21 CFR Part 211: the finished-drug CGMP control chain

21 CFR Part 211 contains minimum current good manufacturing practice requirements for finished drug products for human or animal administration, with explicit exclusions. It is not simply a batch-record standard: its controls address how products are prepared, tested and evaluated. Section 210.1 describes minimum CGMP for methods, facilities and controls, and states that failure to comply with the applicable regulations renders the drug adulterated and subjects the drug and responsible person to regulatory action.

Under § 210.2(a), the listed drug, biological-product and applicable HCT/P regulations supplement rather than supersede one another unless expressly provided otherwise; a specifically applicable regulation prevails over a more general one in a conflict. Section 211.1(b) states the corresponding relationship for Part 211. Under § 210.2(b), a person performing only some covered operations need comply only with regulations applicable to those operations.

The phase 1 provision needs particular care. Section 210.2(c) keeps an investigational drug for use in a phase 1 study described in § 312.21(a) subject to the statutory requirements in 21 U.S.C. 351(a)(2)(B), while exempting its production from Part 211. The exemption does not apply once that investigational drug has been made available for use by or for the sponsor in a phase 2 or phase 3 study described in § 312.21(b) and (c), or has been lawfully marketed. In those circumstances, the drug for phase 1 use must comply with Part 211.

API CGMP is outside this finished-pharmaceutical guide. Separate coverage is available in the Part 212 PET-drug guide and Part 111 dietary-supplement guide. Those are scope boundaries, not invitations to apply one regulatory regime by analogy to another.

Section 210.3 supplies definitions that affect how records connect. In particular, a shipment, a supplier lot and a manufacturing batch should not become interchangeable labels. The definitions below are condensed; the final column gives SITE PRACTICE implications rather than additional requirements.

Section 211.22 gives the quality control unit, or QCU, responsibility and authority to approve or reject components, containers, closures, in-process materials, packaging material, labeling and drug products. It also gives authority to review production records to assure that errors have not occurred or have been fully investigated. Adequate laboratory facilities must be available to the QCU for the specified testing and approval or rejection activities.

The QCU must approve or reject procedures and specifications affecting product identity, strength, quality and purity. Its responsibilities and procedures must be written and followed. These duties are more specific than a general instruction for QA to review a batch eventually.

SITE PRACTICE: assign each decision an identifiable owner, supporting evidence and an outcome. Make a rejection as traceable as an approval. Section 211.22 also assigns QCU responsibility for approving or rejecting drug products manufactured, processed, packed or held under contract by another company. For the broader allocation of contract responsibilities, use the CMO/CDMO quality-systems guide; that handoff analysis is not repeated here.

Section 211.84(a) requires each lot of components, drug product containers and closures to be withheld from use until appropriately sampled, tested or examined and released for use by the QCU. Section 211.84(b) requires representative samples of each shipment of each lot. A previous receipt of the same supplier lot is therefore not a reason to omit the new shipment from the sampling framework.

The number of containers sampled and amount taken depend on appropriate criteria, including variability, confidence and precision, supplier quality history, and quantities needed for analysis and required reserves. The section does not prescribe one universal sample count. Sampling procedures also address contamination prevention, aseptic techniques when necessary, identification of samples and marking sampled containers. If top, middle and bottom subdivisions are necessary, they must not be composited for testing.

A certificate of analysis, often called a CoA, is therefore not an unconditional release document. Section 211.84 also calls for microscopic examination when appropriate, examination of lots liable to specified extraneous contamination, and microbiological testing before use where potential contamination would be objectionable for the intended use. Material meeting the relevant specifications and tests may be approved; material that does not meet them must be rejected.

SITE PRACTICE: distinguish a supplier-validation review date from the conclusion reached. A date alone does not show which tests were compared, whether results agreed or whether reliance remains justified. Choose and justify intervals for the material and supplier; do not turn an illustrative interval into a regulatory default.

Section 211.100 requires written production and process-control procedures, including changes, to be drafted, reviewed and approved by the appropriate organizational units and reviewed and approved by the QCU. Execution must follow those procedures and be documented at the time of performance. Any deviation must be recorded and justified. A later procedural revision should not be used as a substitute for documenting what actually happened.

Under § 211.186(a), the master production and control record covers each drug product and each batch size. It must be prepared, dated and signed by one person and independently checked, dated and signed by a second. The supplied text expressly specifies a full handwritten signature for the preparer. Master preparation itself must follow a written procedure. This guide does not reinterpret that wording through an electronic-signature rule that has not been reviewed here.

Section 211.188 requires complete production and control information for every batch, not only a list of completed tasks. For a significant step performed by automated equipment under § 211.68, § 211.188(b)(11) identifies the person checking that step. It does not make a generic operator login a replacement for all required person-specific evidence.

