cGMP

Why the "c" matters

The "c" stands for current, and it is the whole point of the term. GMP regulations are deliberately written as outcomes rather than prescriptions, so what counts as compliant moves as technology and industry practice move. A control strategy that satisfied an inspector fifteen years ago can be cited today without a single word of the regulation having changed. This is why firms cannot treat compliance as a fixed target reached once.

Where the requirements actually live

In the United States, cGMP for finished pharmaceuticals is codified in 21 CFR Parts 210 and 211. Part 210 sets the scope; Part 211 carries the substance — organisation and personnel, buildings and facilities, equipment, control of components, production and process controls, laboratory controls, records and reports, and returned or salvaged product.

Related regimes sit alongside it rather than inside it:

• 21 CFR Part 600s — biologics
• 21 CFR Part 4 — combination products
• ICH Q7 — active pharmaceutical ingredients
• EudraLex Volume 4 — the EU GMP guide, with its annexes

What inspectors are really testing

A cGMP inspection is not a document hunt. It is an attempt to answer one question: does this organisation understand and control its own process? The recurring citation themes are consistent year after year:

Theme	What it looks like in practice
Inadequate investigations	A deviation closed as "operator error" with no root cause
Data integrity	Audit trails disabled, shared logins, results retested until they pass
Process validation	Validation treated as a one-time exercise, not a lifecycle
Contamination control	No holistic strategy tying the individual controls together
Quality unit independence	QA reporting into manufacturing, unable to say no

The most common misunderstanding

cGMP is frequently read as "the rules for the factory floor." In practice it reaches every function whose decisions affect product quality — procurement qualifying a supplier, IT validating a system that stores batch records, engineering changing an HVAC setpoint. The quality unit's authority to reject a batch is meaningless if the decisions upstream of it were never controlled.