EU GMP Annex 1 (2022)

EU GMP Annex 1, Manufacture of Sterile Medicinal Products, underwent its most extensive revision in 2022 after more than a decade of incremental change. Published on 22 August 2022, the revision entered into force on 25 August 2023, with the Pre-Use Post-Sterilisation Integrity Testing (PUPSIT) requirement deferred to 25 August 2024. The update centers on a lifecycle, quality risk management paradigm, with a mandatory, documented Contamination Control Strategy (CCS) that interconnects facility design, utilities, equipment, materials, and human factors.

The revision codifies the expectation that new aseptic filling lines use isolators or Restricted Access Barrier Systems (RABS), raises the bar for aseptic process simulations (media fills), and tightens environmental and process monitoring. It emphasizes data integrity across records, including electronic batch documentation and environmental monitoring data, and aligns closely with PIC/S Annex 1 to support consistent global inspections.

For manufacturers, the operational shift is twofold: first, clarifying design intent and contamination controls up front through the CCS; second, proving capability and maintaining control through comprehensive qualification, media fills reflective of real interventions, enhanced monitoring, and robust ongoing trending. These expectations apply to both terminally sterilized and aseptically manufactured products, scaled according to risk and process design.

Practically, success depends on connecting the CCS to foundational GMP systems: validation, change control, training, and deviation management. Linking the CCS to process validation, out-of-trend handling, and environmental monitoring trending yields an auditable control narrative that inspectors increasingly expect to see end-to-end.

Annex 1 forms part of EudraLex Volume 4, which sets the principles and guidelines of Good Manufacturing Practice for medicinal products in the European Union. The 2022 revision reflects scientific advances, inspection experience, and international collaboration, and it is legally enforceable for manufacturers supplying EU markets, whether located within or outside the EU. The text should be read in conjunction with Part I and Part II of EU GMP, applicable product-specific guidelines, and marketing authorization commitments.

Technically, the revision operationalizes Quality Risk Management principles consistent with ICH Q9 and integrates lifecycle thinking from ICH Q10. It expects risk to be identified, controlled, and monitored through a structured approach, with decisions traceable to scientific rationales and data. Where Annex 1 is silent, firms are expected to draw on recognized standards and pharmacopeial methods appropriate to the product and process.

Global convergence is a defining element. The text was developed with PIC/S to minimize divergence between inspectorates, and it is cognizant of WHO guidance, radiopharmaceutical considerations, and evolving pharmacopeial microbiology chapters. This alignment eases cross-border supply and reduces duplicative compliance burdens, while still allowing competent authorities to enforce local risk tolerances.

Manufacturers should anchor their internal standards to authoritative sources and maintain change control whenever external references are updated. Cross-referencing the CCS to control strategy, media fill and APS, and pupsit helps ensure that legal obligations are consistently translated into operating procedures, training curricula, and monitoring plans.

Annex 1 applies to the manufacture of sterile medicinal products, whether produced by terminal sterilization or aseptic processing. It covers the full manufacturing lifecycle: design, qualification, routine operation, monitoring, and ongoing verification of control. Expectations scale with risk, acknowledging that aseptic processing carries higher inherent risk than terminal sterilization, and therefore requires greater procedural rigor and technical control.

The Annex applies across product modalities, including small molecules, biological products, vaccines, and certain advanced therapies where sterile processing steps are used. It is technology agnostic in framing, but it provides clear expectations for barrier technologies, cleanroom grades, utilities such as water and gases, sterilization methods, single-use systems, and container-closure systems. Where products have unique attributes or rapid hold times, manufacturers are expected to justify tailored controls within the CCS.

The principles of Annex 1 may also inform non-sterile manufacturing steps with high contamination sensitivity, provided this is justified by Quality Risk Management. For example, filtration steps used to render materials sterile upstream of a non-sterile blend, or the handling of sterile components before assembly, may benefit from selected Annex 1 controls. Such applications must be proportionate and documented, avoiding the uncritical transplantation of aseptic expectations into unrelated contexts.

Clearly define process boundaries, the contamination risks within those boundaries, and the controls selected to mitigate them. Cross-link scope statements to process analytical technology where real-time signals are used for control, and to seal integrity testing where container-closure performance underpins sterility assurance.

The CCS is the central organizing document of the 2022 Annex 1. It is not a single procedure but a structured narrative that demonstrates how the facility, equipment, people, materials, and methods collectively prevent contamination by microorganisms, endotoxins, and particulates. It should provide clear rationales for design choices, controls selected, and acceptance criteria, and it should show how data are used to confirm the strategy remains effective over time.

A sound CCS traces hazards to controls, monitoring, and responses. It connects airflow concepts to barrier technologies, identifies critical interventions and how they are avoided or mitigated, and explains how cleaning and disinfection regimes are validated and rotated to prevent resistance. It also addresses utility quality, material and component bioburden, gowning, training, and the qualification of the aseptic process through media fills representative of worst-case conditions.