SITE PRACTICE: compare planned and actual values side by side, retaining units and the applicable instruction version. A meaningful review should distinguish an authorized master change from a batch-specific deviation. Corrections, missing evidence and unexplained differences should remain visible rather than being overwritten to make the record resemble the plan.

Section 211.160 requires laboratory specifications, standards, sampling plans, test procedures and changes to be drafted by the appropriate organizational unit and reviewed and approved by the QCU. Requirements must be followed and documented at performance; deviations must be recorded and justified. Controls must be scientifically sound and appropriate to the identity, strength, quality and purity standards involved.

The section covers conformity of incoming lots within shipments, in-process materials and drug products, with representative, identified samples. It also requires appropriate retesting of components, containers or closures subject to deterioration. Calibration programs must specify directions, schedules, accuracy and precision limits, and remedial action. Instruments and other listed devices that do not meet established specifications must not be used.

For each drug-product batch, § 211.165 requires an appropriate laboratory determination of conformity to final specifications, including each active ingredient’s identity and strength, before release. Necessary testing also applies to batches required to be free of objectionable microorganisms. Written sampling and testing plans must state the sampling method and number of units per batch and must be followed.

Acceptance criteria must adequately assure conformity to each appropriate specification and appropriate statistical quality-control criteria. The accuracy, sensitivity, specificity and reproducibility of the firm’s test methods must be established and documented. These are not replaced by a summary status reading passed.

Under § 211.165(f), products failing established standards, specifications or other relevant quality-control criteria must be rejected. Reprocessing may be performed, but reprocessed material must meet the appropriate standards, specifications and other relevant criteria before acceptance and use. Reprocessing is not an automatic reversal of rejection.

Section 211.192 requires QCU review and approval of all drug-product production and control records, including packaging and labeling, to determine compliance with established, approved written procedures before a batch is released or distributed. Laboratory conformity and record approval are connected controls, not interchangeable approvals.

Any unexplained discrepancy, including yield outside the master’s minimum or maximum percentages, or failure of a batch or its components to meet specifications must be thoroughly investigated. That duty applies whether or not the batch has already been distributed. The investigation must extend to other batches of the same drug product and other drug products that may be associated with the specific failure or discrepancy. Its written record must include conclusions and followup.

SITE PRACTICE: make the scope decision explicit. A reviewer should be able to understand why another batch was included or excluded, what common material or process connection was examined, and what evidence supports the conclusion. Merely naming the affected batch does not explain why the problem stops there.

Likewise, an acceptable yield calculation does not explain an unrelated timing deviation, and a passing final result does not establish that all written procedures were followed. Keep those questions separate in the disposition rationale. The broader operational investigation and audit workflow belongs in the GMP manufacturing-readiness guide; this guide concentrates on the Part 211 record and decision requirements.

Section 211.180(a) requires batch-associated production, control and distribution records required by Part 211 to be retained for at least one year after the batch’s expiration date. For certain OTC products lacking expiration dating because they meet the exemption criteria under § 211.137, the period is three years after distribution of the batch. Three years is not a universal OTC retention rule.

Section 211.137(h) specifically describes a pending-exemption nonenforcement provision for human OTC products whose labeling does not bear dosage limitations and that are stable for at least three years, supported by appropriate stability data. It should not be read as permission to omit expiration dating merely because a product is sold without a prescription.

Under § 211.180(b), records for components, containers, closures and labeling also follow the specified expiration-based period or, for the qualifying OTC category, three years after distribution of the last drug-product lot incorporating or using them. SITE PRACTICE: connect material records to their finished-product uses before calculating a destruction date; receipt date alone is not the relevant anchor.

Required records or copies must be readily available for authorized inspection during retention at the establishment where the recorded activities occurred. Immediate electronic retrieval from another location can meet that availability provision. Section 211.180(d) permits originals or true copies, including accurate reproductions; reduced-format records require suitable reading and copying equipment.

Retention also serves review. Section 211.180(e) requires records to support evaluation, at least annually, of each drug product’s quality standards and the need for specification or procedure changes. Written procedures must include review of representative approved and rejected batches and relevant complaints, recalls, returns or salvaged products, and § 211.192 investigations. SITE PRACTICE: test retrieval across those connected record types, not just the batch-record cover sheet.

Section 211.68 permits automatic, mechanical and electronic equipment, including computers and related systems, that perform their function satisfactorily. Such equipment must be routinely calibrated, inspected or checked under a written program designed to assure proper performance, with written records of those activities.

Controls over computer or related systems must assure that only authorized personnel institute changes to master production and control records or other records. Inputs and outputs involving formulas, records or data must be checked for accuracy. The degree and frequency of verification must reflect system complexity and reliability; the text does not prescribe one universal verification frequency.

