Ensuring Compliance, Quality Integrity & Continuous Improvement

Table of Contents

🔷 1. Objective

To establish a robust, systematic, and compliant procedure for the identification, documentation, investigation, evaluation, and closure of deviations, ensuring product quality, patient safety, and regulatory compliance are never compromised.

🔷 2. Scope

This SOP applies to:

All departments involved in GMP activities (Production, QC, QA, Engineering, Warehouse, etc.)
All types of deviations occurring during:
- Manufacturing
- Testing
- Packaging
- Storage & Distribution
- Equipment operation and maintenance

🔷 3. Definition of Deviation

A Deviation is any departure from:

Approved procedures (SOPs)
Specifications
Standard test methods
GMP requirements
Batch manufacturing or packaging instructions

🔷 4. Types of Deviations

🔹 4.1 Planned Deviation

A pre-approved, intentional departure from a procedure due to valid scientific or operational reasons.

🔹 4.2 Unplanned Deviation

An unexpected, unintentional departure from approved procedures or standards.

🔹 4.3 Classification Based on Impact

Type	Description
Critical	Impacts patient safety, product quality, or data integrity
Major	Significant deviation affecting process or compliance
Minor	No significant impact; low risk

🔷 5. Roles & Responsibilities

🧑‍🔬 Originator (Employee)

Identify and report deviation immediately
Record initial details accurately

🏭 Department Head

Ensure timely reporting
Conduct preliminary assessment

🛡️ Quality Assurance (QA)

Review, classify, and approve deviation
Lead or oversee investigation
Ensure CAPA implementation and closure

🔬 Investigation Team

Perform root cause analysis
Recommend corrective and preventive actions

🔷 6. Procedure

🔸 6.1 Identification & Reporting

Any deviation must be reported immediately or within 24 hours
Record details in Deviation Report Form (DRF):
- Date & time
- Description of deviation
- Product/Batch details
- Location and process stage

🔸 6.2 Initial Impact Assessment

Evaluate potential impact on:
- Product quality
- Safety
- Regulatory compliance
Decide if:
- Batch should be quarantined
- Activity should be stopped

🔸 6.3 Deviation Classification

QA assigns Critical / Major / Minor
Based on:
- Risk to patient
- GMP compliance
- Data integrity

🔸 6.4 Investigation Process

A detailed and scientific investigation must be conducted using:

✔ Root Cause Analysis Tools:

5 Why Analysis
Fishbone (Ishikawa) Diagram
Fault Tree Analysis

✔ Investigation Elements:

Review of batch records
Equipment logs
Environmental conditions
Personnel training records

🔸 6.5 Root Cause Identification

Identify true root cause, not symptoms
Categorize causes:
- Human error
- Equipment failure
- Method/process failure
- Material-related issues

🔸 6.6 Corrective and Preventive Actions (CAPA)

🔹 Corrective Action

Immediate action to fix the issue

🔹 Preventive Action

Long-term action to prevent recurrence

Examples:

SOP revision
Training programs
Equipment recalibration

🔸 6.7 Impact Assessment on Product

Determine:
- Batch acceptance or rejection
- Need for reprocessing or re-testing
QA makes final decision based on:
- Scientific justification
- Regulatory guidelines

🔸 6.8 Documentation

Ensure complete documentation including:

Deviation report
Investigation report
CAPA plan
Approval signatures

🔸 6.9 Review & Approval

QA reviews:
- Investigation adequacy
- Root cause validity
- CAPA effectiveness
Final approval for closure

🔸 6.10 Closure of Deviation

Deviation can be closed only when:

Root cause is identified
CAPA is implemented
Effectiveness is verified

🔸 6.11 Trending & Monitoring

Periodic review of deviations
Identify recurring issues
Implement continuous improvement strategies

🔷 7. Timelines (Recommended)

Activity	Timeline
Reporting	Within 24 hours
Investigation	7–15 days
CAPA Implementation	30 days
Closure	Within 45 days

🔷 8. Key Compliance Principles

ALCOA+ (Data Integrity)
GMP Guidelines
Risk-Based Approach
Documentation Accuracy

🔷 9. Records & Formats

Deviation Report Form (DRF)
Investigation Report Template
CAPA Form
Deviation Log Register

🔷 10. Flowchart Overview

Deviation Occurs → Report → QA Review → Classification → Investigation → Root Cause → CAPA → QA Approval → Closure → Trending

❓ FAQs – Deviation Management (Pharma Industry)

🔷 1. What is the regulatory expectation for deviation management?

Regulatory bodies (USFDA, EU-GMP, WHO) expect a robust deviation management system that ensures:

Immediate reporting
Scientific investigation
Root cause identification
Implementation of effective CAPA
Proper documentation and trending

Failure to comply may result in 483 observations, warning letters, or compliance risk.

🔷 2. What is the difference between planned deviation, change control, and deviation?

Aspect	Planned Deviation	Change Control	Unplanned Deviation
Nature	Pre-approved	Permanent change	Unexpected
Approval	Before execution	Before implementation	After occurrence
Example	Temporary process adjustment	Equipment upgrade	Process failure

🔷 3. When should a deviation be raised?

A deviation must be raised:

Immediately after occurrence
When any SOP/specification is not followed
Even if there is no visible impact

Golden Rule: “If in doubt, raise a deviation.”

🔷 4. What happens if a deviation is not reported?

Non-reporting leads to:

Data integrity violations
Regulatory non-compliance
Potential product recalls
Disciplinary action

It is considered a serious GMP breach.

