ATMP GMP (Part IV)

EU GMP Part IV is the dedicated Good Manufacturing Practice guideline for Advanced Therapy Medicinal Products (ATMPs), covering gene therapy, somatic cell therapy, tissue-engineered products, and combined ATMPs. Finalised in November 2017 and effective 22 May 2018, it sits within EudraLex Volume 4 as a standalone, risk-based framework tailored to the manufacturing realities of these products.

Its objective is to maintain the core GMP principles embedded in Directive 2001/83/EC and the ATMP legal regime under Regulation (EC) No 1394/2007, while adapting expectations to small batches, autologous patient-specific units, high process variability, living starting materials, and very short shelf lives. It preserves the central role of the Qualified Person (QP) and the pharmaceutical quality system (PQS) but calibrates how evidence is generated and when it is available.

Part IV does not lower standards. Instead, it allows manufacturers to justify alternative controls when classical sampling, hold times, and validation constructs are impractical. It emphasizes science- and risk-based rationale, explicit traceability from donation through administration, and tight integration of procurement, manufacturing, quality control, and distribution steps.

Regulators use Part IV to evaluate both industrial and hospital-based manufacturing authorizations for ATMPs, ensuring that adaptations remain commensurate with risk. It complements, rather than replaces, horizontal GMP texts such as Annex 1 for sterile manufacture and the general Parts I and II of EU GMP.

Part IV applies to ATMPs across their lifecycle, from development to commercial supply, wherever GMP obligations arise. It covers authorized ATMPs as well as investigational ATMPs produced for clinical trials, in conjunction with the EU clinical trials framework for investigational medicinal products. When investigational-specific provisions are silent, Part IV’s general principles guide fit-for-purpose controls.

The scope spans autologous and allogeneic products, engineered tissues, and gene-modified cells, including combined ATMPs that incorporate a medical device component. For combination configurations, Part IV addresses the medicinal product manufacturing system while recognizing that the device element must meet applicable device legislation and standards.

Part IV also informs expectations for hospital-based manufacture under national implementations, including the hospital exemption in Article 28(2) of Regulation (EC) No 1394/2007, even though the exemption lies outside centralized authorization. Member States typically require equivalent quality and traceability, and inspectors read Part IV alongside national rules to calibrate expectations.

Upstream of manufacturing, the procurement and testing of human tissues and cells are governed by the EU tissues and cells legislation. Manufacturers must interface those requirements into their PQS and documentation so that donor eligibility, consent, and traceability are demonstrably maintained from donation through manufacture and release.

For practical readiness on procurement and donor-related controls, see our guide on the EU tissues and cells framework: EU Tissues and Cells Directive 2004/23.

Part IV mandates that manufacturers formally tailor controls using quality risk management. The goal is not to waive controls but to prioritize the ones that are most effective for the plausible, high-impact hazards of each product and process. This matters when batch sizes are one patient, manipulations are manual or semi-manual, and sampling is constrained.

The pharmaceutical quality system must embed risk thinking in process design, qualification strategies, in-process controls, environmental monitoring, and release decisions. Evidence is assembled across the lifecycle, and the justification connects product attributes, process capabilities, and patient risk. Where data cannot be generated pre-approval, Part IV expects managed post-approval commitments, tight ongoing verification, and clear triggers for corrective action.

In practice, this leads to risk-ranked controls such as closed processing to reduce aseptic risk, single-use flows to avoid cleaning carryover, alternate sampling locations validated as surrogates, and real-time analytics to support timely release. The QP relies on risk dossiers that consolidate this rationale and the performance of mitigations in routine operation.

Teams should ground their approach in internationally harmonized quality risk guidance. A common pattern is to couple a structured risk assessment with ongoing verification, trending, and periodic management review to demonstrate that mitigations remain effective as scale and patient populations evolve.

For method and governance alignment, see ICH Q9 Quality Risk Management readiness.

ATMPs start from human cells and tissues or viral vectors whose intrinsic variability and contamination risks dominate overall product risk. Part IV requires that the PQS draws a bright line from donor identification and eligibility through procurement, transport, receipt, and manufacturing use. That line must be unbroken, contemporaneous, and demonstrable to inspectors.

Donor eligibility and testing derive from the EU tissues and cells framework, including requirements for consent, serology, NAT testing where applicable, and traceability. Manufacturing authorization holders must ensure that procurement organizations meet these prerequisites and that documentation transfers seamlessly into batch records without gaps or transcription errors.

For autologous therapies, chain-of-identity is paramount because each batch is a single patient. Misidentification is a patient safety event. Part IV expects robust identifiers, controlled labeling, segregation by time and space, and system-enforced checks at every critical handoff, including any third-party logistics steps and clinical handback.

Material controls extend to ancillary materials such as cytokines, media, disposables, and viral vectors. Part IV encourages qualification of suppliers, verification of quality attributes that matter to process performance, and incoming checks calibrated to risk. Where materials are sterile or pyrogen-sensitive, manufacturers justify the combination of supplier assurance, sampling, and point-of-use controls.

For practical controls that span donation, manufacturing, and delivery, see our glossary entry on chain of custody.

Part IV acknowledges that many ATMP steps are open or manual and that operations often occur at small scale with short campaigns. It requires the manufacturer to justify room classifications, flows, and segregation based on concrete contamination risks and the extent of aseptic exposure. Closed, single-use systems and barrier technologies can earn justified reductions in background classification, provided the risk assessment and qualification data are compelling.

