The Complete Guide to GMP Inspections
EU GMP guidelines, FDA 21 CFR, inspection types, and common findings - from preparation to complete CAPA documentation.
What are GMP Inspections?
Good Manufacturing Practice (GMP) is the framework of mandatory quality standards for the manufacture of pharmaceuticals, medical devices, food, and cosmetics. GMP inspections are regulatory reviews by national and international oversight authorities - in the EU by the relevant state authorities on behalf of the EMA, in the US by the FDA - ensuring that manufacturers continuously comply with applicable requirements. An inspection is not an exception in production operations - it is the norm for every regulated manufacturer.
In the EU, GMP requirements for human medicines are governed by the EU GMP Guide (EudraLex Volume 4), divided into Part I (finished products, Chapters 1-9), Part II (active substances per ICH Q7), and Annexes 1-20. In the US, Current Good Manufacturing Practice (cGMP) requirements apply under 21 CFR Parts 210/211 (pharmaceuticals), 820 (medical devices), and 110/117 (food). Both systems are largely harmonized through PIC/S (Pharmaceutical Inspection Co-operation Scheme), enabling mutual inspection recognition between member countries.
Finding categories: Critical, Major, Other
Inspection authorities classify findings by severity: Critical - direct risk to patient safety or the product; manufacturing ban possible. Major - significant deviation with risk to product quality or safety; CAPA required within 30-90 days. Other (Minor) - deviation without immediate risk, but improvement needed. The ratio of Major to Other findings and the quality of the CAPA plan determine the overall inspection outcome.
Why consistent GMP compliance is more than a regulatory obligation
Inspection preparation as a reactive project costs many times more than a continuous compliance culture. And it fails more often.
Authorization and market access
Without a valid GMP manufacturing license, no pharmaceutical product may be placed on the market. An FDA Warning Letter or serious regulatory finding can shut down production and jeopardize existing marketing authorizations.
Product quality and patient safety
GMP is the operational framework ensuring that every batch of a product has identical quality. Cleanroom controls, process validations, and calibration intervals are the foundation for reproducible manufacturing - not optional add-ons.
Reduced recall risk
The most common causes of pharmaceutical recalls are contamination, labeling errors, and manufacturing deviations - all points that a functioning GMP system catches early. Every prevented recall saves on average millions of euros in direct costs and incalculable reputational damage.
CAPA effectiveness as a quality indicator
Inspectors evaluate not only findings but also the quality of the CAPA response: is the root cause analysis thorough? Are the actions effective and closed with an effectiveness check? A weak CAPA plan significantly worsens the rating even for inherently good processes.
Data integrity as a central inspection focus
Since the establishment of ALCOA+ principles (Attributable, Legible, Contemporaneous, Original, Accurate, plus Complete, Consistent, Enduring, Available), data integrity is a priority inspection focus worldwide. Incomplete or retroactively altered records lead directly to Critical findings.
Supply capability and supplier qualification
Pharmaceutical value chains are international. Own GMP compliance is a prerequisite for access to regulated markets. Additionally, supplier qualification obligations apply (Annex 15, ICH Q10): raw material and service suppliers must be systematically audited.
The regulatory framework: EU GMP, FDA 21 CFR, and PIC/S
The EU GMP Guide (EudraLex Volume 4) is the central reference document for manufacturers in the EU and all PIC/S member states. The nine chapters of Part I cover all aspects of finished pharmaceutical manufacturing. The annexes specify requirements for particular areas: Annex 1 (sterile manufacture, fundamentally revised 2022, in force since August 2023) is the most extensive annex with central importance for the Contamination Control Strategy (CCS). Annex 11 (computerized systems) governs all digital manufacturing systems and their validation. Annex 15 (qualification and validation) defines the validation framework including MACO calculations for cleaning validation.
In the US, 21 CFR Part 211 sets the cGMP requirements for finished pharmaceuticals. The FDA inspection follows the Establishment Inspection Report (EIR) process: the inspector documents observations on FDA Form 483, the manufacturer responds in writing within 15 business days (for Warning Letters), and the FDA determines the outcome: No Action Indicated (NAI), Voluntary Action Indicated (VAI), or Official Action Indicated (OAI). A Warning Letter is publicly available on the FDA website and has immediate implications for business relationships, market position, and for publicly traded companies, stock price.
Preparing for a GMP inspection - step by step
Inspection preparation is not a sprint immediately before the inspection date. It is a continuous process anchored in daily manufacturing practice.