The CCS must be living. Trending, deviations, media fill outcomes, environmental monitoring, and maintenance data should trigger review and, if needed, changes to controls. Governance should ensure that risk assessments are current, justifications are traceable, and that decisions are proportional to their impact on sterility assurance.

Map your CCS to validation and batch release processes so it is actionable. Link to risk-based validation for qualification depth decisions, and to quality risk register if you use a consolidated risk log. Keep consistency with process validation protocols and monitoring specifications, and anchor master data in controlled document control.

The 2022 Annex 1 positions isolators and RABS as the default for new aseptic installations, recognizing their superior separation of operators from Grade A critical zones. For existing lines, continued operation must be justified with a risk-based rationale, backed by robust media fills and a monitoring strategy that addresses human intervention risks. The Annex reinforces the importance of unidirectional airflow, first-air protection at critical points, and the minimization of manual interventions.

Cleanroom design must support segregation of activities by risk, with appropriate pressure cascades, airlocks, material flows, and decontamination methods. Decontamination agents and cycles, including vaporized hydrogen peroxide when used, should be qualified for the intended loads and geometries. Utilities such as compressed gases and clean steam require integrity from generation to point of use, with monitoring commensurate with the potential to impact sterile operations.

Environmental monitoring should provide timely signals of control loss. Programs should integrate viable and non-viable monitoring, surface and personnel sampling, and targeted intensified sampling after interventions and maintenance. Data integrity applies to both continuous and discrete data, with trends assessed across shifts and campaigns to inform the CCS and trigger investigations when alert or action levels are breached.

Ensure that equipment design supports cleaning, disinfection, and maintenance without compromising asepsis. Link facility and equipment controls to maintenance and OEE, and trend performance using EWMA control charts for early drift detection. Integrate barrier technology qualification results into your inspection readiness package so design intent and residual risks are transparent.

Annex 1 elevates the rigor of aseptic process simulations (APS), requiring that media fills challenge the full range of routine and worst-case conditions. This includes shifts, line speeds, batch sizes, and planned and unplanned interventions. Simulations must be representative of routine practice, not laboratory demonstrations, and they should be designed to detect low-incidence contamination events that may arise from human interaction or equipment design limitations.

Interventions that contact or disrupt Grade A airflow should be deliberately included in the APS, with counts reflecting realistic frequencies. Campaign and changeover strategies need corresponding APS coverage, and the justification for combining or separating APS scenarios should be risk-based and documented. Acceptance criteria should align with current pharmacopeial expectations and internal limits justified in the CCS.

Media fill execution and incubation must follow qualified methods, with prompt, unbiased inspection and reconciliation of units. Failures require immediate investigation, root cause analysis, and corrective actions before resuming routine aseptic manufacture. Trend APS data alongside environmental and personnel monitoring to confirm the control strategy remains effective across time and operating conditions.

Cross-reference APS plans to media fill and APS, and ensure integration with structured deviations for investigation quality. Where justified by science, leverage process analytical technology signals to identify elevated-risk windows that merit targeted APS challenges.

The Annex expects sterilizing-grade filtration to be controlled and verified so that sterility assurance is not reliant on a single test or assumption. PUPSIT—Pre-Use Post-Sterilisation Integrity Testing—is required for sterilizing filters unless a robust, documented risk assessment demonstrates that PUPSIT is not technically feasible or does not add value for the specific application. This assessment must be specific to the product, process, and filter configuration, and it should be revisited when changes occur.

Filter integrity testing should bracket use with pre- and post-use tests, and it should be tied to validated parameters, hold times, and differential pressures. Assemblies, including single-use manifolds, should be designed and qualified to support aseptic connections, drainability, and integrity. Where terminal sterilization is used, the Annex still expects tight control of bioburden, container-closure integrity, and process lethality, with data feeding into the CCS and batch release decisions.

Justification for PUPSIT exemptions is frequently scrutinized. Generic rationales, supplier statements without process context, or catch-all claims of infeasibility are unlikely to withstand inspection. Evidence should address filter wetting characteristics, process dynamics, the risk of undetected damage, and alternative controls that deliver equivalent assurance if PUPSIT cannot be performed without introducing greater risk.

Document filter control within your CCS, linking to pupsit and to seal integrity testing where container-closure performance completes the sterility assurance chain. Validate sterilization cycles within your process validation framework, and ensure traceability through electronic batch records for rapid, data-rich review.

Annex 1 integrates monitoring with decision-making. Environmental and personnel monitoring programs must detect trends that signal erosion of control, not merely tally discrete results. Programs should define sampling locations, frequencies, and alert and action levels appropriate to room grades and operating states, and they should intensify after planned maintenance, atypical interventions, or process deviations.

