GMP principles
Nearly every detailed GMP requirement is a consequence of a small number of principles: define the process, validate that it works, resource it with qualified people and suitable facilities, record what actually happened, and check yourself before someone else does.
Nearly every detailed GMP requirement is a consequence of a small number of principles: define the process, validate that it works, resource it with qualified people and suitable facilities, record what actually happened, and check yourself before someone else does.
Plain-English explanation, then the primary regulation it comes from.
Understanding gmp principles
Reading EU GMP cover to cover gives the impression of hundreds of independent obligations. In practice they collapse into a much smaller set of ideas, and recognising which principle a clause serves is usually the fastest route to a defensible interpretation when the text is ambiguous.
The principles also explain why inspectors weight findings the way they do. A missing signature is a documentation failure. A missing signature on a critical step, in a system where nobody noticed for six months, is a failure of the self-inspection and review principle — which is far more serious, because it says the system cannot detect its own problems.
The last principle is the one sites most often under-resource. Self-inspection is an explicit expectation, not a nice-to-have, and a programme that is visibly behind schedule invites scrutiny of everything else. If your own audits never find anything uncomfortable, that is usually evidence about the audits rather than about the site.
- Defined processes
- Manufacturing operations are clearly specified and systematically reviewed. Nothing critical depends on undocumented know-how held by one person.
- Validation and qualification
- Critical steps and significant changes are validated. Premises, equipment and utilities are qualified for their intended use.
- Qualified, trained people
- Sufficient personnel with the right qualifications, trained against their actual role, with responsibilities defined in writing.
- Suitable premises and equipment
- Designed, located and maintained to suit the operation, and to minimise contamination, cross-contamination and mix-ups.
- Records made at the time
- Records are contemporaneous, attributable and complete, covering deviations as well as normal execution.
- Traceability and recall
- Complete batch history is retrievable, and any batch can be traced and recalled after distribution.
- Self-inspection and review
- The site audits itself on a risk-based schedule and management reviews whether the system is actually effective.
Common failure modes
- Self-inspection performed by someone too close to the area, or too junior to raise the finding that matters.
- Training records that evidence attendance rather than competence — signatures on a sheet, no assessment that anything was learned.
- Validation treated as a one-off project rather than a state that must be maintained as equipment and processes change.
- Management review that produces minutes instead of decisions, so known problems stay known and unfunded.
Where this is written down
- European CommissionEudraLex Volume 4 — EU GMP guidelines
Part I, Chapter 1 (Pharmaceutical Quality System) and Chapter 9 (Self Inspection)
- ICHICH Quality guidelines (Q1–Q14)
ICH Q10, on the quality system across the product lifecycle
Read next
What is GMP?
ReadGMPGMP quality systems
ReadQualityQuality management system (QMS)
ReadGMPGMP inspection
ReadLooking for a definition rather than an explanation? The GMP glossary covers the abbreviations in one line each.
Knowing the requirement is not the same as closing the gap
If you want to know where your site actually stands against this, the readiness score covers seven quality-system domains in twenty questions, and takes about ten minutes.