Environmental monitoring strategies must reflect true exposure points, including gloves, tools, and small-bore connections, and they must trend at a frequency that can signal drifts in time to protect a single patient batch. Cleaning and disinfection programs must address organisms relevant to the facility microbiome, disinfectant rotation, and contact times proven on the exact surfaces in use.

Scheduling becomes a quality control in its own right. Segregation by time, dedicated equipment, and one-piece flow can prevent mix-ups between patient batches. Line clearance must be as deliberate for paperwork and electronic records as it is for physical items, with independent verification steps at patient-identity transitions.

• Define the batch and unit-of-manufacture explicitly for autologous products, including how remainders and reworks are handled.
• Calibrate room classification and air supply to actual exposure, barrier performance, and bioburden risk.
• Validate cleaning and disinfection on representative soils and surfaces, with operator qualification linked to aseptic behaviors.
• Engineer patient and material flows to eliminate crossovers, dead-ends, and unverified identity handoffs.
• Use closed, single-use assemblies where feasible, and qualify their integrity over real process times.
• Plan environmental monitoring locations from first principles, then confirm with data and adapt as processes evolve.

ATMP shelf lives are often measured in hours or days. Part IV permits QP certification based on a justified subset of data when all results cannot be available at the time of dispatch, provided the risk assessment is robust, responsibilities are clear, and there are effective arrangements to act on late results, including recall if needed.

The framework emphasizes designing in-process controls that correlate to critical quality attributes, so real-time process performance can substitute for impractical end-product sampling. Rapid or alternative microbiological methods can be qualified to provide timely assurance, while conventional assays continue in the background to confirm and trend.

The QP’s certification package must make explicit which tests are complete, which are pending, the basis for release, and the contingencies. Communication pathways to clinical sites and logistics partners must be pre-defined to ensure that any late-emerging risks translate into prompt and controlled action.

In practical terms, firms pair risk-ranked process checks with clear certification memos and effective exception handling. That includes predefined stop-use rules, timely deviation initiation, and evidence that pending methods are reliable and routinely concordant with the rapid indicators on which immediate patient decisions rely.

For aligning control strategies and release pathways, see entries on in-process controls and quality decision-making in QC release.

Documentation in ATMP manufacture must be as agile as the process without sacrificing integrity. Part IV expects contemporaneous capture of critical identifiers, materials, and process values, with legible, attributable, and retrievable records. Electronic systems are encouraged where they strengthen identity controls and minimize transcription error.

Deviation and CAPA systems must account for the fact that a single-patient batch can seldom be repeated. Investigations therefore emphasize root-cause plausibility, cross-batch learning, and preventive action. Trending of human factors and environmental signals can be more informative than product retesting, and timelines must reflect the immediacy of clinical decision-making.

Complaints and pharmacovigilance interfaces need crisp definitions of roles between manufacturer, clinical site, and sponsor. Traceability must bridge donation, manufacturing, distribution, and administration, enabling prompt field action if donor screening, sterility, or potency issues emerge after release. Labels and instructions must be unambiguous for clinical users, including storage and thaw parameters.

Electronic batch records tailored to cell and gene therapy can embed enforced identity checks, role-based signatures, and real-time exception prompts that mirror Part IV’s intent. These tools also accelerate inspection readiness by rendering complete, indexed records for the exact time windows regulators review.

Explore our digital recordkeeping entry eBMR/eDHR and end-to-end traceability to see how identity and data integrity safeguards can be built into routine execution.

Part IV must be read alongside horizontal GMP and sectoral legislation. For sterile manufacturing expectations, Annex 1 remains the touchstone for contamination control strategy, cleanroom qualification, aseptic processing, and environmental monitoring. Part IV explains how to justify adaptations for ATMP contexts without undermining Annex 1 principles.

Combined ATMPs integrate a device component. In those cases, the device must meet applicable device law and standards, and interfaces between device and medicinal product quality systems must be defined and controlled. Device usability and compatibility data feed directly into medicinal product risk assessments and release criteria.

Distribution is a critical link, especially for fresh autologous products with narrow temperature and time windows. Good Distribution Practice principles inform control of couriers, packaging systems, temperature monitoring, and actions on excursions. Because administration frequently occurs in hospitals, responsibilities for receiving checks and final verification must be contractually and procedurally clear.

Internationally, authorities outside the EU often converge on similar expectations. While specific texts differ, the core of risk-based controls, identity assurance, and robust QP or equivalent oversight is consistent, enabling mutual understanding in multinational development programs.

For combination configurations and their documentation interfaces, see our entry on the EU Medical Device Regulation.

Translating Part IV into daily operations means embedding identity controls, risk-ranked checks, fast documentation, and decisive quality governance. Manual workarounds cannot keep pace with the narrow windows in autologous workflows, and paper records struggle to prove continuity of identification and custody at inspector depth.

V5 Ultimate operationalizes these needs in a single execution and quality layer. Manufacturers define patient-specific batches, enforce identity at each step, and capture contemporaneous evidence that supports QP certification. Quality owners gain real-time visibility of pending results, deviations, and environmental trends, with workflows calibrated to the immediacy of release and administration.

Integration with laboratories, suppliers, and clinical logistics shortens decision cycles and reduces transcription risk. Configurable templates align with Annex 1 contamination control strategy expectations and Part IV’s emphasis on lifecycle verification, while analytics illuminate where human or facility risks accumulate before they reach the patient.