A backup file of entered data must be maintained, subject to the stated exception where certain data, such as laboratory calculations, are eliminated by computerization or other automated processes. In those instances, a written record of the program and appropriate validation data must be maintained. The section also requires hard-copy or alternative arrangements designed to assure that backup data are exact, complete and secure from alteration, inadvertent erasure or loss.

Section 211.68(c) contains a limited provision for automated equipment performing operations addressed by §§ 211.101(c) or (d), 211.103, 211.182 or 211.188(b)(11). Such equipment can satisfy the listed one-person/performance and another-person/checking requirements when used in conformity with § 211.68 and when one person checks that the equipment performed properly. This does not authorize automatic batch release or erase independent master-record checking.

SITE PRACTICE: demonstrate a controlled record change, an input/output accuracy check and recovery of a complete backup record. Ask how authorized access is assigned and removed, and how the restored record is compared with the original. These are practical evaluation tasks, not additional statutory test frequencies or a claim that one demonstration establishes compliance.

Receipt and supplier evidence

A site receives one fictional component, X, in two shipments containing three distinct lots. Shipment S1 contains lots A and B from Supplier R; shipment S2 contains lot C from Supplier S. All three lots initially remain withheld from use. The fictional sampling plan calls for a representative 1 kg withdrawal from each lot, covering testing and retained sample material. Withdrawn material is no longer available for dispensing.

There are three manufacturer identity tests in this exercise: one for each of the three distinct shipment–lot combinations. This is not a general sample-count rule. Supplier R’s acceptable periodic verification status supports the stated reliance; Supplier S’s incomplete status does not. The failed lot C result is investigated, including assessment of associated batches and products. In this fictional case, C has not been used, and the documented investigation finds no association with lots A or B; that conclusion is evidence-based, not inferred merely from different supplier names.

The lot count reconciles as 3 initially withheld = 2 approved + 1 rejected + 0 awaiting disposition. The mass reconciles as 300 kg received = 178 kg approved stock + 119 kg rejected stock + 3 kg withdrawn samples. Approval covers the lots, but the available-stock calculation excludes their samples. Keeping those two quantities distinct prevents accidental overstatement of usable inventory.

Dispensing and the processing-phase balance

Fictional master M-03 was prepared, dated and signed by Dana and independently checked, dated and signed by Lee. The batch record documents 90 kg of X from lot A and 30 kg from lot B, plus 80 kg of an already approved fictional component Y. Ari performs dispensing and Noor checks it; the complete record identifies performers and supervisors or checkers for the other significant steps.

The incoming X balance still closes after dispensing: 300 kg = 120 kg dispensed + 58 kg usable stock + 119 kg rejected stock + 3 kg receipt samples. The 2 kg process samples in the batch balance are mixed material withdrawn later; they are not the 3 kg receipt samples. Combining those two sample accounts would double-count or misclassify material.

One deviation and a documented decision

The batch record contains one timing deviation: transfer starts 15 minutes later than the written instruction requires because the receiving station is unavailable. The operator records the event when it occurs. For this exercise, the site investigates and documents the justification using existing product-specific hold evidence covering the actual elapsed time, closed-vessel records and the relevant processing and laboratory evidence. It also documents the associated-batch assessment and followup. The justification does not rewrite the original instruction or erase the deviation.

The fictional QCU reviews the complete production and control records, including the stipulated satisfactory final testing and packaging/labeling evidence, accepts the supported deviation assessment and approves release. Neither the 98.0% yield nor the balanced inventory causes that decision automatically. If the required evidence or investigation remained incomplete, this exercise would not support the same outcome.

SITE PRACTICE: use a fictional record set like the exercise rather than requesting a generic compliance presentation. Ask the same questions of paper-based arrangements, internally managed systems and external vendors. A useful answer identifies what the arrangement demonstrates and what still depends on the manufacturer’s procedures and people.

Do not accept a feature name as the answer. For example, a record labeled approved does not explain who had authority, which evidence was reviewed or whether the approved quantity excludes samples. Conversely, a well-designed demonstration is only evaluation evidence; it does not establish that every production use follows the site’s procedures.

SITE PRACTICE: begin with one product and one completed batch. Establish the applicability boundary, then follow its components, approved instructions, executed records, laboratory evidence and QCU decision. Record each unanswered question against the relevant control rather than collecting an undifferentiated list of missing documents.

Use the batch-record definition for terminology and the batch-release definition for the decision concept. Move broader operational investigation and audit preparation to the manufacturing-readiness guide, and contract interfaces to the CMO/CDMO guide. The purpose here is narrower: make the finished-drug Part 211 control chain understandable and its evidence connections checkable.