Regaldi Notes

What an electronic batch record must hold under 21 CFR 211.188

A 503B outsourcing facility compounds under current Good Manufacturing Practice. Section 503B of the Federal Food, Drug, and Cosmetic Act (21 U.S.C. 353b) exempts a registered outsourcing facility from several requirements that apply to conventional manufacturers, and cGMP under section 501(a)(2)(B) is not among them. So the record an FDA investigator asks for first is the one described in 21 CFR 211.188. The section is short. Read against a software screen, it is a specification.

The provision

21 CFR 211.188 requires that batch production and control records "be prepared for each batch of drug product produced" and "include complete information relating to the production and control of each batch." Paragraph (a) asks for an accurate reproduction of the master production or control record, "checked for accuracy, dated, and signed." Paragraph (b) asks for documentation that each significant step "was accomplished," and lists thirteen things that documentation must include.

The thirteen items

  • Dates. 211.188(b)(1). The date of each significant step, not the date the record was assembled.
  • Equipment identity. 211.188(b)(2): the "identity of individual major equipment and lines used." Which hood, which pump, by identifier.
  • Component identification. 211.188(b)(3): "specific identification of each batch of component or in-process material used." The lot of every input, not the item name alone.
  • Weights and measures. 211.188(b)(4): the weights and measures of components "used in the course of processing." The figure at the balance, not the target from the formula. Charge-in is governed separately by 211.101(c) and (d): each dispensed container examined by a second person, each component added by one person and verified by a second.
  • In-process and laboratory control results. 211.188(b)(5). The underlying laboratory record must meet 211.194(a), including the initials or signature of the person who performed each test and the date (211.194(a)(7)) and a second person's review (211.194(a)(8)).
  • Area inspection. 211.188(b)(6): inspection of the packaging and labeling area before and after use, the line clearance that 211.130(e) also requires to be documented in the batch record.
  • Yield. 211.188(b)(7): actual yield and percentage of theoretical yield "at appropriate phases of processing." The limits that trigger an investigation come from the master record under 211.186(b)(7).
  • Labeling control. 211.188(b)(8): "complete labeling control records, including specimens or copies of all labeling used."
  • Containers and closures. 211.188(b)(9): a description of the drug product containers and closures.
  • Sampling. 211.188(b)(10): "any sampling performed."
  • The people. 211.188(b)(11): identification of the persons "performing and directly supervising or checking each significant step," or, where automated equipment under 211.68 performs the step, the person who checked it. This is per step. One signature block at the end of the record does not satisfy it.
  • Investigations. 211.188(b)(12): any investigation made under 211.192.
  • Finished-product examinations. 211.188(b)(13): results of the labeling examinations under 211.134, whose paragraph (c) says they "shall be recorded in the batch production or control records."

The master record it points back to

The batch record begins with a copy of the master. 21 CFR 211.186(a) requires master production and control records for each product and each batch size, "prepared, dated, and signed (full signature, handwritten) by one person and independently checked, dated, and signed by a second person." 211.186(b) sets the contents: name, strength, and dosage form; the weight or measure of each active and each component; theoretical yield with the limits beyond which 211.192 requires an investigation; a signed and dated specimen of each label; and complete manufacturing and control instructions.

Two things follow. The batch record is an executed instance of one signed master version, and must show which version it ran against. And the words "full signature, handwritten" are why Part 11 matters: an electronic signature stands in for that one only if the system meets Part 11.

Discrepancies and the investigation

21 CFR 211.192 requires all production and control records to be reviewed and approved by the quality control unit before a batch is released or distributed. Any unexplained discrepancy, including a yield outside the master's limits, and any failure to meet a specification, "shall be thoroughly investigated, whether or not the batch has already been distributed." "A written record of the investigation shall be made and shall include the conclusions and followup." Under 211.188(b)(12) that record belongs inside the batch record, not in a deviation binder cross-referenced by hand.

Signatures, dates, and where Part 11 governs

Part 211 asks for signatures at three points: the master record (211.186(a)), the reproduction of the master at the head of each batch record (211.188(a)), and the identification of the person behind each significant step (211.188(b)(11)). When those are captured electronically, 21 CFR Part 11 sets the conditions.

  • What a signature is. 11.3(b)(7): a data compilation "executed, adopted, or authorized by an individual to be the legally binding equivalent of the individual's handwritten signature." 11.100(a): "unique to one individual," never reused or reassigned.
  • What it must show. 11.50(a): the printed name of the signer, the date and time, and the meaning of the signature (review, approval, responsibility, authorship). 11.50(b): those three items appear in any human-readable form of the record, screen or printout.
  • How it binds. 11.70: signatures linked to their records so they "cannot be excised, copied, or otherwise transferred to falsify an electronic record by ordinary means."
  • The system around it. 11.10(e): a secure, computer-generated, time-stamped audit trail in which "record changes shall not obscure previously recorded information." 11.10(f): "operational system checks to enforce permitted sequencing of steps and events." 11.10(g): authority checks so that only authorized individuals can sign, alter a record, or "perform the operation at hand." 11.10(b): accurate and complete copies for inspection, human-readable and electronic.

What the software must therefore do

  • A skipped step cannot be an available action. 211.188(b) wants documentation that each step was accomplished; 11.10(f) wants the sequence enforced. A step whose prerequisite is unsigned is not offered. The record cannot advance past it.
  • A correction is a new record, not an overwrite. 11.10(e): the original weight stays readable beside the corrected one, with who changed it, when, and why.
  • The executing person is the person who signs. 211.188(b)(11) wants the identity of the person who performed the step; 11.100(a) wants the signature unique to that person; 11.10(g) wants the system to refuse anyone else. A supervisor's session left open at the hood is not a path the software should offer.
  • The second person is a different person. 211.101(c) and (d) and 211.194(a)(8). A verification whose performer and verifier resolve to the same identity is refused at the write.
  • Time comes from the system. 211.188(b)(1) and 11.50(a)(2): the stamp is applied by the server at the moment of the action, not typed by the operator.
  • The batch record knows its master version. 211.188(a) and 211.186: it opens against one signed version and displays it.
  • An investigation is part of the record. 211.188(b)(12) and 211.192: a yield outside limits or a failed result opens an investigation attached to the batch, and release waits for its conclusion.
  • The record is retrievable. 211.180(a): kept at least one year past the batch's expiration date. 211.180(c): readily available for inspection, with electronic retrieval from another location expressly allowed. 11.10(b): the copy is complete and human-readable.

The paper reality

On paper, the batch record is often reconstructed after the fact. The compounding happens in the hood; the form sits on a cart outside; the initials are written at the end of the shift from memory. Dates go at the top, once. The second-check box is initialed by whoever is nearest. When an investigator lays the record beside the equipment log and the balance log, the times disagree. Nothing in 211.188 says "contemporaneous," but everything in it assumes it: dates per step, persons per step, weights as used.

The electronic version does not make a facility compliant by itself. Procedures, training under 11.10(i), and the accountability policy under 11.10(j) belong to the facility. What the software can do is remove the after-the-fact path, so that the only way to produce a batch record is to make it while the batch is made.

Say where you work. Ita reads it before she says hello.

AI assistant Ita is software. A principal reads the transcript afterwards.