Nonconforming Material Segregation

Nonconforming material segregation is the controlled separation—via unmistakable identification, physical isolation, and electronic status management—of any incoming component, in-process WIP, intermediate, bulk, or finished good that fails, cannot be verified against, or reasonably might not meet specified requirements. It prevents unintended picking, consumption, or shipment while structured evaluation and disposition occur, and it assures clear traceability for containment.

• Triggers: receipt discrepancies, OOS/OOT results, damage, label/identity mismatch, environmental excursion, allergen/cross-contamination risk, supplier notification, chain-of-custody break.
• Controls: physical zones/cages, sealed totes, color-coded labels, bin status locks, barcode/RFID blocks, MES interlocks, WMS/WES pick-deny, e-signature approvals.
• Outcomes: disposition as use-as-is by exception, rework/reprocess, return-to-vendor, downgrade, or scrap; with full genealogy updates.

"Each manufacturer shall establish and maintain procedures to control product that does not conform to specified requirements. The procedures shall address the identification, documentation, evaluation, segregation, and disposition of nonconforming product."

Across regulated sectors, segregation is not optional. Device manufacturers must address identification, documentation, evaluation, segregation, and disposition of nonconforming product (21 CFR 820.90). Drug manufacturers must ensure rejected components and closures are conspicuously identified, controlled, and quarantined (21 CFR 211.89), with related quarantine until release in 211.80(d). Dietary supplements must quarantine and prevent reuse of rejected materials (21 CFR 111.155). Food facilities must store and handle to prevent contamination and mixups (21 CFR 117.93). For HCT/Ps, storage procedures must ensure quarantine and segregation until release criteria are met (21 CFR 1271.265). EU GMP Volume 4 likewise requires segregation of rejected, recalled, or returned materials to prevent their use.

In ISA‑95 terms, nonconforming segregation is a Level 3 (MES) function that governs material state models, inventory holds, quality sampling, and execution interlocks across operations. It interfaces up to Level 4 (ERP) for supplier blocks and RTVs, and down to Level 2 (SCADA/PLC) through permissives that stop dispensing, transfer, or packaging if status is not “Released.” For batch processes structured by ISA‑88, master recipes embed status checks at equipment phases—e.g., a weigh/dispense phase denies material with nonconforming or quarantine status, and a transfer phase prevents line charging of held intermediates.

Segregation begins with unmistakable identification. Labels, tags, and electronic statuses must make the condition obvious from a distance and in systems. The goal is no ambiguity: operators, pickers, and automated equipment all recognize and act on the same truth. When electronic records are the system of control, the physical label should cue the operator, while the system enforces the rule.

• Color-coded HOLD/REJECT/QUARANTINE labels with bold reason codes and lot/batch identifiers.
• Barcode/RFID tags linked to a unique material ID; scans retrieve status in MES/WMS to block transactions.
• Electronic hold tags with two-person e-signature for release in high-risk scenarios (e.g., steriles, allergen contact).
• Line clearance checks that confirm no held material remains at points of use during setup and pre-dispense.
• “Do not use” conspicuous placards on pallets/racks, plus cage or sealed tote where risk of access exists.

Effective programs blend physical separation with electronic controls. Physical segregation addresses visual control and cross-contamination risk; electronic segregation provides deterministic enforcement across transactions, automation, and remote warehouses. Both are expected in GMP environments: a sealed quarantine cage is insufficient if a clerk can still transact a pick; similarly, a system hold is not fail-safe if a released pallet sits in a mixed-use aisle susceptible to error.

Physical methods

• Dedicated quarantine zones (caged, distinct color striping, separate airflow for potent/allergen risk).
• Sealed and serialized totes/drums for held WIP; tamper-evident tape and recorded seal numbers.
• Rack zoning: dedicated aisles/levels for quarantine; blocked proximity to issue points (dispense/pack lines).
• Reject chutes and diverter conveyors physically route rejects to locked bins with access control.

Electronic methods

• Material state model with statuses like Received-Hold, Quarantine, Investigation, Rework-Hold, Released, Rejected, RTV, Scrap; transitions gated by approvals.
• Pick-deny logic in WMS/WES; MES consumption validation blocks batch steps if input status != Released.
• Event-driven holds from LIMS (OOS/OOT), environmental monitoring flags, or supplier alerts; automatic propagation to impacted lots via genealogy.
• Role-and-location-aware exceptions (e.g., QC sampling permitted in Quarantine, production pick not permitted).

Segregation must be embedded from receiving through WIP and finished goods distribution. Intakes move to dedicated quality-hold zones until identity and acceptance are confirmed. WIP generated under a deviation or with suspect equipment/environment moves to interim quarantine with red-tagged WIP containers and blocked transfer phases. Finished goods under complaint or recall investigation are immediately located and isolated via one-up/one-down genealogy and WMS location services.