🔷 5. How is deviation classification justified scientifically?

Classification is based on:

Risk to patient safety
Product quality impact
Regulatory compliance
Data integrity

A risk-based approach (ICH Q9 principles) is applied.

🔷 6. What is the difference between root cause and immediate cause?

Immediate Cause: What happened (surface issue)
Root Cause: Why it happened (actual underlying reason)

👉 Example:

Immediate cause: Equipment stopped
Root cause: Preventive maintenance not performed

🔷 7. What tools are best for root cause analysis?

Common tools include:

5 Why Analysis
Fishbone (Ishikawa) Diagram
Fault Tree Analysis
FMEA (Failure Mode and Effects Analysis)

Combination of tools ensures scientific justification.

🔷 8. Can a deviation have multiple root causes?

Yes. Complex deviations may involve:

Human error + Equipment issue
Process gap + Training deficiency

All contributing causes must be identified and addressed.

🔷 9. What is CAPA and why is it critical?

CAPA (Corrective and Preventive Action) ensures:

Correction of current issue
Prevention of recurrence

Without CAPA, deviation management becomes ineffective and repetitive.

🔷 10. What makes a CAPA effective?

An effective CAPA must be:

Specific and measurable
Root cause-based
Time-bound
Verified for effectiveness

Weak CAPA = repeated deviations.

🔷 11. How is CAPA effectiveness verified?

Through:

Follow-up review
Trending analysis
Repeat deviation monitoring
Internal audits

Effectiveness check ensures long-term control.

🔷 12. Can a batch be released with a deviation?

Yes, only if:

Scientific justification is available
No impact on quality/safety
QA approval is obtained

Otherwise, batch may be rejected or reprocessed.

🔷 13. What is a critical deviation?

A deviation that:

Impacts patient safety
Affects product quality significantly
Involves data integrity issues

Requires immediate escalation and investigation.

🔷 14. What is deviation trending and why is it important?

Trending involves:

Analyzing deviation data over time
Identifying recurring patterns

Helps in:

Continuous improvement
Preventing future failures
Regulatory compliance

🔷 15. What are common causes of deviations in pharma?

Human errors
Equipment malfunction
Poor SOP design
Inadequate training
Environmental factors

🔷 16. What is the role of QA in deviation management?

QA is responsible for:

Classification
Investigation oversight
CAPA approval
Final closure

QA ensures compliance and objectivity.

🔷 17. What is the timeline for deviation closure?

Typical timelines:

Investigation: 7–15 days
CAPA: Within 30 days
Closure: Within 45 days

Delays must be justified and approved.

🔷 18. What if root cause cannot be identified?

Re-investigation is required
Use advanced tools
Justification must be documented

“Unknown root cause” is not acceptable without strong rationale.

🔷 19. What is repeat deviation and how is it handled?

Repeat deviation = recurrence of same issue

Indicates:

Ineffective CAPA
Weak investigation

Requires:

Escalation
Stronger CAPA

🔷 20. Can training be a CAPA?

Yes, but:

Only if human error is the root cause
Must include effectiveness evaluation

Training alone is often not sufficient.

🔷 21. What is the difference between deviation and incident?

Deviation: GMP-related non-conformance
Incident: General unexpected event (may or may not affect GMP)

🔷 22. What documentation is required for deviation?

Deviation report
Investigation report
CAPA plan
QA approval
Closure record

🔷 23. What is ALCOA+ in deviation management?

Ensures data integrity:

Attributable
Legible
Contemporaneous
Original
Accurate
Complete, Consistent, Enduring, Available

🔷 24. How are deviations linked to audits?

Auditors review:

Investigation quality
CAPA effectiveness
Timelines
Recurrence

Poor handling leads to audit observations.

🔷 25. What is deviation escalation?

Critical deviations are escalated to:

Senior management
Regulatory teams

Ensures quick decision-making and risk control.

🔷 26. What is interim action in deviation?

Temporary control measure taken before root cause identification.

Example:

Stopping production
Isolating batch

🔷 27. What is risk assessment in deviation?

Evaluation of:

Severity
Probability
Detectability

Helps in classification and decision-making.

🔷 28. What is linkage between deviation and change control?

If deviation leads to:

Permanent system/process change → Change control must be initiated

🔷 29. What is the impact of deviation on validation?

May require re-validation
May invalidate previous validation

Depends on severity and impact.

🔷 30. What are best practices for deviation management?

✔ Immediate reporting
✔ Scientific investigation
✔ Strong CAPA
✔ Proper documentation
✔ Continuous trending

🔷 31. Can multiple deviations be combined into one?

No. Each deviation must be:

Individually documented
Independently investigated

🔷 32. What is backdated deviation and is it allowed?

Backdating is strictly prohibited and violates data integrity principles.

🔷 33. What is deviation lifecycle?

Identification → Reporting → Classification → Investigation → CAPA → Approval → Closure → Trending

🔷 34. How does deviation management support continuous improvement?

Identifies weaknesses
Drives CAPA
Enhances processes
Reduces risk

🔷 35. What are common audit observations related to deviations?

Delayed closure

Weak root cause

Ineffective CAPA

Poor documentation

For more articles, Kindly Click here

For pharmaceutical jobs, follow us on LinkedIn

For Editable SOPs in Word format contact us on info@pharmaceuticalcarrier.com

For more information kindly follow us on www.pharmaguidelines.co.uk