Self-inspection and gap analysis
At least annual self-inspections per the EU GMP Guide (Chapter 9 requires regular self-inspections). Scope: all GMP chapters and relevant annexes, prioritized on a risk basis. Result: prioritized deficiency list with CAPA and owners. Self-inspections are also a legal requirement in Germany (§ 64 AMG).
Review documentation system for ALCOA+ compliance
Check GMP documentation for ALCOA+ conformity: are all records filled out in a timely and original manner? Are there gaps in batch records, calibration protocols, or cleaning validations? Data integrity audits with targeted sampling of electronic and paper-based records are today mandatory, not optional.
Review CAPA system for effectiveness
Capture all open CAPAs from previous inspections and internal audits and check for completeness. Effectiveness checks for closed CAPAs must be documented. Inspectors specifically ask about the current status of actions from the previous inspection cycle - missing effectiveness evidence is a frequent Major finding.
Update personnel and training records
Update the training matrix for all GMP-relevant activities and close backlogs. Review qualification evidence for key positions: Qualified Person (QP), QC manager, production manager. SOPs revised in the last 12 months must have training evidence for all affected personnel.
Critical equipment and qualification status
Review qualification and calibration status of all critical equipment and measuring instruments. Maintain requalification deadlines. Document and keep current the validation status for cleaning procedures (cleaning validation per Annex 15 with MACO calculation based on PDE values) and computerized systems (CSV per Annex 11 / GAMP 5 categories).
Mock inspection and communication training
Conduct an internal mock inspection with experienced GMP experts or external consultants. Train employees for the inspection situation: how to behave when the inspector arrives, what statements can be made, who may make commitments. Calm, fact-based communication without speculation is critical.
Common GMP findings - and how to avoid them
The list of most frequent FDA and EMA findings has been stable for years. These are not exotic edge cases - they are systemic weaknesses that are manageable with the right approach.
Data integrity violations: retroactive changes and missing audit trails
Computerized systems must be validated per 21 CFR Part 11 (FDA) or Annex 11 (EU) and maintain complete electronic audit trails with timestamps and user identification. Paper-based records may only be corrected with a single strikethrough, date, and initials - no correction fluid, no overwriting. Anchor periodic data integrity audits with documented sampling methodology in the quality system.
Ineffective CAPA: treating symptoms rather than root causes
Root cause analysis is mandatory, not optional. Methods such as Ishikawa diagram, 5-Why, or FMEA must demonstrably have been applied - the method used must be named in the CAPA document and the result documented. A complete CAPA plan shows: immediate action (containment), identified root cause, systemic corrective action, preventive action, and an effectiveness check with measurable acceptance criteria.
Inadequate cleaning validation per current standards
Cleaning validation per Annex 15 requires scientifically justified acceptance limits based on PDE values (Permitted Daily Exposure) per the EMA HBEL guideline concept (2018). Visual inspection alone is not a sufficient validation method. Changes to products, processes, or equipment trigger revalidation obligations that must be anchored in the change control process.
Deficiencies in the supplier qualification program
Every supplier of critical raw materials and services must be qualified: audit program with risk-based frequency, technical qualification (questionnaires, certificates, sampling where needed), quality agreements per ICH Q10. Audit intervals must be maintained and all activities documented. Gaps in audits or expired quality agreements are frequent Major findings.
Managing GMP compliance digitally with Mobile2b
GMP documentation on paper or in Excel is a manageable risk - until the next inspection. Mobile2b creates a revision-safe, always inspection-ready quality infrastructure.
GMP inspection checklists per EU and FDA
Predefined checklists for all GMP chapters and relevant annexes (EU GMP Part I/II, FDA 21 CFR). Internal audits and self-inspections are conducted in a structured way, findings immediately captured and classified as Critical / Major / Minor. All findings are documented with timestamp and auditor.
CAPA management with effectiveness check
Every finding from internal audits or external inspections is created as a CAPA: root cause analysis, action definition, owner, due date, and effectiveness check with acceptance criteria. The complete CAPA status is always evaluable and ready for regulatory submission.
Revision-safe audit trail
All audit activities, findings, and actions are stored with timestamp, user, and complete change history. This corresponds to ALCOA+ requirements for electronic records and is fundamentally compliant with 21 CFR Part 11. The audit trail is exportable for inspectors at the click of a button.
Supplier audit program
Plan, conduct, and document supplier audits - including risk-based frequency control, evaluation matrix, findings, corrective actions, and quality agreement status. The complete supplier qualification program is always ready for regulatory inspections.
Frequently asked questions about GMP inspections
Ready for your next GMP inspection?
Mobile2b creates the documentation infrastructure for always inspection-ready GMP compliance - from self-inspection to complete CAPA evidence.
Book a Demo