Guide

Pharmaceutical GMP readiness in India

India regulates medicines through the Central Drugs Standard Control Organisation (CDSCO) under the Drugs and Cosmetics Act 1940 and the Drugs and Cosmetics Rules 1945. GMP is set by Schedule M, comprehensively revised in 2023 to align closely with WHO TRS and PIC/S, with phased mandatory compliance starting 2024 (large units) and 2025 (MSME). State Licensing Authorities (SLAs) issue manufacturing licences; CDSCO handles imports, new drug approvals, and central inspections. India is NOT a PIC/S member but is an ICH observer. This guide covers the India layer.

Start free trial Free trial, no credit card, onboard in days, not months.

Regulator and legal basis

CDSCO (headed by the Drugs Controller General of India, DCGI) is the central regulator; SLAs license manufacturing at state level. Drugs and Cosmetics Act 1940 + Rules 1945 are the statutory base; Schedule M (revised 2023) is the GMP standard. Export markets often require WHO-GMP, EU-GMP, or PIC/S equivalent certification on top of Schedule M.

Licensing model and revised Schedule M

Manufacturing licences are issued by SLAs (Forms 25, 28, etc. depending on product class). The revised Schedule M (Gazette notification 28 December 2023) introduces ICH Q10 PQS concepts, ICH Q9 risk management, a Pharmaceutical Quality System, qualification and validation per Annex 15-equivalent, and explicit data-integrity requirements. Large units (turnover > INR 250 crore) must comply by mid-2024; MSME by mid-2025.

Imports, exports, and certification

Imports require a CDSCO Import Licence (Form 10/10A) and registration of the foreign manufacturer (Form 41). For export, manufacturers typically hold WHO-GMP certificates issued by SLAs based on the WHO Certification Scheme, plus market-specific GMP certificates (EU, US FDA) earned through individual inspections.

Inspection style and common findings

CDSCO and SLA inspections increasingly use WHO/PIC/S classifications. Recent CDSCO risk-based inspections have focused on data integrity, sterile manufacturing, and not-of-standard-quality investigations. Common findings: revised Schedule M gap closure (especially smaller units), data integrity, OOS investigation, and supplier qualification.

A 90–180 day India readiness path

Days 0–30: confirm SLA licence scope and revised Schedule M applicability tier. Days 31–90: close revised Schedule M gaps — PQS, qualification/validation lifecycle, data-integrity controls, contamination control. Days 91–180: prepare for joint CDSCO/SLA inspection; for export buyers, run mock WHO-GMP or EU-GMP inspection.

Standards covered in this guide

Each standard, retailer code or assurance scheme referenced above has its own deep-dive page with scope, audit detail and common pitfalls.

CDSCO (India)

CDSCO — Central Drugs Standard Control Organization, the central regulatory authority for drugs, cosmetics + medical devices in India under the Ministry of Health and Family Welfare.

ICH Q10

The international model for a Pharmaceutical Quality System covering the entire product lifecycle from development to discontinuation.

ICH Q9

International guideline that mandates risk-based decision-making across the pharma product lifecycle. Underpins everything from supplier qualification to PPQ batch count.

ALCOA+

The nine-letter mnemonic regulators use to grade your data integrity — and what every Part 11 audit really tests.

Annex 15

The EU GMP chapter that mandates VMP, DQ, IQ, OQ, PQ, PPQ and on-going verification for every regulated EU manufacturer.

Data integrity

ALCOA+ — data must be Attributable, Legible, Contemporaneous, Original, Accurate (+ Complete, Consistent, Enduring, Available).

Where this lives in V5 Ultimate

The clauses above aren't theoretical — every one maps to a shipped module and an industry profile. Jump to the parts of the product that turn this guide into evidence on a Monday morning.

Industries this hits hardest

Frequently asked

Is India in PIC/S?

Not as of 2026. India is an ICH observer and the revised Schedule M brings GMP closer to PIC/S, but Indian GMP certificates are not formally recognized by PIC/S partner authorities.

What changed with the revised Schedule M?

It introduces a formal PQS (ICH Q10), risk management (ICH Q9), data-integrity expectations (ALCOA+), validation lifecycle, computerised system controls, and supplier qualification — moving Indian GMP closer to PIC/S. Compliance is phased through 2024–2025.

Do export markets accept Indian WHO-GMP certificates?

WHO-GMP issued by SLAs supports certain regulatory and procurement uses (notably WHO prequalification supply chains and many non-PIC/S markets). High-regulation markets (EU, US, UK) require their own GMP inspection or MRA equivalent.

See it on your shop floor.

Free trial, no credit card, onboard in days, not months.

Start free trial See pricing →Browse all resources →