Personnel remain a dominant contamination vector in aseptic processing. The Annex emphasizes training, qualification, and ongoing proficiency, including aseptic behavior, gowning, and intervention technique. Gowning systems should be qualified for their intended use and laundered or sterilized under controlled conditions, with glove and garment monitoring that is frequent enough to capture deterioration in practice or materials.

Data must be accurate, complete, consistent, and contemporaneous. This applies to particle counters, viable air samplers, surface plates, glove prints, and batch and cleaning records. Electronic systems should enforce access control, audit trails, and backup and recovery procedures. Trending and visualization support early detection of weak signals before excursions become batch-impacting events.

Integrate monitoring and training outcomes with audit readiness and lab QC, and trend outcomes using out-of-trend handling and EWMA control charts. Reinforce standards through role-based curricula and periodic coaching focused on error-prone interventions.

Several issues recur in inspections since the Annex 1 revision. First, CCS documents that restate procedures without demonstrating the logic and data behind control decisions fail to meet expectations. The CCS must show how risks are identified, controlled, monitored, and reviewed, and it should make clear who is accountable for which controls and what triggers require escalation.

Second, aseptic process simulations that do not reflect real-world interventions, shifts, or line speeds underrepresent risk. Scenarios should be representative and justified. Third, attempts to broadly waive PUPSIT on feasibility grounds, without product- and process-specific evidence and alternative assurance, are frequently challenged. Fourth, cleanroom classification targets that are met at rest but not maintained in operation point to control gaps in interventions, equipment layout, or maintenance.

Fifth, environmental monitoring programs that lack dynamic sampling around interventions and maintenance miss meaningful signals. Finally, data integrity weaknesses, including unsecure spreadsheets, incomplete audit trails, or delayed entry of monitoring results, undermine confidence in the CCS and batch decisions. Each of these pitfalls stems from disconnects between risk assessments, procedures, and operational data.

Close these gaps by tying the CCS to inspection readiness, structured deviations, and audit readiness. Use risk-based validation to right-size qualification depth, and ensure electronic batch records reflect the control narrative and enable fast, data-driven lot release.

Annex 1 harmonizes closely with PIC/S Annex 1 to support consistent interpretation by global inspectorates. Many non-EU authorities mirror or reference the same concepts in their GMP frameworks, which reduces friction for multi-market supply. The World Health Organization provides complementary guidance for sterile products through its Technical Report Series, which national regulators often adopt or adapt in resource-diverse settings.

Pharmacopeial standards, including updated USP microbiology chapters, provide test methods and acceptance criteria that intersect with Annex 1 controls for bioburden, sterility tests, and environmental monitoring. ICH Q9 and Q10 remain foundational for risk management and pharmaceutical quality systems, anchoring the lifecycle and governance concepts that Annex 1 applies to aseptic practice. Distribution controls under EU GDP maintain the integrity of sterile products post-release.

For combination products and devices supplied sterile, manufacturers should cross-check consistency with device regulatory schemes, noting that device sterilization validation and packaging integrity expectations must align with the medicinal product’s sterility assurance narrative. Where national authorities issue Q&As or inspectorate expectations, firms should incorporate them into controlled references and training.

Useful cross-walks include PIC/S Annex 1 alignment, WHO GMP TRS 1044 (2022), USP 2021–2023 microbial supplement changes, and EU GDP. Where device interfaces exist, review EU MDR for packaging and sterilization interface coherence, and embed outcomes in your quality assurance process.

Successful implementation starts with a gap assessment against the 2022 Annex 1 text, prioritized by patient and product risk. Build or refresh the CCS to clearly explain design intent, controls, monitoring, and governance. Confirm that aseptic process simulations reflect real operations, that PUPSIT and filter control are embedded where applicable, and that environmental monitoring and personnel programs are capable of detecting and trending subtle shifts in control.

Digitize records and data flows for traceability and speed. Ensure procedures, batch records, monitoring logs, and training are versioned, controlled, and linked to the CCS. Connect maintenance, cleaning, and calibration events to risk assessments and APS plans so that changes in equipment state are reflected in monitoring intensity and decision-making. Validate systems proportionately and maintain inspection-ready narratives that link risk, data, and action.

A practical path is to establish governance for CCS ownership, standardize risk assessments tied to decision thresholds, and deploy dashboards that visualize environmental, personnel, and APS leading indicators. Embed supplier and component controls for bioburden and integrity, and ensure deviations, OOS, and OOT are investigated with discipline and closure metrics that drive learning back into the CCS.

1. Run a documented Annex 1 gap analysis and risk rank findings.
2. Draft or refresh the CCS with clear justifications and KPIs.
3. Requalify APS designs to cover interventions, speeds, and shifts.
4. Implement PUPSIT or finalize exemptions with product-specific evidence.
5. Tighten EM design, data integrity controls, and trending dashboards.
6. Validate digital records and train roles on new practices.
7. Demonstrate control through linked metrics and periodic CCS review.