysis, and document any reliance arrangements.

Annex 21 interfaces directly with the EU system for QP certification defined elsewhere in Volume 4, while preserving Member State responsibilities for supervision and enforcement. It also complements the legal regime for supply chain security and GDP during and after border entry. Together, these instruments deliver an end‑to‑end, statute‑anchored compliance model for imported medicinal products.

Validation and qualification frameworks remain applicable where importation activities introduce equipment, systems, or transport modalities that can affect product quality. In these cases, life‑cycle principles for qualification and validation help justify sampling plans, temperature‑controlled logistics, and change control around import routes and laboratories.

Key instruments and interpretive resources

EudraLex Volume 4 guidance, EMA Q&A and reflection papers, and inspectorate publications in the EU and aligned jurisdictions offer detailed interpretive context. Cross‑references to customs legislation and GDP guidance round out the legal framework and reinforce the need for documented technical agreements across the supply chain.

Annex 21 is therefore best read as a bridge between statutory obligations in medicinal product law and the operational GMP activities that importers must execute day to day.

For validation boundaries associated with sampling, testing sites, and cold‑chain equipment used at the importation site, organisations often align their approach with principles in related GMP annexes on qualification and validation to ensure traceable justification and change management.

This integrated legal architecture enables consistent enforcement and clearly defines the evidence a QP must consider before certifying a batch for release to the market or to further manufacturing.

A sound legal reading, backed by current regulatory references and technical agreements, remains the most reliable defence during inspections.

Companies should periodically re‑check reliance assumptions and MRA scope, because recognition arrangements and their bilateral annexes can evolve.

Changes in the manufacturing site’s authorisations, product dossiers, or pharmacopoeial requirements can shift the legal basis for reliance and thus the importation testing strategy.

Documented rationale for every reliance decision, anchored in current law and guidance, is essential for QP decision‑making and for demonstrating sustained compliance.

Annex 21 applies to the importation of medicinal products, as defined in EU pharmaceutical law, that are manufactured in third countries and physically introduced into the EU/EEA prior to QP certification. It covers importation site controls, testing arrangements, documentation transfer, and QP batch certification for products destined for placement on the EU/EEA market or for further processing within the Union.

The Annex is written for holders of a Manufacturing and Importation Authorisation that import, and for the importation sites they name in their authorisations. It addresses both finished medicinal products and presentations such as bulk finished product that will be packaged or otherwise finished in the EU/EEA before certification. The same core expectations apply whether the batch is released directly to market or to a subsequent authorised manufacturing step.

Certain materials and product classes are outside the direct scope of Annex 21 because they are governed by other parts of the GMP framework. Active substances fall under Part II (ICH Q7), and investigational medicinal products are addressed in the dedicated clinical trial manufacturing annex. Advanced therapy medicinal products are subject to specific provisions that operate alongside the importation controls described in Annex 21.

Annex 21 also interacts with GDP for distribution steps occurring after the importation site has received the batch. Where importation and distribution operations share infrastructure, controls must be clearly delineated so that GDP obligations do not dilute GMP oversight at the point of entry into the Union.

• In scope: medicinal products manufactured in third countries and introduced into the EU/EEA prior to QP certification, including bulk finished product intended for final packaging or processing.
• Out of scope: active substances regulated under GMP Part II and ICH Q7, which follow separate import and control provisions.
• Special handling: investigational medicinal products follow the clinical trial manufacturing annex, while advanced therapies follow the dedicated Part IV framework.
• Interface: post‑receipt storage and onward distribution follow GDP, but controls at the importation site remain subject to GMP and QP oversight.

When in doubt about scope for a specific product or presentation, the MIA holder should consult its authorisation terms and seek competent authority advice, then document the rationale in the Pharmaceutical Quality System and in technical agreements with third‑country partners.

Importation begins before physical border entry, with due diligence on third‑country manufacturers, technical agreements that fix GMP responsibilities, and qualification of logistics partners. The importation site must be defined in the MIA, and procedures must govern receipt, status labelling, segregation, sampling, and records. These procedures should dovetail with customs processes so that product integrity is maintained during clearance.

Upon receipt, the importation site verifies consignment integrity, transport conditions, identity of the batch, and the completeness of documentation provided by the third‑country manufacturer. If importation testing is required, sampling and analysis must be performed in accordance with EU requirements, using qualified facilities and validated methods. Labelling and system controls must prevent inadvertent distribution prior to QP certification.

