Pharmaceutical Data Integrity and ALCOA+ Compliance Audit Checklist

Data integrity failures are a primary driver of FDA warning letters, import alerts, and consent decrees. This audit systematically assesses data integrity controls across paper-based and electronic systems against ALCOA+ principles and regulatory expectations.

  • Industry: Pharmaceutical
  • Frequency: Annual / Pre-Regulatory Inspection
  • Estimated Time: 60-90 minutes
  • Role: QA Manager / IT Compliance Manager
  • Total Items: 33
  • Compliance: FDA Data Integrity and Compliance with CGMP Guidance (2018), MHRA Guidance on GMP Data Integrity (2018), WHO Guidance on Good Data and Record Management Practices (2016), EU GMP Annex 11 Computerised Systems, FDA 21 CFR Part 11 Electronic Records Electronic Signatures

ALCOA stands for Attributable, Legible, Contemporaneous, Original, and Accurate. ALCOA+ adds Complete, Consistent, Enduring, and Available. Under the FDA Data Integrity and Compliance with CGMP Guidance (December 2018) and MHRA GMP Data Integrity Guidance (March 2018), pharmaceutical manufacturers must ensure all GMP records satisfy these principles. Data integrity failures are a leading cause of FDA warning letters, import alerts, and consent decrees.

Primary regulatory references: FDA Data Integrity and Compliance with CGMP Guidance (December 2018); MHRA Guidance on GMP Data Integrity (March 2018); WHO Guidance on Good Data and Record Management Practices, WHO TRS 996 (2016); EU GMP Annex 11 Computerised Systems; FDA 21 CFR Part 11 Electronic Records and Electronic Signatures.

ALCOA+ Principles Assessment

Verify data meets ALCOA+ requirements.

  • All data entries attributable to individual responsible for the action?
  • All records legible and permanently recorded in indelible ink or electronic format?
  • Data recorded at the time the activity was performed (no backdating)?
  • Original data preserved and not transcribed without retention of original?
  • Data accurately reflects the actual observations and is not manipulated?
  • Complete data set including all raw data, anomalies, and excluded data documented?

Electronic System Controls

Verify electronic system data integrity controls.

  • Audit trails enabled and active for all GMP electronic systems?
  • Audit trails regularly reviewed and part of batch record review?
  • All users have unique individual logins - no shared accounts?
  • Access control matrix with role-based permissions documented and enforced?
  • Former employee and contractor accounts deactivated promptly?
  • Laboratory instrument computers not accessible to users with local administrator rights?

Paper Record Controls

Verify paper record data integrity.

  • All corrections made correctly: single line strikethrough, initials, date, reason?
  • No use of correction fluid (Wite-Out), overwriting, or obliterating original entries?
  • No data recorded in pencil in batch records or laboratory notebooks?
  • Controlled forms used with version number and effective date?
  • No loose paper records or Post-it notes with data not attached to formal record?

Raw Data and Retention

Verify raw data availability and retention.

  • All raw data (chromatograms, spectroscopy data, instrument printouts) retained?
  • No evidence of data deletion or audit trail clearing in electronic systems?
  • Regular backup of electronic data with tested restoration?
  • Data retention schedule compliant with regulatory requirements (minimum per 21 CFR 211.68)?
  • Archived records retrievable within required timeframe?

Laboratory Data Integrity

Assess QC laboratory data integrity controls.

  • QC results reviewed by second person before reporting?
  • No evidence of testing into compliance (excessive repeat testing until in-spec)?
  • All OOS investigations properly documented including all test data?
  • All analysts qualified for tests they perform?
  • Sample chain of custody documented from receipt through disposal?

Management Oversight and Culture

Assess data integrity culture and management oversight.

  • All relevant personnel trained on data integrity expectations and consequences?
  • Data integrity policy in place with clear expectations and escalation path?
  • Mechanism for anonymous reporting of data integrity concerns?
  • Data integrity metrics reviewed at management review?
  • Periodic data integrity audit conducted by QA or independent party?
  • Data integrity included in self-inspection program?

Related Pharmaceutical Life Sciences Checklists

Related Quality Systems Checklists

Why Use This Pharmaceutical Data Integrity and ALCOA+ Compliance Audit Checklist?

This pharmaceutical data integrity and alcoa+ compliance audit checklist helps pharmaceutical teams maintain compliance and operational excellence. Designed for qa manager / it compliance manager professionals, this checklist covers 33 critical inspection points across 6 sections. Recommended frequency: annual / pre-regulatory inspection.

Ensures compliance with FDA Data Integrity and Compliance with CGMP Guidance (2018), MHRA Guidance on GMP Data Integrity (2018), WHO Guidance on Good Data and Record Management Practices (2016), EU GMP Annex 11 Computerised Systems, FDA 21 CFR Part 11 Electronic Records Electronic Signatures. Regulatory-aligned for audit readiness and inspection documentation.

Frequently Asked Questions

What are the ALCOA+ data integrity principles for pharmaceutical manufacturers?

ALCOA+ is the foundational framework for pharmaceutical data integrity: Attributable (who collected the data and when), Legible (readable throughout its retention period), Contemporaneous (recorded at the time of activity), Original (first-capture data, not a transcription), and Accurate (free from errors). ALCOA+ extensions add Complete (all data including reanalysis), Consistent (in chronological order), Enduring (in durable medium for the required retention period), and Available (accessible for inspection). FDA, MHRA, WHO, and EU GMP Annex 11 all use the ALCOA+ framework as the basis for data integrity assessment. The FDA Data Integrity and Compliance with CGMP Guidance (December 2018) is the primary US reference document.