1. Receiving: ASN match, visual inspection, barcode capture; system assigns Received-Hold status; directed putaway to quarantine racks only.
2. Sampling: QC picks only to authorized sampling points; chain-of-custody logged; status remains Quarantine until acceptance.
3. Production use: MES validates each dispense/issue; any non-Released status denies the step; exception requires documented deviation and approvals.
4. Nonconforming WIP: Step logic routes containers to designated quarantine staging with sealed totes and scan-in; investigation opened.
5. Finished goods: Complaint/OOS triggers targeted isolation via lot genealogy; WMS waves enumerate locations; moves require e-signature and reason code.
6. Outbound: Ship confirmation validates status=Released and ship-hold flags; carrier labels produced only after status checks pass.

Where segregation is enforced electronically, data integrity is central. Access controls, audit trails, and validated logic must ensure that holds and releases are attributable, legible, contemporaneous, original, and accurate (ALCOA+). Under a risk-based GAMP 5 approach, the material status engine, interlock rules, and interfaces to LIMS/WMS/ERP are high-impact and require end-to-end validation, including negative testing (prove the system refuses prohibited actions). If e-signatures are used for releases and dispositions, Part 11/Annex 11 expectations apply: unique credentials, reason for signature, timestamp, and bound record context.

• Role-based access that separates duties (e.g., QC evaluation vs. warehouse movement vs. production consumption).
• Audit-trail review for critical status changes (holds, releases, overrides), with periodic QA review cadence.
• Interface reconciliation: ensure status parity across MES, WMS, LIMS, and ERP; mismatch alerts and auto-correction policies.
• Barcode/RFID verification at every movement; offline/edge buffering with store-and-forward and conflict resolution.

Segregation buys time to evaluate risk and select safe disposition. Evaluation should consider the defect type, detectability, patient/consumer impact, cross-contamination potential (notably allergens and potent actives), and the feasibility of rework or downgrade. Containment should propagate based on lot genealogy so that suspect intermediates and finished goods are automatically placed on hold, with clear boundaries documented for partial-batch impact. Where justified, use-as-is by exception requires formal risk assessment and approval routing commensurate with impact.

• Typical dispositions: use-as-is by exception, re-inspect/retest, rework/reprocess, return-to-vendor (RTV), downgrade, scrap/destruction.
• Containment breadth: immediate lot; parent/child lots via genealogy; co-mingled bins; shared-line carryover windows (e.g., allergen changeover).
• Effectiveness checks: verify that all affected locations, containers, and system records reflect the disposition and that physical segregation is lifted only after completion.

Different industries present distinct segregation hazards and timing pressures. Radiopharmaceuticals face short half-lives: holds and segregation must be near-instant with automated OOS ingestion; rework windows may be nonexistent. For HCT/Ps and blood components, quarantine and chain-of-custody are paramount—release only after donor eligibility/testing is confirmed, with physical isolation and documented storage conditions. In food and dietary supplements, allergen cross-contact risks demand equipment-level and storage-level segregation and post-clean validation prior to re-introduction; FEFO/temperature controls must not override a hold. Medical devices frequently face configuration and UDI/traceability mixups—nonconforming subassemblies must be prevented from kitting and packaging through UDI-aware pick-deny.

• Radiopharma: configure auto-hold from critical assay failures; disposition paths optimize safety first given decay constraints.
• HCT/Ps: enforce quarantine until release criteria satisfied; segregate by donor/lot; control access by role and storage zone.
• Food/supplements: allergen zoning; reject mixed pallets; validate cleaning between allergen classes before lifting holds.
• Devices: UDI-level segregation; configuration/version holds; ensure rework cells cannot feed finished goods packing without release.

A robust solution couples real-time status with physical and procedural controls. V5 implements a unified material state model across MES, QMS, WMS, LIMS, and eBMR/eDHR so that a single, authoritative status drives interlocks at weigh/dispense, transfer, pick/pack/ship, and release. LIMS OOS, EM excursions, or NCRs trigger event-driven holds that immediately quarantine affected lots and all dependents via genealogy. Disposition workflows are risk-tiered, enforce two-person e-signatures where required, and automatically update inventory, allocations, and customer blocks at ERP. Scan-based movements respect zone-level permissions; offline operation buffers scans with conflict checks upon reconnect.

Inspections frequently cite ambiguous labeling, mixed storage, and system/physical mismatches. Another common failure is inadequate containment breadth—only the immediate lot is held, while child lots or co-mingled inventory continue moving. Overreliance on SOPs without system-enforced interlocks, or allowing user overrides without justification and audit-trail review, also feature prominently. Third-party warehouses and contract manufacturers add risk when segregation policies are not harmonized or system integrations do not enforce the same rules.

• Mixed locations: Released and Quarantine pallets co-located, or quarantine zones used for overflow storage.
• Label-only control without system pick-deny; unblocked transactions during system downtime.
• Undocumented lifts of hold; missing reason codes/e-signatures; inadequate audit-trail review cadence.
• Interface drift: MES shows hold, WMS shows released; no automated reconciliation or alerting.
• Insufficient genealogy propagation; partial batch impact not reflected in downstream holds.