Where reliance mechanisms apply, the importer establishes and maintains evidence that the foreign controls are equivalent, are conducted by appropriately authorised parties, and are covered by the applicable legal instrument. Regardless of reliance, the QP must have access to the manufacturing and quality control history, deviations, and shipping conditions necessary to certify the batch.

Downstream, GDP controls resume for market distribution after QP certification. For batches intended for further manufacturing, the same certification step still occurs, albeit with release to another authorised manufacturing operation rather than to the supply chain. Throughout, the Pharmaceutical Quality System should show clear traceability and decision justification.

Companies using advanced control strategies may seek to incorporate parametric or real time release concepts into importation testing justification. Where permitted, reliance on such approaches must be explicitly supported by dossiers, competent authority decisions, and validated transport and sampling controls.

Every workflow step should be demonstrably under control, with clear handoffs between GMP and GDP, and an auditable trail from the third‑country batch record through to QP certification and post‑release distribution.

The Qualified Person’s obligations are unchanged in principle by Annex 21, but the Annex clarifies how they apply to third‑country batches. Before certification, the QP must be satisfied that the product was manufactured and checked in accordance with EU GMP and with the Marketing Authorisation or product dossier. This requires full access to the relevant sections of the third‑country batch documentation, including deviations and investigations.

The QP must confirm that importation testing has been performed as required by Union law, or that a lawful reliance mechanism is in force and appropriately documented. Where reliance is used, the QP needs current evidence that the foreign authority or laboratory is covered by the legal instrument and that the product category and site fall within its scope. Any exceptions or one‑off arrangements must be justified and documented.

Certification also depends on shipment and storage conditions during transit. For temperature‑sensitive products, the QP reviews qualified lane data, in‑transit monitoring results, and any excursions with associated impact assessments. If secondary packaging or labelling will occur in the EU/EEA, the QP must ensure those steps are controlled and that final presentation complies with the dossier.

When deviations, out‑of‑specification, or non‑conformances arise, the QP must ensure that investigations are thorough, root causes are identified, and corrective actions are effective before certifying the batch. Where appropriate, the QP may refuse certification until evidence demonstrates that product quality and compliance have been restored.

Documentation the QP typically reviews

Typical packages include the executed batch record, Certificates of Analysis, validation status of relevant methods, confirmation of importation testing outcomes, records of transport and environmental control, and evidence of supplier qualifications and technical agreements. Where reliance is invoked, the underlying legal basis and current status of recognition should be present.

The certification decision must be traceable, signed, dated, and supported by records that allow an inspector to reconstruct the QP’s rationale.

For products manufactured in third countries, EU law requires that each production batch undergo designated analyses in a Member State, unless a legally sanctioned reliance mechanism applies. Annex 21 explains how to plan and document an importation testing strategy, including sampling, method suitability, and laboratory qualification. The importation site, the testing laboratory, and the QP must operate under a coherent quality system that ensures data integrity and traceability.

Where Member State testing is required, the analytical laboratory must be appropriately authorised, methods must be validated or verified for their intended use, and reference standards must be controlled. If reliance is permitted under an applicable instrument, the importer remains responsible for demonstrating that the foreign controls are equivalent and remain within the instrument’s scope. Evidence should be current at the time of each QP certification.

Sampling plans should reflect the presentation of the batch as imported. Where sampling occurs under customs control or in third‑country facilities, procedures must ensure tamper evidence, chain of custody, and maintenance of sample integrity during transfer. Retention samples should be managed so that investigations into complaints or quality defects can be supported.

When alternative control strategies are proposed, such as parametric release for terminally sterilised products, firms must anchor decisions in product dossiers, pharmacopoeial requirements, and competent authority positions. Any shift to reduced testing must be risk‑based, justified, and reflected in approved procedures and technical agreements.

Annex 21 expects clear, executed technical agreements between the importer and third‑country manufacturer, and where relevant, with testing laboratories and logistics providers. These agreements must delineate GMP and GDP responsibilities, data exchange, deviation and change notifications, and the right to audit. They should reference the legal basis for any reliance mechanism and outline how evidence will be maintained current.

Shipment documentation should allow inspectors to reconstruct the batch’s journey into the Union. At minimum, the importer should hold the batch manufacturing record or approved extracts, Certificates of Analysis, shipping and temperature records, certificates relevant to specific product classes, and any official release or recognition documents. Records must be contemporaneous, legible, and protected for the required retention period.