What does FDA 21 CFR Part 11 require for pharmaceutical electronic records?

FDA 21 CFR Part 11 requires that electronic records be accurate, reliable, and protected from unauthorized access and alteration. Closed systems must have authority checks, device checks, and time-stamped audit trails capturing the date, time, operator, and nature of any change. Electronic signatures must be unique to the individual and linked to the record. Systems must be validated per 21 CFR Part 211.68 to ensure accuracy and reliability. The regulation applies to pharmaceutical records required under FDA predicate rules (21 CFR Parts 210-211, 820) when those records are created, modified, maintained, archived, retrieved, or transmitted in electronic form.

What data integrity violations lead to FDA warning letters?

FDA warning letters for data integrity violations commonly cite: backdating or pre-dating of GMP records; deletion or overwriting of original data without a complete audit trail; out-of-specification results followed by retesting without investigation; shared user login credentials making data entries unattributable; computerized systems lacking access controls or 21 CFR Part 11-compliant audit trails; and paper records altered with correction fluid without the original entry preserved. The FDA Data Integrity and Compliance with CGMP Guidance (2018) is the framework FDA investigators apply during inspections.

How does MHRA data integrity guidance apply to pharmaceutical manufacturers?

The MHRA Guidance on GMP Data Integrity (March 2018) applies to any pharmaceutical manufacturer supplying the UK market, whether based in the UK or overseas. It requires a data governance system covering data ownership, data criticality assessment, and a data integrity risk management approach. The MHRA states that all original raw data must be retained and available for inspection, regardless of format. The guidance aligns with WHO TRS 996 (2016) and EU GMP Annex 11, but contains additional prescriptive detail on audit trail review, data retention, and self-inspection for data integrity.

What is the scope of a pharmaceutical data integrity ALCOA audit?

A pharmaceutical data integrity ALCOA audit covers both paper-based and electronic GMP records: laboratory data (raw chromatography data, spectral files, instrument printouts), batch manufacturing records, environmental monitoring logs, equipment calibration and maintenance records, and quality system records (deviation reports, CAPA, change control). For electronic systems, the audit assesses 21 CFR Part 11 or EU GMP Annex 11 compliance including audit trail activation and review, access control effectiveness, and backup and recovery procedures. For paper records, the audit verifies original versus copy status, contemporaneous completion, and correction practices.

What is a Pharmaceutical Data Integrity and ALCOA+ Compliance Audit Checklist?

A Pharmaceutical Data Integrity and ALCOA+ Compliance Audit Checklist is a standardized inspection form used by qa manager / it compliance manager to ensure consistent pharmaceutical operations. It contains 41 inspection points organized into 6 sections. FREE pharmaceutical data integrity checklist PDF. Comprehensive pharmaceutical data integrity and ALCOA+ compliance audit covering electronic system controls, audit trail review, paper record integrity, system user access management, and FDA/MHRA/WHO data integrity guidance compliance for pharmaceutical manufacturers. Download FREE digital template now.

How often should I use this pharmaceutical checklist?

This checklist is designed to be completed annual / pre-regulatory inspection. Regular use ensures compliance with FDA Data Integrity and Compliance with CGMP Guidance (2018) and MHRA Guidance on GMP Data Integrity (2018) and helps identify issues before they become problems.

Can I download this Pharmaceutical Data Integrity and ALCOA+ Compliance Audit Checklist as a PDF?

Yes, you can download this checklist as a FREE PDF for printing or offline use. The checklist includes 41 fields across 6 sections and typically takes 60-90 minutes to complete.

What compliance standards does this checklist cover?

This checklist helps ensure compliance with FDA Data Integrity and Compliance with CGMP Guidance (2018), MHRA Guidance on GMP Data Integrity (2018), WHO Guidance on Good Data and Record Management Practices (2016), EU GMP Annex 11 Computerised Systems, FDA 21 CFR Part 11 Electronic Records Electronic Signatures. Following these standards protects your organization and ensures best practices.

How do I complete this pharmaceutical inspection checklist?

Begin by completing the header fields for Facility Name, Audit Date, Auditor Name, and Systems / Areas Audited. Work through each of the 6 sections, marking items Yes or No as applicable. Finally, complete the footer fields and add your signature. The entire process takes approximately 60 to 90 minutes.

What are the key sections in this pharmaceutical checklist?

This pharmaceutical checklist is organized into 6 key sections: ALCOA+ Principles Assessment, Electronic System Controls, Paper Record Controls, Raw Data and Retention, Laboratory Data Integrity, Management Oversight and Culture. Each section contains specific inspection points that qa manager / it compliance manager must verify. The structured layout ensures nothing is missed during pharmaceutical inspections and makes the process efficient, typically taking 60-90 minutes to complete.

Who should use this Pharmaceutical Data Integrity and ALCOA+ Compliance Audit Checklist?

This checklist is primarily designed for qa manager / it compliance manager working in pharmaceutical operations. However, it is also valuable for quality assurance teams, safety officers, compliance managers, and supervisors who need to verify that pharmaceutical standards are being met. Organizations of all sizes can benefit from using this Pharmaceutical Data Integrity and ALCOA+ Compliance Audit Checklist to maintain consistency and accountability.

Browse More Checklists

POPProbe