Traceability extends from the third‑country site to the importation site, through testing and QP certification, and onward into the distribution network. Where applicable, the falsified medicines framework adds serialisation and verification duties at border‑adjacent steps. Importers must ensure that packaging operations and IT systems are aligned to perform required verification and, where relevant, decommissioning or activation events.

Change control processes should capture updates to manufacturing sites, methods, packaging configurations, and logistics providers. Each change must be evaluated for its impact on importation controls, reliance status, and the QP’s certification rationale. Periodic reviews should test whether the documentary package remains complete and inspection‑ready.

• Technical agreement defining GMP, GDP, deviation, change control, and audit rights across parties.
• Executed batch documentation and Certificates of Analysis aligned to the authorised dossier.
• Transport records demonstrating adherence to qualified temperature profiles and integrity.
• Evidence for any reliance mechanism, including current scope and status.
• Testing records, method validation or verification, and sampling traceability.
• Serialisation and verification evidence where the falsified medicines framework applies.

Despite clear expectations, inspectors routinely encounter recurring issues in Annex 21 implementation. A common failing is vague designation of the importation site in authorisations and procedures, which leads to confused handoffs between customs, logistics, and GMP controls. Another is incomplete or outdated technical agreements that no longer reflect current manufacturing, testing, or transport arrangements.

Testing non‑compliance often stems from reliance assumptions that have drifted from the legal position, for example after a change in product scope under a recognition agreement. Gaps in method verification following technology transfer from the third‑country laboratory are also frequent. Incomplete shipping documentation, lost temperature data, or inadequate investigation of excursions can undermine QP confidence and delay certification.

On the QP side, over‑reliance on summaries rather than primary batch and deviation records weakens the certification basis. Where documentation is fragmented across partners, the QP’s access must be timely and complete. Certification pressure from supply constraints can tempt shortcuts, but those decisions rarely survive inspection scrutiny and may lead to recalls or regulatory action.

Organisations that excel under Annex 21 usually demonstrate crisp site designation, rigorous and current reliance evidence, robust sampling and testing controls, and a Pharmaceutical Quality System that anticipates and manages change across borders. They also maintain training and governance that protect the QP’s independence and decision‑making authority.

Annex 21 does not operate in isolation. It interfaces with Annex 16 on QP certification, Annex 1 for sterile manufacturing controls where relevant, and GDP for post‑certification distribution. For products intended for further manufacturing steps within the Union, qualification and validation concepts continue to apply to processes and equipment that could affect quality attributes during secondary operations.

Advanced therapy medicinal products follow Part IV provisions that overlay specific chain‑of‑custody and traceability expectations. Where those products are imported, Annex 21 applies at the point of entry and integrates with the more specialised controls carried by the product class. The falsified medicines framework influences pack‑level controls in certain supply chains and must be harmonised with importation procedures.

Globally, PIC/S publishes aligned GMP guidance adopted by many inspectorates. Post‑Brexit, the United Kingdom and other European jurisdictions maintain regimes that remain broadly consistent with EU GMP principles, though firms must confirm specific national nuances and recognition arrangements. Switzerland and EEA countries align through bilateral arrangements, but firms should still confirm scope for each product and site.

Operationally, companies that import into multiple jurisdictions tend to standardise on a core importation control model, then overlay national requirements for testing and QP or Responsible Person certification. This approach reduces deviation risk and eases inspection readiness across agencies.

A reliable Annex 21 program hinges on current documentation, disciplined change control, robust testing records, and airtight traceability across partners. V5 Ultimate consolidates these elements into a single quality and operations backbone, reducing manual reconciliation and inspection risk. Importers can define and govern importation site procedures, control sampling and testing workflows, and centralise reliance evidence with auditable version history.

For QP certification, V5 provides end‑to‑end visibility of the batch record, deviations, testing, and shipping data needed to support a defendable certification rationale. Structured workflows guide evidence collection, capture approvals with compliant signatures, and ensure that no distribution can occur until certification prerequisites are met. Integration to warehouse and receiving operations preserves segregation and status control at the border.

Cross‑party technical agreements and change notifications can be managed within controlled repositories, with automated reminders for periodic review. Where reliance is invoked, V5 can anchor the legal basis and scope documents next to each product and site, making it easy to demonstrate that recognition remains current at the moment of QP certification. Investigation data, OOS conclusions, and corrective actions live alongside each batch, ready for inspector review.

By tying importation controls to a unified quality system, importers reduce variability, accelerate certification without sacrificing assurance, and arrive at inspections with a coherent, complete dossier for each imported batch.